last executing test programs: 9m28.433482456s ago: executing program 3 (id=118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x80, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0x6c, 0x7, 0x1, 0x0, "3c733d49423c56bbe15ec1c37506a0e2c2bf9a9af85080ddc71149b36ca9890ea087016185520d4bf84123d61cafb45190569c1e1f53d84436402f6119bbbaf916b68f91b471f46fc7769670150798476c54be7927985faa63402cf9b767206956d370899e4866cd"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 9m28.363777869s ago: executing program 3 (id=119): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x45, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaae130aeaaba3086dd606410a6000f040402000000000000000000ffffffffffffff020000000000000000000000000001223427d5c9a46b9fa14172170a0135f3ee944f69ee4b1b0c2e53e93a16ae5db1b56d52"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x2c020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$FUSE(r7, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000680)=@urb_type_bulk={0x3, {0x8}, 0xffffff00, 0x0, &(0x7f00000002c0)="caff1bc0953aa3274c061fb48221a863f94a9e58109ade8a598469e0af450394d7e3fa41d459f6eee854af95618512bbfd9411a291be4e32f34e8681f94c839f344d98c585398642544eff930f14939d1144822dc8a586d1bc615dd96aae92418c9cfcb1f63e5b14d15e03e2971af9cb9306abfa63f482e3d8dba32b3d798c8e316c44ac698ce7c0326a099191822a1448376331ca3cea66eb1daeef5ec0a2324c2b25c189e3f4879d6559436829b1d6b51950f8bb510fe70799566cb046890876846eabdac30bc01f0487c63d16ca7173249fd4ff8e0adc379c9018ec52998975", 0xe1, 0x2, 0x1, 0x23, 0xf5, 0xe, &(0x7f0000000600)="21650a249d9549ee7f54b889b20d880de938e095fa08b0edceeba8a039d6a9ea58201a1513b640d04415e3b017d5e4a3ffc867cb660be7a96266f8b805c2e4851990cdc3542bccf1"}) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf251f000020"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4080004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="040028bd7000fcdbdf250600000008000300", @ANYRES32=r8, @ANYBLOB="0a001800031fc20303030000"], 0x28}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRES8=r10, @ANYRES16=r10, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="08000500060000001500178004000200040003000400"], 0x40}, 0x1, 0x0, 0x0, 0x24008804}, 0x8000) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000700)={0x7, r5, 'id0\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffffc, 0x9, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0xa, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x1001}}, 0xe8) connect$inet6(r13, &(0x7f0000000200)={0xa, 0x0, 0xffffffff, @local, 0x40000}, 0x1c) 9m26.23950219s ago: executing program 3 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x4, 0x6, 0x70000, 0x1000, &(0x7f0000ccc000/0x1000)=nil}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x4, 0x6, 0x70000, 0x1000, &(0x7f0000ccc000/0x1000)=nil}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) 9m25.705846895s ago: executing program 3 (id=131): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc50c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x20, 0x2f, "", [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x86c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x40, 0x9, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x40, 0x9}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0x5, 0x81, 0x4e, 0x10, 0x11}, 0x1e, &(0x7f0000000900)={0x5, 0xf, 0x1e, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x1, 0x2}, @generic={0xf, 0x10, 0x2, "6d11fb82fd4f492d4d0e48c8"}]}, 0x1, [{0x53, &(0x7f0000000940)=@string={0x53, 0x3, "4a0a20589a1010dc3de2925e96d6b33690064c152effd0063f82fe347b8ef4797dfe64821777cd98fd8ac6e3c7c8c8cf982d77ae7238dfe17dde46a3c41ad7f1e4047c1b1fa13aa2c802303a9cb7af0a2d"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000655804e09171"}}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/../file0/../file0/../file0\x00'}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r3, 0xc0106450, &(0x7f0000000a40)={0x0, 0x0, 0x1}) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x14001, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x0, 0x23, 0x4c, {0x4c, 0x8, "217c2989cd6882970ebf66a8420056c0b750b6e8f7048505c552f052b8b36e300c6e4e0555a6bc29b99df4ba313f72f699c256c6a6b0669994d87d627c05f84246996231e1ba9b1b7c17"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x3, 0x9, 0x18, "ffb8165b"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0xfd, 0x8, 0xe9, 0x20, 0x4f15}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="20108800000061d743c6c5c0eae5992f10bc7b7a200d3896b847425228b43fdaa355cfdc8989aaa504c192ec54000b7ae6a5aae2a21179e1dd4d53b47ae33b1e761e7c735d9a44c32a5959b6fa596737cdf98baeb4b1e23c4373a5c56977c64fbcf2c08001ff8b81b9cc9efdaa6cc7caf2acaba4eb1686710ba47d55ce19a453c89a18d07e70dec6a66c5c9426c5"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4c}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000780)=ANY=[@ANYBLOB="2000085b08d9a47bd513b9980d0894ba388697f3bf74a857a99302000000000000007ae85f23988949c2e367"], &(0x7f0000000400)={0x40, 0x7, 0x2, 0x81}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000480)={0x40, 0xb, 0x2, "0200"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000000500)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000540)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "df97"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x92}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x1}}) r5 = syz_open_dev$vbi(&(0x7f0000001340), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000013c0)=@multiplanar_fd={0x7, 0x9, 0x0, 0x400, 0x1, {0x77359400}, {0x1, 0x1, 0xdd, 0x6, 0x1, 0x9e, "d2478f49"}, 0xff, 0x4, {&(0x7f0000002500)=[{0x401, 0x6, {}, 0x5}, {0x7ffffffe, 0x6, {}, 0x7}]}, 0x5}) io_pgetevents(r4, 0x1, 0x6, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000880), 0x0) 9m23.742611794s ago: executing program 3 (id=140): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000340)=[@code={0xa, 0x39, {"f36e400f0d3e48b8fcff0000000000000f23c80f21f8350800d0000f23f8420f69d8470f011f2e66460fc7b497464c69020f01f866b813010f00d0430f01c466baa10066ed"}}], 0x56}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x13, 0x7, 0x106c, 0x8, 0x8000000000000, 0x9, 0x0, 0x4152042f, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m23.548306769s ago: executing program 3 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031400d3fc141200004788121c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m22.833720276s ago: executing program 32 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031400d3fc141200004788121c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m34.173627884s ago: executing program 1 (id=1629): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001200)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec970101282c00fe8000000000000000000000000000aafc010000000000000005000000000002009078"], 0x15e) 1m33.995917304s ago: executing program 1 (id=1630): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x27) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bf7000fddbdf25460000000e0001006e657464657673696d0000000f0002006e65746465487a74b01582187673696d30000008008e00030000000c008f0000000000000000de49fd9000e1"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) syz_io_uring_setup(0x1000186, &(0x7f0000000280)={0x0, 0xfcb0, 0x13100, 0x1, 0x124}, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) statx(r3, &(0x7f0000000100)='.\x00', 0x100, 0xffff4a9c0080ffff, &(0x7f0000000240)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, &(0x7f00000001c0)="86146beb9299f9671c3e4f6ba04c5549f139addb26806ca6d1f449801376cb98018c844ec5f7e9d68fbae7c95a3d", &(0x7f0000000340)=""/113}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38191}, [@IFLA_MAP={0x24, 0xe, {0x2, 0xffffffffffff7ffe, 0x2, 0x8000, 0x40, 0x9}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x844}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0x7}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x1, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) 1m33.88662197s ago: executing program 1 (id=1632): socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffe, 0x4, &(0x7f0000006680)) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x100000001, 0x4a500) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f000062c000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000fc0), 0x1, 0x2000) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000001140)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x2) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000200)={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000343000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r4, 0xe018d000) madvise(&(0x7f00005b8000/0x3000)=nil, 0x3000, 0x9) socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000062c000/0x2000)=nil, 0x2000, 0x1000002, 0x9010, r1, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x80000, 0x0, 0x1, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001200210325bd", @ANYBLOB="00000000000000000a000100ffffffffffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905"], 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000800)={&(0x7f000062d000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r7, 0x40284504, &(0x7f0000004e40)={0x9, 0x16, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) ioctl$int_in(r1, 0x0, &(0x7f0000000240)=0x8) sendmsg$SMC_PNETID_GET(r5, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8010000070a010200000000000000000500000914000580080001400000008908000140000000293400058008000240000000030800014000000002080002400000000208000140000000880800024000000002080001400000003b7c0004800c00018008000100636d700010000180090001006861736800000000500001800c000100636f756e74657200400002800900000000000000000000030c00014000000000000000050c00014000000000000000050c00024000000000000008000c0002"], 0x1f8}, 0x1, 0x0, 0x0, 0x20040014}, 0x20008001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000300", @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="080005000600000008001780040006000a00e800ffffffffffff00"], 0x38}}, 0xc0c4) 1m30.779894786s ago: executing program 1 (id=1645): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x80441, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000400000850000002f0000009500"/32], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open_by_handle_at(r7, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x1, 0xfffffffffffffff7}}, 0x513300) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r7, 0x8004af79, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m29.731947808s ago: executing program 1 (id=1652): bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) dup(0xffffffffffffffff) (async) r0 = dup(0xffffffffffffffff) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r0}, &(0x7f0000000880), 0x0, &(0x7f0000000000)) (async) r1 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r0}, &(0x7f0000000880), 0x0, &(0x7f0000000000)) io_uring_enter(r1, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x24, 0x31, 0x400, 0x70bd2d, 0x25dfdc02, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x2004c800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x24, 0x31, 0x400, 0x70bd2d, 0x25dfdc02, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x2004c800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x1, 0x2, 0x2f, 0x1ff}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa6a2ddcf6177a8864450000280022000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5405530854000090"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$lock(r1, 0x3, &(0x7f0000000200)={0x1, 0x3, 0x100000000000081, 0xcf}) (async) fcntl$lock(r1, 0x3, &(0x7f0000000200)={0x1, 0x3, 0x100000000000081, 0xcf}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="810200000000000014001a80100004800c"], 0x34}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) 1m29.250937368s ago: executing program 1 (id=1654): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x4, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000100001080000000000000000000000003c091ad342a52594776a52dd853e53e23605a3b6e756eb8ff63310f94c2b394537fc682f6017e7a4de8e0c5fe4a4f9a2e201a18c081f", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x42, 0x4, 0x488, 0xffffffff, 0x0, 0x110, 0x238, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x1001, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}, {0x0, 0x0, 0x0, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@cluster={{0x30}, {0x8, 0x4, 0x7f}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x178, 0x1b8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0x7, 0x80, 0x20, 0x1, 'syz0\x00', 0x37, [0xffffffff, 0x0, 0xff, 0xff000000]}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="48000000100001042abd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB="99c0020000440000140200000000010065727370616e000004000280140003006e696376663000000000000000000000155716db471da2fae269977a980506307f25bf912dc6eb7e3fa7b7ce259840d7eaa65414eb45e142eaf86ee669bc11c436010a2376d89f42629efb668ee2e124b439e74a2dab26ed946c0dd59a5dbbad9895acf70ab7"], 0x48}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m29.069929786s ago: executing program 33 (id=1654): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x4, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000100001080000000000000000000000003c091ad342a52594776a52dd853e53e23605a3b6e756eb8ff63310f94c2b394537fc682f6017e7a4de8e0c5fe4a4f9a2e201a18c081f", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x42, 0x4, 0x488, 0xffffffff, 0x0, 0x110, 0x238, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x1001, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}, {0x0, 0x0, 0x0, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@cluster={{0x30}, {0x8, 0x4, 0x7f}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x178, 0x1b8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0x7, 0x80, 0x20, 0x1, 'syz0\x00', 0x37, [0xffffffff, 0x0, 0xff, 0xff000000]}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="48000000100001042abd7000fbdbdf", @ANYRES32=0x0, @ANYBLOB="99c0020000440000140200000000010065727370616e000004000280140003006e696376663000000000000000000000155716db471da2fae269977a980506307f25bf912dc6eb7e3fa7b7ce259840d7eaa65414eb45e142eaf86ee669bc11c436010a2376d89f42629efb668ee2e124b439e74a2dab26ed946c0dd59a5dbbad9895acf70ab7"], 0x48}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.542717243s ago: executing program 5 (id=2029): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) ppoll(&(0x7f0000000240)=[{r1, 0x610a}, {r1, 0x1600}], 0x2, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000002240)=ANY=[@ANYBLOB="120110010000002035121280400001020301090260003c010e10020904000000010100000a240107000a0002010209010101010200000905290908000509060725010c09060009040200000102000009040201010102000009058209200020040907250100760900"], 0x0) syz_open_dev$I2C(0x0, 0x6, 0x424c40) 5.976958388s ago: executing program 4 (id=2035): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="12000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r3], 0x54}}, 0x0) 5.392520223s ago: executing program 4 (id=2037): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000001000000000000000000ffffff80000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) 5.384573164s ago: executing program 2 (id=2038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200141, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206010300000000000000000000000005fc0400000000000900020073797a300000000014000780050007000700000008001240000000000500050002000000050001000600000010000300686173683a69702c6d616300d766748425db37a7e1e187a6e3a9a6fc9947dfcb7c68b7a7a1fd6a282971c6e9be3fc6a4500e0d16b1fc5e1600ad174699a666ebdf8f848dfc88725d57e034cfd8878eab74acafb07af99a7b39ad5ec9c4c8812d9b50930e0e"], 0x5c}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x2, 0x2, 0x2000, 0x2000, &(0x7f0000007000/0x2000)=nil}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000140)={0x5, @output={0x1000, 0x1, {0xffffff79, 0xffffffc4}, 0x800, 0x2}}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r9, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x10000000007, 0x2102) close(r10) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r7, 0x1000000}}, 0x20) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000000040)={r14, 0x7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000300)={r14, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x10000, 0x401, 0x8, 0x10, 0x44, 0x0, 0x6}, 0x9c) r15 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r15, 0xc008561c, &(0x7f0000000080)={0xf0f008, 0x2400}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) 4.988423367s ago: executing program 4 (id=2040): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x100081c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x6, 0x7f}}]}) r2 = socket$tipc(0x1e, 0x7, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)}], 0x1}, 0x400c0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x4}, 0x50) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000000)) 4.224778228s ago: executing program 5 (id=2042): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) open(&(0x7f0000000280)='./file0\x00', 0x2a000, 0x32) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa4, 0x2, {{0x101, 0x1, 0x5, 0x4, 0x1ff, 0x2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xc0, 0x8, 0x250, 0x5, 0xe3, 0x5}}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x8, 0x1}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x40}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x7fffffff}, @TCA_NETEM_CORR={0x10, 0x1, {0x724, 0x6, 0xbdb1}}, @TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x0, 0x800}}, @TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x9, 0x0, 0xb}}]}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="6b6a7f4f3428c0e50c55635c3ad92e69d5ec85a73955ee080000000000e5e7229264af4b3719fae1b623b44ec9b1349a25e4b611838e7e98f5584c15efd250899c84bdb5671db35b52b1e518b9a15539607a1f599ee019db061291cf32bee9852400ba7f800762d8a4dd45dff7df6726db0a421c1e408b74b0a0e22a57129edf449cddc467ee8f849656c876b02b8d21018288de7485bc57c08d8ba7170bb6140000", 0xa2}, {&(0x7f0000000100)="6e2ae09376a55424598a036ac192f14b9ebbf6c5687c7303bb9e4c9f7a5c9b76d4b676d9ca71ec7a502a2fc8a70030aa62a0598b2720bb", 0x37}], 0x1c4}}], 0x1, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x420, 0x0, 0x330, 0x260, 0x190, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001100010000000000000000000500000a140000001100010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000051}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014060380100000800c0001800600010000000000140000001100011b00000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xe) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) 4.004319951s ago: executing program 0 (id=2043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x10080, 0x0) read$dsp(r4, &(0x7f0000000280)=""/197, 0xc5) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES16=r1], 0x23c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x8a01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.097866143s ago: executing program 6 (id=2045): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, 0x0) close_range(r2, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x1011, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1003, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfef, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075d7985ad56808387a44610c2b0890de328bb3eeae9fbd6da1b50153ad6d1cf108b7eca8880293643bc836ee65f5c5b0515a61825e38a579129d67bee7e6330e87c8f63064fa1abb7b3af74c16b90b450e78"}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000002c40)=""/4094, 0xffe}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x80000000, 0x3, 0x9, 0xf, 0x3, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x6, 0xff, 0x0, 0x5}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 3.000245748s ago: executing program 5 (id=2046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b800000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000b500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xd3f}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) 2.716904155s ago: executing program 0 (id=2047): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000240)=&(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0ffeff60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x400, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x2, 0x0, 0x8000, 0x0, 0x0, r5, 0x1, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(r6, &(0x7f00000000c0)="f082c4", 0x3) writev(r6, &(0x7f00000008c0)=[{&(0x7f0000000980)="9c", 0x1}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r7 = socket(0x9, 0x6, 0x9) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r8, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @raw_data=[0xffff0000, 0x8, 0x4, 0x100, 0x6, 0x4, 0x101, 0x3, 0x5, 0xfffffff8, 0xb79, 0x8001, 0x86, 0x3, 0x9, 0x9d, 0x280, 0x2, 0x1, 0x8, 0x3, 0x9, 0x3, 0x6, 0xfd, 0xffff, 0x6, 0x2, 0x2, 0x8, 0x3, 0x9]}) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x0, 0x9, 0x101, 0x7fff, 0x8, 0x2, 0x357322d9}, 0x0, &(0x7f0000000240)={0x9, 0x8, 0x1, 0x80000000, 0xffffffff, 0x3, 0x8, 0x7fff}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000061408002dbdcf0000003f750b8ad072c5734319fe33e581ab9061f2d07000ff01000100000000000000ab00"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 2.692477879s ago: executing program 6 (id=2048): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="20000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r3], 0x54}}, 0x0) 2.622226182s ago: executing program 0 (id=2049): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000000000/0x1000)=nil, 0x1000, &(0x7f0000000100)='maps\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000007060500000000000000000001ad3c020500010007000000050005"], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 2.544888506s ago: executing program 5 (id=2050): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x2, 0x80, "010000dd0000c1ae000001000000000000000008ffe6000000000000da00", 0x56544943}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x5, 0xfff, 0x2, 0x8000000000000000, 0x7, 0x9, 0x652, 0xc, 0x8000009657, 0xffeffffffffffffd, 0x162db, 0x9a3f, 0x10, 0xb, 0x3, 0xcc0, 0x6, 0x1, 0x28962907, 0xfffffffffffffffd, 0x3, 0xfffffffffffffffb, 0x0, 0xffffffffffff9d06, 0x7f, 0x3}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x3a1081, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000240)={0x4800000, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$usbfs(0x0, 0x40000f, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.512394831s ago: executing program 6 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, 0x0, &(0x7f0000000000)=0xa0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff"], 0x50) 1.989369026s ago: executing program 2 (id=2052): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000005c0), 0x44000, 0x0) setns(r0, 0x10000000) fcntl$addseals(r0, 0x409, 0xc) (async) rt_sigpending(0x0, 0x1000000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) (async, rerun: 64) r4 = syz_open_pts(r3, 0xa0200) r5 = dup3(r4, r3, 0x0) (async, rerun: 64) socket(0x15, 0x5, 0x0) (async, rerun: 64) socket$igmp6(0xa, 0x3, 0x2) (async) fanotify_init(0x10, 0x88000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) (async) r7 = syz_open_dev$swradio(&(0x7f0000000580), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r7, 0xc0405665, &(0x7f0000000280)={0x1, 0x4, 0x0, 0x1000, 0x3fd, 0x0, 0x8}) (async, rerun: 32) io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (async, rerun: 32) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000000), 0x4) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000040)={0x7, 0x4, 0x2, 0xfff, 0x16, "e533991cd00ee11a"}) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x8, 0x2, 0x0, 0x3ff, 0x14, "d382f1a316b3ccae"}) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x19, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @generic={0x6, 0x3, 0x7, 0x7f, 0xffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x1, 0x3, 0x1, 0x1, 0xfffffffffffffff0, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x3, 0x1, 0x3, 0x20, 0xfffffffffffffff4}, @jmp={0x5, 0x0, 0x3, 0x6, 0x0, 0x20, 0x8}, @generic={0x7, 0x8, 0x6, 0x5, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7fff, 0xc0, &(0x7f0000000240)=""/192, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x0, 0x10, 0x200}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x7, 0x1, 0x0, r6}]}, &(0x7f0000000640)='syzkaller\x00', 0x8, 0x7, &(0x7f0000000680)=""/7, 0x1f00, 0x41, '\x00', 0x0, @fallback=0x11, r5, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000700)=[r4, r2, r2, r2, r0, r0], &(0x7f0000000740)=[{0x4, 0x3, 0xc, 0x1}, {0x0, 0x2, 0x9, 0x9}, {0x3, 0x1, 0xe, 0x2}, {0x0, 0x1, 0x2, 0x1}, {0x5, 0x2, 0x1, 0x5}], 0x10, 0x7134}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0xdc, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x34}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ca53}, @IFLA_EXT_MASK={0x8, 0x1d, 0x9}, @IFLA_CARRIER={0x5, 0x21, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2536}, @IFLA_XDP={0x54, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r10}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}, @IFLA_PORT_SELF={0x30, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xd}, @IFLA_PORT_VF={0x8, 0x1, 0xffff}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0047b15359f4c9e1e8ccd4a633f8bf73"}]}, @IFLA_PHYS_SWITCH_ID={0xd, 0x24, "5f2f4d62fbd85320f0"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004014}, 0x4008000) 1.781049639s ago: executing program 0 (id=2053): r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f00000018c0)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001200210325bd7000fddbdf2507"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0xc080) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r4 = eventfd(0x3ff) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0xfffffffffffffffe, 0x50000, 0x1, r4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) recvmmsg(r6, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/121, 0x79}, {&(0x7f0000000180)=""/5, 0x5}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000400)=""/16, 0x10}, {&(0x7f0000000440)=""/173, 0xad}, {&(0x7f0000000500)=""/179, 0xb3}, {&(0x7f00000005c0)=""/87, 0x57}, {&(0x7f0000000640)=""/121, 0x79}], 0xa, &(0x7f0000001180)=""/4096, 0x1000}, 0x81}], 0x1, 0x2, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYRES64=r5], &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) 1.759802331s ago: executing program 2 (id=2054): setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000006700), 0x0, 0x4000040) (async) sendmmsg$unix(r2, &(0x7f0000006700), 0x0, 0x4000040) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x28900) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x7800, 0x87, 0x1, 0x24, {{0x2d, 0x4, 0x3, 0x23, 0xb4, 0x64, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x18, 0xffffffffffffffff, [{0x6, 0x12, "40e442b1a338650a4b2577840cabe5b2"}]}, @cipso={0x86, 0x30, 0x1, [{0x2, 0xd, "908c8d3236a22ed7722699"}, {0x7, 0x3, '@'}, {0x5, 0xe, "3e774cd46bb8632f61221f84"}, {0x0, 0xc, "4cfcd17873f7e8381f89"}]}, @generic={0x83, 0xf, "619e0d5479f9d4e400df296c21"}, @cipso={0x86, 0x15, 0x2, [{0x5490324d32b03f2e, 0xf, "cba3c35ed39b5caaa98f18c390"}]}, @timestamp={0x44, 0x8, 0xbc, 0x0, 0x7, [0x7fff]}, @noop, @ssrr={0x89, 0xb, 0xce, [@broadcast, @loopback]}, @generic={0x89, 0x9, "d0252e1ca6fdb3"}, @timestamp={0x44, 0x14, 0x74, 0x0, 0xb, [0x1, 0x3, 0x9, 0x7]}]}}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x440303, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r8}) prctl$PR_SET_PTRACER(0x59616d61, r3) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000580)={0x48}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) 1.683140457s ago: executing program 5 (id=2055): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x40000000015, 0x5, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0/..\x00', 0x22a040, 0x121) socket$inet6_sctp(0xa, 0x801, 0x84) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x1, 0x12) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x1) syz_usbip_server_init(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r4}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x50) io_uring_enter(r5, 0x2219, 0xcf74, 0x51, 0x0, 0x0) 1.564015588s ago: executing program 2 (id=2056): r0 = socket$inet6(0xa, 0x1, 0x0) close(0x3) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x6, r0, 0xfc31edbab8698b52}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x1, 0x3ff}) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000080)={0xa, 0x4e1d, 0x80000, @mcast1, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=[@hoplimit_2292={{0x18, 0x29, 0x32, 0xb7a}}], 0x18}, 0x440e0) 1.539581617s ago: executing program 0 (id=2057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014000000110001"], 0xe8}}, 0x0) 1.441296219s ago: executing program 2 (id=2058): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x10080, 0x0) read$dsp(r4, &(0x7f0000000280)=""/197, 0xc5) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES16=r1], 0x23c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x8a01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.352683811s ago: executing program 0 (id=2059): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) quotactl$Q_SYNC(0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x2) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x1000, 0x4, 0x8, 0x1, 0xa, "9c3e6edc53f8a905fb7f669bdc36b31afdc04f", 0xfffffffe, 0xb}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f00000005c0)) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000140)={0x3, 0x43353039, 0x300000, 0xfffffff9, 0x1, @discrete={0x1, 0xb181}}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x70bd28, 0x24dfdbfe, {0x81, 0x80, 0x10, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004880}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000040)=""/185) 1.23931061s ago: executing program 4 (id=2060): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000240), 0x0, 0x20008880) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) (async) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) (async) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES16=r1], 0x23c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x8a01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 1.156614057s ago: executing program 6 (id=2061): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r3], 0x54}}, 0x0) 1.024815819s ago: executing program 4 (id=2062): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x20000014}) epoll_wait(r5, &(0x7f0000000140)=[{}], 0x1, 0x7ffffffe) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0xa0000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x312, 0xd00}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="74000000020802030000000000000000050000000900010073797a3100000000040004801c0004800800024000000000ffff024000010001080002400000000c05000300210000002c0004800800014000000004080001407fffff"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r6) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r11, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4008001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) 803.519303ms ago: executing program 6 (id=2063): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000300)={'veth1\x00', {0x2, 0x4e24, @private=0xa010101}}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) writev(r0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000680)="c2ffffffff00000000ea36dee4f346f4bfbe11ead98fc8e8e4eb802aecff82545382023e986679fabbc0fb87c23c08170aa59d7b7a8446b40e4a2d3a7ac6c4111c80fffd123c358fb2ac5b9221969dc036e9aa80544fa10b2cf75a3be97b123430064a11cd3dc2c673064196e4f41bb7f4e0d521e3f184881c4f34ccb4ccf273bfc2c462373334e92599f70fca6b2f613748d0c639489951a33587ca0321fca396e05f2083a88730daf0f4396c7ec16d3fad29d41a41b227ff26f3ed34586def775f35fbb43fb3eb4882c794165b7adc255650abcde29b1db3838ce7dd5c6b0e3077430806da764be0a57f4b2cf58a41d90e394673c4a3d941ce455904df45dc77ee2517ea0cdfc3b8c627d88b15bee23fc3a9d23165aa98b38af4b50c0dd42ce38d2ade2e1f673f542350b9969dafe4d0434c4ff797ff37597a7450738427072408ec2f7b90d0a0aff4f0dd051652ad240ae0d1ae", 0x155}, {&(0x7f0000000340)="317e43f3ee1a0b73a4c0f1083e07ab2e5976aaa005986ee92afa5573dd4bbaed27434f5143b7a075b0384938e3", 0x2d}, {&(0x7f00000008c0)="3d0de0bd60b555dab16e7a21ad30ca65cb234a92c8a85acf325b480445d375c434b58d823c68f64d0dd8d50eee6e66ca5a8e9c8f6307fee4b7262472", 0x3c}], 0x4) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000140)="91f8a9849519def2", 0x8}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26", 0xd6}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x160}, {&(0x7f0000000d00)="31cef842", 0x4}], 0x2}}], 0x2, 0x2890) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x20c}, {0xffffffffffffffff, 0x40}, {r0, 0xa402}, {r2, 0x58307320b1c76fbd}, {0xffffffffffffffff, 0x4204}, {r0, 0x40}, {r0, 0x4480}, {r0, 0x109c}, {r0, 0xdd2d9cec4b124c8d}, {r0, 0x4006}], 0xa, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x100000001]}, 0x8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2c, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x2, 0x2, 0x400000000000001}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000002c0)=0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, @nfc={0x27, r5, 0x1, 0x1}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @tipc=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0xffff, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x254, 0x4, 0x8000}) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 610.351475ms ago: executing program 6 (id=2064): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = dup2(r1, r0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x26801, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1003ae6977f1f0787de342df58a8fe1c"]}]}) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6c2, 0x80) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000c40)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2], 0x0, [0x0, 0x2, 0x5, 0x0, 0x7eb2, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x4c8380) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f0000000400)=0x9, 0x4) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f00000001c0)={0x0, [[0xffffffff, 0x0, 0xfffffff9, 0x8, 0x7, 0x6804, 0x0, 0xffffffff], [0x1, 0x20000ea, 0x0, 0x2], [0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000]], '\x00', [{0xfffffffc, 0xfffffffe}, {}, {0x0, 0x1}, {0x9, 0x4}, {0x4, 0x1}, {}, {}, {0x0, 0x100}, {}, {0x0, 0x4}, {0x200}], '\x00', 0x301}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000080)={&(0x7f00000002c0)=[{0x0, 0x5800, 0x4e, &(0x7f0000000100)="53ec6252b7148220a6adad7f309abdbdc2c189d44ebbb2e92251152103a2db41a47023614f4f4f37d1e80d9fa47c2943f25c60bad96ab61461536e230902ed29baf71b66c4d868e62a43b8caebae"}], 0x1}) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3d) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 360.827142ms ago: executing program 4 (id=2065): r0 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x8400000) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f0000000180)=0x803, 0x4) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x1) msgget$private(0x0, 0x4) r2 = userfaultfd(0x80001) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1}}, {&(0x7f0000000040)=""/8, 0x8}, &(0x7f0000000080), 0x10}, 0xa0) 81.167611ms ago: executing program 2 (id=2066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@can_newroute={0x14, 0x18, 0x1, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x1}}, 0x14}}, 0x20008080) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@can_newroute={0x14, 0x18, 0x1, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x1}}, 0x14}}, 0x20008080) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) 0s ago: executing program 5 (id=2067): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="93d4e8a5b6bf00000000000086dd6100070000480001fe8000000000000000000000000000aa20010000000000000000572a0000000000023a000104"], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x7, 0x3, 0x40000, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0x2}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x6e880, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0x400, 0x70bd27, 0x6, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x80}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x14) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) unshare(0x400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000005b0000008a00001b00000000a4aaf8fffffffffffffff292987752ed14e90a3993ac8f8b40768b506f2bb12be075000c1f8bd1e1629debb918f9a4cb79b38934ba21294984c88dd7c933934225c69e5535cbc16222523b9b43f2facf7e887d9f", @ANYRES64, @ANYRES64=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r8, r9}, 0xc) mknod$loop(0x0, 0x2000, 0x0) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) kernel console output (not intermixed with test programs): peak_usb failed with error -22 [ 612.747849][T12408] input input39: cannot allocate more than FF_MAX_EFFECTS effects [ 612.755415][T12398] macsec1: entered promiscuous mode [ 612.801611][ T5903] usb 5-1: USB disconnect, device number 65 [ 612.873276][T12410] IPVS: set_ctl: invalid protocol: 92 172.30.1.6:20002 [ 613.758967][ T7985] bridge0: port 3(syz_tun) entered disabled state [ 613.776593][T12427] fuse: Unknown parameter 'user_i00000000000000000000' [ 613.804220][T12422] Invalid logical block size (257) [ 613.818811][ T7985] syz_tun (unregistering): left allmulticast mode [ 613.834257][ T7985] syz_tun (unregistering): left promiscuous mode [ 613.845326][ T7985] bridge0: port 3(syz_tun) entered disabled state [ 613.900344][T12424] syzkaller0: entered promiscuous mode [ 614.006583][T11827] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.018941][T11827] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.083419][T11827] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.096450][T11827] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.205524][T11827] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.224360][T11827] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.326205][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 614.341509][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 614.351107][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 614.359821][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 614.403078][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 614.463305][T11827] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.485786][T11827] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.598449][T12435] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 614.751180][T12445] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 12445 comm: syz.2.1658) [ 614.782321][T12435] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 614.801492][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 614.801510][ T30] audit: type=1800 audit(1775578979.900:443): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1658" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=45689 res=0 errno=0 [ 614.889635][T11827] bridge_slave_1: left allmulticast mode [ 614.895517][T11827] bridge_slave_1: left promiscuous mode [ 614.903631][T11827] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.921383][ T1210] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 615.102310][ T1210] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 615.122635][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 615.147908][T11827] bridge_slave_0: left allmulticast mode [ 615.165140][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 615.165301][T11827] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.217315][ T1210] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 615.237481][ T1210] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 615.257560][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.307469][ T24] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 615.316570][ T1210] usb 5-1: config 0 descriptor?? [ 615.322776][T12444] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 615.469958][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 615.479525][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 615.501146][ T24] usb 6-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice= 0.40 [ 615.527326][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.535358][ T24] usb 6-1: SerialNumber: ꘨혠븩瓟㧚ꓙྏﲡ䓆权볠葉᛬Ờ꽒ꑀ畢짇뜌铕끳셐滿⇟ꌎ朲澜ļ᷼栟꾮慄緟狟䄟⣈蒁蕥炴דᥭ覐㝷啟㞖屪ꐷ訾塉ᷮ챉峭穴橾⠤둠至쾝숼꫓쫙譸솇葼轒෧⡞馦 [ 615.723395][T11827] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 615.747052][ T1210] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 615.757400][ T1210] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 615.767558][ T1210] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 615.777974][ T1210] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 615.787375][ T1210] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 615.816150][T12454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.826831][ T1210] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 615.859105][T12454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.880889][T12454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.897804][T12454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.899571][T11827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.913580][ T24] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 615.988946][T11827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.004531][ T24] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 616.040340][T11827] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 616.047012][ T24] usb 6-1: USB disconnect, device number 85 [ 616.092512][T11827] bond0 (unregistering): Released all slaves [ 616.104954][ T7605] udevd[7605]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.122702][T11827] bond1 (unregistering): Released all slaves [ 616.175428][T11827] bond2 (unregistering): Released all slaves [ 616.191769][T11827] bond3 (unregistering): Released all slaves [ 616.203677][T12462] loop5: detected capacity change from 0 to 2640 [ 616.206918][T11827] bond4 (unregistering): Released all slaves [ 616.213119][ T7605] Buffer I/O error on dev loop5, logical block 0, async page read [ 616.224954][ T7605] Buffer I/O error on dev loop5, logical block 0, async page read [ 616.232982][ T7605] Buffer I/O error on dev loop5, logical block 0, async page read [ 616.241792][ T7605] Buffer I/O error on dev loop5, logical block 0, async page read [ 616.266497][T12460] vlan2: entered promiscuous mode [ 616.281182][ T7605] Buffer I/O error on dev loop5, logical block 0, async page read [ 616.290691][T12460] macvlan0: entered promiscuous mode [ 616.304078][ T7605] Buffer I/O error on dev loop5, logical block 0, async page read [ 616.322073][ T7605] Buffer I/O error on dev loop5, logical block 0, async page read [ 616.335357][ T7605] Buffer I/O error on dev loop5, logical block 0, async page read [ 616.355953][ T7605] loop5: unable to read partition table [ 616.373719][T12462] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 616.381020][T12463] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 616.424270][T11827] tipc: Left network mode [ 616.478621][ T5843] Bluetooth: hci0: command tx timeout [ 616.666825][T12471] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1664'. [ 616.903242][T12436] chnl_net:caif_netlink_parms(): no params data found [ 616.930446][T12471] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1664'. [ 617.182333][T11827] hsr_slave_0: left promiscuous mode [ 617.202591][T11827] 1: left promiscuous mode [ 617.219353][T11827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.226796][T11827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.254388][T11827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.283571][T11827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.322962][T11827] veth1_macvtap: left promiscuous mode [ 617.337351][T11827] veth0_macvtap: left promiscuous mode [ 617.343259][T11827] veth1_vlan: left promiscuous mode [ 617.355563][T11827] veth0_vlan: left promiscuous mode [ 617.484574][T11827] team0 (unregistering): Port device batadv1 removed [ 617.689970][T11827] team0 (unregistering): Port device team_slave_1 removed [ 617.722285][T11827] team0 (unregistering): Port device team_slave_0 removed [ 618.147387][ T24] usb 5-1: USB disconnect, device number 66 [ 618.160551][T12436] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.210831][T12436] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.238062][T12507] fuse: Unknown parameter 'user_i00000000000000000000' [ 618.247394][T12436] bridge_slave_0: entered allmulticast mode [ 618.255021][T12436] bridge_slave_0: entered promiscuous mode [ 618.324727][T12436] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.360077][T12436] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.387769][T12436] bridge_slave_1: entered allmulticast mode [ 618.405828][T12436] bridge_slave_1: entered promiscuous mode [ 618.516099][T12436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.557736][ T5843] Bluetooth: hci0: command tx timeout [ 618.610563][T12436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.691790][T12528] tipc: Enabled bearer , priority 0 [ 618.706109][T12530] syzkaller0: entered promiscuous mode [ 618.739514][T12530] syzkaller0: entered allmulticast mode [ 618.802644][T12528] tipc: Resetting bearer [ 618.828820][T12436] team0: Port device team_slave_0 added [ 618.853173][T12436] team0: Port device team_slave_1 added [ 618.868737][T12527] tipc: Resetting bearer [ 618.924965][T12527] tipc: Disabling bearer [ 618.990881][T12436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.012133][T12436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.043054][T12436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.060395][T12436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.083145][T12436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.117194][T12436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.177355][ T24] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 619.227773][T12561] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 619.227773][T12561] program syz.5.1679 not setting count and/or reply_len properly [ 619.275516][T12559] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 12559 comm: syz.4.1678) [ 619.296494][T12436] hsr_slave_0: entered promiscuous mode [ 619.305435][T12436] hsr_slave_1: entered promiscuous mode [ 619.315777][ T30] audit: type=1800 audit(1775578984.430:444): pid=12559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1678" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=47111 res=0 errno=0 [ 619.349842][T12436] debugfs: 'hsr0' already exists in 'hsr' [ 619.355974][T12436] Cannot create hsr debugfs directory [ 619.371059][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 619.389846][ T24] usb 1-1: config 211 has an invalid interface number: 123 but max is 0 [ 619.414341][ T24] usb 1-1: config 211 has no interface number 0 [ 619.429488][ T24] usb 1-1: too many endpoints for config 211 interface 123 altsetting 9: 229, using maximum allowed: 30 [ 619.456126][ T24] usb 1-1: config 211 interface 123 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 619.484086][ T24] usb 1-1: config 211 interface 123 has no altsetting 0 [ 619.526409][ T24] usb 1-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 619.546752][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.576371][ T24] usb 1-1: Product: syz [ 619.590135][ T24] usb 1-1: Manufacturer: syz [ 619.605307][ T24] usb 1-1: SerialNumber: syz [ 619.846446][ T24] usb-storage 1-1:211.123: USB Mass Storage device detected [ 619.876861][ T24] usb-storage 1-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 619.912328][T12575] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1681'. [ 619.982480][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1681'. [ 619.996279][ T24] usb 1-1: USB disconnect, device number 71 [ 620.026770][T12575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1681'. [ 620.382382][T12436] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 620.452828][T12436] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 620.637607][ T5843] Bluetooth: hci0: command tx timeout [ 620.687326][T12436] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 620.796888][T12436] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 620.851905][T12614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1689'. [ 620.992508][T12436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.012365][T12436] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.045333][T11845] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.052490][T11845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.088213][T11845] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.095392][T11845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.124620][T12436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 621.136422][T12436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 621.157342][ T5903] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 621.190267][T12436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.230261][T12436] veth0_vlan: entered promiscuous mode [ 621.245417][T12436] veth1_vlan: entered promiscuous mode [ 621.275235][T12436] veth0_macvtap: entered promiscuous mode [ 621.318682][ T5903] usb 6-1: device descriptor read/64, error -71 [ 621.335849][T12436] veth1_macvtap: entered promiscuous mode [ 621.354533][T12436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.366200][T12436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.382810][T11836] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.402256][T11836] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.420763][T11836] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.432412][T11836] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.567998][ T5903] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 621.619583][T11827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.644229][T11827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.708053][ T5903] usb 6-1: device descriptor read/64, error -71 [ 621.803323][T11843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.816606][T11843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.825131][ T5903] usb usb6-port1: attempt power cycle [ 622.197628][ T5903] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 622.248428][ T5903] usb 6-1: device descriptor read/8, error -71 [ 622.507445][ T5903] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 622.517564][T12648] loop7: detected capacity change from 0 to 5 [ 622.551768][ T5903] usb 6-1: device descriptor read/8, error -71 [ 622.691635][ T5903] usb usb6-port1: unable to enumerate USB device [ 622.717750][ T5843] Bluetooth: hci0: command tx timeout [ 622.987390][ T5903] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 623.103470][ T1210] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 623.143820][ T1210] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 623.273546][T12683] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1701'. [ 623.509487][T12689] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1701'. [ 623.555400][ T1210] IPVS: starting estimator thread 0... [ 623.727451][T12693] IPVS: using max 42 ests per chain, 100800 per kthread [ 624.426298][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.477524][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.897364][ T5912] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 625.073423][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.107375][ T5912] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 625.145975][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.183621][ T5912] usb 6-1: Product: syz [ 625.202680][ T5912] usb 6-1: Manufacturer: syz [ 625.226653][ T5912] usb 6-1: SerialNumber: syz [ 625.254364][ T5912] usb 6-1: config 0 descriptor?? [ 625.272626][ T5912] redrat3 6-1:0.0: Couldn't find all endpoints [ 625.474913][ T5912] usb 6-1: USB disconnect, device number 90 [ 625.725500][T12728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.947026][T12731] fuse: Bad value for 'fd' [ 626.327998][ T5886] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 626.490538][ T5886] usb 6-1: unable to get BOS descriptor or descriptor too short [ 626.520367][ T5886] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 626.556303][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.596487][ T5886] usb 6-1: Product: syz [ 626.609819][ T5886] usb 6-1: Manufacturer: syz [ 626.616338][ T5886] usb 6-1: SerialNumber: syz [ 626.675310][ T5903] usb 7-1: unable to get BOS descriptor or descriptor too short [ 626.705738][ T5903] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 626.718380][ T5903] usb 7-1: can't read configurations, error -71 [ 626.767374][ T1210] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 626.835665][T12758] netlink: 'syz.2.1719': attribute type 219 has an invalid length. [ 627.002681][ T1210] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 627.022559][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.033091][ T1210] usb 1-1: Product: syz [ 627.040954][ T1210] usb 1-1: Manufacturer: syz [ 627.045847][ T1210] usb 1-1: SerialNumber: syz [ 627.059597][ T1210] usb 1-1: config 0 descriptor?? [ 627.260266][T12764] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1722'. [ 627.409193][ T1210] usb 1-1: USB disconnect, device number 72 [ 627.471176][ T5886] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 627.585208][T12771] pimreg: entered allmulticast mode [ 627.596699][ T5886] usb 6-1: USB disconnect, device number 91 [ 627.656162][ T6896] udevd[6896]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.707875][T12771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1724'. [ 627.722299][T12771] random: crng reseeded on system resumption [ 627.752735][T12771] pimreg: left allmulticast mode [ 627.987431][ T5912] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 628.120660][ T5912] usb 3-1: device descriptor read/64, error -71 [ 628.214425][T12785] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 628.377428][ T5912] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 628.500615][ T5886] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 628.577359][ T5912] usb 3-1: device descriptor read/64, error -71 [ 628.667351][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 628.677541][ T5886] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 628.687347][ T5886] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 628.698245][ T5886] usb 6-1: Product: syz [ 628.702535][ T5886] usb 6-1: Manufacturer: syz [ 628.702557][ T5912] usb usb3-port1: attempt power cycle [ 628.707139][ T5886] usb 6-1: SerialNumber: syz [ 628.733891][ T5886] usb 6-1: config 0 descriptor?? [ 628.746617][ T5886] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 629.035856][T12808] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1734'. [ 629.077459][ T5912] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 629.118331][ T5912] usb 3-1: device descriptor read/8, error -71 [ 629.355234][ T5886] input: gspca_zc3xx as /devices/platform/dummy_hcd.5/usb6/6-1/input/input41 [ 629.367456][ T5912] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 629.391490][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 629.419110][ T5912] usb 3-1: device descriptor read/8, error -71 [ 629.527985][ T5912] usb usb3-port1: unable to enumerate USB device [ 629.549659][ T24] usb 5-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 629.554014][ T1210] usb 6-1: USB disconnect, device number 92 [ 629.558702][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 629.575890][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.587860][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.600515][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.613794][ T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 629.626283][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.644515][ T24] usb 5-1: config 0 descriptor?? [ 629.667333][ T5886] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 629.828161][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 629.835053][ T5886] usb 7-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 629.846137][ T5886] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 629.860032][ T5886] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 629.873628][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.882782][ T5886] usb 7-1: Product: syz [ 629.883371][ T24] input: HID 28bd:0909 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.001C/input/input42 [ 629.886962][ T5886] usb 7-1: Manufacturer: syz [ 629.886981][ T5886] usb 7-1: SerialNumber: syz [ 630.006378][ T24] uclogic 0003:28BD:0909.001C: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0 [ 630.132082][ T5886] usb 7-1: 0:2 : does not exist [ 630.137112][ T5886] usb 7-1: unit 48 not found! [ 630.151563][ T5886] usb 7-1: unit 120 not found! [ 630.152017][ T24] usb 5-1: USB disconnect, device number 67 [ 630.156647][ T5886] usb 7-1: unit 102 not found! [ 630.423676][ T5886] usb 7-1: USB disconnect, device number 4 [ 630.448760][ T7605] udevd[7605]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.611643][T12838] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1742'. [ 630.798986][T12844] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1745'. [ 630.808558][ T1210] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 630.823854][T12841] netlink: 'syz.4.1743': attribute type 13 has an invalid length. [ 631.077448][ T5903] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 631.163082][T12841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.184686][T12841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.247506][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 631.300947][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 631.366643][ T5903] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 631.412319][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.460067][ T5903] usb 6-1: Product: syz [ 631.506841][ T5903] usb 6-1: Manufacturer: syz [ 631.542415][ T5903] usb 6-1: SerialNumber: syz [ 631.593097][ T5903] usb 6-1: config 0 descriptor?? [ 631.619180][T11843] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.640884][ T5903] hub 6-1:0.0: bad descriptor, ignoring hub [ 631.669257][T11843] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.686436][ T5903] hub 6-1:0.0: probe with driver hub failed with error -5 [ 631.732377][T11843] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.762490][T12861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.777036][T11843] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.796191][ T5903] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 631.979717][ T5912] usb 6-1: USB disconnect, device number 93 [ 632.228240][ T5903] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 632.295164][ T6925] udevd[6925]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.428541][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 632.459924][ T5903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.506227][ T5903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 632.559274][ T5903] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 632.605089][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.670843][ T5903] usb 5-1: Product: syz [ 632.710851][ T5903] usb 5-1: Manufacturer: syz [ 632.730287][ T5903] usb 5-1: SerialNumber: syz [ 632.743686][T12880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.838004][ T5912] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 632.997380][ T5912] usb 6-1: Using ep0 maxpacket: 8 [ 633.014094][ T5912] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 633.022987][ T5912] usb 6-1: config 179 has no interface number 0 [ 633.027705][ T5903] usb 5-1: 0:2 : does not exist [ 633.030798][ T5912] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 633.051679][ T5903] usb 5-1: unit 9 not found! [ 633.066903][ T5912] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 633.081591][ T5912] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 633.091655][ T5903] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 633.102374][ T5912] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 633.134554][ T5912] usb 6-1: config 179 interface 65 has no altsetting 0 [ 633.136799][ T5903] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4) [ 633.150362][ T5912] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 633.164691][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.231435][ T5912] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input43 [ 633.289060][ T5903] usb 5-1: USB disconnect, device number 68 [ 633.317592][ T5178] input input43: unable to receive magic message: -110 [ 633.345245][ T5178] input input43: unable to receive magic message: -32 [ 633.368485][ T6864] udevd[6864]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.433437][ T5178] input input43: unable to receive magic message: -32 [ 633.456761][ T5178] input input43: unable to receive magic message: -32 [ 633.486481][ T5178] input input43: unable to receive magic message: -32 [ 633.532030][ T5178] input input43: unable to receive magic message: -32 [ 633.558731][ T5178] input input43: unable to receive magic message: -32 [ 633.603911][ T980] usb 6-1: USB disconnect, device number 94 [ 633.610158][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 633.622739][T12893] netlink: 'syz.5.1752': attribute type 11 has an invalid length. [ 633.773112][T12900] tipc: Enabled bearer , priority 0 [ 633.782144][T12900] syzkaller0: entered promiscuous mode [ 633.788550][T12900] syzkaller0: entered allmulticast mode [ 633.794434][ T5903] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 633.855179][T12900] tipc: Resetting bearer [ 633.869504][T12899] tipc: Resetting bearer [ 633.915466][T12899] tipc: Disabling bearer [ 633.979226][ T5903] usb 5-1: config 6 has an invalid interface number: 14 but max is 0 [ 634.011636][ T5903] usb 5-1: config 6 has no interface number 0 [ 634.037206][ T5903] usb 5-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid wMaxPacketSize 0 [ 634.063338][ T5903] usb 5-1: config 6 interface 14 has no altsetting 0 [ 634.096848][ T5903] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 634.119173][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.141609][ T5903] usb 5-1: Product: syz [ 634.152612][ T5903] usb 5-1: Manufacturer: syz [ 634.174127][ T5903] usb 5-1: SerialNumber: syz [ 634.177829][T12906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1759'. [ 634.215668][T12906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1759'. [ 634.458092][ T5903] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 634.484746][ T5903] command write [95] error -8 [ 634.493921][ T5903] usb 5-1: USB disconnect, device number 69 [ 635.066917][T12939] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1765'. [ 635.473046][ T5903] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 635.689438][ T5903] usb 5-1: config 0 has an invalid interface number: 110 but max is 0 [ 635.721629][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.798131][ T5903] usb 5-1: config 0 has no interface number 0 [ 635.854093][ T5903] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 635.869373][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.878810][ T5903] usb 5-1: Product: syz [ 635.883122][ T5903] usb 5-1: Manufacturer: syz [ 635.889300][ T5903] usb 5-1: SerialNumber: syz [ 635.929444][ T5903] usb 5-1: config 0 descriptor?? [ 635.997576][ T1210] usb 1-1: unable to get BOS descriptor or descriptor too short [ 636.033573][ T1210] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 636.080247][ T1210] usb 1-1: chopping to 0 config(s) [ 636.087388][ T1210] usb 1-1: can't read configurations, error -32 [ 636.204686][ T5903] cdc_subset 5-1:0.110: probe with driver cdc_subset failed with error -22 [ 636.237565][ T1210] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 636.387349][ T1210] usb 1-1: device descriptor read/64, error -32 [ 636.415643][T12965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.440560][T12965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.475088][ T5903] usb 5-1: USB disconnect, device number 70 [ 636.497543][ T1210] usb usb1-port1: attempt power cycle [ 636.576670][T12979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1772'. [ 636.827767][ T5920] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 637.007957][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 637.029616][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 637.110176][ T5920] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.159049][ T5920] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.199723][ T5920] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 637.226976][ T5903] IPVS: starting estimator thread 0... [ 637.239126][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.271292][ T5920] usb 3-1: Product: syz [ 637.298130][ T5920] usb 3-1: Manufacturer: syz [ 637.330358][T13007] IPVS: using max 59 ests per chain, 141600 per kthread [ 637.346410][ T5920] usb 3-1: SerialNumber: syz [ 637.612728][ T5920] usb 3-1: unit 77 not found! [ 637.630946][ T5920] usb 3-1: unit 242 not found! [ 637.751217][ T5920] usb 3-1: USB disconnect, device number 102 [ 637.855037][ T6864] udevd[6864]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.087697][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 638.275731][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.337417][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.370347][ T24] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 638.409954][ T24] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 638.427918][ T24] usb 7-1: Manufacturer: syz [ 638.443296][ T24] usb 7-1: config 0 descriptor?? [ 638.732196][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 638.857438][ T5912] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 639.027358][ T5912] usb 6-1: Using ep0 maxpacket: 32 [ 639.049077][ T5912] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 639.061750][ T5912] usb 6-1: config 0 has no interface number 0 [ 639.078078][ T5912] usb 6-1: config 0 interface 12 has no altsetting 0 [ 639.096609][ T5912] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 639.124078][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.143476][ T5912] usb 6-1: Product: syz [ 639.151973][ T5912] usb 6-1: Manufacturer: syz [ 639.174051][ T5912] usb 6-1: SerialNumber: syz [ 639.236284][T13062] tipc: Enabled bearer , priority 0 [ 639.245882][ T5912] usb 6-1: config 0 descriptor?? [ 639.257858][T13062] syzkaller0: entered promiscuous mode [ 639.272284][T13062] syzkaller0: entered allmulticast mode [ 639.367449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.381595][T13062] syzkaller0: mtu less than device minimum [ 639.400172][T13060] tipc: Resetting bearer [ 639.449178][T13060] tipc: Disabling bearer [ 639.475498][T13049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.516479][T13049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.695974][T13072] syzkaller0: entered promiscuous mode [ 639.718631][T13072] syzkaller0: entered allmulticast mode [ 639.746084][T13072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 640.426456][ T5903] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 640.427183][ T5912] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 640.473458][ T5912] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 640.495495][ T5912] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 640.507454][ T5912] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 640.560946][ T5912] usb 6-1: USB disconnect, device number 95 [ 640.608010][ T5903] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 640.631023][ T5903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 640.668441][T13086] ip6t_srh: unknown srh invflags 4000 [ 640.684256][ T5903] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 640.745918][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 640.778503][ T5903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 640.803823][ T5903] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 640.845974][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 640.870882][ T5903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 640.912522][ T5903] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 640.938170][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 640.946294][ T5903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 640.969016][ T5903] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 640.991798][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 641.066320][ T5903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 641.157363][ T5903] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 641.186618][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 641.205177][ T5903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 641.244287][ T5903] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 641.311282][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 641.330519][ T5903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 641.362569][ T5903] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 641.419584][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 641.439657][ T5903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 641.459140][ T5903] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 641.477583][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 641.489082][ T5903] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 641.512299][ T5903] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 641.533441][ T5903] usb 5-1: Product: syz [ 641.545662][ T5903] usb 5-1: Manufacturer: syz [ 641.568337][ T5903] usb 5-1: SerialNumber: syz [ 641.586669][ T5903] usb 5-1: config 0 descriptor?? [ 641.635727][ T5903] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 641.852884][ T5886] usb 5-1: USB disconnect, device number 71 [ 641.863259][ T5886] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 642.897715][T13120] program syz.2.1805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.954888][T13124] bridge_slave_0: left allmulticast mode [ 642.969342][T13125] program syz.2.1805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.969469][T13124] bridge_slave_0: left promiscuous mode [ 642.994673][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.035609][T13124] bond0: (slave bond_slave_0): Releasing backup interface [ 643.061467][T13124] bond0: (slave bond_slave_1): Releasing backup interface [ 643.081948][T13124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.096764][T13124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.147598][T13124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.157396][T13124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.357650][T13124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 643.590388][T13132] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 643.597696][T13132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 643.608258][ T980] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 643.626903][T13132] vhci_hcd vhci_hcd.0: Device attached [ 643.777303][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 643.800787][ T980] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 643.820607][ T980] usb 3-1: config 0 has no interface number 0 [ 643.826829][ T980] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.867995][ T980] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.878075][ T5912] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 643.904117][ T980] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 643.917851][ T5903] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 643.925606][ T24] usbhid 7-1:0.0: can't add hid device: -110 [ 643.931899][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.940180][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -110 [ 643.963728][ T980] usb 3-1: config 0 descriptor?? [ 644.049322][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.067459][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.091137][ T5912] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 644.117661][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.140802][ T5912] usb 1-1: config 0 descriptor?? [ 644.164328][ T5912] usbhid 1-1:0.0: can't add hid device: -22 [ 644.197657][ T5912] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 644.382067][ T5886] usb 1-1: USB disconnect, device number 76 [ 644.417857][T13147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.436537][T13130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.438044][T13147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.476380][T13130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.516918][ T980] uclogic 0003:28BD:0071.001D: failed retrieving string descriptor #100: -71 [ 644.536032][ T980] uclogic 0003:28BD:0071.001D: failed retrieving pen parameters: -71 [ 644.597413][ T980] uclogic 0003:28BD:0071.001D: pen probing failed: -71 [ 644.604314][ T980] uclogic 0003:28BD:0071.001D: failed probing parameters: -71 [ 644.657401][ T980] uclogic 0003:28BD:0071.001D: probe with driver uclogic failed with error -71 [ 644.699714][ T980] usb 3-1: USB disconnect, device number 103 [ 644.843592][ T5187] usb 7-1: USB disconnect, device number 5 [ 644.907411][ T5886] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 644.921542][T13133] vhci_hcd: connection reset by peer [ 644.935784][T11827] vhci_hcd vhci_hcd.0: stop threads [ 644.945797][T11827] vhci_hcd vhci_hcd.0: release socket [ 644.953631][T11827] vhci_hcd vhci_hcd.0: disconnect device [ 645.083323][T13163] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 645.099438][T13165] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 645.099434][ T5886] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 645.100560][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.128936][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.144150][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 645.163298][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.173130][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.207358][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 645.217572][ T5187] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 645.249776][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.259024][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.287309][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 645.295465][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.306532][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.318013][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 645.325950][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.336160][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.349230][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 645.358226][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.367461][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.381652][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 645.390105][ T5187] usb 7-1: unable to get BOS descriptor or descriptor too short [ 645.399343][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.409513][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.421496][ T5187] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 645.433207][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 645.443212][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 645.452315][ T5187] usb 7-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 645.461915][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 645.472961][ T5187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.481357][ T5187] usb 7-1: Product: 쥕ꦯ௓㬛⃱娧탏㋏ﬞ겦ꅮ㱒ᅁ㉍Ě昱꼲긒✷㮁軁髕쬗铣묿ʾⰅ恹倚㩤軰क़䕢辑ﺱ嗝鋂鈳劎ଚ焰馘䦓澸侜焴譔黪ཽኚ鿛ᶓ䱖ᶊ苵觹ꮫᘾ脇ഋᖝ꭯㸛荨﹘䉟탵惲⿷န쿰枥揠鵵닜鰤䪻셽錦腴뜮捸둛ㄜ [ 645.510256][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 645.517688][ T5187] usb 7-1: Manufacturer: ᐁ [ 645.522931][ T5187] usb 7-1: SerialNumber: 荳䱮ር⦒㪦뫭᚝땢딁궳컾ဉ蜔覐亙꬜鍸ۉ雺칹仳裰䴍懍伐ᝳ쐵⏎㒶锈䘗⊮뜛幾﹖횚붰稿鯩놨ⷙ풫폴䰤Үﴘ䘔퓭ᣀ徎瓁㛽柪ᕝ凉佰鯾Ჩᯛ榲壿ᕋ䪗蘾῎럘᠐㢂㴵廻᠏쎱㠁䂢뎔䟆쉌 [ 645.552164][ T5886] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 645.582040][ T5886] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 645.611785][ T5886] usb 6-1: Product: syz [ 645.618377][ T5886] usb 6-1: Manufacturer: syz [ 645.635978][ T5886] usb 6-1: SerialNumber: syz [ 645.668649][ T5886] usb 6-1: config 0 descriptor?? [ 645.696704][ T5886] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 645.844747][T13158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.886398][T13158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.915103][ T9] usb 6-1: USB disconnect, device number 96 [ 645.939647][ T9] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 646.041763][ T5187] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 646.078923][ T5187] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 646.224796][ T5187] usb 7-1: USB disconnect, device number 6 [ 646.306378][ T6864] udevd[6864]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 646.661560][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'. [ 646.752567][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1823'. [ 646.977385][ T980] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 647.127332][ T980] usb 1-1: Invalid ep0 maxpacket: 16 [ 647.257343][ T980] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 647.417928][ T980] usb 1-1: Invalid ep0 maxpacket: 16 [ 647.430348][ T980] usb usb1-port1: attempt power cycle [ 647.527341][ T5187] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 647.679449][ T5187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.704437][ T5187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.728042][ T5187] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 647.747541][ T5187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.778802][ T5187] usb 7-1: config 0 descriptor?? [ 647.787373][ T980] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 647.818006][ T980] usb 1-1: Invalid ep0 maxpacket: 16 [ 647.949272][ T980] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 647.988190][ T980] usb 1-1: Invalid ep0 maxpacket: 16 [ 648.006607][ T980] usb usb1-port1: unable to enumerate USB device [ 648.026040][ T5187] usbhid 7-1:0.0: can't add hid device: -71 [ 648.044973][ T5187] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 648.079388][ T5187] usb 7-1: USB disconnect, device number 7 [ 648.557400][ T5187] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 648.564949][ T5886] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 648.584521][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1834'. [ 648.627931][T13233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.650609][T13235] input: syz0 as /devices/virtual/input/input44 [ 648.660277][T13224] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 648.758467][ T5886] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 648.767753][ T5187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.783527][ T5187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.801511][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 648.813262][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 648.832456][ T5187] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 648.857357][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 648.876195][ T5187] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 648.890048][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 648.909675][ T5187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.924077][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 648.963624][ T5187] usb 7-1: config 0 descriptor?? [ 648.972797][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 648.999025][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 649.012670][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.049233][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 649.079932][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 649.102667][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.128623][ T5903] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 649.158940][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 649.205682][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 649.248486][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.305930][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 649.326342][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 649.379938][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.423195][ T5187] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 649.457138][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 649.539378][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 649.568357][T13238] x_tables: unsorted entry at hook 3 [ 649.589812][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.643195][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 649.688872][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 649.707400][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 649.748658][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 649.788656][ T5886] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 649.821498][ T5886] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 649.850974][ T5886] usb 3-1: Product: syz [ 649.855267][ T5886] usb 3-1: Manufacturer: syz [ 649.870435][ T5886] usb 3-1: SerialNumber: syz [ 649.928003][ T5886] usb 3-1: config 0 descriptor?? [ 649.985977][ T5886] yurex 3-1:0.0: USB YUREX device now attached to Yurex #1 [ 650.258229][ T5903] usb 3-1: USB disconnect, device number 104 [ 650.332463][ T5903] yurex 3-1:0.0: USB YUREX #1 now disconnected [ 650.898887][T13270] fuse: Bad value for 'fd' [ 651.157622][ T796] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 651.372934][ T796] usb 1-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 651.402739][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.449479][ T796] usb-storage 1-1:32.0: USB Mass Storage device detected [ 651.497140][ T796] usb-storage 1-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 651.795853][ T796] usb 1-1: USB disconnect, device number 81 [ 652.457369][ T796] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 652.617315][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 652.656739][ T796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 652.682307][ T796] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 652.694093][ T796] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 652.716949][ T796] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 652.756315][ T796] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 652.789387][ T796] usb 3-1: Manufacturer: syz [ 652.803893][ T796] usb 3-1: SerialNumber: syz [ 652.975338][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 652.991418][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 653.002403][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 653.016274][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 653.041620][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 653.227565][ T980] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 653.333569][T13273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.343850][T13273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 653.357062][T13273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.367318][T13273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.392797][T13273] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 653.407346][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 653.407620][T13273] batman_adv: batadv0: Removing interface: ip6gretap1 [ 653.437737][ T980] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 653.456398][ T980] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 653.465948][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.477456][ T980] usb 1-1: Product: syz [ 653.487273][ T980] usb 1-1: Manufacturer: syz [ 653.510512][ T980] usb 1-1: SerialNumber: syz [ 653.543434][ T980] usb 1-1: config 0 descriptor?? [ 653.569296][ T980] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 653.605957][ T980] usb 1-1: setting power ON [ 653.617475][ T980] dvb-usb: bulk message failed: -22 (2/0) [ 653.671999][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 653.715033][ T980] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 653.737348][ T5886] usb 7-1: USB disconnect, device number 8 [ 653.752902][ T980] usb 1-1: media controller created [ 653.775913][T11836] bridge_slave_1: left allmulticast mode [ 653.793426][T11836] bridge_slave_1: left promiscuous mode [ 653.812251][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.852037][T11836] bridge_slave_0: left allmulticast mode [ 653.865378][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.886129][T11836] bridge_slave_0: left promiscuous mode [ 653.918070][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.952557][ T980] usb 1-1: selecting invalid altsetting 6 [ 653.959505][T13314] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1851'. [ 653.973481][ T980] usb 1-1: digital interface selection failed (-22) [ 654.021046][ T980] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 654.054544][ T980] usb 1-1: setting power OFF [ 654.095907][ T980] dvb-usb: bulk message failed: -22 (2/0) [ 654.143637][ T980] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 654.180637][ T980] (NULL device *): no alternate interface [ 654.289490][ T980] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 654.509217][T11836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.540631][T11836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.542692][T13327] x_tables: duplicate underflow at hook 4 [ 654.708265][T11836] bond0 (unregistering): Released all slaves [ 654.729245][ T796] usb 3-1: USB disconnect, device number 105 [ 654.870645][T13314] 0: renamed from hsr_slave_1 (while UP) [ 654.924252][T13314] 0: entered allmulticast mode [ 654.957478][ T5187] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 654.986267][T13314] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 655.010787][T13328] fuse: Unknown parameter 'fd0x000000000000000d00000000000000000000' [ 655.119982][ T5143] Bluetooth: hci1: command tx timeout [ 655.189362][ T5187] usb 7-1: Using ep0 maxpacket: 16 [ 655.221551][T11836] tipc: Left network mode [ 655.455172][T13307] chnl_net:caif_netlink_parms(): no params data found [ 655.481143][ T5187] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.542485][ T5187] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.592378][ T5187] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 655.634805][ T5187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.720060][T11836] hsr_slave_0: left promiscuous mode [ 655.738051][T11836] hsr_slave_1: left promiscuous mode [ 655.758776][T11836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.235783][T11836] team0 (unregistering): Port device team_slave_1 removed [ 656.311286][T11836] team0 (unregistering): Port device team_slave_0 removed [ 656.335596][ T8770] usb 1-1: USB disconnect, device number 82 [ 656.578415][ T5187] usbhid 7-1:128.0: can't add hid device: -71 [ 656.618948][ T5187] usbhid 7-1:128.0: probe with driver usbhid failed with error -71 [ 656.689114][ T5187] usb 7-1: USB disconnect, device number 9 [ 656.863665][T13354] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 656.917719][ T8770] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 657.087329][ T980] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 657.159015][ T8770] usb 1-1: Using ep0 maxpacket: 8 [ 657.194379][ T8770] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 657.208616][ T5143] Bluetooth: hci1: command tx timeout [ 657.257367][ T980] usb 3-1: device descriptor read/64, error -71 [ 657.268977][ T8770] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 657.304831][T13307] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.325471][T13307] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.335101][ T8770] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 657.354491][T13307] bridge_slave_0: entered allmulticast mode [ 657.378925][ T8770] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.400667][T13307] bridge_slave_0: entered promiscuous mode [ 657.426088][T13307] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.438927][ T8770] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 657.461970][T13307] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.486412][ T8770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.514713][T13307] bridge_slave_1: entered allmulticast mode [ 657.539071][T13307] bridge_slave_1: entered promiscuous mode [ 657.547402][ T980] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 657.697346][ T980] usb 3-1: device descriptor read/64, error -71 [ 657.770071][ T8770] usb 1-1: GET_CAPABILITIES returned 0 [ 657.775594][ T8770] usbtmc 1-1:16.0: can't read capabilities [ 657.815686][T13307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.837699][ T980] usb usb3-port1: attempt power cycle [ 657.887900][T13307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.062148][T13307] team0: Port device team_slave_0 added [ 658.084680][T13307] team0: Port device team_slave_1 added [ 658.177767][T13307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.184763][T13307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.220306][ T980] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 658.235900][T13307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.247979][ T980] usb 3-1: device descriptor read/8, error -71 [ 658.255689][T13307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.262843][T13307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.292364][T13307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.347363][ T8770] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 658.375329][T13307] hsr_slave_0: entered promiscuous mode [ 658.389868][T13307] hsr_slave_1: entered promiscuous mode [ 658.396359][T13307] debugfs: 'hsr0' already exists in 'hsr' [ 658.430433][T13307] Cannot create hsr debugfs directory [ 658.487390][ T980] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 658.498237][ T8770] usb 7-1: Using ep0 maxpacket: 16 [ 658.513178][ T8770] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.534433][ T980] usb 3-1: device descriptor read/8, error -71 [ 658.540843][ T8770] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.551883][ T8770] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 658.574152][ T8770] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 658.590951][ T8770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.602303][ T8770] usb 7-1: config 0 descriptor?? [ 658.668890][ T980] usb usb3-port1: unable to enumerate USB device [ 658.691052][ T24] usb 1-1: USB disconnect, device number 83 [ 659.177616][ T5187] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 659.278372][ T5143] Bluetooth: hci1: command tx timeout [ 659.327385][ T5187] usb 1-1: device descriptor read/64, error -71 [ 659.398410][ T8770] usbhid 7-1:0.0: can't add hid device: -71 [ 659.409967][T13307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 659.413569][ T8770] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 659.460154][ T8770] usb 7-1: USB disconnect, device number 10 [ 659.472075][T13307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 659.502741][T13307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 659.526858][T13307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 659.567519][ T5187] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 659.670032][T13307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.705745][T13307] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.727415][ T5187] usb 1-1: device descriptor read/64, error -71 [ 659.728709][T11827] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.740887][T11827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.795744][T11830] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.803193][T11830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.847376][ T8770] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 659.855471][ T5187] usb usb1-port1: attempt power cycle [ 659.900980][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1865'. [ 659.926406][T13422] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1867'. [ 659.960834][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1865'. [ 660.007091][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1865'. [ 660.028280][ T8770] usb 7-1: Using ep0 maxpacket: 16 [ 660.062976][ T8770] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.077492][ T8770] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 660.092531][ T8770] usb 7-1: config 0 interface 0 has no altsetting 0 [ 660.100785][ T8770] usb 7-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 660.110554][ T8770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.138134][ T8770] usb 7-1: config 0 descriptor?? [ 660.153097][T13307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.211328][ T5187] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 660.267008][T13307] veth0_vlan: entered promiscuous mode [ 660.273830][ T5187] usb 1-1: device descriptor read/8, error -71 [ 660.302330][T13307] veth1_vlan: entered promiscuous mode [ 660.379517][T13307] veth0_macvtap: entered promiscuous mode [ 660.409982][T13307] veth1_macvtap: entered promiscuous mode [ 660.468897][T13307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.503517][T13307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.552148][ T5187] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 660.599100][T11827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.608919][ T8770] mcp2200 0003:04D8:00DF.001F: item 0 4 0 9 parsing failed [ 660.616307][T11827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.627984][ T5187] usb 1-1: device descriptor read/8, error -71 [ 660.657997][T11827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.666597][ T8770] mcp2200 0003:04D8:00DF.001F: can't parse reports [ 660.683958][T11827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.686309][ T8770] mcp2200 0003:04D8:00DF.001F: probe with driver mcp2200 failed with error -22 [ 660.739614][ T5187] usb usb1-port1: unable to enumerate USB device [ 660.943772][T11845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.968297][T11845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.991414][T13410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.009980][T13410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.061464][T11843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.066175][ T24] usb 7-1: USB disconnect, device number 11 [ 661.079863][T11843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.114920][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1865'. [ 661.167442][ T9] usb 3-1: new low-speed USB device number 110 using dummy_hcd [ 661.328605][ T9] usb 3-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 661.350101][ T9] usb 3-1: string descriptor 0 read error: -22 [ 661.356489][ T9] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c [ 661.366107][ T5143] Bluetooth: hci1: command tx timeout [ 661.394546][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 661.414593][ T9] ati_remote 3-1:15.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 661.506627][T13454] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1848'. [ 661.707411][ T8770] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 661.727026][T13461] netlink: 'syz.6.1870': attribute type 5 has an invalid length. [ 661.806332][T13468] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 661.888457][ T8770] usb 1-1: device descriptor read/64, error -71 [ 662.180352][ T5912] usb 3-1: USB disconnect, device number 110 [ 662.447946][ T8770] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 662.639822][ T8770] usb 1-1: Using ep0 maxpacket: 8 [ 662.670240][ T8770] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 662.700838][ T8770] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 662.733412][ T8770] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 662.767294][ T8770] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 662.797701][ T8770] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.821295][ T8770] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 662.841406][ T8770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.073759][ T8770] usb 1-1: GET_CAPABILITIES returned 0 [ 663.087401][ T8770] usbtmc 1-1:16.0: can't read capabilities [ 663.640006][T13454] usb 1-1: USB disconnect, device number 89 [ 663.978823][T13465] hub 1-0:1.0: USB hub found [ 663.984993][T13465] hub 1-0:1.0: 1 port detected [ 664.028342][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 664.127995][ T980] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 664.187939][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 664.195610][ T24] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 664.210138][ T24] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 664.221918][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.231829][ T24] usb 7-1: Product: syz [ 664.236556][ T24] usb 7-1: Manufacturer: syz [ 664.243673][ T24] usb 7-1: SerialNumber: syz [ 664.253427][ T24] usb 7-1: config 0 descriptor?? [ 664.264992][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 664.275529][ T24] usb 7-1: setting power ON [ 664.280556][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 664.290057][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 664.301951][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 664.320897][ T24] usb 7-1: media controller created [ 664.346588][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.369814][ T24] usb 7-1: selecting invalid altsetting 6 [ 664.376262][ T24] usb 7-1: digital interface selection failed (-22) [ 664.383304][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 664.392889][ T24] usb 7-1: setting power OFF [ 664.398004][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 664.403884][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 664.417338][ T24] (NULL device *): no alternate interface [ 664.450105][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 664.651438][T13534] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1878'. [ 664.660695][T13534] 0: renamed from hsr_slave_1 (while UP) [ 664.875598][T13534] 0: entered allmulticast mode [ 664.894349][T13534] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 665.151148][T13544] xt_TCPMSS: Only works on TCP SYN packets [ 665.261789][T13546] sit1: entered allmulticast mode [ 665.355296][T13548] tipc: Started in network mode [ 665.368822][T13548] tipc: Node identity 2629c477ab7d, cluster identity 4711 [ 665.385847][T13548] tipc: Enabled bearer , priority 0 [ 665.408681][T13548] syzkaller0: entered promiscuous mode [ 665.420618][T13548] syzkaller0: entered allmulticast mode [ 665.469114][T13548] tipc: Resetting bearer [ 665.481043][T13547] tipc: Resetting bearer [ 665.513777][T13547] tipc: Disabling bearer [ 665.875301][T13554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1884'. [ 666.259903][T13561] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1886'. [ 666.478081][ T980] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 666.657353][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 666.685265][ T980] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 666.704977][ T980] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 666.724044][ T980] usb 1-1: Product: syz [ 666.732355][ T980] usb 1-1: Manufacturer: syz [ 666.743074][ T5886] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 666.745211][ T980] usb 1-1: SerialNumber: syz [ 666.768719][ T980] usb 1-1: config 0 descriptor?? [ 666.853823][ T796] usb 7-1: USB disconnect, device number 12 [ 667.079976][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 667.096882][ T5886] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 667.122683][ T5886] usb 6-1: config 0 has no interface number 0 [ 667.147086][ T5886] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 667.169023][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.194585][ T5886] usb 6-1: Product: syz [ 667.209776][ T5886] usb 6-1: Manufacturer: syz [ 667.230104][ T5886] usb 6-1: SerialNumber: syz [ 667.253208][ T5886] usb 6-1: config 0 descriptor?? [ 667.273629][ T796] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 667.457306][ T796] usb 7-1: Using ep0 maxpacket: 32 [ 667.467388][T13581] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 667.512411][ T796] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 667.567377][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 667.617417][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 667.679576][ T796] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 667.701775][ T5886] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 667.725814][ T5886] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 667.750178][ T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.789073][ T796] usb 7-1: config 0 descriptor?? [ 667.817175][T13578] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 667.838815][ T796] hub 7-1:0.0: USB hub found [ 667.974326][ T5886] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 668.010041][ T5886] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 668.038376][ T796] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 668.059095][ T5886] usb 6-1: USB disconnect, device number 97 [ 668.247018][T13578] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 668.268472][ T796] usbhid 7-1:0.0: can't add hid device: -71 [ 668.296237][ T796] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 668.349685][ T796] usb 7-1: USB disconnect, device number 13 [ 668.507396][ T8770] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 669.077434][ T796] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 669.111781][ T980] usb 1-1: USB disconnect, device number 91 [ 669.157661][ T24] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 669.251789][ T796] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 669.262221][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.270954][ T796] usb 6-1: Product: syz [ 669.275435][ T796] usb 6-1: Manufacturer: syz [ 669.287174][ T796] usb 6-1: SerialNumber: syz [ 669.306508][ T796] usb 6-1: config 0 descriptor?? [ 669.327394][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 669.334381][ T24] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 669.347173][ T24] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 669.358085][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.366263][ T24] usb 3-1: Product: syz [ 669.371589][ T24] usb 3-1: Manufacturer: syz [ 669.376405][ T24] usb 3-1: SerialNumber: syz [ 669.396377][ T24] usb 3-1: config 0 descriptor?? [ 669.439168][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 669.472480][ T24] usb 3-1: setting power ON [ 669.498587][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 669.498958][T13619] fuse: Bad value for 'group_id' [ 669.526745][ T796] usb 6-1: ignoring: probably an ADSL modem [ 669.530954][T13619] fuse: Bad value for 'group_id' [ 669.561236][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 669.595114][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 669.629538][ T24] usb 3-1: media controller created [ 669.705606][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 669.814696][ T24] usb 3-1: selecting invalid altsetting 6 [ 669.827677][T13625] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1901'. [ 669.851379][ T24] usb 3-1: digital interface selection failed (-22) [ 669.852375][T13625] 0: renamed from c1 (while UP) [ 669.903503][T13625] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 669.955786][ T796] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 669.979578][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 670.032799][ T24] usb 3-1: setting power OFF [ 670.055416][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 670.072009][T13627] fuse: Bad value for 'fd' [ 670.079841][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 670.121876][ T24] (NULL device *): no alternate interface [ 670.301218][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 671.194901][ T8770] usb 5-1: unable to get BOS descriptor or descriptor too short [ 671.214263][ T8770] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 671.233472][ T8770] usb 5-1: can't read configurations, error -71 [ 671.493790][T13649] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 671.618339][T13652] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1913'. [ 671.808016][ T5920] usb 6-1: USB disconnect, device number 98 [ 671.964261][ T5187] usb 3-1: USB disconnect, device number 111 [ 672.047616][ T5886] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 673.017939][ T796] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 673.177547][ T796] usb 7-1: Using ep0 maxpacket: 8 [ 673.193730][ T796] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.205780][ T5920] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 673.221629][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 673.234384][ T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 673.244683][ T796] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 673.274976][ T796] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.310453][ T796] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 673.343482][ T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.367628][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 673.378912][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.394432][ T796] usb 7-1: config 0 descriptor?? [ 673.402569][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.433138][ T5920] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 673.448213][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.474943][ T5920] usb 6-1: config 0 descriptor?? [ 673.591054][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 673.677813][ T9] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 673.744716][T13684] netlink: 'syz.2.1923': attribute type 3 has an invalid length. [ 673.756013][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 673.837553][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 673.846892][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 673.858579][ T9] usb 5-1: config 0 has no interface number 0 [ 673.865164][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 673.881548][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 673.891297][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.897633][ T5920] usbhid 6-1:0.0: can't add hid device: -71 [ 673.906584][ T9] usb 5-1: Product: syz [ 673.911452][ T9] usb 5-1: Manufacturer: syz [ 673.911686][ T5920] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 673.944675][ T9] usb 5-1: SerialNumber: syz [ 673.955492][ T8770] usb 7-1: USB disconnect, device number 14 [ 673.968607][ T9] usb 5-1: config 0 descriptor?? [ 673.993196][ T5920] usb 6-1: USB disconnect, device number 99 [ 674.406366][ T9] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 674.419561][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 674.426940][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 674.439394][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 674.464879][ T9] usb 5-1: USB disconnect, device number 74 [ 674.567522][T13695] syzkaller0: entered promiscuous mode [ 674.573158][T13695] syzkaller0: entered allmulticast mode [ 674.757248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 674.863648][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880570bcc00: rx timeout, send abort [ 674.995557][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'. [ 675.216332][T13723] tipc: Started in network mode [ 675.227982][T13723] tipc: Node identity 2a23435824bf, cluster identity 4711 [ 675.236981][T13723] tipc: Enabled bearer , priority 0 [ 675.246261][T13723] syzkaller0: entered promiscuous mode [ 675.253060][T13723] syzkaller0: entered allmulticast mode [ 675.314075][T13723] tipc: Resetting bearer [ 675.373752][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880570bcc00: abort rx timeout. Force session deactivation [ 675.378249][ T980] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 675.429456][T13722] tipc: Resetting bearer [ 675.516374][T13722] tipc: Disabling bearer [ 675.542804][T13728] tipc: Started in network mode [ 675.548142][T13728] tipc: Node identity 7e9e85f1b2a7, cluster identity 4711 [ 675.555497][T13728] tipc: Enabled bearer , priority 0 [ 675.565727][T13728] syzkaller0: entered promiscuous mode [ 675.571330][ T980] usb 6-1: Using ep0 maxpacket: 8 [ 675.576517][T13728] syzkaller0: entered allmulticast mode [ 675.588049][ T980] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 675.618775][ T980] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 675.656896][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.697190][ T980] usb 6-1: Product: syz [ 675.714893][ T980] usb 6-1: Manufacturer: syz [ 675.722543][ T980] usb 6-1: SerialNumber: syz [ 675.758689][ T980] usb 6-1: config 0 descriptor?? [ 675.774816][ T980] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 675.789512][ T980] usb 6-1: setting power ON [ 675.804335][ T980] dvb-usb: bulk message failed: -22 (2/0) [ 675.823451][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 675.844529][ T980] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 675.866022][ T980] usb 6-1: media controller created [ 675.909434][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 675.955129][ T980] usb 6-1: selecting invalid altsetting 6 [ 675.969848][ T980] usb 6-1: digital interface selection failed (-22) [ 675.991966][ T980] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 676.014440][ T980] usb 6-1: setting power OFF [ 676.036135][ T980] dvb-usb: bulk message failed: -22 (2/0) [ 676.056891][ T980] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 676.068832][T13731] tipc: Resetting bearer [ 676.108915][T13744] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1937'. [ 676.121598][ T980] (NULL device *): no alternate interface [ 676.122923][T13745] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1933'. [ 676.196153][ T980] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 676.520705][T13737] tipc: Enabled bearer , priority 0 [ 676.536466][T13739] syzkaller0: entered promiscuous mode [ 676.546285][T13739] syzkaller0: entered allmulticast mode [ 676.625885][T13745] 1: renamed from c0 (while UP) [ 676.650907][T13745] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 676.866232][T13727] tipc: Resetting bearer [ 676.955504][T13727] tipc: Disabling bearer [ 677.002918][T13730] tipc: Resetting bearer [ 677.046990][T13730] tipc: Disabling bearer [ 677.094670][ T8770] tipc: Node number set to 3426321905 [ 677.137518][T13749] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1938'. [ 677.343257][T13753] tipc: Enabled bearer , priority 0 [ 677.354223][T13753] syzkaller0: entered promiscuous mode [ 677.365904][T13753] syzkaller0: entered allmulticast mode [ 677.505775][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1941'. [ 677.541242][T13759] tipc: Resetting bearer [ 677.575398][T13759] tipc: Disabling bearer [ 677.653513][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 677.670046][ T5886] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 677.685524][ T5886] usb 1-1: can't read configurations, error -71 [ 677.737353][ T8770] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 677.877397][ T8770] usb 3-1: device descriptor read/64, error -71 [ 677.984462][T13780] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1949'. [ 678.127474][ T8770] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 678.166033][ T5920] usb 6-1: USB disconnect, device number 100 [ 678.288171][ T8770] usb 3-1: device descriptor read/64, error -71 [ 678.323148][T13792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1953'. [ 678.360620][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1954'. [ 678.399785][ T8770] usb usb3-port1: attempt power cycle [ 678.618515][ T5187] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 678.698471][ T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 678.747342][ T5903] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 678.767392][ T8770] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 678.799408][ T5187] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 678.815852][ T8770] usb 3-1: device descriptor read/8, error -71 [ 678.822531][ T5187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 678.838813][ T5187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 678.849996][ T5187] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 678.867395][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 678.874461][ T5187] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 678.885933][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 678.899835][ T5187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.909823][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 678.924497][ T5903] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 678.935493][ T5187] usb 6-1: config 0 descriptor?? [ 678.941340][ T5903] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.956653][ T5903] usb 7-1: config 0 has no interfaces? [ 678.957520][ T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 678.973875][ T5903] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 678.983682][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.991978][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.001876][ T9] usb 5-1: Product: syz [ 679.017140][ T5903] usb 7-1: config 0 descriptor?? [ 679.023243][ T9] usb 5-1: Manufacturer: syz [ 679.028419][ T9] usb 5-1: SerialNumber: syz [ 679.047651][ T9] usb 5-1: config 0 descriptor?? [ 679.068240][ T8770] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 679.108631][ T8770] usb 3-1: device descriptor read/8, error -71 [ 679.232569][ T8770] usb usb3-port1: unable to enumerate USB device [ 679.279192][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input46 [ 679.313354][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 679.348351][ T9] imon:send_packet: packet tx failed (-71) [ 679.368026][ T5187] plantronics 0003:047F:FFFF.0020: ignoring exceeding usage max [ 679.377443][ T9] imon 5-1:0.0: panel buttons/knobs setup failed [ 679.405480][ T5187] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 679.657369][ T9] rc_core: IR keymap rc-imon-pad not found [ 679.663730][ T9] Registered IR keymap rc-empty [ 679.669448][ T9] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 679.683628][ T9] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 679.695300][ T9] imon:send_packet: packet tx failed (-71) [ 679.718024][ T9] imon 5-1:0.0: remote input dev register failed [ 679.729779][ T9] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 679.754234][ T9] imon 5-1:0.0: unable to initialize intf0, err 0 [ 679.761494][ T9] imon:imon_probe: failed to initialize context! [ 679.768579][ T9] imon 5-1:0.0: unable to register, err -19 [ 679.777922][ T9] usb 5-1: USB disconnect, device number 75 [ 679.857528][ T5187] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 679.998396][ T5187] usb 1-1: device descriptor read/64, error -71 [ 680.247583][ T5187] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 680.397442][ T5187] usb 1-1: device descriptor read/64, error -71 [ 680.527631][ T5187] usb usb1-port1: attempt power cycle [ 680.887371][ T5187] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 680.918932][ T5187] usb 1-1: device descriptor read/8, error -71 [ 681.097347][ T796] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 681.157437][ T5187] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 681.195720][ T5187] usb 1-1: device descriptor read/8, error -71 [ 681.307674][ T5187] usb usb1-port1: unable to enumerate USB device [ 681.360738][ T980] usb 7-1: USB disconnect, device number 15 [ 681.617875][ T5920] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 681.648212][ T9] usb 6-1: reset high-speed USB device number 101 using dummy_hcd [ 681.750506][T13841] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1966'. [ 681.770466][ T5920] usb 5-1: not running at top speed; connect to a high speed hub [ 681.780037][ T5920] usb 5-1: config 253 has an invalid interface number: 7 but max is 1 [ 681.791238][ T5920] usb 5-1: config 253 has an invalid interface number: 69 but max is 1 [ 681.800613][ T5920] usb 5-1: config 253 has no interface number 0 [ 681.800645][ T9] usb 6-1: device descriptor read/64, error -71 [ 681.813777][ T5920] usb 5-1: config 253 has no interface number 1 [ 681.827535][ T5920] usb 5-1: config 253 interface 69 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 681.840487][ T5920] usb 5-1: config 253 interface 69 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 681.853327][ T5920] usb 5-1: config 253 interface 69 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 681.864881][ T5920] usb 5-1: config 253 interface 69 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 681.876664][ T5920] usb 5-1: config 253 interface 69 altsetting 2 endpoint 0xD has invalid wMaxPacketSize 0 [ 681.888082][ T5920] usb 5-1: config 253 interface 7 has no altsetting 0 [ 681.895011][ T5920] usb 5-1: config 253 interface 69 has no altsetting 0 [ 681.905297][ T5920] usb 5-1: New USB device found, idVendor=19d2, idProduct=0133, bcdDevice=39.7a [ 681.919717][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.920853][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1966'. [ 681.939960][ T5920] usb 5-1: Product: Р [ 681.946983][ T5920] usb 5-1: Manufacturer: ꔢ眫쐏࿿㥝밭剶쫵蜰僄Р寱둷⚃쒥㬻咭杝〘䄁皣Ⴔ돊莭ࣈ뢶川咅晓쨠쒮䵭浗描⏸눀밚ꇨ⁋㴗∓ܗ왗踻紝￈蘵 [ 681.975490][T13842] veth1_macvtap: left promiscuous mode [ 681.997145][ T5920] usb 5-1: SerialNumber: syz [ 682.119427][ T9] usb 6-1: reset high-speed USB device number 101 using dummy_hcd [ 682.246518][ T5920] option 5-1:253.7: GSM modem (1-port) converter detected [ 682.279390][ T9] usb 6-1: device descriptor read/64, error -71 [ 682.338483][ T5920] usb 5-1: USB disconnect, device number 76 [ 682.407797][ T5920] option 5-1:253.7: device disconnected [ 682.528047][ T9] usb 6-1: reset high-speed USB device number 101 using dummy_hcd [ 682.573027][ T9] usb 6-1: device descriptor read/8, error -71 [ 682.837396][ T9] usb 6-1: reset high-speed USB device number 101 using dummy_hcd [ 682.893088][ T9] usb 6-1: device descriptor read/8, error -71 [ 683.025383][ T5903] usb 6-1: USB disconnect, device number 101 [ 683.227452][ T5903] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 683.387325][ T5903] usb 6-1: device descriptor read/64, error -71 [ 683.657357][ T5903] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 683.681034][ T796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 683.698915][ T796] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 683.730921][ T796] usb 3-1: can't read configurations, error -71 [ 683.867471][ T5903] usb 6-1: device descriptor read/64, error -71 [ 683.998462][ T5903] usb usb6-port1: attempt power cycle [ 684.145100][T13868] tipc: Enabled bearer , priority 0 [ 684.155007][T13868] syzkaller0: entered promiscuous mode [ 684.162600][T13868] syzkaller0: entered allmulticast mode [ 684.273079][T13868] syzkaller0: mtu less than device minimum [ 684.308348][ T5903] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 684.316697][T13867] tipc: Resetting bearer [ 684.360764][T13867] tipc: Disabling bearer [ 684.447390][ T5903] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 684.486410][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 684.504660][ T5903] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 684.517382][ T5903] usb 6-1: config 0 has no interface number 0 [ 684.534384][ T5903] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 684.544283][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.556654][ T5903] usb 6-1: Product: syz [ 684.562822][ T5903] usb 6-1: Manufacturer: syz [ 684.571055][T13884] syzkaller0: entered promiscuous mode [ 684.576552][T13884] syzkaller0: entered allmulticast mode [ 684.587257][ T5903] usb 6-1: SerialNumber: syz [ 684.598228][T13884] TC_ACT_REPEAT abuse ? [ 684.604755][ T5903] usb 6-1: config 0 descriptor?? [ 684.628911][ T8770] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 684.810743][ T8770] usb 5-1: Using ep0 maxpacket: 16 [ 684.818208][ T796] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 684.821663][ T8770] usb 5-1: config index 0 descriptor too short (expected 67, got 36) [ 684.869580][ T8770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.883384][ T8770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.896360][ T8770] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 684.936122][ T8770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.956292][ T8770] usb 5-1: config 0 descriptor?? [ 684.967369][ T980] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 685.033100][ T796] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 685.071182][ T5903] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 685.089202][ T5903] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 685.089223][ T796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.089255][ T796] usb 3-1: config 0 has no interfaces? [ 685.089289][ T796] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 685.135080][ T980] usb 7-1: device descriptor read/64, error -71 [ 685.149859][T13899] random: crng reseeded on system resumption [ 685.161174][ T5903] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 685.176053][ T5903] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 685.234465][ T5903] usb 6-1: USB disconnect, device number 105 [ 685.261499][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.319603][ T796] usb 3-1: config 0 descriptor?? [ 685.407345][ T980] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 685.416100][ T5886] IPVS: starting estimator thread 0... [ 685.423316][ T8770] apple 0003:05AC:0247.0021: unknown main item tag 0x0 [ 685.437584][ T8770] apple 0003:05AC:0247.0021: unknown main item tag 0x0 [ 685.444954][ T8770] apple 0003:05AC:0247.0021: unknown main item tag 0x0 [ 685.454148][ T8770] apple 0003:05AC:0247.0021: unknown main item tag 0x0 [ 685.464290][ T8770] apple 0003:05AC:0247.0021: unknown main item tag 0x0 [ 685.481507][ T8770] apple 0003:05AC:0247.0021: unknown main item tag 0x0 [ 685.495499][ T8770] apple 0003:05AC:0247.0021: unknown main item tag 0x0 [ 685.516610][ T8770] apple 0003:05AC:0247.0021: unknown main item tag 0x0 [ 685.527304][T13901] IPVS: using max 58 ests per chain, 139200 per kthread [ 685.542877][ T8770] apple 0003:05AC:0247.0021: unknown main item tag 0x0 [ 685.567046][ T8770] apple 0003:05AC:0247.0021: unknown main item tag 0x0 [ 685.597163][ T8770] apple 0003:05AC:0247.0021: item fetching failed at offset 70/160 [ 685.597333][ T980] usb 7-1: device descriptor read/64, error -71 [ 685.648947][ T8770] apple 0003:05AC:0247.0021: parse failed [ 685.677152][ T8770] apple 0003:05AC:0247.0021: probe with driver apple failed with error -22 [ 685.729335][ T8770] usb 5-1: USB disconnect, device number 77 [ 685.761177][ T980] usb usb7-port1: attempt power cycle [ 685.840104][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.851922][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.057517][ T796] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 686.138043][ T980] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 686.157900][ T980] usb 7-1: device descriptor read/8, error -71 [ 686.231095][ T796] usb 6-1: Using ep0 maxpacket: 8 [ 686.238510][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 686.256913][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 686.282009][ T796] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 686.308610][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 686.348276][ T796] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 686.377099][ T796] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 686.407341][ T980] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 686.423747][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.442633][ T980] usb 7-1: device descriptor read/8, error -71 [ 686.461416][ T796] usb 6-1: config 0 descriptor?? [ 686.477005][T13903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 686.587668][ T980] usb usb7-port1: unable to enumerate USB device [ 686.790053][T13912] netlink: 'syz.0.1987': attribute type 11 has an invalid length. [ 686.831437][T13912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1987'. [ 687.199342][T13923] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1990'. [ 687.497473][ T980] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 687.673292][ T980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 687.700046][ T980] usb 5-1: not running at top speed; connect to a high speed hub [ 687.733042][ T980] usb 5-1: config 16 has an invalid interface number: 36 but max is 0 [ 687.744602][ T980] usb 5-1: config 16 has no interface number 0 [ 687.751543][ T980] usb 5-1: config 16 interface 36 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 687.752014][ T8770] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 687.766486][ T980] usb 5-1: config 16 interface 36 altsetting 1 has an invalid endpoint descriptor of length 5, skipping [ 687.790882][ T980] usb 5-1: config 16 interface 36 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 687.837159][ T24] usb 3-1: USB disconnect, device number 117 [ 687.865108][ T980] usb 5-1: config 16 interface 36 has no altsetting 0 [ 687.895465][ T980] usb 5-1: New USB device found, idVendor=0408, idProduct=ea04, bcdDevice=4a.9d [ 687.930759][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.947827][ T980] usb 5-1: Product: syz [ 687.953680][ T980] usb 5-1: Manufacturer: syz [ 687.965335][ T980] usb 5-1: SerialNumber: syz [ 687.991411][T13925] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 688.307505][ T8770] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 688.507386][ T8770] usb 7-1: Using ep0 maxpacket: 32 [ 688.524200][ T8770] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 688.549582][ T8770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.576557][ T5143] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 688.576613][ T8770] usb 7-1: Product: syz [ 688.576630][ T8770] usb 7-1: Manufacturer: syz [ 688.609414][ T980] hub 5-1:16.36: bad descriptor, ignoring hub [ 688.624304][ T980] hub 5-1:16.36: probe with driver hub failed with error -5 [ 688.638515][ T8770] usb 7-1: SerialNumber: syz [ 688.641557][ T980] option 5-1:16.36: GSM modem (1-port) converter detected [ 688.676081][ T980] usb 5-1: USB disconnect, device number 78 [ 688.693176][ T8770] usb 7-1: config 0 descriptor?? [ 688.707782][ T980] option 5-1:16.36: device disconnected [ 688.722428][ T8770] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 689.068383][ T980] usb 6-1: USB disconnect, device number 106 [ 689.556448][ T8770] gspca_ov534_9: reg_w failed -71 [ 689.589201][T13966] tipc: Enabling of bearer rejected, failed to enable media [ 689.867344][ T8770] gspca_ov534_9: Unknown sensor 0000 [ 689.867420][ T8770] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 689.919093][ T8770] usb 7-1: USB disconnect, device number 21 [ 690.209904][T13972] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2001'. [ 690.694798][ T5903] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 690.725230][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2007'. [ 690.867667][ T5903] usb 1-1: device descriptor read/64, error -71 [ 690.874355][T13989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2007'. [ 691.082561][T14007] ucma_write: process 201 (syz.6.2012) changed security contexts after opening file descriptor, this is not allowed. [ 691.117388][ T5903] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 691.247109][ T8770] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 691.259782][ T5903] usb 1-1: device descriptor read/64, error -71 [ 691.272654][T14008] bond5: option ad_user_port_key: invalid value (18974) [ 691.283382][T14008] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 691.297832][T14014] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2011'. [ 691.331437][T14008] bond5 (unregistering): Released all slaves [ 691.368223][ T5903] usb usb1-port1: attempt power cycle [ 691.400505][T14016] tipc: Enabled bearer , priority 0 [ 691.410338][ T8770] usb 3-1: Using ep0 maxpacket: 8 [ 691.421978][ T8770] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 691.443190][ T8770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.454536][T14016] syzkaller0: entered promiscuous mode [ 691.464102][T14016] syzkaller0: entered allmulticast mode [ 691.483443][ T8770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.516102][ T8770] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 691.545834][T14016] tipc: Resetting bearer [ 691.560905][ T8770] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 691.581358][ T8770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.602683][ T8770] usb 3-1: config 0 descriptor?? [ 691.662061][T14015] tipc: Resetting bearer [ 691.701744][T14015] tipc: Disabling bearer [ 691.727354][ T5903] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 691.758156][ T5903] usb 1-1: device descriptor read/8, error -71 [ 691.993401][ T30] audit: type=1326 audit(1775579057.110:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.6.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f399c819 code=0x7ffc0000 [ 692.023946][ T5903] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 692.047623][ T30] audit: type=1326 audit(1775579057.110:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.6.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f399c819 code=0x7ffc0000 [ 692.072152][ T30] audit: type=1326 audit(1775579057.110:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.6.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f399c819 code=0x7ffc0000 [ 692.072663][ T5903] usb 1-1: device descriptor read/8, error -71 [ 692.232047][ T30] audit: type=1326 audit(1775579057.130:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.6.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6f399c819 code=0x7ffc0000 [ 692.264908][ T30] audit: type=1326 audit(1775579057.130:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.6.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f399c819 code=0x7ffc0000 [ 692.265016][ T5903] usb usb1-port1: unable to enumerate USB device [ 692.288427][ T30] audit: type=1326 audit(1775579057.130:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.6.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f399c819 code=0x7ffc0000 [ 692.318400][ T8770] usbhid 3-1:0.0: can't add hid device: -71 [ 692.327869][ T8770] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 692.337897][ T980] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 692.384762][ T30] audit: type=1326 audit(1775579057.130:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.6.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f399c819 code=0x7ffc0000 [ 692.416260][ T8770] usb 3-1: USB disconnect, device number 118 [ 692.417173][ T30] audit: type=1326 audit(1775579057.130:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.6.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f399c819 code=0x7ffc0000 [ 692.450843][ T30] audit: type=1326 audit(1775579057.130:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.6.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6f399c819 code=0x7ffc0000 [ 692.529679][ T980] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 692.543431][ T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.561722][ T30] audit: type=1326 audit(1775579057.130:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14020 comm="syz.6.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6f399c819 code=0x7ffc0000 [ 692.594552][ T980] usb 5-1: config 0 has no interfaces? [ 692.597312][ T5886] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 692.614788][ T980] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 692.646802][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.679534][ T980] usb 5-1: config 0 descriptor?? [ 692.787337][ T5886] usb 7-1: Using ep0 maxpacket: 8 [ 692.794907][ T5886] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.805872][ T5886] usb 7-1: config 0 has no interfaces? [ 692.811467][ T5187] usb 6-1: new low-speed USB device number 107 using dummy_hcd [ 692.819617][ T5886] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 692.832953][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.843773][ T5886] usb 7-1: config 0 descriptor?? [ 693.330549][ T24] usb 7-1: USB disconnect, device number 22 [ 693.567360][ T980] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 693.738728][ T980] usb 3-1: Invalid ep0 maxpacket: 16 [ 693.867350][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 693.887552][ T980] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 694.044101][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.067369][ T980] usb 3-1: Invalid ep0 maxpacket: 16 [ 694.087276][ T24] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 694.100687][ T980] usb usb3-port1: attempt power cycle [ 694.162112][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.185224][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.224460][ T24] usb 7-1: Product: syz [ 694.239885][ T24] usb 7-1: Manufacturer: syz [ 694.257975][ T24] usb 7-1: SerialNumber: syz [ 694.314792][ T24] cdc_mbim 7-1:1.0: skipping garbage [ 694.467352][ T980] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 694.498941][ T980] usb 3-1: Invalid ep0 maxpacket: 16 [ 694.509952][T14042] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 694.638284][ T980] usb 3-1: new low-speed USB device number 122 using dummy_hcd [ 694.652252][T14049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2025'. [ 694.688293][ T980] usb 3-1: Invalid ep0 maxpacket: 16 [ 694.694293][ T980] usb usb3-port1: unable to enumerate USB device [ 695.126683][T14042] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 695.146291][ T24] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 695.164793][ T24] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 695.199170][T14061] bond1: option ad_user_port_key: invalid value (11549) [ 695.206417][T14061] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 695.207131][ T24] wwan wwan0: port wwan0mbim0 attached [ 695.226833][T14063] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2028'. [ 695.237871][T14061] bond1 (unregistering): Released all slaves [ 695.294446][ T24] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, d2:6b:0b:ec:bd:c7 [ 695.373371][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 695.380276][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 695.386780][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 695.393479][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 695.400452][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 695.407158][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 695.414087][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 695.420766][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 695.427386][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 695.434083][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 695.440584][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 695.447295][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 695.453905][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 695.460598][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 695.467261][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 695.473960][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 695.480335][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 695.487013][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 695.493487][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 695.500166][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 695.538202][ T24] usb 7-1: USB disconnect, device number 23 [ 695.545991][ T24] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 695.659114][ T5187] usb 6-1: unable to get BOS descriptor or descriptor too short [ 695.668724][ T24] wwan wwan0: port wwan0mbim0 disconnected [ 695.722821][ T5187] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 695.758445][ T5187] usb 6-1: can't read configurations, error -71 [ 695.791120][ T5886] usb 5-1: USB disconnect, device number 79 [ 696.004501][T14073] netlink: 'syz.4.2030': attribute type 12 has an invalid length. [ 696.021579][T14073] netlink: 'syz.4.2030': attribute type 12 has an invalid length. [ 696.407394][ T5187] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 696.591823][ T5187] usb 6-1: Using ep0 maxpacket: 32 [ 696.629648][ T5187] usb 6-1: config 1 has too many interfaces: 60, using maximum allowed: 32 [ 696.688589][ T5187] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 696.745945][ T5187] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 696.803334][T14093] tipc: Enabled bearer , priority 0 [ 696.819843][ T5187] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 60 [ 696.820054][T14093] syzkaller0: entered promiscuous mode [ 696.847760][T14093] syzkaller0: entered allmulticast mode [ 696.885019][ T5187] usb 6-1: Dual-Role OTG device on HNP port [ 696.911554][ T5187] usb 6-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 696.921722][T14092] tipc: Resetting bearer [ 696.962675][ T5187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.993276][ T5187] usb 6-1: Product: syz [ 697.000760][T14092] tipc: Disabling bearer [ 697.021144][ T5187] usb 6-1: Manufacturer: syz [ 697.046392][ T5187] usb 6-1: SerialNumber: syz [ 697.961663][T14114] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2038'. [ 698.338436][ T980] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 698.503931][ T980] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 698.532313][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.558768][ T980] usb 3-1: Product: syz [ 698.568516][ T980] usb 3-1: Manufacturer: syz [ 698.586037][ T980] usb 3-1: SerialNumber: syz [ 698.612544][ T980] usb 3-1: config 0 descriptor?? [ 698.721340][ T5886] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 698.821306][ T5187] usb 6-1: 0:1 : does not exist [ 698.834307][ T5187] usb 6-1: 0:2 : does not exist [ 698.890041][ T5886] usb 7-1: unable to get BOS descriptor or descriptor too short [ 698.907480][ T5187] usb 6-1: USB disconnect, device number 108 [ 698.915449][ T5886] usb 7-1: not running at top speed; connect to a high speed hub [ 698.938496][ T5886] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 698.964443][ T5886] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 698.990358][ T5886] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 699.016392][ T5886] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 699.046148][ T5886] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 699.061765][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.103531][ T5886] usb 7-1: Product: syz [ 699.115261][ T5886] usb 7-1: Manufacturer: syz [ 699.135131][ T5886] usb 7-1: SerialNumber: syz [ 699.168864][T14142] x_tables: duplicate underflow at hook 4 [ 699.285746][T14146] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2042'. [ 699.338141][ T980] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 699.350280][T14146] pim6reg: entered allmulticast mode [ 699.398670][ T5886] usb 7-1: 0:2 : does not exist [ 699.516299][ T5886] usb 7-1: USB disconnect, device number 24 [ 699.564867][ T6864] udevd[6864]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 699.585503][ T980] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 699.613150][ T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.661692][ T980] usb 5-1: config 0 has no interfaces? [ 699.677465][ T980] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 699.695048][T14150] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2043'. [ 699.704837][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.757083][T14149] bond1: option ad_user_port_key: invalid value (61350) [ 699.766841][ T980] usb 5-1: config 0 descriptor?? [ 699.794148][T14149] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 699.821274][T14149] bond1 (unregistering): Released all slaves [ 700.947166][ T5920] usb 3-1: USB disconnect, device number 123 [ 701.048541][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'. [ 701.597897][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 701.659707][T14192] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 701.919512][T11843] wlan0: Trigger new scan to find an IBSS to join [ 701.966832][ T5886] usb 5-1: USB disconnect, device number 80 [ 702.229147][T14203] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2058'. [ 702.287371][ T24] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 702.447394][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 702.469183][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 702.500693][T14214] netlink: 'syz.4.2062': attribute type 1 has an invalid length. [ 702.520123][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.555525][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.579432][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 702.629330][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 702.642042][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.658863][ T24] usb 1-1: config 0 descriptor?? [ 702.667020][T14214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 702.967412][ T5886] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 702.978913][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 703.100236][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0022/input/input48 [ 703.146373][ T5886] usb 7-1: Using ep0 maxpacket: 32 [ 703.188370][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 703.206349][ T5886] usb 7-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 703.237635][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.285775][ T5886] usb 7-1: config 0 descriptor?? [ 703.286547][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0022/input/input49 [ 703.340081][ T5886] usb 7-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 703.402559][ T24] kye 0003:0458:5013.0022: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 703.432987][ T5886] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 703.446003][ T24] usb 1-1: USB disconnect, device number 102 [ 703.479703][ T5886] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 703.519216][ T5886] usb 7-1: media controller created [ 703.548974][ T5187] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 703.602306][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 703.663818][T14221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.704034][T14221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.713486][T14231] fido_id[14231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 703.734327][T14221] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI [ 703.746244][T14221] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 703.754664][T14221] CPU: 1 UID: 0 PID: 14221 Comm: syz.6.2064 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.765683][T14221] Tainted: [L]=SOFTLOCKUP [ 703.770000][T14221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 703.780135][T14221] RIP: 0010:__mutex_lock+0x14b/0x1300 [ 703.785644][T14221] Code: 80 24 28 9a 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e4 0f 00 00 83 3d f3 fe 76 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 19 e9 7e f6 4d 39 64 24 60 0f 85 10 0f 00 [ 703.805338][T14221] RSP: 0018:ffffc9000667f420 EFLAGS: 00010202 [ 703.811407][T14221] RAX: 0000000000000019 RBX: 1ffff92000ccfe9c RCX: ffffffff9a282403 [ 703.819391][T14221] RDX: 0000000000000000 RSI: ffffffff8e16c434 RDI: 00000000000000c8 [ 703.827362][T14221] RBP: ffffc9000667f5d8 R08: ffffc9000667f547 R09: 0000000000000000 [ 703.835416][T14221] R10: ffffc9000667f520 R11: fffff52000ccfea9 R12: 0000000000000068 [ 703.843435][T14221] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 703.851409][T14221] FS: 00007fd6f48b26c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 703.860337][T14221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 703.866929][T14221] CR2: 0000001b2df07ff8 CR3: 000000004d38c000 CR4: 00000000003526f0 [ 703.874905][T14221] Call Trace: [ 703.878329][T14221] [ 703.881261][T14221] ? __mutex_lock+0x319/0x1300 [ 703.886048][T14221] ? __lock_acquire+0x6b5/0x2cf0 [ 703.890990][T14221] ? dvb_usbv2_generic_write+0x26/0x60 [ 703.896457][T14221] ? __mutex_trylock_common+0x158/0x260 [ 703.901997][T14221] ? mxl111sf_ctrl_msg+0xb0/0x2f0 [ 703.907043][T14221] ? __pfx___mutex_lock+0x10/0x10 [ 703.912162][T14221] ? __pfx___mutex_lock+0x10/0x10 [ 703.917187][T14221] ? __mutex_lock+0x319/0x1300 [ 703.922070][T14221] dvb_usbv2_generic_write+0x26/0x60 [ 703.927382][T14221] mxl111sf_ctrl_msg+0x160/0x2f0 [ 703.932327][T14221] mxl111sf_write_reg+0xa9/0x1b0 [ 703.937275][T14221] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 703.942823][T14221] ? __lock_acquire+0x6b5/0x2cf0 [ 703.947749][T14221] mxl111sf_i2c_xfer+0x496/0x5100 [ 703.952863][T14221] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 703.958343][T14221] ? is_bpf_text_address+0x26/0x2b0 [ 703.963612][T14221] ? kernel_text_address+0xa5/0xe0 [ 703.968712][T14221] ? __kernel_text_address+0xd/0x30 [ 703.973984][T14221] ? unwind_get_return_address+0x4d/0x90 [ 703.979698][T14221] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 703.985851][T14221] ? arch_stack_walk+0xfb/0x150 [ 703.990800][T14221] ? stack_trace_save+0xa9/0x100 [ 703.995744][T14221] ? __pfx_stack_trace_save+0x10/0x10 [ 704.001104][T14221] ? stack_trace_save+0xa9/0x100 [ 704.006035][T14221] ? stack_depot_save_flags+0x33/0x810 [ 704.011528][T14221] ? stack_depot_save_flags+0x33/0x810 [ 704.017176][T14221] ? kasan_save_track+0x4f/0x80 [ 704.022020][T14221] ? kasan_save_track+0x3e/0x80 [ 704.026852][T14221] ? __kasan_kmalloc+0x93/0xb0 [ 704.031599][T14221] ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 704.038265][T14221] ? memdup_user+0x2b/0xd0 [ 704.042696][T14221] ? look_up_lock_class+0x57/0x110 [ 704.047901][T14221] ? register_lock_class+0x31/0x2e0 [ 704.053379][T14221] ? __lock_acquire+0x6b5/0x2cf0 [ 704.058408][T14221] __i2c_transfer+0x79a/0x2020 [ 704.063260][T14221] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 704.069057][T14221] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 704.074854][T14221] ? i2c_transfer+0xc8/0x2d0 [ 704.079467][T14221] i2c_transfer+0x1cc/0x2d0 [ 704.083957][T14221] i2cdev_ioctl_rdwr+0x460/0x740 [ 704.088884][T14221] i2cdev_ioctl+0x6a5/0x880 [ 704.093402][T14221] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 704.098570][T14221] ? __fget_files+0x3a0/0x420 [ 704.103429][T14221] ? __fget_files+0x2a/0x420 [ 704.108113][T14221] ? bpf_lsm_file_ioctl+0x9/0x20 [ 704.113039][T14221] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 704.118054][T14221] __se_sys_ioctl+0xfc/0x170 [ 704.122633][T14221] do_syscall_64+0x14d/0xf80 [ 704.127209][T14221] ? trace_irq_disable+0x3b/0x150 [ 704.132225][T14221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.138364][T14221] ? clear_bhb_loop+0x40/0x90 [ 704.143046][T14221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.148934][T14221] RIP: 0033:0x7fd6f399c819 [ 704.153369][T14221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.173048][T14221] RSP: 002b:00007fd6f48b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.181486][T14221] RAX: ffffffffffffffda RBX: 00007fd6f3c15fa0 RCX: 00007fd6f399c819 [ 704.189465][T14221] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 000000000000000c [ 704.197419][T14221] RBP: 00007fd6f3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 704.205378][T14221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.213338][T14221] R13: 00007fd6f3c16038 R14: 00007fd6f3c15fa0 R15: 00007fd6f3d3fa48 [ 704.221308][T14221] [ 704.224410][T14221] Modules linked in: [ 704.229055][T14221] ---[ end trace 0000000000000000 ]--- [ 704.264346][ T5187] usb 3-1: Using ep0 maxpacket: 16 [ 704.283988][T14221] RIP: 0010:__mutex_lock+0x14b/0x1300 [ 704.289807][T14221] Code: 80 24 28 9a 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e4 0f 00 00 83 3d f3 fe 76 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 19 e9 7e f6 4d 39 64 24 60 0f 85 10 0f 00 [ 704.291359][ T5187] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 704.311148][T14221] RSP: 0018:ffffc9000667f420 EFLAGS: 00010202 [ 704.328232][T14221] RAX: 0000000000000019 RBX: 1ffff92000ccfe9c RCX: ffffffff9a282403 [ 704.337114][T14221] RDX: 0000000000000000 RSI: ffffffff8e16c434 RDI: 00000000000000c8 [ 704.343848][ T5886] set interface failed [ 704.345371][T14221] RBP: ffffc9000667f5d8 R08: ffffc9000667f547 R09: 0000000000000000 [ 704.393477][T14221] R10: ffffc9000667f520 R11: fffff52000ccfea9 R12: 0000000000000068 [ 704.427550][ T5187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 704.440557][T14221] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.448683][T14221] FS: 00007fd6f48b26c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 704.472457][T14221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 704.485743][T14221] CR2: 00007f3c3abe92f8 CR3: 000000004d38c000 CR4: 00000000003526f0 [ 704.494579][T14221] Kernel panic - not syncing: Fatal exception [ 704.501094][T14221] Kernel Offset: disabled [ 704.505506][T14221] Rebooting in 86400 seconds..