last executing test programs: 8m43.096438201s ago: executing program 1 (id=4516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@getneigh={0x14, 0x1e, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r2 = epoll_create(0x8) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x41, &(0x7f00000003c0)={0x41, 0x5, 0x2}) r5 = dup(r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x400000007fff, 0x3, 0x3e, 0x10000, 0x294, 0x40, 0x3, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1cc, 0xe2, 0x4a91c921, 0x4}], "", ['\x00']}, 0x178) close(r7) r8 = fanotify_init(0x200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r10, 0xeb7b0000) fanotify_mark(r8, 0x161, 0x40000867, r9, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) sendto$inet(r7, &(0x7f00000002c0)="aa9352062301031437ceac8d46038234155fba2846c44c13d15b2635516ad6bb708af8e993e894f6215de63d897e016547feb740ac4b0afa40e9cebc7ebb508a269b94e8eebe4ed4dd4099839eddf136d7f9f4abd4ac1839bdd0e516209ec463e3b64f", 0x63, 0xc080, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x345000) 8m41.82614576s ago: executing program 1 (id=4520): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0x42, 0x4, 0xb20, 0xffffffff, 0x0, 0x9e0, 0x0, 0xffffffff, 0xffffffff, 0xa88, 0xa88, 0xa88, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x878, 0x8d8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x3, 0x3}, {0x7, 0x2}, {0x9, 0x1}, {0xfffffffc}, {0xfffffff7, 0x2}, {0x8, 0x2}, {0xfffffff0, 0x3}, {0xfffffffd}, {0x8000, 0x2}, {}, {0x8, 0x2}], [{0x43ee, 0x1ff}, {0x4, 0x6}, {0x3, 0x9}, {0x8, 0x2}, {0x4}, {0x4, 0x90}, {0xf7d, 0x2}, {0x7, 0x341}, {0x2780, 0x7fffffff}, {0xfffffc00, 0x3}, {0x401, 0x3b1}], 0x0, 0xb}, {[{0x0, 0x2}, {0x5, 0x2}, {0x6, 0x2}, {0x7fff, 0x1}, {0x7, 0x2}, {0x80000000, 0x1}, {0x9, 0x3}, {0x1, 0x1}, {0x1, 0x3}, {0x4e, 0x3}, {0x80000000}], [{0x3, 0x5}, {0x5, 0xfffffffa}, {0x1000, 0x400}, {0x71a, 0x1}, {0x0, 0xfffffff9}, {0x3, 0x6}, {0xfb99}, {0x7fff, 0x3f8000}, {0x26, 0x80000000}, {0xd, 0x1da}, {0x8, 0x6}], 0xa, 0xa}, {[{0x7, 0x1}, {0x7, 0x1}, {0xfffffff8, 0x1}, {0x546, 0x3}, {0x8, 0x1}, {0x0, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x7f, 0x2}, {0x0, 0x2}, {0xf6, 0x2}], [{0xc0000000, 0xffffffff}, {0x0, 0x3}, {0x9, 0x309b68d6}, {0x2, 0xb0}, {0x0, 0x5ac}, {0x5, 0x8000}, {0x7ff, 0x7ff}, {0x2, 0x7}, {0x9, 0x81}, {0x41, 0x1}, {0xfffffffb, 0x7ff}], 0x0, 0x4}, {[{0x2, 0x1}, {0x6, 0x2}, {0x15}, {0x40}, {0x5, 0x1}, {0xf, 0x2}, {0x1, 0x3}, {0x3, 0x1}, {0xffff8000, 0x1}, {0x0, 0x2}, {0x81, 0x2}], [{0xfffff000, 0x1c1}, {0x7f1, 0xdfd9}, {0x8001, 0x9}, {0x4, 0xcde6}, {0x8f77, 0x1ff}, {0xffffff80, 0x1}, {0x9, 0x6}, {0x7fffffff, 0xe0038ff}, {0x3, 0x7}, {0xd9, 0x9}, {0x1, 0x400}], 0x4, 0x6}, {[{0x1, 0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {0x2fd, 0x1}, {0x8a5, 0x1}, {0x9}, {0xd}, {0x6, 0x3}, {0x2, 0x2}, {0x6, 0x2}], [{0x2, 0x4}, {0xc, 0x2}, {0x6, 0x1000}, {0xda0a, 0xf855}, {0x0, 0xfff}, {0x2, 0x9}, {0x68, 0x100}, {0x3, 0x2}, {0x4, 0x3ff}, {0xee2}, {0x9, 0x9}], 0x5, 0x9}, {[{0x2, 0x3}, {0x8, 0x1}, {0x95872047, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x40}, {0x6, 0x3}, {0x7}, {0x3, 0x1}, {0x17, 0x1}], [{0x32a6, 0x6}, {0x7}, {0x7, 0x56bde36a}, {0x15, 0x401}, {0x9, 0x200}, {0x9, 0x1000}, {0x1, 0x401}, {0x7}, {0x7, 0x2}, {0xb, 0x7d}, {0x41, 0x6}], 0x5, 0x2}, {[{0xfffff45f}, {0x2}, {0x800, 0x1}, {0x7fff}, {0x7fffffff}, {0x81, 0x2}, {0x5, 0x3}, {0xff}, {0x7}, {0x3ff, 0x3}, {0x100}], [{0x8a50, 0x3}, {0x1, 0x6d}, {0x6, 0x7fff}, {0x1, 0x3}, {0x6, 0xfff}, {0x4000000, 0x7}, {0x400}, {0x1}, {0xb65, 0x9}, {0x5f8, 0x5}, {0x1, 0xd4}], 0x2, 0x6}, {[{0x101, 0x2}, {0x9}, {0x4, 0x2}, {0x8, 0x2}, {0x80000000}, {0x4}, {0x6, 0x2}, {0x6}, {0x6, 0x3}, {0x767, 0x3}, {0x3, 0x3}], [{0xffff7ba7, 0x2}, {0x9, 0x8}, {0x4, 0x9}, {0x9, 0x101}, {0x69, 0x1}, {0x1, 0x5}, {0x9, 0x3}, {0x5, 0x8}, {0x3, 0xb29d}, {0x40, 0x2}, {0x4, 0x1}], 0x5, 0xa}, {[{0x8, 0x1}, {0x4, 0x3}, {0xffffffff, 0x2}, {0x2, 0x3}, {0x9}, {0x7, 0x3}, {0x6, 0x1}, {0x6}, {0x3, 0x3}, {0x3, 0x1}, {0x9, 0x3}], [{0x8001, 0x1}, {0xfffffff8, 0x7fffffff}, {0x4, 0x1000}, {0x0, 0xeb}, {0x3, 0x6}, {}, {0x200, 0x7ff}, {0x112, 0xd}, {0x81, 0x3}, {0x8, 0x53c}, {0x8, 0x7}], 0x9, 0xa}, {[{0x6, 0x1}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x2}, {0x200}, {0x7, 0x2}, {0x4, 0x3}, {0x6, 0x2}, {0x9}, {0x3c8, 0x3}, {0x2a, 0x1}], [{0x7}, {0x0, 0x1ff}, {0x8000, 0xec1}, {0x9, 0x5d5}, {0x1}, {0x9183, 0x2}, {0x8, 0x9bc}, {0x12d, 0x7}, {0x97, 0x7}, {0xffffffff, 0x7}, {0x1, 0xc934}], 0x8, 0x7}, {[{0xa22, 0x1}, {0x6da, 0x1}, {0xb2fe}, {0x9, 0x2}, {0x5, 0x2}, {0x7, 0x3}, {0x400}, {}, {0xff0, 0x3}, {0x80000001, 0x1}, {0xffffffff, 0x2}], [{0x20, 0x101}, {0x4, 0xf}, {0x81, 0x9}, {0x10000, 0x5}, {0x9, 0x2}, {0x9, 0x122}, {0x9, 0x1}, {0xb0ab, 0x8}, {0x438, 0x1f6}, {0x5, 0x1e2}, {0x2, 0xffffffff}], 0x0, 0x5}], 0x4, 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x5, 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x6, 0x6, 0x0, 0x6, 0x4], 0x6, 0x1}, {0x0, [0x8, 0xa, 0x0, 0x6, 0x7, 0x5], 0x1}}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x6, 0x1}, 0x3, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb80) 8m41.643241548s ago: executing program 1 (id=4521): getgid() sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_newrule={0x5c, 0x20, 0x100, 0x70bd2c, 0x25dfdbff, {0xa, 0x20, 0x180, 0x7f, 0x48, 0x0, 0x0, 0x0, 0x10002}, [@FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e21}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004801}, 0x24000000) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x91, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x7d, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5eb55c033fbf5a6b311de39eb228702b8bf55388a273db8f23105e37c7125"}}}}, 0x9f) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x2402, 0xc, 0x47425247, 0x7, 0x9, 0x9, 0xa, 0x3, 0x1, 0x8}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x2402, 0xc, 0x47425247, 0x7, 0x9, 0x9, 0xa, 0x3, 0x1, 0x8}}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x700, 0x1, 0x3dfd578f, 0x6f, {{0x15, 0x4, 0x3, 0x25, 0x54, 0x67, 0x0, 0x4, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@lsrr={0x83, 0x7, 0x8c, [@empty]}, @lsrr={0x83, 0x1b, 0x7c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, @remote, @multicast1, @broadcast, @multicast2]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x16, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @end, @rr={0x7, 0xb, 0x54, [@multicast2, @private=0xa010102]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4080d000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@ipv6_delroute={0xd4, 0x19, 0x1, 0x70bd28, 0x25dfdbff, {0xa, 0x14, 0x80, 0x9, 0xfc, 0x3, 0xc8, 0x7, 0x2400}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x6, 0x2, '#\x00'}}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x57, r4}}, @RTA_METRICS={0x7f, 0x8, 0x0, 0x1, "36b2d5f7879b44e5e786e13086fc43801ce7b6f00efc05765a0bbd9102de4be1805cce7ead73f228bf6d3ca32ad07d87d7b165af82282e9c16b7b67de019a0573bd0115096c10deee38ec1b6f16a57ed8ecb9c5c557de4a352f8a49c5a02be126b787317d8ec5f8b31cbad0bb35238f3433065b029f21dfdad6a85"}, @RTA_PRIORITY={0x8, 0x6, 0xff}, @RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0xd4}}, 0x24000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) (async) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 8m40.965708646s ago: executing program 1 (id=4525): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') (async) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000&s0000004000n!user_id=', @ANYRES64=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x7, r3, r4, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1}, './file0/../file0/../file0/../file0\x00'}) (async) syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000340)='./file0/../file0/../file0/../file0/../file0\x00', 0x800000, &(0x7f0000000bc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',allow_other,smackfsroot=,appraise_type=imasig,dont_hash,fsmagic=0x0000000000000010,smackfshat=syz_tun\x00,measure,defcontext=system_u,uid>', @ANYRESDEC=r3, @ANYBLOB="2c7b756f6aed8e1a4a653d002c7375626a991b5934fd88c3ebea871954dc68f49be3653d7b282c00ab01b53c941b0166ae68bee23813d61aa65e3d840f949da8419ddaea9ce93aa14613668e83ca7a745f723db6a4e4692ec76e4f2d21faefdcf480dee0241fdf138686f5f6d8d7709e2a98234bc50c75430ab4f21a21f0d12505bace9b176fd3c1982a568f22e6a8e6075e7f8c11589aa38d457b17375dda75115b496eb8476a5cacd8230d6ded775f546829e363c95dd1165a3efcb349c2b41e6042cde9759c3ba7d20a05d40057affb5d4cffa513111279cd2f20d5befe3394bddeefc2e6a51cbb7e9b396dba"], 0x1, 0x0, &(0x7f0000000ac0)="11511d5c35bd18dc504efe18bbdd4111ce7cd3c98da9273f5d0589eacae4b2bc7e9ce72de034d85eac5030371720b736dfaa90c199ff6d87c6ef0ea08b26346c9359d58fe863e6441aa27d4dfd5f51bf4965ebd5424b3be19dcaa0d9c33225ae88e1b5674596a1544af05daf2c8ed68dc3f8fe9a38dae0ece0d5ca4be7ec59032c93c7d538745221e58300256fea11068fcacaa58517b388c2c6234ed932b1597b2265db37985dfe61beed718698908b524ceceb532cb502c86964aa5f15d49cb4bbf430ca46827affc9ce14a7bc0126ad2b5e3ac367d20e5e96") r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r5, 0x0, 0x0, 0x40, &(0x7f00000052c0)={0x77359400}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r7}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40, 0x4, 0x6}, 0x7}}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd700000000000120000000800060000000000180001801400020076657468305f746f5f626f6ef0156650"], 0x34}}, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0x0, 0x1, 0xb87, 0x1, 0x882}, 0x9, 0x101}) 8m40.531516205s ago: executing program 1 (id=4527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044001100090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xf0}}, 0x0) 8m40.431165917s ago: executing program 1 (id=4528): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a502980bd709", 0x13}, {&(0x7f00000005c0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af61311", 0x1a}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000019880)=[{{0x0, 0x0, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1, 0x0, 0x8602}}], 0x1, 0x2604082c) 8m38.991559178s ago: executing program 32 (id=4528): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a502980bd709", 0x13}, {&(0x7f00000005c0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af61311", 0x1a}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000019880)=[{{0x0, 0x0, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1, 0x0, 0x8602}}], 0x1, 0x2604082c) 3m58.212702554s ago: executing program 4 (id=5531): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x590}}], 0x1, 0x8008801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) (fail_nth: 4) 3m57.699721316s ago: executing program 4 (id=5534): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd119, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x20, 0xc}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}}, 0x3000000) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r1, &(0x7f00000002c0)="b401fcc8cd1bb8b66f2e1c301f4c43f5996bbd0f", 0x14, 0xb00, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000100001001000"/20, @ANYRES32=r5, @ANYBLOB="0100020000000000080004000a0000001c001a8018000a80140007"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000900)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) setsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x5, 0x29, {{0x8, 0x4, 0x0, 0x7, 0x20, 0x67, 0x0, 0x2, 0x50, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, {[@rr={0x7, 0xb, 0xe9, [@multicast2, @remote]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x7, 0x6, {{0x49, 0x4, 0x3, 0x2, 0x124, 0x66, 0x0, 0xa, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x23, 0x66, [@broadcast, @empty, @loopback, @multicast1, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp={0x44, 0x24, 0xb1, 0x0, 0x4, [0x4, 0xb55, 0x9, 0x5, 0x3, 0x2, 0x13, 0x5]}, @cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0x12, "6c0b9cdf42a90e2b9f8912f2d85854ea"}, {0x2, 0x4, '8;'}]}, @timestamp={0x44, 0x8, 0x88, 0x0, 0x4, [0x8]}, @rr={0x7, 0x1f, 0x8a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2]}, @timestamp_addr={0x44, 0x34, 0xef, 0x1, 0x1, [{@loopback, 0x3}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x10000}, {@local, 0x8}, {@private=0xa010100, 0x800}, {@multicast1, 0x3}]}, @generic={0x44, 0x10, "835fb9da543f4d5ac6b4397e49b4"}, @timestamp_prespec={0x44, 0x2c, 0x94, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x401}, {@rand_addr=0x64010100, 0xfffffff9}, {@local, 0x4}, {@loopback, 0xffffffff}, {@multicast1, 0x101}]}, @ssrr={0x89, 0x13, 0x7b, [@dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x110, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x110}}, 0x4005) 3m57.107429613s ago: executing program 4 (id=5538): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xfffffff8, 0x9, 0x0, 0xfffffe0000000002, 0xfa13, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xfffffff8, 0x9, 0x0, 0xfffffe0000000002, 0xfa13, 0xffffffff}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0403d11, 0x0) (async) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0403d11, 0x0) r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, 'M2N#', {0x3, 0x106, 0x0, 0x0, 0xf, 0x0, 0xe}}) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) socket$inet(0xa, 0x801, 0x84) (async) r5 = socket$inet(0xa, 0x801, 0x84) accept4(r5, 0x0, 0x0, 0x0) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x4c820, 0x40}}, 0x20}, 0x1, 0x0, 0x0, 0x34041043}, 0x2405c0d4) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100125bc8620e80401000000010203010902240001014000140904e9fa02f7efb405090401dbff030340020905090208001140086e555b2a376798976f46c31a5c5094c61e26342fe6ecc6b0f7348e8c2f6e264736734e2b677de92c7e0f65361a416f37ad5c"], 0x0) 3m55.930804418s ago: executing program 4 (id=5540): open(&(0x7f00000001c0)='./file0\x00', 0x16927e, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902"], 0x0) socket$kcm(0x10, 0x2, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000012180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 3m52.779242814s ago: executing program 4 (id=5556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000200)={0x80, 0xfdfd}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0xfffffffe, 0x210000, 0x1, 0x10000a, 0x0, 0x1}, 0x1c) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000006fc0)=@req3={0x6, 0x101, 0x2a55, 0x8, 0x7, 0x9, 0xfffffff9}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000000)={0x32}, 0x8) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) pread64(r4, &(0x7f0000000500)=""/4096, 0x1000, 0x0) 3m52.255331133s ago: executing program 4 (id=5557): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000040)) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x50007a2) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800c041521c0000001400"/22, @ANYRES64=r2], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4004840) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3m37.205163379s ago: executing program 33 (id=5557): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000040)) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x50007a2) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800c041521c0000001400"/22, @ANYRES64=r2], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4004840) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13.736308236s ago: executing program 2 (id=6182): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x13, r0, 0xb18df000) fanotify_init(0x200, 0x40000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x260, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x4d, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x100) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f00000001c0)={0x7fffffffffffffff, 0xc, 0xffffffff, 0x5}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x13d040, 0x62) r8 = fsopen(&(0x7f0000000400)='f2fs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x8, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES16=r1], 0xfc}, 0x1, 0x0, 0x0, 0x24048090}, 0x8004) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) 12.212304859s ago: executing program 2 (id=6185): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) 12.079496551s ago: executing program 2 (id=6187): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x802, 0x20) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$kcm(0xa, 0x2, 0x3a) add_key(0x0, 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffd) flistxattr(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'lc\x00', 0xa, 0x0, 0x14}, 0x2c) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r5, 0xffffffffffffffff, 0xff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.977158625s ago: executing program 6 (id=6192): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffffa}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {0x0, 0x200000}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00 \x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 10.509116286s ago: executing program 5 (id=6193): r0 = socket(0x10, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00'/12, @ANYBLOB='V'], 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) poll(0x0, 0x0, 0x2) (async) poll(0x0, 0x0, 0x2) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x20, 0xe, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x10, 0x8, 0x18, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) 10.435275405s ago: executing program 3 (id=6194): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f00000001c0)={0x0, 0x0, 0x7fff, 0xb}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2002004}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="d00300000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000006001000000000000000400000009516af0f0000004d0242e22ae8c3177576c724", @ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="0000000004000000000000000000000000000000000000000000000004000000000000002e2e5e270000000004000000000000000300000000000000"], 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x3, 0xec5, 0x1}}]}]}]}, 0x54}}, 0x0) 9.914141175s ago: executing program 6 (id=6195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f0000000000)={0xa, 0x2, 0x396, @empty, 0xfffffffe}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42800) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/125, 0x7d}], 0x1, 0x0, 0xffffffff) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x1, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)) 9.648616007s ago: executing program 3 (id=6196): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) (async) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002000010000000000000000000200000000000001000000000800170065204e22080018"], 0x2c}, 0x1, 0x0, 0x0, 0x404c011}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x101, 0x0) (async) gettid() (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x2, 0x3e, 0xffffffec, 0x294, 0x40, 0x0, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe2, 0x1, 0x3}]}, 0x78) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000280)={0x223, @tick=0x81f, 0x0, {0x0, 0xfc}, 0xff, 0x2}) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f00000004c0)=""/193, 0xc1}], 0x2}, 0x9}], 0x1, 0x40000003, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) (async) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r6 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r8, 0x17) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xca) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f0000000080)=0x401, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e24, 0x23aa, @remote, 0x6}, 0x1c) 7.735407598s ago: executing program 3 (id=6197): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x97ff]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x6c}}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0x80}}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0x2}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private2={0xfc, 0x2, '\x00', 0xfe}}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0x0, 0xffffffff]}]}}]}, 0x5c}}, 0x400c084) 7.284033118s ago: executing program 2 (id=6198): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000004c0)={0xfffffffa, 0x1, 0x5e22, 0xfffffff7, 0x1, "10071feb91168f87c67d9297cd030c3d86fca8"}) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa7, 0x6c, 0xf8, 0x20, 0x6d0, 0x622, 0x70f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb7, 0x0, 0x2, 0xe2, 0x66, 0xf2, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x4, 0xdc, {0xdc, 0xe, "730ac94454d3bbe7f8cfd83977a3bf969199a7d88d2e29077cc0f8db7d1328e2cd3117c150765fe77377f8db33f8302a84fff8a39e21d6de0332ead653504e20f1373123c262aff3e2545241542ea479d2e1bddf5dfae466e6523a15802072deb70be86b6ec7f1c28b060d08ff69a8e0774f623a06c7ef2cfb79b1d7d97fb6565a4dc08e902d5ec41d3ed64175baf6829aa0ee1e3fb269e6aab55ac7c7106ba9989a59cd3ceefeb7c4e94904f89cc09f31938d0056899a66ae5b7a5e395d1fc8f2b85ef8e060883290a6250bd010d85180871de399f117bcc792"}}, &(0x7f0000000000)={0x0, 0x3, 0x75, @string={0x75, 0x3, "706dfb4d6f668633bf7c16e07b17904a8c35c6d6750d07ee6a9f57208d95489573154d396ed62999a97f5c325e02ef50389b69415b4fee566a186bd9c2fa0111e5e9e4a1e3994c5e71f9446623d23ac707a71d83814e0e4d7ec6b780b53f6c34c92bd29ec2d4c2f4aecf81c36bb33818bc3c11"}}}, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x0, 0x1, 0x41, "752596bca55c03436bb4a3642cd3ed642e8a6e8d9fbfadb21b2f952fc770d4713c54ceb95511df8b6fec7a47cf7fe3a9b32c3fe38afd40fbdfcf6ac53a68a101e0"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4a}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000000300)={0x20, 0x81, 0x3, "408e34"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "cb6fff"}, &(0x7f0000000380)={0x20, 0x83, 0x3, "4de26a"}, &(0x7f00000003c0)={0x20, 0x84, 0x1, '@'}, &(0x7f0000000400)={0x20, 0x85, 0x3, "e1702f"}}) 6.875047803s ago: executing program 5 (id=6200): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) unshare(0x2040400) fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000540)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000040)={0x8000000, 0x2, 0xffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x3, 0x9fd, 0x84, 0x91}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r7, 0x0, 0x0, 0x4}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@binder={0x73622a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x4, 0x1, 0x1}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}, @release], 0x0, 0x0, &(0x7f0000000300)}) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000380)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xcd, 0x2, 0xa, 0x9, 0x2, 0x3e, 0x7f, 0x121, 0x40, 0x2d4, 0x4, 0x4b, 0x38, 0x4, 0x8, 0x5, 0x9f58}, [{0x3, 0x5, 0xc, 0x7, 0xffff, 0x80000000, 0x32, 0x80}, {0x6474e551, 0xf162, 0x5b14bca5, 0x10001, 0x4, 0x2, 0x378, 0x100000001}, {0x60000000, 0x965b, 0x101, 0x2, 0x9, 0x5, 0x0, 0x5}, {0x4, 0x7f, 0x8, 0xffffffffffffffff, 0x4, 0x7fff, 0x6, 0x10000}], "0b35f99d41797d679a32216d9011cc0919bfd340f27b2888b2c5b0041fcea7d0e4d36aae26d46081becc5c0ff5d3e00fa3ea4d042d4a837bca380434bf193a907739f7d3ee7df6bf9c4153b6b61e442fc1ab", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x672) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0) r9 = getpgrp(0x0) prlimit64(r9, 0x1c, 0x0, &(0x7f00000002c0)) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) 5.36063039s ago: executing program 6 (id=6202): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0x6109, 0x1, 0x0, 0x1a4}, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.055182516s ago: executing program 6 (id=6203): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@dev, @loopback}, &(0x7f0000000040)=0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0xd, 0x0, 0x0, @void, @value=0x0}, 0x20) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode']) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltclass={0x60, 0x29, 0x4, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x5}, {0x6, 0xa}, {0x8, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3, 0x96}}, @TCA_RATE={0x6, 0x5, {0x57, 0x7a}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x4800000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x10001}, @TCA_QFQ_LMAX={0x8, 0x2, 0x554}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x41) r7 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) fallocate(r7, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) r8 = fanotify_init(0x202, 0x0) fanotify_mark(r8, 0x1, 0x4800003e, r3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000340)=@sg0, 0x0, &(0x7f0000000380)='./file0\x00') sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000) 4.799447623s ago: executing program 0 (id=6204): syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000206d04ffff00000000000109022d00010000000009040000fc0300000009210110fd0800040009058103000001100009050203ff0304ff01412f5921"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x6, @empty, 0x8}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffbfffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000140)=0xc7, 0x12) writev(r3, &(0x7f0000004900), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x38, 0x4c00}, 0x0) connect$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e27, @local}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) syz_open_procfs(0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000002c00009f1d3e0fed829de100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) 4.508021268s ago: executing program 5 (id=6205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad8370", 0xd, 0xfffffffffffffffe) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r9}) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f0000000200)=@buf={0xc1, &(0x7f00000002c0)="6cee457878bff8c86c8c539c9cdfa25e5eed80a6674c5f320ec79911ccc1cca5a69bd094356d09b2d28fde71e239e91cb1f3ae16d3865ab40104f58e15bcf5ac558a9091cd4b0badb26a96c2f3abbb5881f01371441b9bc67d3ea329fc836219678bf4de8be0e30c8fcdd02e20021966b36c66d39feb1baf9964739c35613a2145d5b88336ec6d51066ffb830942bd3b562cb6aa972d11660a103d48e60b2f289a35682769e7cb9fbde17ed1be70bff5b34edf0fea0e6163fe693f0b8e53ae5678"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) syz_open_dev$vbi(&(0x7f0000002100), 0x2, 0x2) 4.387356983s ago: executing program 3 (id=6206): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r6, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) exit(0x5) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x59) r10 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r10, 0x80104592, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20004880) 4.01313689s ago: executing program 2 (id=6207): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpgrp(0x0) rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x18}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x30}}], 0x2, 0x4804) 3.714631631s ago: executing program 2 (id=6208): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x802, 0x20) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$kcm(0xa, 0x2, 0x3a) add_key(0x0, 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffd) flistxattr(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'lc\x00', 0xa, 0x0, 0x14}, 0x2c) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r5, 0xffffffffffffffff, 0xff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.454115471s ago: executing program 6 (id=6209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3ff, @empty, 0xfffffff7}, 0x1c) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x200400d0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9e", @ANYRES16=r2, @ANYBLOB="10002cbd7000fcdbdf25040000001c000280080003000400000008000800080000000800070005000000080004000800000040000380060007004e20000008000100000000001400020064756d6d79300000000000000000000006000400010000000800030004000000060007004e21000014000280080007003d000000060002004e21000008000500b6090000"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xd9, 0xe5, 0xf7, 0x20, 0xbfd, 0x1c, 0x8ce8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7c, 0x0, 0x1, 0xe7, 0xd5, 0x37, 0x0, [], [{{0x9, 0x5, 0x1a, 0x8, 0x40, 0x0, 0x0, 0x10}}]}}]}}]}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x20, r6, 0xc4fc9e906872338b, 0x20, 0x200, {{0x15}, {@void, @val={0xc, 0x99, {0x40, 0x52}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 2.254760975s ago: executing program 3 (id=6210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3}, 0x48) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x6, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0x2, 0xd, 0x85}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000010080)=[@textreal={0x8, 0x0}], 0x1, 0x5a, 0x0, 0x0) 2.043192608s ago: executing program 5 (id=6211): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002bbd7000fedbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB="0a00e800ffffffffffffe100"], 0x28}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x4}) (async) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="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", 0x5c1}], 0x1}}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468", @ANYRES16=r0], 0x48}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468", @ANYRES16=r0], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}, {0x0, 0xfff1}}}, 0x24}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) dup(r4) (async) r9 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001f, 0x38011, r9, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001f, 0x38011, r9, 0x0) syz_io_uring_setup(0x2fad, &(0x7f0000001fc0)={0x0, 0x820e06d, 0x1000, 0x2, 0x112, 0x0, r9}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.751334207s ago: executing program 3 (id=6212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f0000000000)={0xa, 0x2, 0x396, @empty, 0xfffffffe}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42800) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/125, 0x7d}], 0x1, 0x0, 0xffffffff) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0xd5a5, 0x800, 0x1, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x6, 0x71, 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)) 1.654762298s ago: executing program 0 (id=6213): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0x6109, 0x1, 0x0, 0x1a4}, &(0x7f0000000100)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.513782569s ago: executing program 5 (id=6214): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x40002) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x34800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000001200)={0x400, 0xefa, 0x207d}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x1000f0000) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x2, 0x1, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000380)={0x0, 'bridge_slave_0\x00', {}, 0x1ff}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r8, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) prctl$PR_GET_NAME(0x10, 0xfffffffffffffffc) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) 1.299344941s ago: executing program 0 (id=6215): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x4000, 0x0, 0xc0}, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[], 0x210) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0x2a2) 1.17296212s ago: executing program 6 (id=6216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) munmap(&(0x7f0000f9b000/0xd000)=nil, 0xd000) r4 = eventfd2(0x8, 0x1) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1) r5 = syz_io_uring_setup(0x3c, &(0x7f0000001840)={0x0, 0xaddc, 0x10100, 0x3, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r5, 0xd81, 0x0, 0x0, 0x0, 0x0) r10 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000202505a8a4720b1c25030109021f000101ff8008090400fd01070101010905010220"], 0x0) syz_usb_control_io$printer(r10, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003620000000003"]}, 0x0) syz_usb_control_io(r10, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r11, &(0x7f0000006800)="10", 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r9) ioctl$KVM_RUN(r3, 0xae80, 0x0) 754.165627ms ago: executing program 0 (id=6217): socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) (async) socket(0x2, 0x80805, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x803, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xca000, 0x0) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x2, 0x10100, 0x7, 0x356}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) (async) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x9, 0x5}) io_uring_enter(r0, 0x11a8, 0x8e0c, 0x8, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) (async) r6 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r6, &(0x7f0000000100)={0x20}, 0xfdef) inotify_init() (async) inotify_init() 291.439714ms ago: executing program 0 (id=6218): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xff8d) 30.102942ms ago: executing program 0 (id=6219): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x72ea4d80, 0xfffffffffffffffc, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000c40)={0x20, r8, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) epoll_create(0x689) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') preadv(r10, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_netprio_ifpriomap(r11, &(0x7f0000000080), 0x2, 0x0) sendfile(r12, r12, 0x0, 0x200) 0s ago: executing program 5 (id=6220): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xf72}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xadc0}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_INTERVAL={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) userfaultfd(0x80001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r6, 0x0, r0}) kernel console output (not intermixed with test programs): vice speed not set [ 1593.197517][T26769] misc userio: Invalid payload size [ 1593.204718][T26769] misc userio: The device must be registered before sending interrupts [ 1593.696258][T26797] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1593.702829][T26797] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1593.773721][T26797] vhci_hcd vhci_hcd.0: Device attached [ 1593.837734][T26800] vhci_hcd: connection closed [ 1593.842108][ T36] vhci_hcd: stop threads [ 1593.874413][ T36] vhci_hcd: release socket [ 1593.890633][ T36] vhci_hcd: disconnect device [ 1593.953856][T19191] vhci_hcd: vhci_device speed not set [ 1594.614909][T26786] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5861'. [ 1594.846061][T15207] usb 6-1: USB disconnect, device number 78 [ 1595.093630][T26815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5868'. [ 1596.203366][T15207] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1596.373443][T15207] usb 3-1: Using ep0 maxpacket: 16 [ 1596.393279][T15207] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1596.405227][T15207] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1596.423394][T15207] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 48 [ 1596.455688][T15207] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1596.483365][T15207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.556798][T15207] usb 3-1: Product: syz [ 1596.561044][T15207] usb 3-1: Manufacturer: ࠓ [ 1596.566940][T15207] usb 3-1: SerialNumber: syz [ 1596.942284][T26827] tipc: Enabling of bearer rejected, already enabled [ 1597.165503][T15207] cdc_ncm 3-1:1.0: bind() failure [ 1597.189667][T15207] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1597.264052][T15207] cdc_ncm 3-1:1.1: bind() failure [ 1597.300669][T15207] usb 3-1: USB disconnect, device number 6 [ 1597.924990][T26837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1598.247474][T26842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5872'. [ 1598.419679][T26842] bond0: (slave bond_slave_1): Releasing backup interface [ 1598.427724][T26842] bond_slave_1 (unregistering): left promiscuous mode [ 1598.693415][T26844] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5875'. [ 1599.524610][T26853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5878'. [ 1599.583429][T15207] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1599.733381][T15207] usb 3-1: Using ep0 maxpacket: 16 [ 1599.740717][T15207] usb 3-1: config 0 has no interfaces? [ 1599.748124][T15207] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1599.791655][T15207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1599.901211][T15207] usb 3-1: SerialNumber: syz [ 1599.964460][T15207] usb 3-1: config 0 descriptor?? [ 1600.600245][T26851] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1600.619390][T26851] vlan0: entered promiscuous mode [ 1600.648814][T26851] bond0: entered promiscuous mode [ 1600.749249][T26851] bond_slave_0: entered promiscuous mode [ 1600.781336][T26851] bond_slave_1: entered promiscuous mode [ 1600.814756][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5883'. [ 1600.965615][T15207] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1601.179812][T15207] usb 6-1: config 0 has no interfaces? [ 1601.193740][T15207] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1601.203785][T15207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.232506][T15207] usb 6-1: Product: syz [ 1601.381404][T15207] usb 6-1: Manufacturer: syz [ 1601.426688][T26882] tipc: Enabling of bearer rejected, already enabled [ 1601.445895][T15207] usb 6-1: SerialNumber: syz [ 1601.480227][T15768] usb 3-1: USB disconnect, device number 7 [ 1601.491448][T15207] usb 6-1: config 0 descriptor?? [ 1601.558452][T26883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5885'. [ 1601.659106][T26883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1603.563592][T15207] usb 6-1: USB disconnect, device number 79 [ 1603.919147][T26900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5889'. [ 1603.962105][T23477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1604.026192][T23477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1604.027514][T26900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5889'. [ 1604.047527][T23477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1604.055699][T23477] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1604.063625][T23477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1604.163692][T15207] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1604.375369][T15207] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1604.540131][T26912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1604.559576][T15207] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1604.590033][T15207] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1604.611983][T15207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.651507][T26896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1604.688790][T15207] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1604.887882][T15207] usb 1-1: USB disconnect, device number 22 [ 1604.913687][ T5944] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1605.125716][ T5944] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1605.137724][ T5944] usb 6-1: config 3 has an invalid interface number: 19 but max is 0 [ 1605.153747][ T5944] usb 6-1: config 3 has an invalid interface number: 4 but max is 0 [ 1605.278696][ T5944] usb 6-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 1605.329824][ T5944] usb 6-1: config 3 has no interface number 0 [ 1605.337290][ T5944] usb 6-1: config 3 has no interface number 1 [ 1605.344042][ T5944] usb 6-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 1605.362728][T26925] tipc: Enabling of bearer rejected, already enabled [ 1605.409952][T24373] bond0: (slave netdevsim0): Releasing backup interface [ 1605.422017][ T5944] usb 6-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1605.441390][T24373] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1605.459924][ T5944] usb 6-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 1605.495843][ T5944] usb 6-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 1605.510575][ T5944] usb 6-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 1605.523906][ T5944] usb 6-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 1605.540001][ T5944] usb 6-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 1605.582430][ T5944] usb 6-1: config 3 interface 19 has no altsetting 0 [ 1605.684967][ T5944] usb 6-1: config 3 interface 4 has no altsetting 0 [ 1605.804471][ T5944] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 1605.878955][T26905] chnl_net:caif_netlink_parms(): no params data found [ 1605.909974][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.943393][ T5944] usb 6-1: Product: syz [ 1605.949246][ T5944] usb 6-1: Manufacturer: syz [ 1605.955343][ T5944] usb 6-1: SerialNumber: syz [ 1606.144169][T23477] Bluetooth: hci0: command tx timeout [ 1606.288334][ T5944] pl2303 6-1:3.19: required endpoints missing [ 1606.311811][ T5944] pl2303 6-1:3.4: required interrupt-in endpoint missing [ 1606.400154][ T5944] usb 6-1: USB disconnect, device number 80 [ 1606.723403][T15768] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1606.894497][T15768] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1606.912918][T15768] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1606.928709][T15768] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1606.962105][T15768] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1606.979097][T15768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.981456][T26948] FAULT_INJECTION: forcing a failure. [ 1606.981456][T26948] name failslab, interval 1, probability 0, space 0, times 0 [ 1607.039097][T26936] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1607.083512][T26948] CPU: 0 UID: 0 PID: 26948 Comm: syz.5.5900 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1607.083545][T26948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1607.083559][T26948] Call Trace: [ 1607.083568][T26948] [ 1607.083579][T26948] dump_stack_lvl+0x189/0x250 [ 1607.083619][T26948] ? __pfx____ratelimit+0x10/0x10 [ 1607.083653][T26948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1607.083678][T26948] ? __pfx__printk+0x10/0x10 [ 1607.083712][T26948] ? nf_hook+0x9d/0x380 [ 1607.083758][T26948] should_fail_ex+0x414/0x560 [ 1607.083795][T26948] should_failslab+0xa8/0x100 [ 1607.083825][T26948] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1607.083851][T26948] ? skb_clone+0x212/0x3a0 [ 1607.083886][T26948] skb_clone+0x212/0x3a0 [ 1607.083914][T26948] ? ip_mc_output+0x311/0x590 [ 1607.083947][T26948] ip_mc_output+0x334/0x590 [ 1607.083983][T26948] ip_send_skb+0x74/0x100 [ 1607.084006][T26948] udp_send_skb+0xaf1/0x14c0 [ 1607.084047][T26948] udp_sendmsg+0x195b/0x2300 [ 1607.084073][T26948] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1607.084113][T26948] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1607.084145][T26948] ? __pfx_udp_sendmsg+0x10/0x10 [ 1607.084174][T26948] ? do_wp_page+0x161d/0x5800 [ 1607.084229][T26948] ? sock_rps_record_flow+0x19/0x410 [ 1607.084254][T26948] ? inet_sendmsg+0x29c/0x370 [ 1607.084275][T26948] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1607.084299][T26948] __sock_sendmsg+0x19c/0x270 [ 1607.084324][T26948] ____sys_sendmsg+0x52d/0x830 [ 1607.084358][T26948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1607.084397][T26948] ? import_iovec+0x74/0xa0 [ 1607.084427][T26948] ___sys_sendmsg+0x21f/0x2a0 [ 1607.084457][T26948] ? __pfx____sys_sendmsg+0x10/0x10 [ 1607.084532][T26948] ? __might_fault+0xb0/0x130 [ 1607.084562][T26948] __sys_sendmmsg+0x227/0x430 [ 1607.084597][T26948] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1607.084623][T26948] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1607.084673][T26948] ? ksys_write+0x22a/0x250 [ 1607.084701][T26948] ? __pfx_ksys_write+0x10/0x10 [ 1607.084730][T26948] ? rcu_is_watching+0x15/0xb0 [ 1607.084763][T26948] __x64_sys_sendmmsg+0xa0/0xc0 [ 1607.084794][T26948] do_syscall_64+0xfa/0x3b0 [ 1607.084814][T26948] ? lockdep_hardirqs_on+0x9c/0x150 [ 1607.084846][T26948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.084868][T26948] ? clear_bhb_loop+0x60/0xb0 [ 1607.084893][T26948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.084914][T26948] RIP: 0033:0x7f6b4f98e929 [ 1607.084933][T26948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1607.084952][T26948] RSP: 002b:00007f6b5088d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1607.084976][T26948] RAX: ffffffffffffffda RBX: 00007f6b4fbb5fa0 RCX: 00007f6b4f98e929 [ 1607.084992][T26948] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000003 [ 1607.085006][T26948] RBP: 00007f6b5088d090 R08: 0000000000000000 R09: 0000000000000000 [ 1607.085020][T26948] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000002 [ 1607.085033][T26948] R13: 0000000000000000 R14: 00007f6b4fbb5fa0 R15: 00007f6b4fcdfa28 [ 1607.085065][T26948] [ 1607.127935][T26953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5899'. [ 1607.431463][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.438007][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.224469][T23477] Bluetooth: hci0: command tx timeout [ 1608.320914][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1608.320935][ T30] audit: type=1326 audit(1751669245.745:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26965 comm="syz.0.5901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa41538e929 code=0x0 [ 1608.444270][T15768] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1608.509552][T15768] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input92 [ 1608.627243][T15768] usb 4-1: USB disconnect, device number 52 [ 1608.633305][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1608.813650][T15207] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1608.989432][T15207] usb 1-1: Using ep0 maxpacket: 16 [ 1609.005306][T15207] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1609.017167][T15207] usb 1-1: config 0 has no interface number 0 [ 1609.028541][T15207] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1609.047451][T15207] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1609.127692][T15207] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1609.137584][T15207] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1609.148148][T15207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.158548][T15207] usb 1-1: Product: syz [ 1609.169623][T15207] usb 1-1: Manufacturer: syz [ 1609.179937][T15207] usb 1-1: SerialNumber: syz [ 1609.193122][T15207] usb 1-1: config 0 descriptor?? [ 1609.199595][T26968] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1609.217422][T26968] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1609.368130][T26983] FAULT_INJECTION: forcing a failure. [ 1609.368130][T26983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1609.381670][T26983] CPU: 1 UID: 0 PID: 26983 Comm: syz.5.5905 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1609.381697][T26983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1609.381710][T26983] Call Trace: [ 1609.381718][T26983] [ 1609.381728][T26983] dump_stack_lvl+0x189/0x250 [ 1609.381759][T26983] ? __pfx____ratelimit+0x10/0x10 [ 1609.381795][T26983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1609.381817][T26983] ? __pfx__printk+0x10/0x10 [ 1609.381838][T26983] ? __might_fault+0xb0/0x130 [ 1609.381865][T26983] should_fail_ex+0x414/0x560 [ 1609.381891][T26983] _copy_from_user+0x2d/0xb0 [ 1609.381911][T26983] ___sys_sendmsg+0x158/0x2a0 [ 1609.381933][T26983] ? __pfx____sys_sendmsg+0x10/0x10 [ 1609.381979][T26983] ? __fget_files+0x2a/0x420 [ 1609.381999][T26983] ? __fget_files+0x3a0/0x420 [ 1609.382027][T26983] __x64_sys_sendmsg+0x19b/0x260 [ 1609.382049][T26983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1609.382075][T26983] ? __pfx_ksys_write+0x10/0x10 [ 1609.382091][T26983] ? rcu_is_watching+0x15/0xb0 [ 1609.382114][T26983] ? do_syscall_64+0xbe/0x3b0 [ 1609.382132][T26983] do_syscall_64+0xfa/0x3b0 [ 1609.382145][T26983] ? lockdep_hardirqs_on+0x9c/0x150 [ 1609.382168][T26983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.382182][T26983] ? clear_bhb_loop+0x60/0xb0 [ 1609.382201][T26983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.382215][T26983] RIP: 0033:0x7f6b4f98e929 [ 1609.382229][T26983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1609.382244][T26983] RSP: 002b:00007f6b5088d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1609.382265][T26983] RAX: ffffffffffffffda RBX: 00007f6b4fbb5fa0 RCX: 00007f6b4f98e929 [ 1609.382277][T26983] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1609.382286][T26983] RBP: 00007f6b5088d090 R08: 0000000000000000 R09: 0000000000000000 [ 1609.382296][T26983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1609.382305][T26983] R13: 0000000000000000 R14: 00007f6b4fbb5fa0 R15: 00007f6b4fcdfa28 [ 1609.382327][T26983] [ 1609.621202][T26968] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1609.857705][T21070] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1609.865940][T26968] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1609.878245][T24373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1609.932545][T24373] bond_slave_0: left promiscuous mode [ 1609.947540][T24373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1609.967471][T24373] bond_slave_1: left promiscuous mode [ 1609.975302][T24373] bond0 (unregistering): Released all slaves [ 1610.102015][T21070] usb 4-1: Using ep0 maxpacket: 32 [ 1610.176334][T26989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1610.278174][T21070] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1610.305051][T23477] Bluetooth: hci0: command tx timeout [ 1610.362378][T21070] usb 4-1: config 0 has no interface number 0 [ 1610.430691][T21070] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1610.440661][T15207] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1610.522750][T21070] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1610.541733][T21070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.562553][T21070] usb 4-1: Product: syz [ 1610.577716][T21070] usb 4-1: Manufacturer: syz [ 1610.582451][T21070] usb 4-1: SerialNumber: syz [ 1610.598936][T24373] bond1 (unregistering): Released all slaves [ 1610.687305][T21070] usb 4-1: config 0 descriptor?? [ 1610.750641][T21070] smsc75xx v1.0.0 [ 1610.756761][T21070] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1610.829234][T21070] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1610.837944][T24373] bond2 (unregistering): Released all slaves [ 1611.413435][T24373] bond3 (unregistering): Released all slaves [ 1611.716894][T26993] ptrace attach of "./syz-executor exec"[21531] was attempted by "./syz-executor exec"[26993] [ 1611.832988][T24373] bond4 (unregistering): Released all slaves [ 1611.871120][T26905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.891094][T26905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.941027][T26905] bridge_slave_0: entered allmulticast mode [ 1611.971637][T26905] bridge_slave_0: entered promiscuous mode [ 1612.043625][T24373] tipc: Disabling bearer [ 1612.056235][T24373] tipc: Left network mode [ 1612.061044][T26905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.076819][T26905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.084782][T26905] bridge_slave_1: entered allmulticast mode [ 1612.106456][T24373] IPVS: stopping master sync thread 25711 ... [ 1612.118077][T26905] bridge_slave_1: entered promiscuous mode [ 1612.251255][T26905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.287909][T26905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.383706][T23477] Bluetooth: hci0: command tx timeout [ 1612.545887][T26905] team0: Port device team_slave_0 added [ 1612.729017][T26905] team0: Port device team_slave_1 added [ 1612.799074][T15207] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1612.811382][T15207] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1612.902454][T15207] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 1612.953417][T15768] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1612.992522][T26905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1613.002420][T15207] usb 1-1: USB disconnect, device number 23 [ 1613.031394][T26905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1613.097805][T19191] usb 4-1: USB disconnect, device number 53 [ 1613.171865][T26905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1613.266107][T24373] hsr_slave_0: left promiscuous mode [ 1613.299493][T24373] hsr_slave_1: left promiscuous mode [ 1613.367527][T24373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1613.478655][T24373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1613.726436][T24373] pim6reg (unregistering): left allmulticast mode [ 1614.350522][T27034] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1614.788049][T27040] binfmt_misc: register: failed to install interpreter file ./file0 [ 1615.044703][T15768] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 1615.207618][T15768] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1615.260772][T15768] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1615.421726][T15768] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1615.484788][T15768] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1615.495010][T15768] usb 6-1: SerialNumber: syz [ 1615.544437][T27046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1615.626678][T15768] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1615.656042][T15768] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1615.776803][T15768] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1615.785762][T15768] scsi host1: usb-storage 6-1:1.0 [ 1616.428949][T24373] team0 (unregistering): Port device team_slave_1 removed [ 1616.530804][T24373] team0 (unregistering): Port device team_slave_0 removed [ 1617.359845][T26905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.371431][T26905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1617.397509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1617.411146][T26905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.427219][T27011] kthread_run failed with err -4 [ 1617.623363][T26905] hsr_slave_0: entered promiscuous mode [ 1617.630990][T26905] hsr_slave_1: entered promiscuous mode [ 1617.651467][T27062] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1617.664385][T27062] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1617.911857][T27066] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1618.186433][T19191] usb 6-1: USB disconnect, device number 81 [ 1618.260857][T24373] IPVS: stop unused estimator thread 0... [ 1618.284153][T27079] loop2: detected capacity change from 0 to 7 [ 1618.338559][T27079] Dev loop2: unable to read RDB block 7 [ 1618.369404][T27079] loop2: unable to read partition table [ 1618.375501][T27079] loop2: partition table beyond EOD, truncated [ 1618.424425][T27079] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1619.763334][T15207] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1619.763343][ T5168] Bluetooth: hci5: command 0x0406 tx timeout [ 1620.236565][T15207] usb 7-1: config 0 has no interfaces? [ 1620.527692][T15207] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1620.543294][T15207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.551451][T15207] usb 7-1: Product: syz [ 1620.557830][T15207] usb 7-1: Manufacturer: syz [ 1620.562502][T15207] usb 7-1: SerialNumber: syz [ 1620.624345][T15207] usb 7-1: config 0 descriptor?? [ 1621.517178][T27120] FAULT_INJECTION: forcing a failure. [ 1621.517178][T27120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1621.566125][T27120] CPU: 1 UID: 0 PID: 27120 Comm: syz.0.5930 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1621.566158][T27120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1621.566170][T27120] Call Trace: [ 1621.566177][T27120] [ 1621.566184][T27120] dump_stack_lvl+0x189/0x250 [ 1621.566206][T27120] ? __pfx____ratelimit+0x10/0x10 [ 1621.566230][T27120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1621.566248][T27120] ? __pfx__printk+0x10/0x10 [ 1621.566269][T27120] ? __might_fault+0xb0/0x130 [ 1621.566296][T27120] should_fail_ex+0x414/0x560 [ 1621.566322][T27120] _copy_from_user+0x2d/0xb0 [ 1621.566342][T27120] ___sys_sendmsg+0x158/0x2a0 [ 1621.566365][T27120] ? __pfx____sys_sendmsg+0x10/0x10 [ 1621.566417][T27120] ? __might_fault+0xb0/0x130 [ 1621.566437][T27120] __sys_sendmmsg+0x227/0x430 [ 1621.566461][T27120] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1621.566479][T27120] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1621.566514][T27120] ? ksys_write+0x22a/0x250 [ 1621.566534][T27120] ? __pfx_ksys_write+0x10/0x10 [ 1621.566550][T27120] ? rcu_is_watching+0x15/0xb0 [ 1621.566573][T27120] __x64_sys_sendmmsg+0xa0/0xc0 [ 1621.566602][T27120] do_syscall_64+0xfa/0x3b0 [ 1621.566617][T27120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.566631][T27120] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1621.566646][T27120] ? clear_bhb_loop+0x60/0xb0 [ 1621.566663][T27120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.566677][T27120] RIP: 0033:0x7fa41538e929 [ 1621.566691][T27120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1621.566704][T27120] RSP: 002b:00007fa416231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1621.566720][T27120] RAX: ffffffffffffffda RBX: 00007fa4155b5fa0 RCX: 00007fa41538e929 [ 1621.566731][T27120] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000003 [ 1621.566740][T27120] RBP: 00007fa416231090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.566749][T27120] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000002 [ 1621.566759][T27120] R13: 0000000000000000 R14: 00007fa4155b5fa0 R15: 00007fa4156dfa28 [ 1621.566781][T27120] [ 1621.786493][ C1] vkms_vblank_simulate: vblank timer overrun [ 1622.000500][T15207] usb 7-1: USB disconnect, device number 9 [ 1622.154960][T19191] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1622.360633][T19191] usb 4-1: device descriptor read/64, error -71 [ 1622.518724][T27139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1622.823480][T19191] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1622.881928][T26905] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1623.013577][T19191] usb 4-1: device descriptor read/64, error -71 [ 1623.125364][T26905] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1623.125595][T19191] usb usb4-port1: attempt power cycle [ 1623.192899][T26905] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1623.417369][T26905] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1623.493796][T19191] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1623.541592][T19191] usb 4-1: device descriptor read/8, error -71 [ 1623.793600][T19191] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1623.854476][T19191] usb 4-1: device descriptor read/8, error -71 [ 1623.964004][T19191] usb usb4-port1: unable to enumerate USB device [ 1624.224814][T27161] loop2: detected capacity change from 0 to 7 [ 1624.248631][T26905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1624.261680][ T6207] Dev loop2: unable to read RDB block 7 [ 1624.275914][ T6207] loop2: unable to read partition table [ 1624.281880][ T6207] loop2: partition table beyond EOD, truncated [ 1624.391631][T27161] Dev loop2: unable to read RDB block 7 [ 1624.407642][T26905] 8021q: adding VLAN 0 to HW filter on device team0 [ 1624.423857][T27161] loop2: unable to read partition table [ 1624.430358][T27161] loop2: partition table beyond EOD, truncated [ 1624.492294][T27161] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1624.532251][T11721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.539551][T11721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1624.558607][T11721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.565928][T11721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1625.111717][T26905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1625.691087][T26905] veth0_vlan: entered promiscuous mode [ 1625.815097][T26905] veth1_vlan: entered promiscuous mode [ 1625.930206][T26905] veth0_macvtap: entered promiscuous mode [ 1625.964744][T26905] veth1_macvtap: entered promiscuous mode [ 1626.094201][T26905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1626.214760][T26905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1626.314512][T26905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.373462][T26905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.443375][T26905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.499591][T26905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.212278][T11717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.281906][T11717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.388087][T11721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.409119][T11721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.524687][T27207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5941'. [ 1627.770628][T27211] netlink: 'syz.0.5941': attribute type 5 has an invalid length. [ 1628.096756][T27218] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5887'. [ 1628.623723][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1628.794013][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1628.821619][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1628.964215][ T24] usb 7-1: config 0 has no interfaces? [ 1629.112612][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1629.152387][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.244381][ T24] usb 7-1: config 0 descriptor?? [ 1629.477600][ T5168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1629.488096][ T5168] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1629.497274][ T5168] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1629.513453][ T5168] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1629.521727][ T5168] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1629.693634][T27225] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5945'. [ 1630.013343][T15768] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1630.260511][T15768] usb 3-1: Using ep0 maxpacket: 32 [ 1630.274945][T15768] usb 3-1: config index 0 descriptor too short (expected 65316, got 36) [ 1630.339679][T27246] loop2: detected capacity change from 0 to 7 [ 1630.351908][T15768] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1630.404953][T27246] Dev loop2: unable to read RDB block 7 [ 1630.433778][T27246] loop2: unable to read partition table [ 1630.440804][T27246] loop2: partition table beyond EOD, truncated [ 1630.450646][T27246] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1630.470094][T15768] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.566502][T15768] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1630.636023][T15768] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1630.685949][T15768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.690919][T27238] chnl_net:caif_netlink_parms(): no params data found [ 1631.489208][T15768] usb 7-1: USB disconnect, device number 10 [ 1631.498993][T15207] usb 3-1: USB disconnect, device number 8 [ 1631.587141][T23477] Bluetooth: hci1: command tx timeout [ 1631.832574][T27238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.845271][T27238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.852743][T27238] bridge_slave_0: entered allmulticast mode [ 1631.861670][T27238] bridge_slave_0: entered promiscuous mode [ 1631.947531][T27238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.985477][T27238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.992809][T27238] bridge_slave_1: entered allmulticast mode [ 1632.044472][T27238] bridge_slave_1: entered promiscuous mode [ 1632.362483][T27288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5954'. [ 1632.405074][T21068] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1632.459931][T27238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1632.571110][T21068] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.595751][T21068] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1632.622410][T21068] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1632.679236][T21068] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1632.713333][T21068] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1632.735986][T27238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.745896][T21068] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1632.763560][T21068] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.797317][T21068] usb 7-1: Product: syz [ 1632.801723][T21068] usb 7-1: Manufacturer: syz [ 1632.810192][T21068] usb 7-1: SerialNumber: syz [ 1633.080294][T27286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1633.101483][T27286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1633.165766][T21068] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1633.203414][T21068] usb 7-1: MIDIStreaming interface descriptor not found [ 1633.229985][T27238] team0: Port device team_slave_0 added [ 1633.306479][T27238] team0: Port device team_slave_1 added [ 1633.325908][T21068] usb 7-1: USB disconnect, device number 11 [ 1633.663359][T23477] Bluetooth: hci1: command tx timeout [ 1633.693943][T27238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1633.744220][T27238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1633.850692][T27238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1633.941313][T27238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.965425][T27238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1634.028827][T27238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1634.415505][T27330] Cannot find del_set index 0 as target [ 1634.505015][T27238] hsr_slave_0: entered promiscuous mode [ 1634.524491][T27238] hsr_slave_1: entered promiscuous mode [ 1634.567461][T27238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1634.614857][T27238] Cannot create hsr debugfs directory [ 1635.010095][T15768] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1635.073755][T19191] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1635.093524][T27238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.109840][T27238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1635.173439][T15768] usb 6-1: Using ep0 maxpacket: 8 [ 1635.184919][T15768] usb 6-1: config 5 has an invalid interface number: 162 but max is 0 [ 1635.215611][T15768] usb 6-1: config 5 has no interface number 0 [ 1635.221762][T15768] usb 6-1: config 5 interface 162 has no altsetting 0 [ 1635.237220][T19191] usb 7-1: Using ep0 maxpacket: 32 [ 1635.250237][T19191] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1635.266497][T15768] usb 6-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 1635.310983][T27238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.331711][T27238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1635.342440][T19191] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1635.359662][T15768] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.378488][T10408] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1635.408232][T19191] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1635.422711][T15768] usb 6-1: Product: syz [ 1635.429521][T27238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.440851][T15768] usb 6-1: Manufacturer: syz [ 1635.458960][T27238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1635.458983][T19191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.469623][T15768] usb 6-1: SerialNumber: syz [ 1635.484982][T19191] usb 7-1: config 0 descriptor?? [ 1635.496275][T19191] hub 7-1:0.0: USB hub found [ 1635.635421][T27238] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.651062][T27238] netdevsim netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1635.696091][T19191] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1635.719539][T15768] usb-storage 6-1:5.162: USB Mass Storage device detected [ 1635.746974][T23477] Bluetooth: hci1: command tx timeout [ 1635.755468][T15768] usb-storage 6-1:5.162: This device (04e6,0009,0200 S 4b P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.16.0-rc4-syzkaller-00123-g4c06e63b9203) [ 1635.755468][T15768] Please send a copy of this message to and [ 1635.843688][T15768] usb 6-1: USB disconnect, device number 82 [ 1635.886745][T10408] usb 3-1: config 0 has no interfaces? [ 1635.920304][T10408] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1636.011630][T10408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.040415][T10408] usb 3-1: Product: syz [ 1636.044907][ T5944] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1636.062165][T10408] usb 3-1: Manufacturer: syz [ 1636.081018][T10408] usb 3-1: SerialNumber: syz [ 1636.125626][T10408] usb 3-1: config 0 descriptor?? [ 1636.166891][T27238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1636.179209][T27238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1636.190120][T27238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1636.202253][T27238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1636.242591][ T5944] usb 1-1: config 0 has no interfaces? [ 1636.266131][ T5944] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1636.276152][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.293408][ T5944] usb 1-1: Product: syz [ 1636.298229][ T5944] usb 1-1: Manufacturer: syz [ 1636.302988][ T5944] usb 1-1: SerialNumber: syz [ 1636.333157][ T5944] usb 1-1: config 0 descriptor?? [ 1636.341273][T19191] usbhid 7-1:0.0: can't add hid device: -71 [ 1636.349752][T19191] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1636.524028][T19191] usb 7-1: USB disconnect, device number 12 [ 1636.643591][T27238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1636.684470][T27351] program syz.0.5965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1636.734325][T27351] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1636.891401][T27238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1636.947910][T11710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.955158][T11710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1637.046329][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.053575][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1637.124416][T27363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1637.189470][T27238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1637.201929][T27238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1637.361094][T27369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1637.713842][T27238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1637.836100][T23477] Bluetooth: hci1: command tx timeout [ 1637.985115][T27238] veth0_vlan: entered promiscuous mode [ 1638.124519][T27238] veth1_vlan: entered promiscuous mode [ 1638.169465][T27238] veth0_macvtap: entered promiscuous mode [ 1638.192627][T27238] veth1_macvtap: entered promiscuous mode [ 1638.201851][ T24] usb 3-1: USB disconnect, device number 9 [ 1638.322639][T27238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1638.501010][T27238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1638.560598][T27238] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.589593][T27238] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.646857][T27238] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.688532][T27238] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.341193][T27377] geneve2: entered promiscuous mode [ 1639.347277][T27377] geneve2: entered allmulticast mode [ 1639.399860][T11721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.470657][T11721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.590857][T27382] Cannot find del_set index 0 as target [ 1639.700880][T19191] usb 1-1: USB disconnect, device number 24 [ 1639.749889][T11721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1639.809992][T11721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.872074][T27384] bridge_slave_0: left allmulticast mode [ 1639.879097][T27384] bridge_slave_0: left promiscuous mode [ 1639.934452][T27384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.132864][T27384] bridge_slave_1: left allmulticast mode [ 1640.197081][T27384] bridge_slave_1: left promiscuous mode [ 1640.238165][T27384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.525367][T27392] FAULT_INJECTION: forcing a failure. [ 1640.525367][T27392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1640.593543][T27392] CPU: 1 UID: 0 PID: 27392 Comm: syz.3.5944 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1640.593575][T27392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1640.593588][T27392] Call Trace: [ 1640.593597][T27392] [ 1640.593606][T27392] dump_stack_lvl+0x189/0x250 [ 1640.593637][T27392] ? __pfx____ratelimit+0x10/0x10 [ 1640.593669][T27392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1640.593694][T27392] ? __pfx__printk+0x10/0x10 [ 1640.593721][T27392] ? __might_fault+0xb0/0x130 [ 1640.593758][T27392] should_fail_ex+0x414/0x560 [ 1640.593793][T27392] _copy_from_user+0x2d/0xb0 [ 1640.593818][T27392] ___sys_sendmsg+0x158/0x2a0 [ 1640.593847][T27392] ? __pfx____sys_sendmsg+0x10/0x10 [ 1640.593922][T27392] ? __might_fault+0xb0/0x130 [ 1640.593950][T27392] __sys_sendmmsg+0x227/0x430 [ 1640.593983][T27392] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1640.594007][T27392] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1640.594056][T27392] ? ksys_write+0x22a/0x250 [ 1640.594082][T27392] ? __pfx_ksys_write+0x10/0x10 [ 1640.594102][T27392] ? rcu_is_watching+0x15/0xb0 [ 1640.594131][T27392] __x64_sys_sendmmsg+0xa0/0xc0 [ 1640.594167][T27392] do_syscall_64+0xfa/0x3b0 [ 1640.594186][T27392] ? lockdep_hardirqs_on+0x9c/0x150 [ 1640.594217][T27392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.594237][T27392] ? clear_bhb_loop+0x60/0xb0 [ 1640.594261][T27392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.594281][T27392] RIP: 0033:0x7fa4bdb8e929 [ 1640.594298][T27392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1640.594315][T27392] RSP: 002b:00007fa4bead7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1640.594336][T27392] RAX: ffffffffffffffda RBX: 00007fa4bddb5fa0 RCX: 00007fa4bdb8e929 [ 1640.594351][T27392] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000003 [ 1640.594364][T27392] RBP: 00007fa4bead7090 R08: 0000000000000000 R09: 0000000000000000 [ 1640.594377][T27392] R10: 0000000000000f00 R11: 0000000000000246 R12: 0000000000000002 [ 1640.594389][T27392] R13: 0000000000000000 R14: 00007fa4bddb5fa0 R15: 00007fa4bdedfa28 [ 1640.594420][T27392] [ 1640.984042][T27397] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5973'. [ 1640.994892][T27384] bond0: (slave bond_slave_0): Releasing backup interface [ 1641.004235][T27384] bond_slave_0: left promiscuous mode [ 1641.019401][T27384] bond0: (slave bond_slave_1): Releasing backup interface [ 1641.028366][T27384] bond_slave_1: left promiscuous mode [ 1641.147692][T27384] team0: Port device team_slave_0 removed [ 1641.183610][T27384] team0: Port device team_slave_1 removed [ 1641.212435][T27384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1641.243501][T27384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.280195][T27384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1641.334699][T27384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1641.420187][T27393] tipc: Enabling of bearer rejected, already enabled [ 1641.933580][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1642.083462][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1642.092976][ T24] usb 7-1: config 0 has an invalid interface number: 237 but max is 0 [ 1642.110591][ T24] usb 7-1: config 0 has no interface number 0 [ 1642.149174][ T24] usb 7-1: config 0 interface 237 has no altsetting 0 [ 1642.195485][ T24] usb 7-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 1642.204988][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.227060][ T24] usb 7-1: Product: syz [ 1642.237988][T27415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1642.239183][ T24] usb 7-1: Manufacturer: syz [ 1642.327380][T27418] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1642.431634][ T24] usb 7-1: SerialNumber: syz [ 1642.676631][ T24] usb 7-1: config 0 descriptor?? [ 1642.711354][ T24] snd_usb_podhd 7-1:0.237: Line 6 POD HD300 found [ 1642.953676][ T24] snd_usb_podhd 7-1:0.237: cannot get proper max packet size [ 1642.975561][ T24] snd_usb_podhd 7-1:0.237: Line 6 POD HD300 now disconnected [ 1643.091764][ T24] snd_usb_podhd 7-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 1643.138745][ T24] usb 7-1: USB disconnect, device number 13 [ 1644.273737][T27431] netlink: 304 bytes leftover after parsing attributes in process `syz.0.5982'. [ 1644.473081][T27445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1644.695309][ T24] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1644.884011][T19191] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1645.075288][T19191] usb 4-1: Using ep0 maxpacket: 32 [ 1645.091083][T19191] usb 4-1: config index 0 descriptor too short (expected 65316, got 36) [ 1645.126737][T19191] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1645.209268][ T24] usb 6-1: config 0 has no interfaces? [ 1645.238491][T19191] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.243395][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1645.258230][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.266380][ T24] usb 6-1: Product: syz [ 1645.270620][ T24] usb 6-1: Manufacturer: syz [ 1645.275502][ T24] usb 6-1: SerialNumber: syz [ 1645.318739][T19191] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1645.359120][T19191] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1645.374021][ T24] usb 6-1: config 0 descriptor?? [ 1645.378050][T19191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.638643][T27438] program syz.5.5981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1645.649767][T27438] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1646.417951][T19191] usb 4-1: USB disconnect, device number 58 [ 1646.422382][T27464] netlink: 'syz.6.5992': attribute type 10 has an invalid length. [ 1646.769176][T27464] veth0_vlan: left promiscuous mode [ 1646.837930][T27464] veth0_vlan: entered promiscuous mode [ 1646.843631][T19191] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1646.889333][T27464] team0: Device veth0_vlan failed to register rx_handler [ 1647.056255][T27469] loop2: detected capacity change from 0 to 7 [ 1647.057567][T19191] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1647.068676][T27469] Dev loop2: unable to read RDB block 7 [ 1647.080462][T19191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.088885][T19191] usb 3-1: Product: syz [ 1647.097988][T27469] loop2: unable to read partition table [ 1647.098150][T19191] usb 3-1: Manufacturer: syz [ 1647.110976][T19191] usb 3-1: SerialNumber: syz [ 1647.114544][T27469] loop2: partition table beyond EOD, truncated [ 1647.124065][T19191] usb 3-1: config 0 descriptor?? [ 1647.180456][T27469] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1647.340125][T19191] usb 3-1: USB disconnect, device number 10 [ 1647.431521][T27478] netlink: 304 bytes leftover after parsing attributes in process `syz.0.5998'. [ 1648.003474][T19191] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1648.053141][T15615] usb 6-1: USB disconnect, device number 83 [ 1648.093774][ T5944] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1648.184351][T19191] usb 4-1: Using ep0 maxpacket: 8 [ 1648.192048][T19191] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1648.208179][T19191] usb 4-1: config 179 has no interface number 0 [ 1648.217654][T19191] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1648.231808][T27489] fuse: Bad value for 'fd' [ 1648.232501][T19191] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1648.257906][T19191] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1648.270050][T19191] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1648.288905][ T5944] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1648.298470][ T5944] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1648.312197][T19191] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1648.321993][T19191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.343001][ T5944] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1648.415133][ T5944] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1648.430131][T27496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6003'. [ 1648.439787][T27485] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1648.510824][T27496] bond2: entered promiscuous mode [ 1648.618954][ T5944] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1648.631287][T15615] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1648.821928][ T5944] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1648.839213][T19191] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input93 [ 1648.861214][T27485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.886208][T27485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.897891][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1648.915223][ T5944] usb 1-1: Product: syz [ 1648.941338][T15207] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1648.959284][ T5944] usb 1-1: Manufacturer: syz [ 1648.999035][T15615] usb 3-1: config 0 has no interfaces? [ 1649.015722][T15615] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1649.025472][T15615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.035601][ T24] usb 4-1: USB disconnect, device number 59 [ 1649.035603][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1649.035656][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1649.059469][ T5944] cdc_wdm 1-1:1.0: skipping garbage [ 1649.067152][ T5944] cdc_wdm 1-1:1.0: skipping garbage [ 1649.072681][T15615] usb 3-1: Product: syz [ 1649.079632][T15615] usb 3-1: Manufacturer: syz [ 1649.088703][ T5944] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1649.094844][T15615] usb 3-1: SerialNumber: syz [ 1649.101599][ T5944] cdc_wdm 1-1:1.0: Unknown control protocol [ 1649.107968][ T24] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1649.126661][T15615] usb 3-1: config 0 descriptor?? [ 1649.144307][T15207] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1649.252956][T15207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.289722][T15207] usb 7-1: Product: syz [ 1649.300367][T15207] usb 7-1: Manufacturer: syz [ 1649.309783][T15207] usb 7-1: SerialNumber: syz [ 1649.324642][T15207] usb 7-1: config 0 descriptor?? [ 1649.366941][T23477] Bluetooth: hci3: urb ffff888026a71300 submission failed (2) [ 1649.392712][T27495] netlink: 'syz.2.6002': attribute type 12 has an invalid length. [ 1649.403877][T27495] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.6002'. [ 1649.549697][T25195] usb 7-1: USB disconnect, device number 14 [ 1649.594229][T21068] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1649.766191][T21068] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1649.774928][T21068] usb 6-1: not running at top speed; connect to a high speed hub [ 1649.784376][T21068] usb 6-1: config 12 has an invalid interface number: 173 but max is 1 [ 1649.804797][T21068] usb 6-1: config 12 has an invalid interface number: 173 but max is 1 [ 1649.815352][T21068] usb 6-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 1649.825861][T21068] usb 6-1: config 12 has no interface number 0 [ 1649.832677][T21068] usb 6-1: config 12 interface 173 has no altsetting 0 [ 1649.840701][T21068] usb 6-1: config 12 interface 173 has no altsetting 1 [ 1649.851620][T21068] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7 [ 1649.870917][T21068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.883129][T21068] usb 6-1: Product: syz [ 1649.889130][T21068] usb 6-1: Manufacturer: syz [ 1649.894505][T21068] usb 6-1: SerialNumber: syz [ 1649.947314][T27487] tipc: Enabling of bearer rejected, already enabled [ 1650.558538][T25195] usb 1-1: USB disconnect, device number 25 [ 1651.083299][T25195] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1651.132821][T27529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6014'. [ 1651.324348][T25195] usb 1-1: config 0 has no interfaces? [ 1651.338541][T25195] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1651.348827][T25195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.364749][T25195] usb 1-1: Product: syz [ 1651.377107][T25195] usb 1-1: Manufacturer: syz [ 1651.388794][T25195] usb 1-1: SerialNumber: syz [ 1651.415959][T25195] usb 1-1: config 0 descriptor?? [ 1651.721938][T27524] program syz.0.6012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1651.749434][T27524] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1651.787611][T27529] bond1: entered promiscuous mode [ 1652.143460][T19191] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1652.279173][T25195] usb 3-1: USB disconnect, device number 11 [ 1652.311417][T19191] usb 4-1: Using ep0 maxpacket: 16 [ 1652.325482][T19191] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1652.347762][T19191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.390302][T19191] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1652.438176][T21068] usb 6-1: USB disconnect, device number 84 [ 1652.466627][T19191] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1652.510304][T19191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.522410][T27540] loop2: detected capacity change from 0 to 7 [ 1652.532152][T19191] usb 4-1: Product: syz [ 1652.569727][T27540] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 1652.585106][T27540] loop2: p1 start 811953257 is beyond EOD, truncated [ 1652.592108][T27540] loop2: p2 start 1650421353 is beyond EOD, truncated [ 1652.600167][T19191] usb 4-1: Manufacturer: syz [ 1652.610380][T19191] usb 4-1: SerialNumber: syz [ 1652.638899][T27540] loop2: p3 start 3184882576 is beyond EOD, truncated [ 1652.652255][T27540] loop2: p4 start 360999626 is beyond EOD, truncated [ 1652.660161][T27540] loop2: p5 start 3884050206 is beyond EOD, truncated [ 1652.672603][T27542] loop8: detected capacity change from 0 to 8 [ 1652.682679][T27542] Dev loop8: unable to read RDB block 8 [ 1652.688948][T27542] loop8: unable to read partition table [ 1652.698519][T27542] loop8: partition table beyond EOD, truncated [ 1652.706269][T27540] loop2: p6 start 537650420 is beyond EOD, truncated [ 1652.718298][T27542] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1652.739004][T27540] loop2: p7 start 3276536533 is beyond EOD, truncated [ 1653.208817][T19191] usb 4-1: 0:2 : does not exist [ 1653.345336][T27551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6019'. [ 1653.754361][T19191] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 1653.863959][T27563] netlink: 'syz.5.6022': attribute type 17 has an invalid length. [ 1653.886536][T27554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6022'. [ 1653.977962][T19191] usb 4-1: USB disconnect, device number 60 [ 1654.266025][ T5944] usb 1-1: USB disconnect, device number 26 [ 1655.173333][T15615] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1655.516473][T15615] usb 4-1: Using ep0 maxpacket: 32 [ 1655.527985][T15615] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1655.632605][T15615] usb 4-1: config 0 has no interface number 0 [ 1655.653328][T21068] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1655.682513][T15615] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1655.698054][T15615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.738138][T15615] usb 4-1: Product: syz [ 1655.754368][T27589] loop2: detected capacity change from 0 to 7 [ 1655.764290][T15615] usb 4-1: Manufacturer: syz [ 1655.773583][T27589] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 1655.789835][T27589] loop2: p1 start 811953257 is beyond EOD, truncated [ 1655.803342][T27589] loop2: p2 start 1650421353 is beyond EOD, truncated [ 1655.820530][T15615] usb 4-1: SerialNumber: syz [ 1655.827612][T21068] usb 7-1: config 0 has no interfaces? [ 1655.844135][T21068] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1655.845543][T15615] usb 4-1: config 0 descriptor?? [ 1655.858333][T21068] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.867893][T27589] loop2: p3 start 3184882576 is beyond EOD, truncated [ 1655.875467][T21068] usb 7-1: Product: syz [ 1655.881564][T15615] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1655.910497][T27589] loop2: p4 start 360999626 is beyond EOD, truncated [ 1655.953440][T27589] loop2: p5 start 3884050206 is beyond EOD, truncated [ 1655.960566][T27589] loop2: p6 start 537650420 is beyond EOD, truncated [ 1655.980835][T21068] usb 7-1: Manufacturer: syz [ 1655.991568][T21068] usb 7-1: SerialNumber: syz [ 1655.999810][T27589] loop2: p7 start 3276536533 is beyond EOD, truncated [ 1656.110981][T21068] usb 7-1: config 0 descriptor?? [ 1656.482786][T15615] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1656.578958][T15615] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1656.686560][T27598] loop2: detected capacity change from 0 to 7 [ 1656.710092][ T6054] Dev loop2: unable to read RDB block 7 [ 1656.728736][ T6054] loop2: unable to read partition table [ 1656.737723][ T6054] loop2: partition table beyond EOD, truncated [ 1656.781232][T27598] Dev loop2: unable to read RDB block 7 [ 1656.788041][T27598] loop2: unable to read partition table [ 1656.797311][T27598] loop2: partition table beyond EOD, truncated [ 1656.805033][T27598] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1656.820527][T27602] netlink: 304 bytes leftover after parsing attributes in process `syz.5.6036'. [ 1656.937412][T15615] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1657.093515][T15615] usb 3-1: Using ep0 maxpacket: 8 [ 1657.113877][T15615] usb 3-1: config 6 has an invalid interface number: 49 but max is 2 [ 1657.129261][T15615] usb 3-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 1657.147874][T15615] usb 3-1: config 6 has an invalid interface number: 68 but max is 2 [ 1657.166723][T15615] usb 3-1: config 6 has an invalid interface number: 85 but max is 2 [ 1657.175504][T15615] usb 3-1: config 6 has no interface number 0 [ 1657.187850][T15615] usb 3-1: config 6 has no interface number 1 [ 1657.195042][T15615] usb 3-1: config 6 has no interface number 2 [ 1657.202482][T15615] usb 3-1: config 6 interface 49 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1657.215730][T15615] usb 3-1: config 6 interface 49 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 16 [ 1657.227270][T15615] usb 3-1: config 6 interface 49 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1657.238455][T15615] usb 3-1: config 6 interface 49 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 1657.249457][T15615] usb 3-1: config 6 interface 49 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 1657.260722][T15615] usb 3-1: config 6 interface 49 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1657.271983][T15615] usb 3-1: config 6 interface 49 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 1657.283890][T15615] usb 3-1: config 6 interface 68 altsetting 2 endpoint 0x3 has an invalid bInterval 47, changing to 7 [ 1657.295558][T15615] usb 3-1: config 6 interface 68 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 1657.344194][T15615] usb 3-1: config 6 interface 68 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 1657.469861][ T30] audit: type=1804 audit(1751669294.785:2217): pid=27613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6040" name="file0" dev="ramfs" ino=122850 res=1 errno=0 [ 1657.491235][T15615] usb 3-1: config 6 interface 68 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1657.502529][T15615] usb 3-1: config 6 interface 68 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1657.514241][T15615] usb 3-1: config 6 interface 68 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 1657.525095][T15207] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1657.526729][T15615] usb 3-1: config 6 interface 68 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 1657.553086][T15615] usb 3-1: config 6 interface 68 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1657.571455][T15615] usb 3-1: config 6 interface 68 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1657.598390][T15615] usb 3-1: config 6 interface 68 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 1657.623391][T15615] usb 3-1: config 6 interface 68 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 1657.645203][T15615] usb 3-1: config 6 interface 68 altsetting 2 bulk endpoint 0xE has invalid maxpacket 32 [ 1657.658109][T15615] usb 3-1: config 6 interface 68 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1657.670488][T15615] usb 3-1: config 6 interface 68 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1657.684344][T15615] usb 3-1: config 6 interface 85 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 1657.697235][T15615] usb 3-1: config 6 interface 85 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1657.710917][T15615] usb 3-1: config 6 interface 85 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 1657.713306][T15207] usb 6-1: Using ep0 maxpacket: 16 [ 1657.759438][T15615] usb 3-1: config 6 interface 68 has no altsetting 0 [ 1657.761685][T15207] usb 6-1: config 0 has no interfaces? [ 1657.778127][T15207] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1657.821484][T15207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1657.835615][T15207] usb 6-1: SerialNumber: syz [ 1657.846940][T15207] usb 6-1: config 0 descriptor?? [ 1657.879986][T15615] usb 3-1: config 6 interface 85 has no altsetting 0 [ 1657.927962][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1657.928836][T21068] usb 4-1: USB disconnect, device number 61 [ 1657.942695][T15615] usb 3-1: New USB device found, idVendor=2001, idProduct=3c1a, bcdDevice= e.16 [ 1657.952566][T15615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.988296][T15615] usb 3-1: Product: syz [ 1658.001539][T15615] usb 3-1: Manufacturer: syz [ 1658.059828][T15615] usb 3-1: SerialNumber: syz [ 1658.064285][T21068] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1658.080478][T27600] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1658.089242][T27609] vlan3: entered promiscuous mode [ 1658.108237][T27600] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1658.164556][T21068] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1658.191577][T27600] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1658.214073][T15207] usb 7-1: USB disconnect, device number 15 [ 1658.244528][T21068] quatech2 4-1:0.51: device disconnected [ 1658.350130][T25195] usb 6-1: USB disconnect, device number 85 [ 1658.457260][T15615] usb 3-1: USB disconnect, device number 12 [ 1658.843393][T19191] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1658.984322][T19191] usb 7-1: device descriptor read/64, error -71 [ 1659.082574][T27629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1659.136550][T27635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.162363][T27635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.189733][T27635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.224276][T19191] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1659.242527][T27636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.263860][T27635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.267360][T27636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.348581][T27638] netlink: 304 bytes leftover after parsing attributes in process `syz.5.6049'. [ 1659.357875][T15615] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1659.393272][T19191] usb 7-1: device descriptor read/64, error -71 [ 1659.507478][T19191] usb usb7-port1: attempt power cycle [ 1659.525481][T15615] usb 3-1: Using ep0 maxpacket: 16 [ 1659.535696][T15615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.547860][T15615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.561604][T15615] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1659.571883][T15615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.595882][T15615] usb 3-1: config 0 descriptor?? [ 1659.829401][T15615] usbhid 3-1:0.0: can't add hid device: -71 [ 1659.837198][T15615] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1659.853512][T15615] usb 3-1: USB disconnect, device number 13 [ 1659.863403][T19191] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1659.915549][T19191] usb 7-1: device descriptor read/8, error -71 [ 1659.923449][T21068] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1659.933816][ T5944] usb 6-1: new full-speed USB device number 86 using dummy_hcd [ 1660.085786][T21068] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.096305][T21068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1660.097775][ T5944] usb 6-1: not running at top speed; connect to a high speed hub [ 1660.118809][T21068] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1660.122879][ T5944] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1660.149420][ T5944] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1660.153388][T25195] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1660.160853][ T5944] usb 6-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40 [ 1660.173386][T19191] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1660.186121][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.195320][ T5944] usb 6-1: Product: 栣꽑᧤쳾ෑិ麺ꓳȍ灪쒖↌욵풨绻鮷粈醡㐌왦弙ᓨᏟ [ 1660.207645][ T5944] usb 6-1: Manufacturer: 㶝죣뎕ංᕞ遒ꍱ씵닋ꋑ熮佹틷ꖣⴢ덱궥칂㋋ڴ뽖裙魬䶵㱥㜄衾紣霡鈽撮ᥣ౗萢栿䯶谑빧뵎ꀐ⾅툂᫵풎⣉춫䙐琩靺 [ 1660.210352][T21068] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1660.226878][T19191] usb 7-1: device descriptor read/8, error -71 [ 1660.244802][ T5944] usb 6-1: SerialNumber: 㐁 [ 1660.261426][T27651] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 1660.281581][T21068] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1660.292156][T21068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.309120][T21068] usb 1-1: Product: syz [ 1660.318955][T21068] usb 1-1: Manufacturer: syz [ 1660.328716][T21068] usb 1-1: SerialNumber: syz [ 1660.341225][T21068] usb 1-1: config 0 descriptor?? [ 1660.353663][T19191] usb usb7-port1: unable to enumerate USB device [ 1660.382338][T21068] usb 1-1: ucan: probing device on interface #0 [ 1660.390771][T21068] usb 1-1: ucan: invalid endpoint configuration [ 1660.453788][T21068] usb 1-1: ucan: probe failed; try to update the device firmware [ 1660.468224][T25195] usb 4-1: config 0 has no interfaces? [ 1660.497290][T25195] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1660.792895][T21068] usb 1-1: USB disconnect, device number 27 [ 1660.799230][ T5944] usbhid 6-1:1.0: can't add hid device: -71 [ 1660.807191][ T5944] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1660.852855][ T5944] usb 6-1: USB disconnect, device number 86 [ 1660.917123][T25195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.995179][T25195] usb 4-1: Product: syz [ 1661.105749][T25195] usb 4-1: Manufacturer: syz [ 1661.110709][T25195] usb 4-1: SerialNumber: syz [ 1661.185512][T25195] usb 4-1: config 0 descriptor?? [ 1661.615755][ T5944] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1661.775710][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 1661.783559][ T5944] usb 6-1: config 0 has no interfaces? [ 1661.790367][ T5944] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1661.800093][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1661.808491][ T5944] usb 6-1: SerialNumber: syz [ 1661.816553][ T5944] usb 6-1: config 0 descriptor?? [ 1662.072442][T27666] vlan3: entered promiscuous mode [ 1662.220390][ T5944] usb 6-1: USB disconnect, device number 87 [ 1662.309671][T27681] netlink: 304 bytes leftover after parsing attributes in process `syz.0.6063'. [ 1662.485680][T27686] loop2: detected capacity change from 0 to 7 [ 1662.514439][ T6207] Dev loop2: unable to read RDB block 7 [ 1662.553570][ T6207] loop2: unable to read partition table [ 1662.598802][ T6207] loop2: partition table beyond EOD, truncated [ 1662.640024][T27686] Dev loop2: unable to read RDB block 7 [ 1662.657026][T27686] loop2: unable to read partition table [ 1662.664138][T27686] loop2: partition table beyond EOD, truncated [ 1662.672081][T27686] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1662.949938][T27699] Cannot find del_set index 0 as target [ 1663.113277][T21068] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1663.304039][T21068] usb 3-1: Using ep0 maxpacket: 32 [ 1663.320356][T21068] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.341560][T21068] usb 3-1: config 0 has no interfaces? [ 1663.353479][ T5944] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1663.363295][T15207] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1663.372902][T21068] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1663.395738][T21068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.418662][T21068] usb 3-1: config 0 descriptor?? [ 1663.498577][T27705] loop2: detected capacity change from 0 to 7 [ 1663.507298][ T6207] Dev loop2: unable to read RDB block 7 [ 1663.512916][ T6207] loop2: unable to read partition table [ 1663.519665][ T6207] loop2: partition table beyond EOD, truncated [ 1663.527565][T27705] Dev loop2: unable to read RDB block 7 [ 1663.535297][ T5944] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1663.545032][ T5944] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1663.545346][T15207] usb 6-1: Using ep0 maxpacket: 32 [ 1663.652025][T19191] usb 4-1: USB disconnect, device number 62 [ 1663.669708][ T5944] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1663.694182][T27705] loop2: unable to read partition table [ 1663.701965][T15207] usb 6-1: config 0 has an invalid interface number: 124 but max is 0 [ 1663.702234][ T5944] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1663.720814][T15207] usb 6-1: config 0 has no interface number 0 [ 1663.728377][T27705] loop2: partition table beyond EOD, truncated [ 1663.758703][T23477] Bluetooth: hci0: link tx timeout [ 1663.764828][T23477] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1663.789050][ T5944] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1663.789116][T15207] usb 6-1: config 0 interface 124 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 1663.808729][T27705] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1663.815481][T15207] usb 6-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=8c.e8 [ 1663.831437][T15207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.839531][T15207] usb 6-1: Product: syz [ 1663.844861][T15207] usb 6-1: Manufacturer: syz [ 1663.849528][T15207] usb 6-1: SerialNumber: syz [ 1663.857864][T15207] usb 6-1: config 0 descriptor?? [ 1663.866448][T15207] kvaser_usb 6-1:0.124: error -ENODEV: Cannot get usb endpoint(s) [ 1663.887818][ T5944] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1663.928651][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1663.938664][T15207] usb 3-1: USB disconnect, device number 14 [ 1663.954760][ T5944] usb 7-1: Product: syz [ 1663.973710][ T5944] usb 7-1: Manufacturer: syz [ 1663.987454][ T5944] cdc_wdm 7-1:1.0: skipping garbage [ 1663.998546][ T5944] cdc_wdm 7-1:1.0: skipping garbage [ 1664.028008][ T5944] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1664.053504][ T5944] cdc_wdm 7-1:1.0: Unknown control protocol [ 1664.120021][T27700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6067'. [ 1664.500211][ T5944] usb 6-1: USB disconnect, device number 88 [ 1664.824241][T27720] netlink: 304 bytes leftover after parsing attributes in process `syz.2.6075'. [ 1664.942428][T15207] usb 7-1: USB disconnect, device number 20 [ 1665.426022][ T5168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1665.438930][ T5168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1665.448635][ T5168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1665.457187][ T5168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1665.466923][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1665.543854][T19191] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1665.624116][ T5944] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1665.704450][T19191] usb 6-1: Using ep0 maxpacket: 16 [ 1665.712545][T19191] usb 6-1: config 0 has no interfaces? [ 1665.728105][T19191] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1665.743362][T19191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1665.787635][T19191] usb 6-1: SerialNumber: syz [ 1665.800894][T19191] usb 6-1: config 0 descriptor?? [ 1665.806504][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 1665.817525][ T5944] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 1665.825773][ T5168] Bluetooth: hci0: command 0x0406 tx timeout [ 1665.833656][ T5944] usb 3-1: config 2 has no interface number 0 [ 1665.839854][ T5944] usb 3-1: config 2 interface 31 has no altsetting 0 [ 1665.881079][T11717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.895357][T11717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1665.952309][T11717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1665.993136][ T5944] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1666.002357][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.061429][T27731] vlan3: entered promiscuous mode [ 1666.073781][ T5944] usb 3-1: Product: syz [ 1666.080236][ T5944] usb 3-1: Manufacturer: syz [ 1666.099205][ T5944] usb 3-1: SerialNumber: syz [ 1666.127048][T27753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6081'. [ 1666.167408][T27749] tipc: Started in network mode [ 1666.173423][T27749] tipc: Node identity 7f000001, cluster identity 4711 [ 1666.199160][T27749] tipc: New replicast peer: 0.0.0.0 [ 1666.211788][T27749] tipc: Enabled bearer , priority 10 [ 1666.284457][T21068] usb 6-1: USB disconnect, device number 89 [ 1666.319162][T11717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1666.333133][T11717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1666.398579][T11717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1666.918185][T11717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1666.952854][T11717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1666.967831][T11717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1667.008859][T27739] chnl_net:caif_netlink_parms(): no params data found [ 1667.106216][ T5944] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 1667.132531][ T5944] usb 3-1: USB disconnect, device number 15 [ 1667.141120][T11717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1667.183867][T19191] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1667.199031][T11717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1667.251620][T11717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1667.330237][T15615] tipc: Node number set to 2130706433 [ 1667.353702][T19191] usb 7-1: Using ep0 maxpacket: 32 [ 1667.369512][T19191] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1667.378335][T19191] usb 7-1: config 0 has no interface number 0 [ 1667.409538][T19191] usb 7-1: config 0 interface 2 has no altsetting 0 [ 1667.459279][T19191] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1667.477451][T27767] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6087'. [ 1667.492492][T19191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.503382][T23477] Bluetooth: hci3: command tx timeout [ 1667.530864][T19191] usb 7-1: Product: syz [ 1667.540020][T19191] usb 7-1: Manufacturer: syz [ 1667.552470][T19191] usb 7-1: SerialNumber: syz [ 1667.562437][T19191] usb 7-1: config 0 descriptor?? [ 1667.577506][T27739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.589041][T27739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.598211][T27739] bridge_slave_0: entered allmulticast mode [ 1667.606966][T27739] bridge_slave_0: entered promiscuous mode [ 1667.616314][T27739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.623689][T27739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.631159][T27739] bridge_slave_1: entered allmulticast mode [ 1667.653133][T27739] bridge_slave_1: entered promiscuous mode [ 1667.723879][T25195] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1667.775332][T27739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.791767][T27759] fuse: Bad value for 'user_id' [ 1667.796898][ T5944] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1667.808093][T27759] fuse: Bad value for 'user_id' [ 1667.856453][T27739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1667.886623][T25195] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1667.895687][T25195] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1667.923080][T25195] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1667.933729][ T5944] usb 4-1: device descriptor read/64, error -71 [ 1667.943605][T25195] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1667.982012][T25195] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1668.016490][T25195] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1668.038488][T25195] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1668.055335][T25195] usb 6-1: Product: syz [ 1668.062164][T27739] team0: Port device team_slave_0 added [ 1668.069427][T25195] usb 6-1: Manufacturer: syz [ 1668.088127][T25195] cdc_wdm 6-1:1.0: skipping garbage [ 1668.102712][T27739] team0: Port device team_slave_1 added [ 1668.108752][T25195] cdc_wdm 6-1:1.0: skipping garbage [ 1668.117623][T25195] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1668.125007][T11717] dummy0: left allmulticast mode [ 1668.130238][T11717] bridge0: port 3(dummy0) entered disabled state [ 1668.137391][T25195] cdc_wdm 6-1:1.0: Unknown control protocol [ 1668.161519][T11717] bridge_slave_1: left allmulticast mode [ 1668.172165][T11717] bridge_slave_1: left promiscuous mode [ 1668.182060][T11717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.193546][ T5944] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1668.203896][T11717] bridge_slave_0: left allmulticast mode [ 1668.209630][T11717] bridge_slave_0: left promiscuous mode [ 1668.219479][T11717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.349495][ T5944] usb 4-1: device descriptor read/64, error -71 [ 1668.394742][T19191] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1668.475228][ T5944] usb usb4-port1: attempt power cycle [ 1668.671465][T11717] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1668.782806][T11717] dvmrp0 (unregistering): left allmulticast mode [ 1668.864474][ T5944] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1668.872786][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.879371][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.919425][ T5944] usb 4-1: device descriptor read/8, error -71 [ 1669.163444][ T5944] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1669.199005][ T5944] usb 4-1: device descriptor read/8, error -71 [ 1669.323734][ T5944] usb usb4-port1: unable to enumerate USB device [ 1669.447818][ T30] audit: type=1326 audit(1751669306.875:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27783 comm="syz.2.6091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feffa98e929 code=0xffff0000 [ 1669.521349][T11717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1669.533826][T11717] bond_slave_0: left promiscuous mode [ 1669.540219][T11717] bond0 (unregistering): Released all slaves [ 1669.591322][T23477] Bluetooth: hci3: command tx timeout [ 1669.776519][T11717] bond1 (unregistering): Released all slaves [ 1670.007539][T21068] usb 7-1: USB disconnect, device number 21 [ 1670.107444][T11717] bond2 (unregistering): Released all slaves [ 1670.443686][T11717] bond3 (unregistering): Released all slaves [ 1670.492302][T27777] tipc: Enabling of bearer rejected, already enabled [ 1670.701540][T27792] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6093'. [ 1670.774792][T27739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1670.799572][T27739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1670.831525][ T5944] usb 6-1: USB disconnect, device number 90 [ 1670.914902][T27739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.130966][T27802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6094'. [ 1671.253866][T11717] tipc: Disabling bearer [ 1671.259486][T11717] tipc: Left network mode [ 1671.364086][T27739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.371066][T27739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.383437][T15207] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1671.410235][T27739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.490995][T27797] tipc: Enabling of bearer rejected, already enabled [ 1671.702084][T23477] Bluetooth: hci3: command tx timeout [ 1671.785790][T15207] usb 6-1: Using ep0 maxpacket: 16 [ 1671.806648][T15207] usb 6-1: config 0 has no interfaces? [ 1671.835256][T15207] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1671.860153][T15207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1672.422337][T15207] usb 6-1: SerialNumber: syz [ 1672.430672][T15207] usb 6-1: config 0 descriptor?? [ 1672.638685][T27739] hsr_slave_0: entered promiscuous mode [ 1672.716743][T27739] hsr_slave_1: entered promiscuous mode [ 1672.732772][T27739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1672.752859][T27739] Cannot create hsr debugfs directory [ 1672.956443][T27801] vlan3: entered promiscuous mode [ 1673.053503][T15207] usb 6-1: USB disconnect, device number 91 [ 1673.198491][T11717] hsr_slave_0: left promiscuous mode [ 1673.222200][T11717] hsr_slave_1: left promiscuous mode [ 1673.491533][T11717] pimreg3 (unregistering): left allmulticast mode [ 1673.743684][T23477] Bluetooth: hci3: command tx timeout [ 1675.157036][T27843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6101'. [ 1675.188825][T27843] usb usb8: usbfs: process 27843 (syz.5.6101) did not claim interface 0 before use [ 1675.224277][T11717] team0 (unregistering): Port device team_slave_1 removed [ 1675.294977][T11717] team0 (unregistering): Port device team_slave_0 removed [ 1676.164492][T27843] veth1_macvtap: left promiscuous mode [ 1676.440714][T27856] loop2: detected capacity change from 0 to 7 [ 1676.477660][T27856] Dev loop2: unable to read RDB block 7 [ 1676.494729][T27856] loop2: unable to read partition table [ 1676.500674][T27856] loop2: partition table beyond EOD, truncated [ 1676.524256][T27856] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1676.684973][ T5218] Dev loop2: unable to read RDB block 7 [ 1676.693300][ T5218] loop2: unable to read partition table [ 1676.699245][ T5218] loop2: partition table beyond EOD, truncated [ 1676.930729][ T5218] Dev loop2: unable to read RDB block 7 [ 1676.961075][ T5218] loop2: unable to read partition table [ 1676.994622][ T5218] loop2: partition table beyond EOD, truncated [ 1677.245285][T27874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6107'. [ 1677.340424][T27870] tipc: Enabling of bearer rejected, already enabled [ 1677.416669][T27874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1677.987608][T27878] bond2: entered promiscuous mode [ 1678.064644][T11717] IPVS: stop unused estimator thread 0... [ 1678.883299][T10430] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1679.090787][T10430] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.143521][T10430] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.173465][T10430] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1679.213102][T10430] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.258116][T10430] usb 7-1: config 0 descriptor?? [ 1679.259246][T27739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1679.297975][T21068] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1679.318835][T27739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1679.381598][T27739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1679.468296][T27739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1679.510534][T21068] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.525617][T27905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1679.552374][T21068] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1679.562812][T27905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1679.604174][T21068] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1679.644149][T21068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.655108][T21068] usb 3-1: Product: syz [ 1679.659352][T21068] usb 3-1: Manufacturer: syz [ 1679.688627][T10430] usbhid 7-1:0.0: can't add hid device: -71 [ 1679.696260][T21068] usb 3-1: SerialNumber: syz [ 1679.716125][T10430] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1679.720006][T21068] usb 3-1: config 0 descriptor?? [ 1679.768271][T21068] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1679.796970][T10430] usb 7-1: USB disconnect, device number 22 [ 1679.829733][T21068] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1679.879569][T21068] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1679.972536][T27900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.004687][T21068] usb 3-1: media controller created [ 1680.024908][T27900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.074603][T27900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.090214][T21068] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1680.127767][T27900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.145244][T27739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.154177][T27900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.207014][T27900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.276122][T27900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.300474][T27739] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.322714][T27900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.356698][T27928] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6118'. [ 1680.381890][T27900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.405142][T11710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.412425][T11710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.422111][T21068] DVB: Unable to find symbol tda10046_attach() [ 1680.429605][T27900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1680.440012][T21068] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1680.635850][T21068] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1680.652535][T11710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.659971][T11710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1680.784529][T21068] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1680.870657][T21068] usb 3-1: USB disconnect, device number 17 [ 1681.483117][T27739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1681.640572][T27947] bond4: entered promiscuous mode [ 1681.950801][T27739] veth0_vlan: entered promiscuous mode [ 1682.032955][T27739] veth1_vlan: entered promiscuous mode [ 1682.168394][T27739] veth0_macvtap: entered promiscuous mode [ 1682.198770][T27739] veth1_macvtap: entered promiscuous mode [ 1682.317030][T27739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1682.350658][T27739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1682.368738][T27739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.381051][T27739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.413550][T27739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.422330][T27739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.863762][T27931] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1682.870585][T23477] Bluetooth: hci4: command 0x0406 tx timeout [ 1683.277090][T27931] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1683.287167][T27931] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1683.296917][T27931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1683.302937][T27931] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1683.317258][T27931] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1683.323735][T27931] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1683.332143][T27931] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1683.356780][T27931] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1683.367711][T27931] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1683.375249][T27931] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1683.512501][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.530255][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.625244][T11717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.634883][T10430] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1683.643504][T21063] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1683.652243][T11717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.664412][T21068] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1683.813644][T21063] usb 4-1: Using ep0 maxpacket: 8 [ 1683.819298][T10430] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x1 has invalid maxpacket 64 [ 1683.835208][T10430] usb 3-1: config 1 interface 0 altsetting 93 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1683.855479][T21068] usb 6-1: Using ep0 maxpacket: 8 [ 1683.863642][T10430] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1683.870452][T21063] usb 4-1: device descriptor read/all, error -71 [ 1683.880095][T10430] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1683.893428][T21068] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1683.894840][T10430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.924626][T21068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.932684][T21068] usb 6-1: Product: syz [ 1683.947711][T21068] usb 6-1: Manufacturer: syz [ 1683.952386][T21068] usb 6-1: SerialNumber: syz [ 1683.957496][T10430] usb 3-1: Product: syz [ 1683.972014][T10430] usb 3-1: Manufacturer: syz [ 1683.979843][T10430] usb 3-1: SerialNumber: syz [ 1683.990559][T21068] usb 6-1: config 0 descriptor?? [ 1684.008054][T21068] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1684.025147][T27972] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1684.030664][T21068] usb 6-1: setting power ON [ 1684.057484][T21068] dvb-usb: bulk message failed: -22 (2/0) [ 1684.080185][T21068] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1684.108333][T21068] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1684.135477][T21068] usb 6-1: media controller created [ 1684.201521][T21068] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1684.264418][T21068] usb 6-1: selecting invalid altsetting 6 [ 1684.281077][T21068] usb 6-1: digital interface selection failed (-22) [ 1684.325088][T21068] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1684.383743][ T30] audit: type=1326 audit(1751669321.815:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27955 comm="syz.5.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4f98e929 code=0x7fc00000 [ 1684.433514][T21068] usb 6-1: setting power OFF [ 1684.438202][T21068] dvb-usb: bulk message failed: -22 (2/0) [ 1684.479517][T27962] netlink: 'syz.5.6123': attribute type 16 has an invalid length. [ 1684.491250][T21068] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1684.515091][T27962] netlink: 'syz.5.6123': attribute type 17 has an invalid length. [ 1684.525330][T21068] (NULL device *): no alternate interface [ 1684.671274][T27962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1684.736210][T21068] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1684.792441][T10430] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 93 proto 1 vid 0x0525 pid 0xA4A8 [ 1684.815339][T19191] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1684.844210][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1684.891092][T10430] usb 3-1: USB disconnect, device number 18 [ 1684.938436][T10430] usblp0: removed [ 1684.945109][T23477] Bluetooth: hci5: command 0x0406 tx timeout [ 1684.973280][T19191] usb 7-1: Using ep0 maxpacket: 32 [ 1684.980133][T19191] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 1684.993740][T19191] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.021563][T19191] usb 7-1: config 0 descriptor?? [ 1685.073853][T19191] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1685.098219][T19191] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1685.209546][ T24] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1685.233483][ T24] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.293666][ T24] usb 1-1: config 220 has no interface number 2 [ 1685.305699][ T24] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1685.378117][T23477] Bluetooth: hci1: command 0x0c1a tx timeout [ 1685.381926][ T5168] Bluetooth: hci0: command 0x0406 tx timeout [ 1685.407898][ T24] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1685.453262][ T5168] Bluetooth: hci3: command 0x0c1a tx timeout [ 1685.508510][ T24] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1685.743908][ T24] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1686.114154][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1686.133349][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.133382][ T24] usb 1-1: Product: syz [ 1686.133400][ T24] usb 1-1: Manufacturer: syz [ 1686.143496][ T24] usb 1-1: SerialNumber: syz [ 1686.193310][ T30] audit: type=1326 audit(1751669323.615:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27955 comm="syz.5.6123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b4f92ab19 code=0x7fc00000 [ 1686.523976][T19191] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1686.661046][T10430] usb 6-1: USB disconnect, device number 92 [ 1686.924915][ T24] usb 1-1: selecting invalid altsetting 0 [ 1686.969434][ T24] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1686.994095][T28044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6135'. [ 1687.003786][ T24] usb 1-1: No valid video chain found. [ 1687.025766][T19191] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 1687.034669][ T5168] Bluetooth: hci5: command 0x0406 tx timeout [ 1687.052256][T19191] usb 3-1: config 0 has no interface number 0 [ 1687.162530][ T24] usb 1-1: selecting invalid altsetting 0 [ 1687.261299][T19191] usb 3-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1687.287905][ T24] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1687.336484][T19191] usb 3-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1687.359358][ T24] usb 1-1: USB disconnect, device number 28 [ 1687.434911][ T5168] Bluetooth: hci0: command 0x0406 tx timeout [ 1687.434920][T23477] Bluetooth: hci1: command 0x0c1a tx timeout [ 1687.534781][ T5168] Bluetooth: hci3: command 0x0c1a tx timeout [ 1687.569021][T19191] usb 3-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 1687.578268][T19191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.586813][T19191] usb 3-1: Product: syz [ 1687.590994][T19191] usb 3-1: Manufacturer: syz [ 1687.595696][T19191] usb 3-1: SerialNumber: syz [ 1687.673662][T10430] usb 7-1: USB disconnect, device number 23 [ 1687.750379][T19191] usb 3-1: config 0 descriptor?? [ 1687.949133][T19191] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1687.983499][T28057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6137'. [ 1688.088866][T28064] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6139'. [ 1688.149958][T19191] snd-usb-audio 3-1:0.216: probe with driver snd-usb-audio failed with error -2 [ 1688.405367][ T6207] udevd[6207]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1689.283311][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1689.316967][T28087] bond3: entered promiscuous mode [ 1689.470836][T28090] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6150'. [ 1689.490400][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1689.503477][ T5168] Bluetooth: hci1: command 0x0c1a tx timeout [ 1689.533428][ T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1689.534239][T28090] @: renamed from vlan0 (while UP) [ 1689.583860][ T5168] Bluetooth: hci3: command 0x0c1a tx timeout [ 1689.588851][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1689.656438][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1689.684788][T21068] usb 3-1: USB disconnect, device number 19 [ 1689.719825][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1689.738121][T28093] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6151'. [ 1689.780646][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1689.795889][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1689.810780][ T24] usb 1-1: Product: syz [ 1689.815382][T15207] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1689.833428][ T24] usb 1-1: Manufacturer: syz [ 1689.856967][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 1689.862254][ T24] cdc_wdm 1-1:1.0: skipping garbage [ 1689.883630][ T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1689.890807][ T24] cdc_wdm 1-1:1.0: Unknown control protocol [ 1689.978823][T15207] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.002350][T15207] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1690.023877][T15207] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1690.043368][T15207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1690.084043][T15207] usb 6-1: SerialNumber: syz [ 1690.319775][T28085] tipc: Enabling of bearer rejected, failed to enable media [ 1690.397463][T15207] usb 6-1: 0:2 : does not exist [ 1690.587337][T15207] usb 6-1: USB disconnect, device number 93 [ 1690.730691][T21068] usb 1-1: USB disconnect, device number 29 [ 1690.857912][T28118] loop2: detected capacity change from 0 to 7 [ 1690.918388][T28118] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 1690.969655][ T6207] udevd[6207]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1691.002356][T28118] loop2: p1 start 811953257 is beyond EOD, truncated [ 1691.070208][T28118] loop2: p2 start 1650421353 is beyond EOD, truncated [ 1691.102459][T28118] loop2: p3 start 3184882576 is beyond EOD, truncated [ 1691.142952][T28118] loop2: p4 start 360999626 is beyond EOD, truncated [ 1691.163862][T28118] loop2: p5 start 3884050206 is beyond EOD, truncated [ 1691.181539][T28125] binder: 28123:28125 ioctl c00c6211 ffffffffffffffff returned -14 [ 1691.181673][T28118] loop2: p6 start 537650420 is beyond EOD, truncated [ 1691.225507][T28125] trusted_key: encrypted_key: insufficient parameters specified [ 1691.238020][T28118] loop2: p7 start 3276536533 is beyond EOD, truncated [ 1693.226522][T28143] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6164'. [ 1693.818991][T28149] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6167'. [ 1694.103020][T28154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1694.111201][T28153] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1694.553405][T10430] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1694.715062][T10430] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1694.737354][T10430] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1694.754667][T28173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1694.776384][T10430] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1694.785840][T10430] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1694.797181][T10430] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1694.851550][T10430] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1694.861052][T10430] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1694.869768][T10430] usb 1-1: Product: syz [ 1694.878878][T10430] usb 1-1: Manufacturer: syz [ 1694.905895][T10430] cdc_wdm 1-1:1.0: skipping garbage [ 1694.911825][T10430] cdc_wdm 1-1:1.0: skipping garbage [ 1694.924339][T10430] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1694.990836][T28173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6173'. [ 1695.009897][T28173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.039411][T10430] cdc_wdm 1-1:1.0: Unknown control protocol [ 1695.611757][T10430] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1695.825940][T10430] usb 7-1: Using ep0 maxpacket: 32 [ 1695.838427][T10430] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1695.849759][T10430] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.882153][T10430] usb 7-1: config 0 descriptor?? [ 1695.937137][T10430] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1696.093908][T28156] tipc: Enabling of bearer rejected, failed to enable media [ 1696.488711][T21068] usb 1-1: USB disconnect, device number 30 [ 1696.927696][T28198] PKCS7: Unknown OID: [5] (bad) [ 1696.932680][T28198] PKCS7: Only support pkcs7_signedData type [ 1696.989556][T28197] usb usb8: usbfs: process 28197 (syz.2.6180) did not claim interface 0 before use [ 1697.213471][T10408] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1697.372975][T28177] vlan2: entered allmulticast mode [ 1697.380641][T10408] usb 1-1: Using ep0 maxpacket: 32 [ 1697.386082][T28177] macvtap0: entered allmulticast mode [ 1697.393687][T10408] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.663537][T10430] gspca_vc032x: reg_w err -110 [ 1697.668382][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1697.783584][T10408] usb 1-1: config 0 has no interfaces? [ 1697.786826][T28206] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6182'. [ 1697.803085][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1697.811820][T28177] veth0_macvtap: entered allmulticast mode [ 1697.853823][T10408] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1697.863044][T10408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.951391][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.042657][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.069480][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.106239][T10408] usb 1-1: config 0 descriptor?? [ 1698.111769][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.134780][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.153345][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.163253][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.168602][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.193965][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.200968][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.223227][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.243224][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.254196][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.264617][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.303229][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.334339][T10430] gspca_vc032x: I2c Bus Busy Wait 00 [ 1698.339730][T10430] gspca_vc032x: Unknown sensor... [ 1698.383864][T10430] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 1698.399451][ T5168] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1698.542569][ T24] usb 1-1: USB disconnect, device number 31 [ 1698.553706][T21068] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1698.618841][T28216] Cannot find del_set index 0 as target [ 1698.725526][T21068] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1698.759107][T21068] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.773405][T21068] usb 6-1: config 0 has no interface number 0 [ 1698.781795][T21068] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1698.791246][T21068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.799418][T21068] usb 6-1: Product: syz [ 1698.803791][T21068] usb 6-1: Manufacturer: syz [ 1698.809150][T21068] usb 6-1: SerialNumber: syz [ 1698.824237][T21068] usb 6-1: config 0 descriptor?? [ 1698.837612][T21068] ims_pcu 6-1:0.41: probe with driver ims_pcu failed with error -22 [ 1698.954220][T10430] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1699.068334][T21068] usb 6-1: USB disconnect, device number 94 [ 1699.117744][T10430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.150419][T10430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.248755][T19191] usb 7-1: USB disconnect, device number 24 [ 1699.264905][T10430] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1699.282859][T10430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.294743][T10430] usb 4-1: config 0 descriptor?? [ 1699.484129][T21063] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1699.653967][T21063] usb 3-1: Using ep0 maxpacket: 8 [ 1699.709304][T21063] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1699.718675][T21068] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1699.726470][T21063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.743348][T21063] usb 3-1: Product: syz [ 1699.755565][T21063] usb 3-1: Manufacturer: syz [ 1699.764868][T10430] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 1699.770656][T21063] usb 3-1: SerialNumber: syz [ 1699.772238][T10430] cm6533_jd 0003:0D8C:0022.002D: unknown main item tag 0x0 [ 1699.833490][T21063] usb 3-1: config 0 descriptor?? [ 1699.860081][T21063] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1699.861553][T10430] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.002D/input/input94 [ 1699.874653][T21063] usb 3-1: setting power ON [ 1699.889942][T21063] dvb-usb: bulk message failed: -22 (2/0) [ 1699.931877][T21063] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1699.958886][T21063] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1699.983044][T28239] loop2: detected capacity change from 0 to 7 [ 1699.993845][T28239] Dev loop2: unable to read RDB block 7 [ 1699.997234][T28220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1699.999435][T28239] loop2: AHDI p2 p3 [ 1700.029197][T21068] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 1700.038150][T21068] usb 1-1: config 0 has no interface number 0 [ 1700.047386][T21068] usb 1-1: config 0 interface 29 has no altsetting 0 [ 1700.055879][T28220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.056730][T21063] usb 3-1: media controller created [ 1700.093382][T28239] loop2: partition table partially beyond EOD, truncated [ 1700.103074][T21068] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1700.103117][T10430] cm6533_jd 0003:0D8C:0022.002D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 1700.117016][T21068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.176706][T21068] usb 1-1: Product: syz [ 1700.193672][T28239] loop2: p2 size 150995456 extends beyond EOD, truncated [ 1700.212300][T21068] usb 1-1: Manufacturer: syz [ 1700.240649][T21068] usb 1-1: SerialNumber: syz [ 1700.263559][T21063] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1700.302425][T21068] usb 1-1: config 0 descriptor?? [ 1700.330490][T10430] usb 4-1: USB disconnect, device number 69 [ 1700.441181][T21063] usb 3-1: selecting invalid altsetting 6 [ 1700.475652][T21063] usb 3-1: digital interface selection failed (-22) [ 1700.492180][ T5909] udevd[5909]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1700.511119][T21063] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1700.536218][T21063] usb 3-1: setting power OFF [ 1700.556150][T28246] fido_id[28246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1700.573259][T21063] dvb-usb: bulk message failed: -22 (2/0) [ 1700.622648][T21063] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1700.653089][T21063] (NULL device *): no alternate interface [ 1700.691617][T28251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.853948][T28251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1700.897769][T28250] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 1700.913800][T28250] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1700.933466][T19191] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1700.978505][T21063] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1701.019262][T21068] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 1701.073272][T19191] usb 6-1: device descriptor read/64, error -71 [ 1701.104265][T28259] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 1701.721589][T19191] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1701.873364][T19191] usb 6-1: device descriptor read/64, error -71 [ 1702.174224][T19191] usb usb6-port1: attempt power cycle [ 1702.513797][T19191] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1702.624912][T19191] usb 6-1: device descriptor read/8, error -71 [ 1702.873277][T19191] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1702.934108][T19191] usb 6-1: device descriptor read/8, error -71 [ 1702.953105][ T24] usb 3-1: USB disconnect, device number 20 [ 1703.044157][T19191] usb usb6-port1: unable to enumerate USB device [ 1703.711780][T21068] peak_usb 1-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1703.899331][T21068] peak_usb 1-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1704.013484][T10430] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1704.014180][T21068] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71 [ 1704.057490][T21068] usb 1-1: USB disconnect, device number 32 [ 1704.131396][T28277] netlink: 'syz.5.6200': attribute type 13 has an invalid length. [ 1704.183551][T10430] usb 3-1: Using ep0 maxpacket: 32 [ 1704.190836][T10430] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 1704.199813][T10430] usb 3-1: config 0 has no interface number 0 [ 1704.211478][T10430] usb 3-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 1704.234525][T10430] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1704.245258][T10430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.260364][T10430] usb 3-1: Product: syz [ 1704.269416][T10430] usb 3-1: Manufacturer: syz [ 1704.279858][T10430] usb 3-1: SerialNumber: syz [ 1704.362910][T10430] usb 3-1: config 0 descriptor?? [ 1704.377463][T28273] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1704.590402][T28273] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1705.530119][T28277] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.601180][T28277] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.630518][T28277] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.685464][T28277] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.036423][T10430] net1080 3-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, fa:49:dc:f1:2b:c9 [ 1706.068013][T28310] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1706.076981][T28310] macsec1: entered allmulticast mode [ 1706.135661][T28310] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1706.185152][T28310] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1706.195377][T28310] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1706.528547][T25195] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1706.588076][T28317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1706.685279][T25195] usb 1-1: Using ep0 maxpacket: 32 [ 1706.738102][T25195] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 1706.773564][T25195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.785067][T10410] usb 3-1: USB disconnect, device number 21 [ 1706.794740][T10410] net1080 3-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 1706.811937][T25195] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 252 [ 1706.876327][T25195] usb 1-1: New USB device found, idVendor=046d, idProduct=ffff, bcdDevice= 0.00 [ 1706.905900][T25195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.965626][T25195] usb 1-1: config 0 descriptor?? [ 1706.996871][T28324] tipc: Enabling of bearer rejected, already enabled [ 1707.060476][T25195] usbhid 1-1:0.0: can't add hid device: -22 [ 1707.076777][T25195] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1707.449372][T28337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.458340][T28329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6206'. [ 1707.474051][T28337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.845317][T28329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1707.923294][T28302] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1708.333446][T28302] usb 7-1: Using ep0 maxpacket: 32 [ 1708.340875][T28302] usb 7-1: config 0 has an invalid interface number: 124 but max is 0 [ 1708.351194][T28302] usb 7-1: config 0 has no interface number 0 [ 1708.374706][T28302] usb 7-1: config 0 interface 124 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 1708.450146][T28302] usb 7-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=8c.e8 [ 1708.481074][T28302] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.539337][T28302] usb 7-1: Product: syz [ 1708.573005][T28302] usb 7-1: Manufacturer: syz [ 1708.602667][T28302] usb 7-1: SerialNumber: syz [ 1708.628342][T28302] usb 7-1: config 0 descriptor?? [ 1708.665374][T28302] kvaser_usb 7-1:0.124: error -ENODEV: Cannot get usb endpoint(s) [ 1708.683756][T10410] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1708.844389][T10410] usb 3-1: Using ep0 maxpacket: 8 [ 1708.861345][T10410] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1708.877215][T10410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.889731][T10430] usb 7-1: USB disconnect, device number 25 [ 1708.905453][T10410] usb 3-1: Product: syz [ 1708.919708][T10410] usb 3-1: Manufacturer: syz [ 1708.950298][T10410] usb 3-1: SerialNumber: syz [ 1708.987933][T10410] usb 3-1: config 0 descriptor?? [ 1709.002904][T28358] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6211'. [ 1709.002904][T28357] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6211'. [ 1709.032194][T10410] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1709.042001][T10410] usb 3-1: setting power ON [ 1709.046843][T10410] dvb-usb: bulk message failed: -22 (2/0) [ 1709.157116][T28291] usb 1-1: USB disconnect, device number 33 [ 1709.193081][T10410] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1709.224648][T10410] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1709.267278][T10410] usb 3-1: media controller created [ 1709.421706][T10410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1709.775575][T10410] usb 3-1: selecting invalid altsetting 6 [ 1709.808248][T10410] usb 3-1: digital interface selection failed (-22) [ 1709.828539][T10410] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1709.846066][T10410] usb 3-1: setting power OFF [ 1709.850974][T10410] dvb-usb: bulk message failed: -22 (2/0) [ 1709.860706][T10410] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1709.922560][T10410] (NULL device *): no alternate interface [ 1710.091963][T10410] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1710.353316][T28297] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1710.595491][T28297] usb 7-1: config index 0 descriptor too short (expected 31, got 27) [ 1710.611083][T28297] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1710.635505][T28297] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 1710.676834][T28297] usb 7-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1710.713314][T28297] usb 7-1: Product: syz [ 1710.763271][T28297] usb 7-1: Manufacturer: syz [ 1710.767975][T28297] usb 7-1: SerialNumber: syz [ 1711.182149][T28408] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 1711.194082][T28408] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 1711.202495][T28408] CPU: 0 UID: 0 PID: 28408 Comm: syz.5.6220 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 1711.214559][T28408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1711.224628][T28408] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 1711.230043][T28408] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 8d 42 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 aa 46 3e f8 85 [ 1711.249692][T28408] RSP: 0018:ffffc9000d1a7070 EFLAGS: 00010206 [ 1711.255810][T28408] RAX: ffffffff89821c13 RBX: 00000000000001a8 RCX: 0000000000080000 [ 1711.263854][T28408] RDX: ffffc9000d849000 RSI: 00000000000002bb RDI: 00000000000002bc [ 1711.271874][T28408] RBP: dffffc0000000000 R08: ffff888025bf5a00 R09: 0000000000000002 [ 1711.279883][T28408] R10: 00000000ffffffff R11: ffffffff89821bf0 R12: dffffc0000000000 [ 1711.287892][T28408] R13: 0000000000000035 R14: 0000000000000000 R15: ffff8880531dc000 [ 1711.295893][T28408] FS: 00007f6b5086c6c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1711.304858][T28408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1711.311464][T28408] CR2: 0000001b33e1bff8 CR3: 000000006c04c000 CR4: 00000000003526f0 [ 1711.319480][T28408] Call Trace: [ 1711.322777][T28408] [ 1711.325735][T28408] qdisc_tree_reduce_backlog+0x299/0x480 [ 1711.331518][T28408] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 1711.337265][T28408] fq_codel_change+0xa96/0xef0 [ 1711.342054][T28408] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1711.347735][T28408] ? __pfx_fq_codel_change+0x10/0x10 [ 1711.353054][T28408] ? __sock_sendmsg+0x219/0x270 [ 1711.357943][T28408] fq_codel_init+0x355/0x960 [ 1711.362570][T28408] ? lockdep_rtnl_is_held+0x26/0x40 [ 1711.367806][T28408] ? __pfx_fq_codel_init+0x10/0x10 [ 1711.372949][T28408] qdisc_create+0x7a9/0xea0 [ 1711.377486][T28408] tc_modify_qdisc+0x1426/0x2010 [ 1711.382458][T28408] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1711.387787][T28408] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1711.393103][T28408] rtnetlink_rcv_msg+0x77c/0xb70 [ 1711.398072][T28408] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1711.403211][T28408] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1711.408704][T28408] netlink_rcv_skb+0x205/0x470 [ 1711.413503][T28408] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1711.418998][T28408] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1711.424344][T28408] ? netlink_deliver_tap+0x2e/0x1b0 [ 1711.429578][T28408] ? netlink_deliver_tap+0x2e/0x1b0 [ 1711.434805][T28408] netlink_unicast+0x758/0x8d0 [ 1711.439606][T28408] netlink_sendmsg+0x805/0xb30 [ 1711.444406][T28408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1711.449722][T28408] ? aa_sock_msg_perm+0x94/0x160 [ 1711.454698][T28408] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1711.460012][T28408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1711.465336][T28408] __sock_sendmsg+0x219/0x270 [ 1711.470048][T28408] ____sys_sendmsg+0x505/0x830 [ 1711.474859][T28408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1711.480186][T28408] ? import_iovec+0x74/0xa0 [ 1711.484732][T28408] ___sys_sendmsg+0x21f/0x2a0 [ 1711.489456][T28408] ? __pfx____sys_sendmsg+0x10/0x10 [ 1711.494731][T28408] ? __fget_files+0x2a/0x420 [ 1711.499439][T28408] ? __fget_files+0x3a0/0x420 [ 1711.504141][T28408] __x64_sys_sendmsg+0x19b/0x260 [ 1711.509103][T28408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1711.514576][T28408] ? rcu_is_watching+0x15/0xb0 [ 1711.519349][T28408] ? do_syscall_64+0xbe/0x3b0 [ 1711.524034][T28408] do_syscall_64+0xfa/0x3b0 [ 1711.528537][T28408] ? lockdep_hardirqs_on+0x9c/0x150 [ 1711.533740][T28408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.539823][T28408] ? clear_bhb_loop+0x60/0xb0 [ 1711.544498][T28408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.550391][T28408] RIP: 0033:0x7f6b4f98e929 [ 1711.554828][T28408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1711.574582][T28408] RSP: 002b:00007f6b5086c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1711.583009][T28408] RAX: ffffffffffffffda RBX: 00007f6b4fbb6080 RCX: 00007f6b4f98e929 [ 1711.590988][T28408] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000005 [ 1711.598955][T28408] RBP: 00007f6b4fa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1711.606921][T28408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1711.614914][T28408] R13: 0000000000000000 R14: 00007f6b4fbb6080 R15: 00007f6b4fcdfa28 [ 1711.622894][T28408] [ 1711.625919][T28408] Modules linked in: [ 1711.630068][T28408] ---[ end trace 0000000000000000 ]--- [ 1711.635555][T28408] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 1711.640943][T28408] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 8d 42 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 aa 46 3e f8 85 [ 1711.660578][T28408] RSP: 0018:ffffc9000d1a7070 EFLAGS: 00010206 [ 1711.666674][T28408] RAX: ffffffff89821c13 RBX: 00000000000001a8 RCX: 0000000000080000 [ 1711.674677][T28408] RDX: ffffc9000d849000 RSI: 00000000000002bb RDI: 00000000000002bc [ 1711.682659][T28408] RBP: dffffc0000000000 R08: ffff888025bf5a00 R09: 0000000000000002 [ 1711.690669][T28408] R10: 00000000ffffffff R11: ffffffff89821bf0 R12: dffffc0000000000 [ 1711.698680][T28408] R13: 0000000000000035 R14: 0000000000000000 R15: ffff8880531dc000 [ 1711.706669][T28408] FS: 00007f6b5086c6c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1711.715619][T28408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1711.722201][T28408] CR2: 0000001b33e1bff8 CR3: 000000006c04c000 CR4: 00000000003526f0 [ 1711.730202][T28408] Kernel panic - not syncing: Fatal exception in interrupt [ 1711.737571][T28408] Kernel Offset: disabled [ 1711.741915][T28408] Rebooting in 86400 seconds..