last executing test programs: 14m20.93538163s ago: executing program 1 (id=1198): ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x4, 0x6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r5, 0x0, 0x2b) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = landlock_create_ruleset(0x0, 0x0, 0x3) landlock_restrict_self(r6, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x0, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000800)={0x2, 0x0, 0x0, 0x0, 0xf}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, &(0x7f0000000100)="0f01c2b8010000000f01c10f013f0f01c2660f3a16af5f850000e90f78143266baf80cb80c0f258fef66bafc0ced66b86f008ec0b9c50800000f32c4e2b93a5f00", 0x41}], 0x1, 0x14, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x1, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x400, 0x0, 0x2dd}}}, 0xb8}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m15.376396839s ago: executing program 1 (id=1203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast}) ioctl$mixer_OSS_GETVERSION(r7, 0x80044d76, &(0x7f0000000080)) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r10 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x2, 0x0, 0x2}) 14m13.789158299s ago: executing program 1 (id=1204): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, &(0x7f0000000380)=""/144, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x38d}]}) r4 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r5, 0xc04c5609, &(0x7f0000000240)=@multiplanar_userptr={0x4000008, 0x9, 0x4, 0x100000, 0x9, {}, {0x4, 0x1, 0x8, 0x2a, 0x1, 0x4, "9e55c1d5"}, 0x5, 0x2, {0x0}, 0x40, 0x0, r4}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0001}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x3ea000, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x5, 0x3}, {0x8000000, 0x2000, 0x1a, 0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0xff}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x80a0000, 0xd000, 0xf, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe, 0x5}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0xffffffff, [0x0, 0x0, 0x10000, 0x3]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$KVM_SET_MSRS(r9, 0x4140aecd, 0x0) pwrite64(r0, 0x0, 0x0, 0x9) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000980)={'syz1\x00', {0x0, 0xcf0d}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0x4f5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x4020, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xe20, 0xa78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0x0, 0x1], [0x3, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x4, 0xed, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x5, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x2000000, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x84dc, 0x80000000, 0x0, 0xf, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x10001], [0x2, 0x0, 0x6, 0x40000, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x100004, 0x800, 0x800000, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0xfd0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_SWBIT(r11, 0x4004556d, 0x0) ioctl$UI_DEV_CREATE(r11, 0x5501) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) close_range(r6, 0xffffffffffffffff, 0x0) 14m7.478348192s ago: executing program 1 (id=1212): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x402, 0xc1) getdents(r0, &(0x7f00000000c0)=""/31, 0x1f) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xc, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x10015c0, &(0x7f0000000300)={0x0, 0xe3da, 0x1, 0x3, 0x145}, &(0x7f0000000200), &(0x7f00000001c0), &(0x7f0000000000)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f00000007c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r3 = getpid() write$FUSE_INIT(r2, &(0x7f0000005080)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x80040, 0x52, 0x4, 0x400, 0xc, 0x0, 0x0, 0x10, 0x2}}, 0x50) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000300)={'veth0_to_bond\x00', &(0x7f00000003c0)=@ethtool_ringparam={0x10, 0x7, 0x0, 0xf362, 0x8001, 0x80, 0xc, 0x8, 0xff}}) socket$netlink(0x10, 0x3, 0x15) landlock_restrict_self(r5, 0x0) umount2(0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14m4.857206553s ago: executing program 1 (id=1215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000002200010b00000000ffdbdf254a00000058e9f9e61df576e9421457fc52b25e1924a141e8ac297c91a31350872c2ff90891b82d6b3f469912f9167bad47c7e7f45d39b04b06ee35e5ebcdace597bc5fa039364974cdc2f912fb352ab6f6d34575c475537caf1e9dbfbeab55ec68cb63514dc0fb0634567dcbadfe14962447c0b4ccf97c0de27c92caafcc910833746db421c79b490d31cc9bfa071b24be62fd466a68c2875ffaa10187fe6ac5c6a6ad1670b544514460841d71bd79b1b53ebacc623cafee2d06e29363dd0ffbc755e6f01b6b7452e5a4ebb5a1fdd89804a3347185217762efdbf71c47f70732f650779b6ec9"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x28, 0x140f, 0xa821769c5c00448b, 0x70bd2b, 0x25d7db7c, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0xc044) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x4}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008851}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0x7, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0xd, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0x2c}}, 0x400c4) 14m1.988350192s ago: executing program 1 (id=1219): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000100)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x28, 0x140f, 0xa821769c5c00448b, 0x70bd2b, 0x25d7db7c, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0xc044) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x4}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008851}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0x7, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0xd, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0x2c}}, 0x400c4) 13m46.493773824s ago: executing program 32 (id=1219): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000100)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x28, 0x140f, 0xa821769c5c00448b, 0x70bd2b, 0x25d7db7c, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0xc044) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x4}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008851}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0x7, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0xd, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0x2c}}, 0x400c4) 5m2.07460117s ago: executing program 0 (id=1990): syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030000002035120382400001020301090269000301090002080b0001010920090904000000010120"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000000c0), 0x0}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r1, &(0x7f00000001c0)=[{0x0, 0x3f, 0x0, 0x0, @tick, {}, {}, @result={0x2, 0x1}}], 0x1c) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfe, {}, {}, @raw32}], 0xffc8) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc4b13b6eaa22235f, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0xa, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000640)={0x40, 0xb, 0x1, "e2"}, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x1174, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0) 5m0.072787701s ago: executing program 0 (id=1997): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) set_mempolicy(0x4005, 0x0, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) socket$kcm(0x2, 0x3, 0x2) r3 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r3, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) syz_usb_control_io(r6, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="209f010000002e"], 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2040, 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES16=r7, @ANYRES32=r1, @ANYRESDEC=0x0]) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f00008e8000/0x4000)=nil) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r9, &(0x7f0000000100)='./file0\x00', 0x220) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r11, &(0x7f0000000000), 0x4001) waitid(0x0, r11, 0x0, 0x4, 0xfffffffffffffffe) dup(r10) 4m56.548778666s ago: executing program 0 (id=2004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x2040009, 0x600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xe}, {0xffe0, 0x5}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendfile(r3, r3, 0x0, 0x2000009) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10011}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0x5) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x28, 0x4, 0x6, 0xe13dd077c6bdf15b, 0x0, 0x0, {0x2bd097139f30f08a, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4m49.917566746s ago: executing program 0 (id=2012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x2040009, 0x600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xe}, {0xffe0, 0x5}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendfile(r3, r3, 0x0, 0x2000009) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10011}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0x5) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x28, 0x4, 0x6, 0xe13dd077c6bdf15b, 0x0, 0x0, {0x2bd097139f30f08a, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4m46.435242074s ago: executing program 0 (id=2019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000, 0x0, 0x1}, 0x1c) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)="5986c661ebb4fa6464cb14c75e9cfcd0c87d963c5f79227680b88d91ffce97afa404ce506c636d7edc5e22087a65633b94cdee29d97975aa7905b64cc8a1da29c7b4228fe35f3cf9351e377acfcce4079803e636b37d253db4084bbaa072917794b87e398d654c7970b8d907ea25c42b466116c0100a456e897e59ef282d4165978c6b26052d23a08264e673d53a443022bd4e5fb0d2e8f8cd56f16de1e4422331fba2f084a61ea3ef4b71e9c72fcf4d121f031a680406c377de80198e074f1bc747e77eff9a4316aafdc5f73218f38c6deb764ffd2fb0989fc9d7fc6c9e0000", 0xe0}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x8040010) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x0, 0xa}) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xb7, 0x7f, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x20, 0x700, 0x5, 0x39}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002380)=@newtfilter={0x1228, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x11f8, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x26, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x0, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0xfffffffc, 0xd460, 0x200, 0x80000001, 0x10, 0x2, 0x10008, 0x7, 0x7, 0x2, 0x7, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x0, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0xffffffff, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x1, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x3, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x401, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0x7ff, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x8, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x807e, 0xfffffb01, 0x4, 0x6, 0xd, 0x3ab, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x5, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x20006, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x202, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0xb, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}, @TCA_ROUTE4_ACT={0x158, 0x6, [@m_ife={0x154, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x10001, 0x4, 0x1, 0x400}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa87, 0xf82a, 0x10000000, 0x805, 0x4}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x1, 0x0, 0x9}, 0x1}}]}, {0xb1, 0x6, "6fdeb29f1777ba3480546425fcae4cbfff001b990fc0ddbbc5551a2cb3c0fb7d14f0bec44c53049d3441b4c227ce3104678eb4ccd70bc58b65f4e7a5f7d5d5b380ccaf6c9ce0a2d9f7397014e2b3616a73986f7d7089f31102ebd138c4c6d305ecf802e5ac905dcbc057202f393e583574cfafc03b7f56253a4d5ab7b87d005f3a6fa68a74a03b43af065a8284a998dac9c55dd0da551e1634247bb20b6f977306859cc02737c90b6ff3613e57"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_ROUTE4_POLICE={0x814, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4f, 0x3, 0x6, 0x3, 0x8, 0x0, 0x3ff, 0x81, 0x8, 0x77, 0x1f85e7e3, 0x39e, 0x4, 0x2, 0x7, 0xffff00, 0x0, 0x380, 0x4, 0x3, 0xf9, 0x0, 0x8, 0x4, 0x400, 0x10000, 0x8, 0x1, 0x9, 0x32b3, 0x10000, 0x2521, 0x10001, 0x3, 0xc, 0x1, 0x10001, 0x101, 0x7, 0x1, 0x4, 0x3, 0x80000000, 0x8, 0x7, 0x8, 0x7fff, 0x800, 0x0, 0x6, 0xa0, 0x1000, 0xffff0001, 0xb, 0x4, 0xffff8001, 0x2, 0x3, 0x8, 0xd, 0x2, 0x5, 0xd8f, 0x0, 0x4, 0xfffffffb, 0x10001, 0x27b1, 0x3, 0x2e0, 0x8, 0x8, 0x2, 0x81, 0x7, 0x5af0668a, 0x100, 0xfffffffd, 0xb, 0x3ff, 0x9, 0x0, 0x6, 0x10000, 0x5, 0xfff, 0x0, 0x1, 0x8, 0xe, 0x427d, 0x2, 0x3ff, 0x6, 0x0, 0x1, 0x7c966d50, 0x2, 0x1, 0x8, 0x86d4, 0x8, 0x2, 0xd5, 0x0, 0x2, 0x1, 0x9, 0x7, 0x80, 0x0, 0x3, 0x9, 0x0, 0x54, 0x7, 0x4, 0xf8, 0x2, 0x80000000, 0x7643, 0x7fffffff, 0x8, 0x79, 0x9, 0x9, 0xd170, 0x9, 0x7a71bb03, 0x0, 0xfffffffd, 0x10, 0x259674e7, 0x7, 0x7, 0xb10, 0x8, 0x8, 0x2, 0x4, 0x11, 0x6, 0x5, 0x100, 0x6a, 0x6, 0x9, 0x0, 0x80, 0x5, 0x1, 0x9, 0x8, 0x9, 0x6, 0x6, 0x5, 0x6, 0xd, 0x9, 0x1, 0x2, 0xd, 0x3, 0x8, 0x0, 0x80000001, 0x800, 0x5, 0x3, 0x3, 0x6, 0x0, 0x81, 0xcd7b, 0x9, 0xf, 0x2, 0x7, 0x1, 0xc566, 0x6, 0x9, 0x327, 0xf17, 0x7, 0x8000, 0x4, 0xda, 0x4, 0x0, 0x8, 0x9, 0x3, 0x10001, 0xb422, 0x2, 0xffff, 0x3, 0x4, 0x66e8, 0x8000, 0xfffff1bd, 0x3, 0x8, 0x9, 0xad, 0x8000, 0x3800000, 0x6, 0x10001, 0x77d, 0x4, 0xf154, 0xd29, 0x7, 0x9, 0x81, 0x6, 0x8000, 0x6, 0x2, 0x1, 0x4, 0x2b, 0x6a, 0x200, 0x10000, 0x3, 0xdb, 0x6, 0x40, 0xd, 0x7c2, 0xff, 0x1000, 0x6, 0x0, 0x3, 0x3, 0x3, 0x4, 0x3, 0x1e6, 0x3, 0xe9, 0xf781, 0x2668, 0x4300, 0x81, 0x6, 0x4, 0x9, 0xf, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x2, 0x5, 0x3, 0x9, 0x7, 0x200, 0x0, 0x0, 0x2444, 0x1ff, 0x7ff, 0x1, 0x40, 0x46, 0xffffffff, 0x2, 0x7ab, 0x987, 0xff, 0x5, 0x9, 0x8, 0xf, 0x5, 0x8, 0x5, 0x2, 0x2, 0x9, 0x400, 0xb, 0x1, 0x4, 0x10001, 0x7, 0xffffffff, 0x6, 0x4, 0xbe3, 0x8001, 0x6, 0x42, 0x9, 0xffff0001, 0x4, 0x800, 0x2, 0x77, 0x9, 0x2, 0x1, 0x8, 0x77d, 0xf, 0x5b, 0x4, 0x5, 0x1, 0x2, 0x1, 0x1, 0x9, 0x8, 0x0, 0x6, 0x7d0d, 0x0, 0x78e, 0x5, 0x515c, 0x5, 0xe, 0x1, 0x5, 0xc6ab, 0x80000000, 0x0, 0x3, 0x2, 0x101, 0x80, 0xfffffff8, 0xc4, 0x276790e1, 0x3, 0xfffff175, 0x3, 0x6, 0x400, 0x6, 0x836, 0x0, 0x5, 0xfffffff3, 0x4, 0x9, 0x7483, 0x8, 0x6, 0x2, 0x1ff, 0x3, 0x5, 0x8, 0x2, 0x4, 0x10001, 0xf, 0x3, 0x2, 0x0, 0x6, 0x9, 0x100, 0x6, 0x9, 0x3, 0x5393, 0x76102963, 0x4, 0x4, 0x9d7, 0x6, 0x800, 0x10001, 0x9, 0x6, 0x4, 0x3, 0x200, 0x3, 0x6, 0xf86, 0x3, 0x1, 0x5, 0x9, 0x4, 0x7fff, 0x5, 0x81, 0x800, 0x6, 0x1, 0x5, 0x9, 0x2, 0x7, 0x7f, 0x3, 0x2, 0x5, 0x800, 0x7, 0x10, 0x5, 0x8001, 0x8, 0xf, 0x738, 0x9, 0x8001, 0x9, 0xfffffff8, 0xfffffff8, 0x5, 0x9, 0x3, 0x5, 0xea, 0x4, 0x0, 0x401, 0x5, 0x9, 0x1f10b8ed, 0x1, 0x4, 0xc, 0x10, 0x5, 0xeb0f, 0x8, 0x8ba, 0x1, 0x10, 0x9, 0x4, 0x6, 0x8, 0x3, 0x4, 0x50, 0x2, 0x4, 0xf6, 0x54, 0x6, 0xfffffc00, 0x81, 0x5, 0x8, 0x9, 0x6, 0x1800, 0xa, 0x1, 0x7, 0xcb, 0xe, 0xd, 0x200, 0x2, 0x1e, 0x40, 0x2d, 0x5, 0x80000000, 0xffff, 0x3, 0x7fffffff, 0xb, 0x8, 0xa9e, 0x5, 0x8, 0x81, 0x8, 0xcaa, 0x9, 0x9, 0x8, 0x86dd, 0x0, 0x5, 0x5, 0x1, 0x6, 0xb, 0xfffffe23, 0x4, 0x0, 0x5, 0xfffffffb, 0x7, 0x8, 0x7, 0x3c, 0x6, 0x40, 0xb, 0x401, 0x9, 0x3]}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x1228}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x100000c2}, 0x80) 4m45.82211994s ago: executing program 0 (id=2020): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000100)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000002200010b00000000ffdbdf254a00000058e9f9e61df576e9421457fc52b25e1924a141e8ac297c91a31350872c2ff90891b82d6b3f469912f9167bad47c7e7f45d39b04b06ee35e5ebcdace597bc5fa039364974cdc2f912fb352ab6f6d34575c475537caf1e9dbfbeab55ec68cb63514dc0fb0634567dcbadfe14962447c0b4ccf97c0de27c92caafcc910833746db421c79b490d31cc9bfa071b24be62fd466a68c2875ffaa10187fe6ac5c6a6ad1670b544514460841d71bd79b1b53ebacc623cafee2d06e29363dd0ffbc755e6f01b6b7452e5a4ebb5a1fdd89804a3347185217762efdbf71c47f70732f650779b6ec9"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x28, 0x140f, 0xa821769c5c00448b, 0x70bd2b, 0x25d7db7c, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0xc044) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x4}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008851}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0x7, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0xd, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0x2c}}, 0x400c4) 4m44.793168429s ago: executing program 33 (id=2020): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000100)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000002200010b00000000ffdbdf254a00000058e9f9e61df576e9421457fc52b25e1924a141e8ac297c91a31350872c2ff90891b82d6b3f469912f9167bad47c7e7f45d39b04b06ee35e5ebcdace597bc5fa039364974cdc2f912fb352ab6f6d34575c475537caf1e9dbfbeab55ec68cb63514dc0fb0634567dcbadfe14962447c0b4ccf97c0de27c92caafcc910833746db421c79b490d31cc9bfa071b24be62fd466a68c2875ffaa10187fe6ac5c6a6ad1670b544514460841d71bd79b1b53ebacc623cafee2d06e29363dd0ffbc755e6f01b6b7452e5a4ebb5a1fdd89804a3347185217762efdbf71c47f70732f650779b6ec9"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x28, 0x140f, 0xa821769c5c00448b, 0x70bd2b, 0x25d7db7c, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0xc044) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETSNDBUF(r5, 0x400454d4, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x4}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008851}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f00000005c0)="ba", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r11, 0x1, 0x7, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r13, {0xd, 0x4}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0x2c}}, 0x400c4) 7.067943788s ago: executing program 2 (id=3108): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x17, 0x0, 0x20) r8 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f0000000000)={0x2}, 0x0) close(0x3) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x36, &(0x7f0000000100)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10) shutdown(r10, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r11 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r11, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7fffe000}}], 0x1, 0x0, 0x0) sendmmsg(r11, 0x0, 0x0, 0x9200000000000000) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c0200"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.420426295s ago: executing program 6 (id=3124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000, 0x0, 0x1}, 0x1c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)="5986c661ebb4fa6464cb14c75e9cfcd0c87d963c5f79227680b88d91ffce97afa404ce506c636d7edc5e22087a65633b94cdee29d97975aa7905b64cc8a1da29c7b4228fe35f3cf9351e377acfcce4079803e636b37d253db4084bbaa072917794b87e398d654c7970b8d907ea25c42b466116c0100a456e897e59ef282d4165978c6b26052d23a08264e673d53a443022bd4e5fb0d2e8f8cd56f16de1e4422331fba2f084a61ea3ef4b71e9c72fcf4d121f031a680406c377de80198e074f1bc747e77eff9a4316aafdc5f73218f38c6deb764ffd2fb0989fc9d7fc6c9e0000", 0xe0}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x8040010) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x0, 0xa}) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xb7, 0x7f, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x20, 0x700, 0x5, 0x39}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002380)=@newtfilter={0x1228, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x11f8, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x26, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x0, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0xfffffffc, 0xd460, 0x200, 0x80000001, 0x10, 0x2, 0x10008, 0x7, 0x7, 0x2, 0x7, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x0, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0xffffffff, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x1, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x3, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x401, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0x7ff, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x8, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x807e, 0xfffffb01, 0x4, 0x6, 0xd, 0x3ab, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x5, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x20006, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x202, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0xb, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}, @TCA_ROUTE4_ACT={0x158, 0x6, [@m_ife={0x154, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x10001, 0x4, 0x1, 0x400}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa87, 0xf82a, 0x10000000, 0x805, 0x4}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x1, 0x0, 0x9}, 0x1}}]}, {0xb1, 0x6, "6fdeb29f1777ba3480546425fcae4cbfff001b990fc0ddbbc5551a2cb3c0fb7d14f0bec44c53049d3441b4c227ce3104678eb4ccd70bc58b65f4e7a5f7d5d5b380ccaf6c9ce0a2d9f7397014e2b3616a73986f7d7089f31102ebd138c4c6d305ecf802e5ac905dcbc057202f393e583574cfafc03b7f56253a4d5ab7b87d005f3a6fa68a74a03b43af065a8284a998dac9c55dd0da551e1634247bb20b6f977306859cc02737c90b6ff3613e57"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_ROUTE4_POLICE={0x814, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4f, 0x3, 0x6, 0x3, 0x8, 0x0, 0x3ff, 0x81, 0x8, 0x77, 0x1f85e7e3, 0x39e, 0x4, 0x2, 0x7, 0xffff00, 0x0, 0x380, 0x4, 0x3, 0xf9, 0x0, 0x8, 0x4, 0x400, 0x10000, 0x8, 0x1, 0x9, 0x32b3, 0x10000, 0x2521, 0x10001, 0x3, 0xc, 0x1, 0x10001, 0x101, 0x7, 0x1, 0x4, 0x3, 0x80000000, 0x8, 0x7, 0x8, 0x7fff, 0x800, 0x0, 0x6, 0xa0, 0x1000, 0xffff0001, 0xb, 0x4, 0xffff8001, 0x2, 0x3, 0x8, 0xd, 0x2, 0x5, 0xd8f, 0x0, 0x4, 0xfffffffb, 0x10001, 0x27b1, 0x3, 0x2e0, 0x8, 0x8, 0x2, 0x81, 0x7, 0x5af0668a, 0x100, 0xfffffffd, 0xb, 0x3ff, 0x9, 0x0, 0x6, 0x10000, 0x5, 0xfff, 0x0, 0x1, 0x8, 0xe, 0x427d, 0x2, 0x3ff, 0x6, 0x0, 0x1, 0x7c966d50, 0x2, 0x1, 0x8, 0x86d4, 0x8, 0x2, 0xd5, 0x0, 0x2, 0x1, 0x9, 0x7, 0x80, 0x0, 0x3, 0x9, 0x0, 0x54, 0x7, 0x4, 0xf8, 0x2, 0x80000000, 0x7643, 0x7fffffff, 0x8, 0x79, 0x9, 0x9, 0xd170, 0x9, 0x7a71bb03, 0x0, 0xfffffffd, 0x10, 0x259674e7, 0x7, 0x7, 0xb10, 0x8, 0x8, 0x2, 0x4, 0x11, 0x6, 0x5, 0x100, 0x6a, 0x6, 0x9, 0x0, 0x80, 0x5, 0x1, 0x9, 0x8, 0x9, 0x6, 0x6, 0x5, 0x6, 0xd, 0x9, 0x1, 0x2, 0xd, 0x3, 0x8, 0x0, 0x80000001, 0x800, 0x5, 0x3, 0x3, 0x6, 0x0, 0x81, 0xcd7b, 0x9, 0xf, 0x2, 0x7, 0x1, 0xc566, 0x6, 0x9, 0x327, 0xf17, 0x7, 0x8000, 0x4, 0xda, 0x4, 0x0, 0x8, 0x9, 0x3, 0x10001, 0xb422, 0x2, 0xffff, 0x3, 0x4, 0x66e8, 0x8000, 0xfffff1bd, 0x3, 0x8, 0x9, 0xad, 0x8000, 0x3800000, 0x6, 0x10001, 0x77d, 0x4, 0xf154, 0xd29, 0x7, 0x9, 0x81, 0x6, 0x8000, 0x6, 0x2, 0x1, 0x4, 0x2b, 0x6a, 0x200, 0x10000, 0x3, 0xdb, 0x6, 0x40, 0xd, 0x7c2, 0xff, 0x1000, 0x6, 0x0, 0x3, 0x3, 0x3, 0x4, 0x3, 0x1e6, 0x3, 0xe9, 0xf781, 0x2668, 0x4300, 0x81, 0x6, 0x4, 0x9, 0xf, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x2, 0x5, 0x3, 0x9, 0x7, 0x200, 0x0, 0x0, 0x2444, 0x1ff, 0x7ff, 0x1, 0x40, 0x46, 0xffffffff, 0x2, 0x7ab, 0x987, 0xff, 0x5, 0x9, 0x8, 0xf, 0x5, 0x8, 0x5, 0x2, 0x2, 0x9, 0x400, 0xb, 0x1, 0x4, 0x10001, 0x7, 0xffffffff, 0x6, 0x4, 0xbe3, 0x8001, 0x6, 0x42, 0x9, 0xffff0001, 0x4, 0x800, 0x2, 0x77, 0x9, 0x2, 0x1, 0x8, 0x77d, 0xf, 0x5b, 0x4, 0x5, 0x1, 0x2, 0x1, 0x1, 0x9, 0x8, 0x0, 0x6, 0x7d0d, 0x0, 0x78e, 0x5, 0x515c, 0x5, 0xe, 0x1, 0x5, 0xc6ab, 0x80000000, 0x0, 0x3, 0x2, 0x101, 0x80, 0xfffffff8, 0xc4, 0x276790e1, 0x3, 0xfffff175, 0x3, 0x6, 0x400, 0x6, 0x836, 0x0, 0x5, 0xfffffff3, 0x4, 0x9, 0x7483, 0x8, 0x6, 0x2, 0x1ff, 0x3, 0x5, 0x8, 0x2, 0x4, 0x10001, 0xf, 0x3, 0x2, 0x0, 0x6, 0x9, 0x100, 0x6, 0x9, 0x3, 0x5393, 0x76102963, 0x4, 0x4, 0x9d7, 0x6, 0x800, 0x10001, 0x9, 0x6, 0x4, 0x3, 0x200, 0x3, 0x6, 0xf86, 0x3, 0x1, 0x5, 0x9, 0x4, 0x7fff, 0x5, 0x81, 0x800, 0x6, 0x1, 0x5, 0x9, 0x2, 0x7, 0x7f, 0x3, 0x2, 0x5, 0x800, 0x7, 0x10, 0x5, 0x8001, 0x8, 0xf, 0x738, 0x9, 0x8001, 0x9, 0xfffffff8, 0xfffffff8, 0x5, 0x9, 0x3, 0x5, 0xea, 0x4, 0x0, 0x401, 0x5, 0x9, 0x1f10b8ed, 0x1, 0x4, 0xc, 0x10, 0x5, 0xeb0f, 0x8, 0x8ba, 0x1, 0x10, 0x9, 0x4, 0x6, 0x8, 0x3, 0x4, 0x50, 0x2, 0x4, 0xf6, 0x54, 0x6, 0xfffffc00, 0x81, 0x5, 0x8, 0x9, 0x6, 0x1800, 0xa, 0x1, 0x7, 0xcb, 0xe, 0xd, 0x200, 0x2, 0x1e, 0x40, 0x2d, 0x5, 0x80000000, 0xffff, 0x3, 0x7fffffff, 0xb, 0x8, 0xa9e, 0x5, 0x8, 0x81, 0x8, 0xcaa, 0x9, 0x9, 0x8, 0x86dd, 0x0, 0x5, 0x5, 0x1, 0x6, 0xb, 0xfffffe23, 0x4, 0x0, 0x5, 0xfffffffb, 0x7, 0x8, 0x7, 0x3c, 0x6, 0x40, 0xb, 0x401, 0x9, 0x3]}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x1228}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x100000c2}, 0x80) 4.298550238s ago: executing program 6 (id=3127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x2040009, 0x600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0xe}, {0xffe0, 0x5}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000009) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10011}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0x5) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x28, 0x4, 0x6, 0xe13dd077c6bdf15b, 0x0, 0x0, {0x2bd097139f30f08a, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x50) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.120666532s ago: executing program 3 (id=3129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 3.978379006s ago: executing program 3 (id=3131): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='#(0.', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x80800) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa91, 0x156, 0x1, 0x1, 0xd59f80, 0xffffff0e, 0x4, 0x8, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x7, {0xb, 0xffffffff}, 0xcd, 0x7}}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000180), 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x11e, 0x83, 0x0, &(0x7f0000001100)) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x9c, &(0x7f00000002c0)={@link_local={0x3}, @multicast, @void, {@llc={0x4, {@snap={0xaa, 0x0, "c724", "49f792", 0x886c, "fb36612948e17c571a3967cbed0881b72c57966cb1581e5f5bf9792a8299bd4f4f5383f261b044d0577e8ff67c8098b3bd0fd6c74a07a256c871bf5eee496539da1d14bc701d98d47b635af1206a746ba8dc7c1022f08fa1287cd898609b9898ac87a71900cc2b3107e9460ba947e4a7eb9565632187e3a55bcdb78c98bc311cf43f53713b"}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) 3.904102572s ago: executing program 2 (id=3134): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x25dfdbfe, {0xa, 0x18, 0x0, 0xfd, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x180}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3.803165049s ago: executing program 2 (id=3136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 3.71615547s ago: executing program 5 (id=3138): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x2, 0x0) 3.666414172s ago: executing program 2 (id=3139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 3.573214683s ago: executing program 2 (id=3140): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8f, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x4, 0x10, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5409, 0xb, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x1, 0x80, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x81, 0x6, 0x9, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x3, 0x9}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}}) 3.345664692s ago: executing program 5 (id=3142): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x17b) r0 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x3f}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 3.278679831s ago: executing program 4 (id=3143): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046, 0xc0}) 3.213845384s ago: executing program 5 (id=3144): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d10009050700000000000009058973"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x2000) 3.179639479s ago: executing program 4 (id=3145): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='#(0.', 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x80800) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa91, 0x156, 0x1, 0x1, 0xd59f80, 0xffffff0e, 0x4, 0x8, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x7, {0xb, 0xffffffff}, 0xcd, 0x7}}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000180), 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x11e, 0x83, 0x0, &(0x7f0000001100)) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x9c, &(0x7f00000002c0)={@link_local={0x3}, @multicast, @void, {@llc={0x4, {@snap={0xaa, 0x0, "c724", "49f792", 0x886c, "fb36612948e17c571a3967cbed0881b72c57966cb1581e5f5bf9792a8299bd4f4f5383f261b044d0577e8ff67c8098b3bd0fd6c74a07a256c871bf5eee496539da1d14bc701d98d47b635af1206a746ba8dc7c1022f08fa1287cd898609b9898ac87a71900cc2b3107e9460ba947e4a7eb9565632187e3a55bcdb78c98bc311cf43f53713b"}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) 3.060913546s ago: executing program 3 (id=3146): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0024280000002800826313612b8526792c3cbdeace918d0fb74237cc6e446c4e88e7885505"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.228837175s ago: executing program 4 (id=3147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 2.141931095s ago: executing program 4 (id=3148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000020000180140002006c6f000000000000000000000000000008000300010000002400038008000200400000000c00050001000000000000000c0004"], 0x58}}, 0x0) 2.000106117s ago: executing program 4 (id=3149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000, 0x0, 0x1}, 0x1c) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)="5986c661ebb4fa6464cb14c75e9cfcd0c87d963c5f79227680b88d91ffce97afa404ce506c636d7edc5e22087a65633b94cdee29d97975aa7905b64cc8a1da29c7b4228fe35f3cf9351e377acfcce4079803e636b37d253db4084bbaa072917794b87e398d654c7970b8d907ea25c42b466116c0100a456e897e59ef282d4165978c6b26052d23a08264e673d53a443022bd4e5fb0d2e8f8cd56f16de1e4422331fba2f084a61ea3ef4b71e9c72fcf4d121f031a680406c377de80198e074f1bc747e77eff9a4316aafdc5f73218f38c6deb764ffd2fb0989fc9d7fc6c9e0000", 0xe0}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x8040010) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x0, 0xa}) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xb7, 0x7f, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x20, 0x700, 0x5, 0x39}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002380)=@newtfilter={0x1228, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x11f8, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x26, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x0, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0xfffffffc, 0xd460, 0x200, 0x80000001, 0x10, 0x2, 0x10008, 0x7, 0x7, 0x2, 0x7, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x0, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0xffffffff, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x1, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x3, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x401, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0x7ff, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x8, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x807e, 0xfffffb01, 0x4, 0x6, 0xd, 0x3ab, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x5, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x20006, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x202, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0xb, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}, @TCA_ROUTE4_ACT={0x158, 0x6, [@m_ife={0x154, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x10001, 0x4, 0x1, 0x400}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa87, 0xf82a, 0x10000000, 0x805, 0x4}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x1, 0x0, 0x9}, 0x1}}]}, {0xb1, 0x6, "6fdeb29f1777ba3480546425fcae4cbfff001b990fc0ddbbc5551a2cb3c0fb7d14f0bec44c53049d3441b4c227ce3104678eb4ccd70bc58b65f4e7a5f7d5d5b380ccaf6c9ce0a2d9f7397014e2b3616a73986f7d7089f31102ebd138c4c6d305ecf802e5ac905dcbc057202f393e583574cfafc03b7f56253a4d5ab7b87d005f3a6fa68a74a03b43af065a8284a998dac9c55dd0da551e1634247bb20b6f977306859cc02737c90b6ff3613e57"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_ROUTE4_POLICE={0x814, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4f, 0x3, 0x6, 0x3, 0x8, 0x0, 0x3ff, 0x81, 0x8, 0x77, 0x1f85e7e3, 0x39e, 0x4, 0x2, 0x7, 0xffff00, 0x0, 0x380, 0x4, 0x3, 0xf9, 0x0, 0x8, 0x4, 0x400, 0x10000, 0x8, 0x1, 0x9, 0x32b3, 0x10000, 0x2521, 0x10001, 0x3, 0xc, 0x1, 0x10001, 0x101, 0x7, 0x1, 0x4, 0x3, 0x80000000, 0x8, 0x7, 0x8, 0x7fff, 0x800, 0x0, 0x6, 0xa0, 0x1000, 0xffff0001, 0xb, 0x4, 0xffff8001, 0x2, 0x3, 0x8, 0xd, 0x2, 0x5, 0xd8f, 0x0, 0x4, 0xfffffffb, 0x10001, 0x27b1, 0x3, 0x2e0, 0x8, 0x8, 0x2, 0x81, 0x7, 0x5af0668a, 0x100, 0xfffffffd, 0xb, 0x3ff, 0x9, 0x0, 0x6, 0x10000, 0x5, 0xfff, 0x0, 0x1, 0x8, 0xe, 0x427d, 0x2, 0x3ff, 0x6, 0x0, 0x1, 0x7c966d50, 0x2, 0x1, 0x8, 0x86d4, 0x8, 0x2, 0xd5, 0x0, 0x2, 0x1, 0x9, 0x7, 0x80, 0x0, 0x3, 0x9, 0x0, 0x54, 0x7, 0x4, 0xf8, 0x2, 0x80000000, 0x7643, 0x7fffffff, 0x8, 0x79, 0x9, 0x9, 0xd170, 0x9, 0x7a71bb03, 0x0, 0xfffffffd, 0x10, 0x259674e7, 0x7, 0x7, 0xb10, 0x8, 0x8, 0x2, 0x4, 0x11, 0x6, 0x5, 0x100, 0x6a, 0x6, 0x9, 0x0, 0x80, 0x5, 0x1, 0x9, 0x8, 0x9, 0x6, 0x6, 0x5, 0x6, 0xd, 0x9, 0x1, 0x2, 0xd, 0x3, 0x8, 0x0, 0x80000001, 0x800, 0x5, 0x3, 0x3, 0x6, 0x0, 0x81, 0xcd7b, 0x9, 0xf, 0x2, 0x7, 0x1, 0xc566, 0x6, 0x9, 0x327, 0xf17, 0x7, 0x8000, 0x4, 0xda, 0x4, 0x0, 0x8, 0x9, 0x3, 0x10001, 0xb422, 0x2, 0xffff, 0x3, 0x4, 0x66e8, 0x8000, 0xfffff1bd, 0x3, 0x8, 0x9, 0xad, 0x8000, 0x3800000, 0x6, 0x10001, 0x77d, 0x4, 0xf154, 0xd29, 0x7, 0x9, 0x81, 0x6, 0x8000, 0x6, 0x2, 0x1, 0x4, 0x2b, 0x6a, 0x200, 0x10000, 0x3, 0xdb, 0x6, 0x40, 0xd, 0x7c2, 0xff, 0x1000, 0x6, 0x0, 0x3, 0x3, 0x3, 0x4, 0x3, 0x1e6, 0x3, 0xe9, 0xf781, 0x2668, 0x4300, 0x81, 0x6, 0x4, 0x9, 0xf, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x2, 0x5, 0x3, 0x9, 0x7, 0x200, 0x0, 0x0, 0x2444, 0x1ff, 0x7ff, 0x1, 0x40, 0x46, 0xffffffff, 0x2, 0x7ab, 0x987, 0xff, 0x5, 0x9, 0x8, 0xf, 0x5, 0x8, 0x5, 0x2, 0x2, 0x9, 0x400, 0xb, 0x1, 0x4, 0x10001, 0x7, 0xffffffff, 0x6, 0x4, 0xbe3, 0x8001, 0x6, 0x42, 0x9, 0xffff0001, 0x4, 0x800, 0x2, 0x77, 0x9, 0x2, 0x1, 0x8, 0x77d, 0xf, 0x5b, 0x4, 0x5, 0x1, 0x2, 0x1, 0x1, 0x9, 0x8, 0x0, 0x6, 0x7d0d, 0x0, 0x78e, 0x5, 0x515c, 0x5, 0xe, 0x1, 0x5, 0xc6ab, 0x80000000, 0x0, 0x3, 0x2, 0x101, 0x80, 0xfffffff8, 0xc4, 0x276790e1, 0x3, 0xfffff175, 0x3, 0x6, 0x400, 0x6, 0x836, 0x0, 0x5, 0xfffffff3, 0x4, 0x9, 0x7483, 0x8, 0x6, 0x2, 0x1ff, 0x3, 0x5, 0x8, 0x2, 0x4, 0x10001, 0xf, 0x3, 0x2, 0x0, 0x6, 0x9, 0x100, 0x6, 0x9, 0x3, 0x5393, 0x76102963, 0x4, 0x4, 0x9d7, 0x6, 0x800, 0x10001, 0x9, 0x6, 0x4, 0x3, 0x200, 0x3, 0x6, 0xf86, 0x3, 0x1, 0x5, 0x9, 0x4, 0x7fff, 0x5, 0x81, 0x800, 0x6, 0x1, 0x5, 0x9, 0x2, 0x7, 0x7f, 0x3, 0x2, 0x5, 0x800, 0x7, 0x10, 0x5, 0x8001, 0x8, 0xf, 0x738, 0x9, 0x8001, 0x9, 0xfffffff8, 0xfffffff8, 0x5, 0x9, 0x3, 0x5, 0xea, 0x4, 0x0, 0x401, 0x5, 0x9, 0x1f10b8ed, 0x1, 0x4, 0xc, 0x10, 0x5, 0xeb0f, 0x8, 0x8ba, 0x1, 0x10, 0x9, 0x4, 0x6, 0x8, 0x3, 0x4, 0x50, 0x2, 0x4, 0xf6, 0x54, 0x6, 0xfffffc00, 0x81, 0x5, 0x8, 0x9, 0x6, 0x1800, 0xa, 0x1, 0x7, 0xcb, 0xe, 0xd, 0x200, 0x2, 0x1e, 0x40, 0x2d, 0x5, 0x80000000, 0xffff, 0x3, 0x7fffffff, 0xb, 0x8, 0xa9e, 0x5, 0x8, 0x81, 0x8, 0xcaa, 0x9, 0x9, 0x8, 0x86dd, 0x0, 0x5, 0x5, 0x1, 0x6, 0xb, 0xfffffe23, 0x4, 0x0, 0x5, 0xfffffffb, 0x7, 0x8, 0x7, 0x3c, 0x6, 0x40, 0xb, 0x401, 0x9, 0x3]}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x1228}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x100000c2}, 0x80) 1.652336578s ago: executing program 5 (id=3150): set_mempolicy(0x8006, 0x0, 0x5) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, 0x0, 0xfffffc55) 1.365324769s ago: executing program 5 (id=3151): r0 = socket(0xa, 0x3, 0xff) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/35, 0x23}, 0xd9}], 0x4000000000002f1, 0x10022, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 1.237204253s ago: executing program 3 (id=3152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000, 0x0, 0x1}, 0x1c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)="5986c661ebb4fa6464cb14c75e9cfcd0c87d963c5f79227680b88d91ffce97afa404ce506c636d7edc5e22087a65633b94cdee29d97975aa7905b64cc8a1da29c7b4228fe35f3cf9351e377acfcce4079803e636b37d253db4084bbaa072917794b87e398d654c7970b8d907ea25c42b466116c0100a456e897e59ef282d4165978c6b26052d23a08264e673d53a443022bd4e5fb0d2e8f8cd56f16de1e4422331fba2f084a61ea3ef4b71e9c72fcf4d121f031a680406c377de80198e074f1bc747e77eff9a4316aafdc5f73218f38c6deb764ffd2fb0989fc9d7fc6c9e0000", 0xe0}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x8040010) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x0, 0xa}) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xb7, 0x7f, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x20, 0x700, 0x5, 0x39}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002380)=@newtfilter={0x1228, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x11f8, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x26, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x0, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0xfffffffc, 0xd460, 0x200, 0x80000001, 0x10, 0x2, 0x10008, 0x7, 0x7, 0x2, 0x7, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x0, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0xffffffff, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x1, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x3, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x401, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0x7ff, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x8, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x807e, 0xfffffb01, 0x4, 0x6, 0xd, 0x3ab, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x5, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x20006, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x202, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0xb, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}, @TCA_ROUTE4_ACT={0x158, 0x6, [@m_ife={0x154, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x10001, 0x4, 0x1, 0x400}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa87, 0xf82a, 0x10000000, 0x805, 0x4}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x1, 0x0, 0x9}, 0x1}}]}, {0xb1, 0x6, "6fdeb29f1777ba3480546425fcae4cbfff001b990fc0ddbbc5551a2cb3c0fb7d14f0bec44c53049d3441b4c227ce3104678eb4ccd70bc58b65f4e7a5f7d5d5b380ccaf6c9ce0a2d9f7397014e2b3616a73986f7d7089f31102ebd138c4c6d305ecf802e5ac905dcbc057202f393e583574cfafc03b7f56253a4d5ab7b87d005f3a6fa68a74a03b43af065a8284a998dac9c55dd0da551e1634247bb20b6f977306859cc02737c90b6ff3613e57"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_ROUTE4_POLICE={0x814, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4f, 0x3, 0x6, 0x3, 0x8, 0x0, 0x3ff, 0x81, 0x8, 0x77, 0x1f85e7e3, 0x39e, 0x4, 0x2, 0x7, 0xffff00, 0x0, 0x380, 0x4, 0x3, 0xf9, 0x0, 0x8, 0x4, 0x400, 0x10000, 0x8, 0x1, 0x9, 0x32b3, 0x10000, 0x2521, 0x10001, 0x3, 0xc, 0x1, 0x10001, 0x101, 0x7, 0x1, 0x4, 0x3, 0x80000000, 0x8, 0x7, 0x8, 0x7fff, 0x800, 0x0, 0x6, 0xa0, 0x1000, 0xffff0001, 0xb, 0x4, 0xffff8001, 0x2, 0x3, 0x8, 0xd, 0x2, 0x5, 0xd8f, 0x0, 0x4, 0xfffffffb, 0x10001, 0x27b1, 0x3, 0x2e0, 0x8, 0x8, 0x2, 0x81, 0x7, 0x5af0668a, 0x100, 0xfffffffd, 0xb, 0x3ff, 0x9, 0x0, 0x6, 0x10000, 0x5, 0xfff, 0x0, 0x1, 0x8, 0xe, 0x427d, 0x2, 0x3ff, 0x6, 0x0, 0x1, 0x7c966d50, 0x2, 0x1, 0x8, 0x86d4, 0x8, 0x2, 0xd5, 0x0, 0x2, 0x1, 0x9, 0x7, 0x80, 0x0, 0x3, 0x9, 0x0, 0x54, 0x7, 0x4, 0xf8, 0x2, 0x80000000, 0x7643, 0x7fffffff, 0x8, 0x79, 0x9, 0x9, 0xd170, 0x9, 0x7a71bb03, 0x0, 0xfffffffd, 0x10, 0x259674e7, 0x7, 0x7, 0xb10, 0x8, 0x8, 0x2, 0x4, 0x11, 0x6, 0x5, 0x100, 0x6a, 0x6, 0x9, 0x0, 0x80, 0x5, 0x1, 0x9, 0x8, 0x9, 0x6, 0x6, 0x5, 0x6, 0xd, 0x9, 0x1, 0x2, 0xd, 0x3, 0x8, 0x0, 0x80000001, 0x800, 0x5, 0x3, 0x3, 0x6, 0x0, 0x81, 0xcd7b, 0x9, 0xf, 0x2, 0x7, 0x1, 0xc566, 0x6, 0x9, 0x327, 0xf17, 0x7, 0x8000, 0x4, 0xda, 0x4, 0x0, 0x8, 0x9, 0x3, 0x10001, 0xb422, 0x2, 0xffff, 0x3, 0x4, 0x66e8, 0x8000, 0xfffff1bd, 0x3, 0x8, 0x9, 0xad, 0x8000, 0x3800000, 0x6, 0x10001, 0x77d, 0x4, 0xf154, 0xd29, 0x7, 0x9, 0x81, 0x6, 0x8000, 0x6, 0x2, 0x1, 0x4, 0x2b, 0x6a, 0x200, 0x10000, 0x3, 0xdb, 0x6, 0x40, 0xd, 0x7c2, 0xff, 0x1000, 0x6, 0x0, 0x3, 0x3, 0x3, 0x4, 0x3, 0x1e6, 0x3, 0xe9, 0xf781, 0x2668, 0x4300, 0x81, 0x6, 0x4, 0x9, 0xf, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x2, 0x5, 0x3, 0x9, 0x7, 0x200, 0x0, 0x0, 0x2444, 0x1ff, 0x7ff, 0x1, 0x40, 0x46, 0xffffffff, 0x2, 0x7ab, 0x987, 0xff, 0x5, 0x9, 0x8, 0xf, 0x5, 0x8, 0x5, 0x2, 0x2, 0x9, 0x400, 0xb, 0x1, 0x4, 0x10001, 0x7, 0xffffffff, 0x6, 0x4, 0xbe3, 0x8001, 0x6, 0x42, 0x9, 0xffff0001, 0x4, 0x800, 0x2, 0x77, 0x9, 0x2, 0x1, 0x8, 0x77d, 0xf, 0x5b, 0x4, 0x5, 0x1, 0x2, 0x1, 0x1, 0x9, 0x8, 0x0, 0x6, 0x7d0d, 0x0, 0x78e, 0x5, 0x515c, 0x5, 0xe, 0x1, 0x5, 0xc6ab, 0x80000000, 0x0, 0x3, 0x2, 0x101, 0x80, 0xfffffff8, 0xc4, 0x276790e1, 0x3, 0xfffff175, 0x3, 0x6, 0x400, 0x6, 0x836, 0x0, 0x5, 0xfffffff3, 0x4, 0x9, 0x7483, 0x8, 0x6, 0x2, 0x1ff, 0x3, 0x5, 0x8, 0x2, 0x4, 0x10001, 0xf, 0x3, 0x2, 0x0, 0x6, 0x9, 0x100, 0x6, 0x9, 0x3, 0x5393, 0x76102963, 0x4, 0x4, 0x9d7, 0x6, 0x800, 0x10001, 0x9, 0x6, 0x4, 0x3, 0x200, 0x3, 0x6, 0xf86, 0x3, 0x1, 0x5, 0x9, 0x4, 0x7fff, 0x5, 0x81, 0x800, 0x6, 0x1, 0x5, 0x9, 0x2, 0x7, 0x7f, 0x3, 0x2, 0x5, 0x800, 0x7, 0x10, 0x5, 0x8001, 0x8, 0xf, 0x738, 0x9, 0x8001, 0x9, 0xfffffff8, 0xfffffff8, 0x5, 0x9, 0x3, 0x5, 0xea, 0x4, 0x0, 0x401, 0x5, 0x9, 0x1f10b8ed, 0x1, 0x4, 0xc, 0x10, 0x5, 0xeb0f, 0x8, 0x8ba, 0x1, 0x10, 0x9, 0x4, 0x6, 0x8, 0x3, 0x4, 0x50, 0x2, 0x4, 0xf6, 0x54, 0x6, 0xfffffc00, 0x81, 0x5, 0x8, 0x9, 0x6, 0x1800, 0xa, 0x1, 0x7, 0xcb, 0xe, 0xd, 0x200, 0x2, 0x1e, 0x40, 0x2d, 0x5, 0x80000000, 0xffff, 0x3, 0x7fffffff, 0xb, 0x8, 0xa9e, 0x5, 0x8, 0x81, 0x8, 0xcaa, 0x9, 0x9, 0x8, 0x86dd, 0x0, 0x5, 0x5, 0x1, 0x6, 0xb, 0xfffffe23, 0x4, 0x0, 0x5, 0xfffffffb, 0x7, 0x8, 0x7, 0x3c, 0x6, 0x40, 0xb, 0x401, 0x9, 0x3]}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x1228}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x100000c2}, 0x80) 987.394606ms ago: executing program 3 (id=3153): rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) 869.094634ms ago: executing program 6 (id=3154): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc6fffffd) 625.557331ms ago: executing program 6 (id=3155): r0 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80000004, @loopback, 0x80, 0x2}, 0x20) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000023) 547.556743ms ago: executing program 4 (id=3156): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040bd28050900000000000109022400010000000009040200010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00017c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 510.533034ms ago: executing program 6 (id=3157): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffff7f, 0x91b9}, [@TCA_NETEM_DELAY_DIST={0x8, 0x2, "b1f12dd9"}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xa, 0x8, 0x8}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) 461.313168ms ago: executing program 6 (id=3158): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x18, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 406.162446ms ago: executing program 2 (id=3159): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB=' \b('], 0x0, 0x0, 0x0, 0x0}, 0x0) 243.751566ms ago: executing program 5 (id=3160): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) read$FUSE(r0, 0x0, 0x0) 0s ago: executing program 3 (id=3161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000, 0x0, 0x1}, 0x1c) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)="5986c661ebb4fa6464cb14c75e9cfcd0c87d963c5f79227680b88d91ffce97afa404ce506c636d7edc5e22087a65633b94cdee29d97975aa7905b64cc8a1da29c7b4228fe35f3cf9351e377acfcce4079803e636b37d253db4084bbaa072917794b87e398d654c7970b8d907ea25c42b466116c0100a456e897e59ef282d4165978c6b26052d23a08264e673d53a443022bd4e5fb0d2e8f8cd56f16de1e4422331fba2f084a61ea3ef4b71e9c72fcf4d121f031a680406c377de80198e074f1bc747e77eff9a4316aafdc5f73218f38c6deb764ffd2fb0989fc9d7fc6c9e0000", 0xe0}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x8040010) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0x0, 0xa}) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xb7, 0x7f, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x20, 0x700, 0x5, 0x39}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002380)=@newtfilter={0x1228, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0x11f8, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x26, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x0, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0xfffffffc, 0xd460, 0x200, 0x80000001, 0x10, 0x2, 0x10008, 0x7, 0x7, 0x2, 0x7, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x0, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0xffffffff, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x1, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x3, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x401, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0x7ff, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x8, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x807e, 0xfffffb01, 0x4, 0x6, 0xd, 0x3ab, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x5, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x20006, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x202, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0xb, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}, @TCA_ROUTE4_ACT={0x158, 0x6, [@m_ife={0x154, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x10001, 0x4, 0x1, 0x400}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa87, 0xf82a, 0x10000000, 0x805, 0x4}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x1, 0x0, 0x9}, 0x1}}]}, {0xb1, 0x6, "6fdeb29f1777ba3480546425fcae4cbfff001b990fc0ddbbc5551a2cb3c0fb7d14f0bec44c53049d3441b4c227ce3104678eb4ccd70bc58b65f4e7a5f7d5d5b380ccaf6c9ce0a2d9f7397014e2b3616a73986f7d7089f31102ebd138c4c6d305ecf802e5ac905dcbc057202f393e583574cfafc03b7f56253a4d5ab7b87d005f3a6fa68a74a03b43af065a8284a998dac9c55dd0da551e1634247bb20b6f977306859cc02737c90b6ff3613e57"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x6}}, @TCA_ROUTE4_POLICE={0x814, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x4f, 0x3, 0x6, 0x3, 0x8, 0x0, 0x3ff, 0x81, 0x8, 0x77, 0x1f85e7e3, 0x39e, 0x4, 0x2, 0x7, 0xffff00, 0x0, 0x380, 0x4, 0x3, 0xf9, 0x0, 0x8, 0x4, 0x400, 0x10000, 0x8, 0x1, 0x9, 0x32b3, 0x10000, 0x2521, 0x10001, 0x3, 0xc, 0x1, 0x10001, 0x101, 0x7, 0x1, 0x4, 0x3, 0x80000000, 0x8, 0x7, 0x8, 0x7fff, 0x800, 0x0, 0x6, 0xa0, 0x1000, 0xffff0001, 0xb, 0x4, 0xffff8001, 0x2, 0x3, 0x8, 0xd, 0x2, 0x5, 0xd8f, 0x0, 0x4, 0xfffffffb, 0x10001, 0x27b1, 0x3, 0x2e0, 0x8, 0x8, 0x2, 0x81, 0x7, 0x5af0668a, 0x100, 0xfffffffd, 0xb, 0x3ff, 0x9, 0x0, 0x6, 0x10000, 0x5, 0xfff, 0x0, 0x1, 0x8, 0xe, 0x427d, 0x2, 0x3ff, 0x6, 0x0, 0x1, 0x7c966d50, 0x2, 0x1, 0x8, 0x86d4, 0x8, 0x2, 0xd5, 0x0, 0x2, 0x1, 0x9, 0x7, 0x80, 0x0, 0x3, 0x9, 0x0, 0x54, 0x7, 0x4, 0xf8, 0x2, 0x80000000, 0x7643, 0x7fffffff, 0x8, 0x79, 0x9, 0x9, 0xd170, 0x9, 0x7a71bb03, 0x0, 0xfffffffd, 0x10, 0x259674e7, 0x7, 0x7, 0xb10, 0x8, 0x8, 0x2, 0x4, 0x11, 0x6, 0x5, 0x100, 0x6a, 0x6, 0x9, 0x0, 0x80, 0x5, 0x1, 0x9, 0x8, 0x9, 0x6, 0x6, 0x5, 0x6, 0xd, 0x9, 0x1, 0x2, 0xd, 0x3, 0x8, 0x0, 0x80000001, 0x800, 0x5, 0x3, 0x3, 0x6, 0x0, 0x81, 0xcd7b, 0x9, 0xf, 0x2, 0x7, 0x1, 0xc566, 0x6, 0x9, 0x327, 0xf17, 0x7, 0x8000, 0x4, 0xda, 0x4, 0x0, 0x8, 0x9, 0x3, 0x10001, 0xb422, 0x2, 0xffff, 0x3, 0x4, 0x66e8, 0x8000, 0xfffff1bd, 0x3, 0x8, 0x9, 0xad, 0x8000, 0x3800000, 0x6, 0x10001, 0x77d, 0x4, 0xf154, 0xd29, 0x7, 0x9, 0x81, 0x6, 0x8000, 0x6, 0x2, 0x1, 0x4, 0x2b, 0x6a, 0x200, 0x10000, 0x3, 0xdb, 0x6, 0x40, 0xd, 0x7c2, 0xff, 0x1000, 0x6, 0x0, 0x3, 0x3, 0x3, 0x4, 0x3, 0x1e6, 0x3, 0xe9, 0xf781, 0x2668, 0x4300, 0x81, 0x6, 0x4, 0x9, 0xf, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x2, 0x5, 0x3, 0x9, 0x7, 0x200, 0x0, 0x0, 0x2444, 0x1ff, 0x7ff, 0x1, 0x40, 0x46, 0xffffffff, 0x2, 0x7ab, 0x987, 0xff, 0x5, 0x9, 0x8, 0xf, 0x5, 0x8, 0x5, 0x2, 0x2, 0x9, 0x400, 0xb, 0x1, 0x4, 0x10001, 0x7, 0xffffffff, 0x6, 0x4, 0xbe3, 0x8001, 0x6, 0x42, 0x9, 0xffff0001, 0x4, 0x800, 0x2, 0x77, 0x9, 0x2, 0x1, 0x8, 0x77d, 0xf, 0x5b, 0x4, 0x5, 0x1, 0x2, 0x1, 0x1, 0x9, 0x8, 0x0, 0x6, 0x7d0d, 0x0, 0x78e, 0x5, 0x515c, 0x5, 0xe, 0x1, 0x5, 0xc6ab, 0x80000000, 0x0, 0x3, 0x2, 0x101, 0x80, 0xfffffff8, 0xc4, 0x276790e1, 0x3, 0xfffff175, 0x3, 0x6, 0x400, 0x6, 0x836, 0x0, 0x5, 0xfffffff3, 0x4, 0x9, 0x7483, 0x8, 0x6, 0x2, 0x1ff, 0x3, 0x5, 0x8, 0x2, 0x4, 0x10001, 0xf, 0x3, 0x2, 0x0, 0x6, 0x9, 0x100, 0x6, 0x9, 0x3, 0x5393, 0x76102963, 0x4, 0x4, 0x9d7, 0x6, 0x800, 0x10001, 0x9, 0x6, 0x4, 0x3, 0x200, 0x3, 0x6, 0xf86, 0x3, 0x1, 0x5, 0x9, 0x4, 0x7fff, 0x5, 0x81, 0x800, 0x6, 0x1, 0x5, 0x9, 0x2, 0x7, 0x7f, 0x3, 0x2, 0x5, 0x800, 0x7, 0x10, 0x5, 0x8001, 0x8, 0xf, 0x738, 0x9, 0x8001, 0x9, 0xfffffff8, 0xfffffff8, 0x5, 0x9, 0x3, 0x5, 0xea, 0x4, 0x0, 0x401, 0x5, 0x9, 0x1f10b8ed, 0x1, 0x4, 0xc, 0x10, 0x5, 0xeb0f, 0x8, 0x8ba, 0x1, 0x10, 0x9, 0x4, 0x6, 0x8, 0x3, 0x4, 0x50, 0x2, 0x4, 0xf6, 0x54, 0x6, 0xfffffc00, 0x81, 0x5, 0x8, 0x9, 0x6, 0x1800, 0xa, 0x1, 0x7, 0xcb, 0xe, 0xd, 0x200, 0x2, 0x1e, 0x40, 0x2d, 0x5, 0x80000000, 0xffff, 0x3, 0x7fffffff, 0xb, 0x8, 0xa9e, 0x5, 0x8, 0x81, 0x8, 0xcaa, 0x9, 0x9, 0x8, 0x86dd, 0x0, 0x5, 0x5, 0x1, 0x6, 0xb, 0xfffffe23, 0x4, 0x0, 0x5, 0xfffffffb, 0x7, 0x8, 0x7, 0x3c, 0x6, 0x40, 0xb, 0x401, 0x9, 0x3]}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x1228}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x100000c2}, 0x80) kernel console output (not intermixed with test programs): device [ 1394.282410][T13840] imon_raw 5-1:5.29: IR endpoint missing [ 1394.298094][T13840] usb 5-1: USB disconnect, device number 87 [ 1394.415802][ T4980] Dev loop5: unable to read RDB block 7 [ 1394.426815][ T4980] loop5: AHDI p1 p2 p3 [ 1394.431333][ T4980] loop5: partition table partially beyond EOD, truncated [ 1394.435056][ T5691] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1394.442427][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1394.454839][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1394.623828][ T5691] usb 7-1: Using ep0 maxpacket: 32 [ 1394.630412][ T5691] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1394.641562][ T5691] usb 7-1: config 13 has an invalid interface number: 151 but max is 0 [ 1394.650454][ T5691] usb 7-1: config 13 has no interface number 0 [ 1394.656763][ T5691] usb 7-1: config 13 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1394.668115][ T5691] usb 7-1: config 13 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1394.681209][ T5691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.690385][ T5691] usb 7-1: Product: syz [ 1394.694989][ T5691] usb 7-1: Manufacturer: syz [ 1394.699963][ T5691] usb 7-1: SerialNumber: syz [ 1394.763619][T15696] udevd[15696]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:13.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1394.765922][T15097] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1394.946423][T15097] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1394.964378][ T187] usb 7-1: USB disconnect, device number 26 [ 1394.980856][T15097] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.009084][T15097] usb 6-1: config 0 descriptor?? [ 1395.027238][T13858] usb 3-1: USB disconnect, device number 127 [ 1395.272844][T15097] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1395.298160][T15097] [drm:udl_init] *ERROR* Selecting channel failed [ 1395.346526][T15097] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 1395.361887][T15097] [drm] Initialized udl on minor 1 [ 1395.379345][T15097] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1395.391403][T15097] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1395.407047][ T187] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1395.417439][T15097] usb 6-1: USB disconnect, device number 56 [ 1395.426179][ T187] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1395.504001][T13858] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1395.678881][T13858] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1395.699942][T13858] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1395.724899][T13858] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1395.756937][T13858] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1395.766081][T13858] usb 5-1: Product: syz [ 1395.770450][T13858] usb 5-1: Manufacturer: syz [ 1395.783428][T13858] usb 5-1: SerialNumber: syz [ 1395.796206][T13858] usb 5-1: config 0 descriptor?? [ 1395.827038][T13858] usb 5-1: selecting invalid altsetting 0 [ 1395.855778][ T187] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1396.026246][ T187] usb 7-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1396.058043][T17751] loop5: detected capacity change from 0 to 7 [ 1396.070170][ T187] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 1396.101002][ T187] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1396.121715][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2490'. [ 1396.148726][ T187] usb 7-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 143 [ 1396.187505][ T187] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.209616][ T187] usb 7-1: config 0 has no interface number 0 [ 1396.229241][ T187] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30 [ 1396.252083][T17751] Dev loop5: unable to read RDB block 7 [ 1396.265494][ T187] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 1396.287257][T17751] loop5: AHDI p1 p2 p3 [ 1396.307216][ T187] usb 7-1: config 0 interface 255 has no altsetting 0 [ 1396.323561][ T187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.352830][ T187] usb 7-1: config 0 descriptor?? [ 1396.381134][ T187] usb-storage 7-1:0.255: USB Mass Storage device detected [ 1396.405895][ T187] usb-storage 7-1:0.255: Quirks match for vid 1908 pid 1315: 20000 [ 1396.421018][T17751] loop5: partition table partially beyond EOD, truncated [ 1396.452896][T17757] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1396.501151][T17757] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1396.514826][T17751] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1396.532590][T17757] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1396.543214][T17757] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1396.558341][T17757] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1396.575900][T17757] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 1396.604269][T17751] loop5: p3 start 335544320 is beyond EOD, truncated [ 1396.633808][ T5691] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1396.647185][ T187] usb 5-1: USB disconnect, device number 88 [ 1396.677872][T13858] usb 7-1: USB disconnect, device number 27 [ 1396.803764][ T5691] usb 4-1: Using ep0 maxpacket: 8 [ 1396.825808][ T5691] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1396.866581][ T5691] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1396.889738][ T5691] usb 4-1: config 0 has no interface number 0 [ 1396.907192][ T5691] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1396.936322][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.968318][ T5691] usb 4-1: config 0 descriptor?? [ 1396.995481][ T5691] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1397.186078][ T187] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1397.372768][ T187] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 1397.418743][ T187] usb 5-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config [ 1397.449737][ T187] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1397.550083][ T187] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1397.593440][ T187] usb 5-1: Product: syz [ 1397.610244][ T4980] Dev loop5: unable to read RDB block 7 [ 1397.620917][ T187] usb 5-1: SerialNumber: syz [ 1397.645466][ T4980] loop5: AHDI p1 p2 p3 [ 1397.661825][ T187] usb 5-1: config 0 descriptor?? [ 1397.678078][ T4980] loop5: partition table partially beyond EOD, truncated [ 1397.716657][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1397.742610][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1398.164726][ T187] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1398.337857][ T187] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1398.355423][ T187] usb 6-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1398.389779][ T187] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1398.439099][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.457728][ T187] usb 6-1: Product: syz [ 1398.490223][ T187] usb 6-1: Manufacturer: syz [ 1398.506829][ T187] usb 6-1: SerialNumber: syz [ 1398.521960][T13858] usb 5-1: USB disconnect, device number 89 [ 1398.979704][ T187] usb 6-1: USB disconnect, device number 57 [ 1399.155981][T15717] udevd[15717]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1399.526134][ T4980] Dev loop5: unable to read RDB block 7 [ 1399.548243][ T4980] loop5: AHDI p1 p2 p3 [ 1399.565513][ T4980] loop5: partition table partially beyond EOD, truncated [ 1399.587653][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1399.609988][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1399.649349][T17777] syzkaller0: entered promiscuous mode [ 1399.656500][T17777] syzkaller0: entered allmulticast mode [ 1399.669136][T13858] usb 4-1: USB disconnect, device number 97 [ 1400.044123][ T187] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1400.206978][ T187] usb 7-1: Using ep0 maxpacket: 16 [ 1400.234820][ T187] usb 7-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1400.258904][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.275233][ T187] usb 7-1: Product: syz [ 1400.285005][ T187] usb 7-1: Manufacturer: syz [ 1400.289876][ T187] usb 7-1: SerialNumber: syz [ 1400.303100][ T187] usb 7-1: config 0 descriptor?? [ 1400.320224][ T187] hub 7-1:0.0: bad descriptor, ignoring hub [ 1400.359061][ T187] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1400.694846][T13840] usb 7-1: USB disconnect, device number 28 [ 1400.788076][T17794] IPVS: You probably need to specify IP address on multicast interface. [ 1400.798309][T17794] IPVS: Error connecting to the multicast addr [ 1400.834477][ T5691] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1400.994504][ T5691] usb 4-1: New USB device found, idVendor=045e, idProduct=040a, bcdDevice=67.7b [ 1401.015967][ T5691] usb 4-1: config 227 has an invalid interface number: 20 but max is 0 [ 1401.032194][ T5691] usb 4-1: config 227 has no interface number 0 [ 1401.054610][T13840] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1401.063625][ T5691] usb 4-1: config 227 interface 20 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1401.110052][ T5691] usb 4-1: config 227 interface 20 altsetting 5 endpoint 0x8F has invalid maxpacket 26274, setting to 1024 [ 1401.147298][ T5691] usb 4-1: config 227 interface 20 altsetting 5 bulk endpoint 0x8F has invalid maxpacket 1024 [ 1401.178647][ T5691] usb 4-1: config 227 interface 20 altsetting 5 endpoint 0x7 has an invalid bInterval 128, changing to 11 [ 1401.227364][ T5691] usb 4-1: config 227 interface 20 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 1401.258875][T13840] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1401.274684][ T5691] usb 4-1: config 227 interface 20 altsetting 5 bulk endpoint 0xA has invalid maxpacket 32 [ 1401.323458][T13840] usb 6-1: config index 0 descriptor too short (expected 60772, got 100) [ 1401.353905][ T5691] usb 4-1: config 227 interface 20 altsetting 5 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1401.367287][T13840] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.409007][T13840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1401.427728][ T5691] usb 4-1: config 227 interface 20 has no altsetting 0 [ 1401.445296][T13840] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1401.458968][T17817] loop5: detected capacity change from 0 to 7 [ 1401.476140][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.499970][T17817] Dev loop5: unable to read RDB block 7 [ 1401.507326][ T5691] usb 4-1: Product: syz [ 1401.517775][ T5691] usb 4-1: Manufacturer: syz [ 1401.528949][ T5691] usb 4-1: SerialNumber: syz [ 1401.534618][T13840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.550228][T13840] usb 6-1: Product: syz [ 1401.560994][T17808] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1401.571493][T13840] usb 6-1: Manufacturer: syz [ 1401.587082][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2511'. [ 1401.601209][T13840] usb 6-1: SerialNumber: syz [ 1401.602049][T17808] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1401.629072][T17817] loop5: AHDI p1 p2 p3 [ 1401.644337][T17817] loop5: partition table partially beyond EOD, truncated [ 1401.673051][T13840] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1401.689684][T17817] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1401.712270][T13840] cdc_ncm 6-1:1.0: bind() failure [ 1401.714402][T17817] loop5: p3 start 335544320 is beyond EOD, truncated [ 1401.910515][ T5691] ipaq 4-1:227.20: PocketPC PDA converter detected [ 1401.933094][T13840] usb 6-1: USB disconnect, device number 58 [ 1401.943149][ T5691] usb 4-1: active config #227 != 1 ?? [ 1401.997103][ T5691] usb 4-1: USB disconnect, device number 98 [ 1402.103890][ T187] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1402.273876][ T187] usb 7-1: Using ep0 maxpacket: 8 [ 1402.280483][ T187] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1402.294118][ T187] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1402.305225][ T187] usb 7-1: config 0 has no interface number 0 [ 1402.326896][ T187] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1402.355212][ T187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.378875][ T187] usb 7-1: config 0 descriptor?? [ 1402.417415][ T187] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1402.516403][ T4980] Dev loop5: unable to read RDB block 7 [ 1402.542328][ T4980] loop5: AHDI p1 p2 p3 [ 1402.557015][ T4980] loop5: partition table partially beyond EOD, truncated [ 1402.589240][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1402.617606][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1402.755926][T17837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2518'. [ 1403.084521][ T187] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1403.173826][T11957] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1403.255130][ T187] usb 3-1: Using ep0 maxpacket: 8 [ 1403.277828][ T187] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1403.317530][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1403.354497][T11957] usb 4-1: Using ep0 maxpacket: 8 [ 1403.361936][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.380442][T11957] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1403.415298][ T187] usb 3-1: config 0 descriptor?? [ 1403.440437][T11957] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1403.456356][ T187] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 1403.473202][T11957] usb 4-1: config 0 has no interface number 0 [ 1403.503089][T11957] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1403.540492][T11957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.587375][T11957] usb 4-1: config 0 descriptor?? [ 1403.630011][T11957] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1404.810167][ T4980] Dev loop5: unable to read RDB block 7 [ 1404.820899][ T4980] loop5: AHDI p1 p2 p3 [ 1404.826832][ T4980] loop5: partition table partially beyond EOD, truncated [ 1404.843278][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1404.851335][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1404.873846][T11957] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1405.036292][T11957] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1405.044342][T11957] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 1405.055405][T11957] usb 5-1: config 4 has an invalid interface number: 138 but max is 0 [ 1405.064864][T11957] usb 5-1: config 4 has no interface number 0 [ 1405.071094][T11957] usb 5-1: config 4 interface 138 has no altsetting 0 [ 1405.081568][T11957] usb 5-1: string descriptor 0 read error: -22 [ 1405.090045][T11957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.169059][ T5691] usb 7-1: USB disconnect, device number 29 [ 1405.310756][T11957] catc 5-1:4.138: Missing or invalid endpoints [ 1405.501025][T17857] syzkaller0: entered promiscuous mode [ 1405.508555][T17857] syzkaller0: entered allmulticast mode [ 1405.522227][T13840] usb 5-1: USB disconnect, device number 90 [ 1405.668494][T13839] usb 4-1: USB disconnect, device number 99 [ 1405.749271][ T4980] Dev loop5: unable to read RDB block 7 [ 1405.761735][ T4980] loop5: AHDI p1 p2 p3 [ 1405.775647][ T4980] loop5: partition table partially beyond EOD, truncated [ 1405.788444][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1405.795924][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1405.805921][T17861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2528'. [ 1405.817843][T11957] usb 3-1: USB disconnect, device number 2 [ 1405.896455][ T5691] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1406.073860][ T5691] usb 7-1: Using ep0 maxpacket: 16 [ 1406.093791][ T5691] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1406.122647][ T5691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.146443][ T5691] usb 7-1: Product: syz [ 1406.151101][ T5691] usb 7-1: Manufacturer: syz [ 1406.155866][ T5691] usb 7-1: SerialNumber: syz [ 1406.168315][ T5691] usb 7-1: config 0 descriptor?? [ 1406.185250][ T5691] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 1406.393262][T11957] usb 7-1: USB disconnect, device number 30 [ 1406.739776][T17896] loop5: detected capacity change from 0 to 7 [ 1406.799963][T17866] IPVS: You probably need to specify IP address on multicast interface. [ 1406.812772][T17896] Dev loop5: unable to read RDB block 7 [ 1406.830036][T17866] IPVS: Error connecting to the multicast addr [ 1406.830524][T17896] loop5: AHDI p1 p2 p3 [ 1406.861109][T17896] loop5: partition table partially beyond EOD, truncated [ 1406.892506][T17896] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1406.957165][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2540'. [ 1407.007760][T17896] loop5: p3 start 335544320 is beyond EOD, truncated [ 1407.047722][T17879] IPVS: You probably need to specify IP address on multicast interface. [ 1407.082702][T17879] IPVS: Error connecting to the multicast addr [ 1407.344068][ T5691] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1407.384743][T13839] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1407.534176][ T5691] usb 7-1: Using ep0 maxpacket: 8 [ 1407.546399][ T5691] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1407.561262][ T5691] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1407.573647][T13839] usb 5-1: Using ep0 maxpacket: 8 [ 1407.581997][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.592386][T13839] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1407.608761][T13839] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1407.621437][ T5691] usb 7-1: config 0 descriptor?? [ 1407.630731][T13839] usb 5-1: config 0 has no interface number 0 [ 1407.650574][ T5691] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 1407.659988][T13839] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1407.692721][T13839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.745321][T13839] usb 5-1: config 0 descriptor?? [ 1407.792329][T13839] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1408.299576][T17914] syzkaller0: entered promiscuous mode [ 1408.307129][T17914] syzkaller0: entered allmulticast mode [ 1408.574023][ T5691] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1408.611321][ T4980] Dev loop5: unable to read RDB block 7 [ 1408.634631][ T4980] loop5: AHDI p1 p2 p3 [ 1408.651804][ T4980] loop5: partition table partially beyond EOD, truncated [ 1408.676566][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1408.683618][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1408.743777][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 1408.756044][ T5691] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1408.785429][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1408.803829][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.826193][ T4980] Dev loop5: unable to read RDB block 7 [ 1408.838584][ T5691] usb 3-1: config 0 descriptor?? [ 1408.847884][ T4980] loop5: AHDI p1 p2 p3 [ 1408.856049][ T4980] loop5: partition table partially beyond EOD, truncated [ 1408.873342][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1408.882295][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1409.074310][ T5691] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1409.118150][ T4980] Dev loop5: unable to read RDB block 7 [ 1409.128690][ T4980] loop5: AHDI p1 p2 p3 [ 1409.138438][ T4980] loop5: partition table partially beyond EOD, truncated [ 1409.153550][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1409.168662][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1409.294727][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2556'. [ 1409.341761][ T187] usb 3-1: USB disconnect, device number 3 [ 1409.626498][T17933] IPVS: You probably need to specify IP address on multicast interface. [ 1409.635173][T17933] IPVS: Error connecting to the multicast addr [ 1409.703853][T11957] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1409.866434][T11957] usb 6-1: Using ep0 maxpacket: 8 [ 1409.886527][T11957] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1409.918120][T11957] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1409.929587][T11957] usb 6-1: config 0 has no interface number 0 [ 1409.940226][T11957] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1409.956690][T11957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.996343][T11957] usb 6-1: config 0 descriptor?? [ 1410.022720][T11957] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1410.088311][ T5691] usb 7-1: USB disconnect, device number 31 [ 1410.136782][T13840] usb 5-1: USB disconnect, device number 91 [ 1410.752029][T17964] program syz.3.2565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1411.174794][T17955] IPVS: You probably need to specify IP address on multicast interface. [ 1411.186386][T17955] IPVS: Error connecting to the multicast addr [ 1411.733063][T17977] syzkaller0: entered promiscuous mode [ 1411.745669][T17977] syzkaller0: entered allmulticast mode [ 1412.023806][ T187] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1412.113906][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2570'. [ 1412.183769][ T187] usb 7-1: Using ep0 maxpacket: 8 [ 1412.207927][ T187] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1412.233417][ T187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1412.233525][T13840] usb 6-1: USB disconnect, device number 59 [ 1412.254090][ T187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.305350][ T187] usb 7-1: config 0 descriptor?? [ 1412.403817][T11957] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1412.548803][ T187] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1412.569406][T11957] usb 3-1: Using ep0 maxpacket: 8 [ 1412.577739][T11957] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1412.594916][T11957] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1412.604551][T11957] usb 3-1: config 0 has no interface number 0 [ 1412.612755][T11957] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1412.639128][T11957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.657122][T11957] usb 3-1: config 0 descriptor?? [ 1412.701290][T11957] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1412.815168][T11957] usb 7-1: USB disconnect, device number 32 [ 1412.951917][T17988] loop5: detected capacity change from 0 to 7 [ 1412.986329][T17988] Dev loop5: unable to read RDB block 7 [ 1413.006258][T17988] loop5: AHDI p1 p2 p3 [ 1413.021492][T17988] loop5: partition table partially beyond EOD, truncated [ 1413.042486][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'. [ 1413.049658][T17988] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1413.077510][T17988] loop5: p3 start 335544320 is beyond EOD, truncated [ 1413.135018][ T187] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1413.243916][T13840] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1413.305130][ T187] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1413.329012][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1413.345962][ T187] usb 6-1: Product: syz [ 1413.356132][ T187] usb 6-1: Manufacturer: syz [ 1413.366513][ T187] usb 6-1: SerialNumber: syz [ 1413.388069][ T187] usb 6-1: config 0 descriptor?? [ 1413.398646][ T187] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1413.413776][ T187] dvb-usb: bulk message failed: -22 (2/0) [ 1413.414119][T13840] usb 4-1: Using ep0 maxpacket: 32 [ 1413.425543][ T5691] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1413.432050][T11957] usb 3-1: USB disconnect, device number 4 [ 1413.456263][T13840] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1413.464785][T13840] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1413.476579][T13840] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1413.498842][T13840] usb 4-1: can't read configurations, error -71 [ 1413.506945][ T187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1413.543288][ T187] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1413.561811][ T187] usb 6-1: media controller created [ 1413.595466][ T5691] usb 5-1: Using ep0 maxpacket: 8 [ 1413.602422][ T187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1413.635261][ T5691] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1413.650229][ T5691] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1413.670652][ T187] dvb-usb: bulk message failed: -22 (1/0) [ 1413.671144][ T5691] usb 5-1: config 0 has no interface number 0 [ 1413.693245][ T5691] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1413.713824][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.748906][ T5691] usb 5-1: config 0 descriptor?? [ 1413.779691][ T187] DVB: Unable to find symbol mt352_attach() [ 1413.793808][ T5691] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1413.804260][ T187] dvb-usb: bulk message failed: -22 (5/0) [ 1413.841051][ T187] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1413.856180][ T187] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1413.997125][ T187] rc_core: IR keymap rc-dvico-mce not found [ 1414.013435][ T187] Registered IR keymap rc-empty [ 1414.029658][ T187] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1414.069763][ T187] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input70 [ 1414.107831][ T187] dvb-usb: schedule remote query interval to 100 msecs. [ 1414.132745][ T187] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1414.161946][ T187] usb 6-1: USB disconnect, device number 60 [ 1414.309759][ T187] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1414.408690][T18013] random: crng reseeded on system resumption [ 1414.566026][ T4980] Dev loop5: unable to read RDB block 7 [ 1414.583958][ T4980] loop5: AHDI p1 p2 p3 [ 1414.589432][ T4980] loop5: partition table partially beyond EOD, truncated [ 1414.597613][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1414.605142][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1414.787504][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2588'. [ 1414.914058][ T187] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1415.008036][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 1415.055723][T13840] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1415.086005][ T187] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1415.120415][ T187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.149423][ T187] usb 7-1: config 0 descriptor?? [ 1415.223798][T13840] usb 6-1: Using ep0 maxpacket: 8 [ 1415.234332][T13840] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1415.267045][T13840] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1415.287405][T13840] usb 6-1: config 0 has no interface number 0 [ 1415.304179][T13840] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1415.337409][T13840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.381646][T13840] usb 6-1: config 0 descriptor?? [ 1415.418149][T13840] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1415.492040][ T187] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1415.534441][ T187] [drm:udl_init] *ERROR* Selecting channel failed [ 1415.580353][T18034] syzkaller0: entered promiscuous mode [ 1415.593445][T18034] syzkaller0: entered allmulticast mode [ 1415.648971][ T187] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 1415.715831][ T187] [drm] Initialized udl on minor 1 [ 1415.738572][ T187] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1415.762059][ T5691] usb 6-1: USB disconnect, device number 61 [ 1415.770935][ T187] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1415.818393][T11957] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1415.849050][ T187] usb 7-1: USB disconnect, device number 33 [ 1415.861788][T11957] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1415.898918][T13840] usb 5-1: USB disconnect, device number 92 [ 1416.162915][T18039] openvswitch: netlink: IP tunnel dst address not specified [ 1416.200254][T18041] binder: BC_ACQUIRE_RESULT not supported [ 1416.206761][T18041] binder: 18040:18041 ioctl c0306201 80000080 returned -22 [ 1417.070078][T18068] syzkaller0: entered promiscuous mode [ 1417.078642][T18068] syzkaller0: entered allmulticast mode [ 1417.333842][T11957] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1417.503903][T11957] usb 3-1: Using ep0 maxpacket: 8 [ 1417.509487][ T187] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1417.519418][T11957] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1417.540063][T11957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1417.553810][T11957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.582352][T11957] usb 3-1: config 0 descriptor?? [ 1417.696614][ T187] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1417.732764][ T187] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 1417.756418][ T187] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.786314][ T187] usb 4-1: config 0 has no interface number 0 [ 1417.803125][T11957] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1417.824601][ T187] usb 4-1: config 0 interface 205 has no altsetting 0 [ 1417.844465][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.864296][ T187] usb 4-1: Product: syz [ 1417.871115][ T187] usb 4-1: Manufacturer: syz [ 1417.879534][ T187] usb 4-1: SerialNumber: syz [ 1417.897116][ T187] usb 4-1: config 0 descriptor?? [ 1417.917497][ T187] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1417.935882][ T187] dvb-usb: bulk message failed: -22 (3/0) [ 1417.972798][ T187] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1417.986391][ T187] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1418.007344][ T187] usb 4-1: media controller created [ 1418.019492][ T187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1418.036128][ T187] dvb-usb: bulk message failed: -22 (6/0) [ 1418.042372][ T187] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1418.071702][T13858] usb 3-1: USB disconnect, device number 5 [ 1418.095575][ T187] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input71 [ 1418.145573][T11957] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1418.155758][ T187] dvb-usb: schedule remote query interval to 150 msecs. [ 1418.174086][ T187] dvb-usb: bulk message failed: -22 (3/0) [ 1418.193887][ T187] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1418.213221][ T187] usb 4-1: USB disconnect, device number 102 [ 1418.325389][T11957] usb 7-1: Using ep0 maxpacket: 16 [ 1418.339852][T11957] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1418.365658][T11957] usb 7-1: config index 0 descriptor too short (expected 65532, got 18) [ 1418.375587][T11957] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 1418.389240][ T187] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1418.402544][T11957] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1418.425436][T11957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.462406][T11957] usb 7-1: Product: syz [ 1418.477466][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2614'. [ 1418.480103][T11957] usb 7-1: Manufacturer: syz [ 1418.507779][T11957] usb 7-1: SerialNumber: syz [ 1418.527983][T11957] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1418.539834][T11957] r8152-cfgselector 7-1: config 0 descriptor?? [ 1418.732769][T18093] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2618'. [ 1418.755755][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2619'. [ 1418.988695][T11957] r8152-cfgselector 7-1: USB disconnect, device number 34 [ 1419.423776][ T187] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1419.594512][ T187] usb 4-1: Using ep0 maxpacket: 8 [ 1419.622937][ T187] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1419.658243][ T187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1419.694139][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.728605][ T187] usb 4-1: config 0 descriptor?? [ 1419.987411][ T187] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1420.199964][ T5691] usb 4-1: USB disconnect, device number 103 [ 1420.695234][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2633'. [ 1420.910988][T18132] binder: 18131:18132 ioctl 40086602 80000140 returned -22 [ 1421.129886][T18145] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2639'. [ 1421.147323][T18145] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2639'. [ 1421.159729][T18145] vlan0: entered promiscuous mode [ 1421.193854][ T5691] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1421.229378][T18149] syzkaller0: entered promiscuous mode [ 1421.236555][T18149] syzkaller0: entered allmulticast mode [ 1421.314105][ T187] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1421.363941][ T5691] usb 6-1: Using ep0 maxpacket: 8 [ 1421.374616][ T5691] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1421.396626][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1421.426750][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.452151][ T5691] usb 6-1: config 0 descriptor?? [ 1421.484485][ T187] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1421.503821][T15097] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1421.516093][ T187] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1421.532099][ T187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.553330][ T187] usb 5-1: config 0 has no interface number 0 [ 1421.567262][ T187] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1421.579417][ T187] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1421.606126][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.620427][ T187] usb 5-1: Product: syz [ 1421.628936][ T187] usb 5-1: Manufacturer: syz [ 1421.633597][ T187] usb 5-1: SerialNumber: syz [ 1421.642263][ T187] usb 5-1: config 0 descriptor?? [ 1421.670666][ T5691] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1421.685650][T15097] usb 4-1: Using ep0 maxpacket: 8 [ 1421.704670][T15097] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1421.740133][T15097] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1421.757609][T15097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.795608][T15097] usb 4-1: config 0 descriptor?? [ 1421.927958][ T187] usb 5-1: USB disconnect, device number 93 [ 1421.952329][ T5691] usb 6-1: USB disconnect, device number 62 [ 1422.037275][T15097] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1422.286094][ T5691] usb 4-1: USB disconnect, device number 104 [ 1422.914642][T18180] loop5: detected capacity change from 0 to 7 [ 1422.948768][T18180] Dev loop5: unable to read RDB block 7 [ 1422.981139][T18180] loop5: AHDI p1 p2 p3 [ 1423.000996][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2653'. [ 1423.014181][T18180] loop5: partition table partially beyond EOD, truncated [ 1423.040428][T18183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2651'. [ 1423.075083][T18180] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1423.166205][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.173172][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.199762][T18180] loop5: p3 start 335544320 is beyond EOD, truncated [ 1423.478186][ T5691] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1423.594118][T13839] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1423.653911][ T5691] usb 5-1: Using ep0 maxpacket: 8 [ 1423.667534][ T5691] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1423.743229][ T5691] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1423.771700][ T5691] usb 5-1: config 0 has no interface number 0 [ 1423.784591][T13839] usb 6-1: Using ep0 maxpacket: 8 [ 1423.792864][ T5691] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1423.814220][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.822593][T13839] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1423.856842][T13839] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1423.866128][ T5691] usb 5-1: config 0 descriptor?? [ 1423.880286][T13839] usb 6-1: config 0 has no interface number 0 [ 1423.905004][ T5691] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1423.915920][T13839] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1423.961372][T13839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.008109][T13839] usb 6-1: config 0 descriptor?? [ 1424.061389][T13839] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1425.500092][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2666'. [ 1425.844081][T13839] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1426.025701][T13839] usb 3-1: Using ep0 maxpacket: 8 [ 1426.043408][T13839] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1426.066904][T13839] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1426.085923][T13839] usb 3-1: config 0 has no interface number 0 [ 1426.102336][T13839] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1426.123777][T13839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.150914][T13839] usb 3-1: config 0 descriptor?? [ 1426.179395][T13839] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior2 [ 1426.567287][ T187] usb 6-1: USB disconnect, device number 63 [ 1426.671353][ T5691] usb 5-1: USB disconnect, device number 94 [ 1426.733882][T13839] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1426.805085][ T4980] Dev loop5: unable to read RDB block 7 [ 1426.812652][ T4980] loop5: AHDI p1 p2 p3 [ 1426.822059][ T4980] loop5: partition table partially beyond EOD, truncated [ 1426.835043][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1426.842012][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1426.904504][T13839] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1426.925909][T13839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.951196][ T4980] Dev loop5: unable to read RDB block 7 [ 1426.953147][T13839] usb 7-1: config 0 descriptor?? [ 1426.965929][ T4980] loop5: AHDI p1 p2 p3 [ 1426.978501][ T4980] loop5: partition table partially beyond EOD, truncated [ 1426.989444][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1427.001492][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1427.076600][T18260] syzkaller0: entered promiscuous mode [ 1427.082257][T18260] syzkaller0: entered allmulticast mode [ 1427.192574][T13839] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1427.207373][T13839] [drm:udl_init] *ERROR* Selecting channel failed [ 1427.227735][T13839] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 1427.236141][T13839] [drm] Initialized udl on minor 1 [ 1427.242721][T13839] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1427.251349][ T5691] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1427.260101][T13839] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1427.267654][T13840] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1427.279894][T13839] usb 7-1: USB disconnect, device number 35 [ 1427.286431][T13840] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1427.295093][T13840] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1427.424558][ T5691] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1427.437181][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.453137][ T5691] usb 5-1: config 0 descriptor?? [ 1427.491901][T18267] syzkaller0: entered promiscuous mode [ 1427.501774][T18267] syzkaller0: entered allmulticast mode [ 1427.754953][ T187] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1427.875338][ T5691] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 1427.896225][T18271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2690'. [ 1427.898035][ T5691] hackrf 5-1:0.0: Could not detect board [ 1427.912171][ T5691] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 1427.925770][ T5691] usb 5-1: USB disconnect, device number 95 [ 1427.953794][ T187] usb 4-1: Using ep0 maxpacket: 8 [ 1427.962499][ T187] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1427.992607][ T4980] Dev loop5: unable to read RDB block 7 [ 1428.001763][ T187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1428.010814][ T4980] loop5: AHDI p1 p2 p3 [ 1428.023950][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.034401][ T4980] loop5: partition table partially beyond EOD, truncated [ 1428.050925][ T187] usb 4-1: config 0 descriptor?? [ 1428.056343][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1428.056374][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1428.179460][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2692'. [ 1428.217016][ T4980] Dev loop5: unable to read RDB block 7 [ 1428.226076][ T4980] loop5: AHDI p1 p2 p3 [ 1428.233120][ T4980] loop5: partition table partially beyond EOD, truncated [ 1428.246669][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1428.259237][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1428.290453][ T187] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1428.431152][ T187] usb 3-1: USB disconnect, device number 6 [ 1428.487021][ T4980] Dev loop5: unable to read RDB block 7 [ 1428.503265][ T5691] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1428.522831][ T4980] loop5: AHDI p1 p2 p3 [ 1428.530767][ T4980] loop5: partition table partially beyond EOD, truncated [ 1428.557268][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1428.575838][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1428.616025][T15097] usb 4-1: USB disconnect, device number 105 [ 1428.685329][ T5691] usb 7-1: Using ep0 maxpacket: 8 [ 1428.727689][ T5691] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1428.758398][ T4980] Dev loop5: unable to read RDB block 7 [ 1428.778499][ T4980] loop5: AHDI p1 p2 p3 [ 1428.785365][ T5691] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1428.795113][ T4980] loop5: partition table partially beyond EOD, truncated [ 1428.813756][ T5691] usb 7-1: config 0 has no interface number 0 [ 1428.820201][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1428.827685][ T5691] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1428.851100][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1428.873231][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.920295][ T5691] usb 7-1: config 0 descriptor?? [ 1428.972901][ T5691] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1429.201273][T18300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1429.211468][T15097] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1429.386005][T15097] usb 5-1: Using ep0 maxpacket: 8 [ 1429.396700][T15097] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1429.410266][T15097] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1429.422161][T15097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.433607][T15097] usb 5-1: config 0 descriptor?? [ 1429.606245][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2708'. [ 1429.650577][T15097] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1429.777897][ T4980] Dev loop5: unable to read RDB block 7 [ 1429.783863][ T4980] loop5: AHDI p1 p2 p3 [ 1429.790471][ T4980] loop5: partition table partially beyond EOD, truncated [ 1429.804734][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1429.812849][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1429.917413][ T187] usb 5-1: USB disconnect, device number 96 [ 1429.955502][T15097] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1430.001063][ T4980] Dev loop5: unable to read RDB block 7 [ 1430.018011][ T4980] loop5: AHDI p1 p2 p3 [ 1430.024277][ T4980] loop5: partition table partially beyond EOD, truncated [ 1430.039495][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1430.051542][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1430.147098][T15097] usb 4-1: Using ep0 maxpacket: 8 [ 1430.164577][T15097] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1430.186760][T15097] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1430.203784][T15097] usb 4-1: config 0 has no interface number 0 [ 1430.211493][T15097] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1430.235440][T15097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.258239][T15097] usb 4-1: config 0 descriptor?? [ 1430.280971][T15097] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1430.314045][ T5691] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1430.484922][ T5691] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1430.501169][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.510065][ T5691] usb 6-1: Product: syz [ 1430.515115][ T5691] usb 6-1: Manufacturer: syz [ 1430.520405][ T5691] usb 6-1: SerialNumber: syz [ 1430.534452][ T5691] usb 6-1: config 0 descriptor?? [ 1430.558155][ T5691] usb 6-1: selecting invalid altsetting 1 [ 1430.565113][ T5691] technisat-usb2: could not set alternate setting to 0 [ 1430.649777][T18335] syzkaller0: entered promiscuous mode [ 1430.655778][T18335] syzkaller0: entered allmulticast mode [ 1430.759531][ T5691] technisat-usb2: firmware version: 0.0 [ 1430.767275][ T5691] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1430.914009][T15097] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1430.979454][ T5691] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1430.995963][ T5691] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 1431.012212][ T5691] usb 6-1: USB disconnect, device number 64 [ 1431.073958][T15097] usb 5-1: Using ep0 maxpacket: 8 [ 1431.087394][T15097] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1431.107377][T15097] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1431.130705][T15097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.149672][T13839] usb 7-1: USB disconnect, device number 36 [ 1431.156739][T15097] usb 5-1: config 0 descriptor?? [ 1431.380176][T15097] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1431.547298][ T4980] Dev loop5: unable to read RDB block 7 [ 1431.558308][ T4980] loop5: AHDI p1 p2 p3 [ 1431.568859][ T4980] loop5: partition table partially beyond EOD, truncated [ 1431.584176][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1431.591201][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1431.605108][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2723'. [ 1431.670038][T13839] usb 5-1: USB disconnect, device number 97 [ 1431.759384][ T4980] Dev loop5: unable to read RDB block 7 [ 1431.769851][ T4980] loop5: AHDI p1 p2 p3 [ 1431.779130][ T4980] loop5: partition table partially beyond EOD, truncated [ 1431.788010][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1431.798206][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1431.904094][ T187] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1431.996547][ T4980] Dev loop5: unable to read RDB block 7 [ 1432.013925][ T4980] loop5: AHDI p1 p2 p3 [ 1432.018298][ T4980] loop5: partition table partially beyond EOD, truncated [ 1432.034347][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1432.051374][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1432.076403][ T187] usb 7-1: Using ep0 maxpacket: 8 [ 1432.106330][ T187] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1432.134611][ T187] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1432.160613][ T187] usb 7-1: config 0 has no interface number 0 [ 1432.175576][ T187] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1432.199092][ T187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.226655][ T187] usb 7-1: config 0 descriptor?? [ 1432.255219][ T187] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1432.280806][ T4980] Dev loop5: unable to read RDB block 7 [ 1432.286657][ T4980] loop5: AHDI p1 p2 p3 [ 1432.291569][ T4980] loop5: partition table partially beyond EOD, truncated [ 1432.299626][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1432.306961][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1432.471910][ T4980] Dev loop5: unable to read RDB block 7 [ 1432.486161][ T4980] loop5: AHDI p1 p2 p3 [ 1432.499536][ T4980] loop5: partition table partially beyond EOD, truncated [ 1432.512276][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1432.522097][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1432.565892][T18372] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2735'. [ 1432.626559][ T187] usb 4-1: USB disconnect, device number 106 [ 1432.661511][ T4980] Dev loop5: unable to read RDB block 7 [ 1432.677104][ T4980] loop5: AHDI p1 p2 p3 [ 1432.687670][ T4980] loop5: partition table partially beyond EOD, truncated [ 1432.703449][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1432.721325][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1432.819492][ T4980] Dev loop5: unable to read RDB block 7 [ 1432.842325][ T4980] loop5: AHDI p1 p2 p3 [ 1432.858140][ T4980] loop5: partition table partially beyond EOD, truncated [ 1432.875927][T13839] usb 7-1: USB disconnect, device number 37 [ 1432.886392][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1432.899770][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1433.404499][ T187] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1433.543924][T15097] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1433.574608][ T187] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1433.597368][T11957] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1433.611841][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.627746][ T187] usb 5-1: config 0 descriptor?? [ 1433.674222][T13839] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1433.715419][T15097] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1433.737854][T15097] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 70, changing to 4 [ 1433.765351][T15097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.773582][T15097] usb 4-1: Product: syz [ 1433.779592][T11957] usb 6-1: Using ep0 maxpacket: 16 [ 1433.787344][T15097] usb 4-1: Manufacturer: syz [ 1433.796262][T11957] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1433.805797][T15097] usb 4-1: SerialNumber: syz [ 1433.823525][T11957] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1433.840569][T13839] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1433.863153][ T187] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1433.872597][T13839] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1433.883569][ T187] [drm:udl_init] *ERROR* Selecting channel failed [ 1433.894449][T11957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.911782][T13839] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1433.927080][T11957] usb 6-1: Product: syz [ 1433.945379][T13839] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1433.959967][T13839] usb 3-1: Product: syz [ 1433.960105][T11957] usb 6-1: Manufacturer: syz [ 1433.969976][T13839] usb 3-1: Manufacturer: syz [ 1433.978866][ T187] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 1433.991836][T11957] usb 6-1: SerialNumber: syz [ 1433.996908][ T187] [drm] Initialized udl on minor 1 [ 1434.002403][T13839] usb 3-1: SerialNumber: syz [ 1434.017228][ T187] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1434.028461][T11957] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1434.048015][ T187] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1434.055525][T11957] r8152-cfgselector 6-1: config 0 descriptor?? [ 1434.066959][T13839] usb 3-1: config 0 descriptor?? [ 1434.115963][T13858] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1434.126791][ T187] usb 5-1: USB disconnect, device number 98 [ 1434.137270][T13858] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1434.145151][T15097] usb 4-1: Can't get UAC3 power state for id 10 [ 1434.161468][T15097] usb 4-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 1434.178670][T15097] usb 4-1: 0:3 : does not exist [ 1434.186288][T15097] usb 4-1: 0:4 : does not exist [ 1434.191849][T15097] usb 4-1: 0:5 : does not exist [ 1434.200701][T15097] usb 4-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 1434.361172][T15097] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1434.372444][T13839] usb 3-1: selecting invalid altsetting 0 [ 1434.421716][T15097] usb 4-1: USB disconnect, device number 107 [ 1434.586143][ T5691] r8152-cfgselector 6-1: USB disconnect, device number 65 [ 1434.595924][T18412] udevd[18412]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1434.621637][T13839] usb 3-1: USB disconnect, device number 7 [ 1434.764240][T15699] udevd[15699]: setting mode of /dev/bus/usb/003/007 to 020664 failed: No such file or directory [ 1434.800046][T15699] udevd[15699]: setting owner of /dev/bus/usb/003/007 to uid=0, gid=0 failed: No such file or directory [ 1434.835003][ T30] kauditd_printk_skb: 181 callbacks suppressed [ 1434.835028][ T30] audit: type=1326 audit(1786364847.639:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18414 comm="syz.6.2753" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x0 [ 1434.881509][T15699] udevd[15699]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1435.440423][T18431] dummy0: entered allmulticast mode [ 1435.523905][T13839] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1435.684916][T13839] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1435.698991][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2767'. [ 1435.730043][T13839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.745330][T13839] usb 6-1: Product: syz [ 1435.750259][T13839] usb 6-1: Manufacturer: syz [ 1435.760771][T13839] usb 6-1: SerialNumber: syz [ 1435.783514][T13839] usb 6-1: USB2VGA dongle found at address 66 [ 1435.795772][T13839] usb 6-1: Allocated 8 output buffers [ 1436.007886][T13839] usb 6-1: Failed to early initialize device [ 1436.058072][T13839] usb 6-1: USB disconnect, device number 66 [ 1436.388144][T18473] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2781'. [ 1436.398600][T18473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1436.729761][T18493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2790'. [ 1436.759061][T18493] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2790'. [ 1436.873815][T13839] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1437.055030][T13839] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1437.092770][T13839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.128641][T13839] usb 4-1: config 0 descriptor?? [ 1437.391129][T13839] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1437.410368][T13839] [drm:udl_init] *ERROR* Selecting channel failed [ 1437.491770][T13839] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1437.517750][T13839] [drm] Initialized udl on minor 1 [ 1437.551421][T13839] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1437.572663][T13839] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1437.589146][ T5691] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1437.605575][T13839] usb 4-1: USB disconnect, device number 108 [ 1437.617733][ T5691] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1437.878393][ T187] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1438.054071][ T187] usb 5-1: Using ep0 maxpacket: 16 [ 1438.067359][ T187] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1438.098751][ T187] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 1438.107489][ T187] usb 5-1: config 254 has no interface number 0 [ 1438.115910][ T187] usb 5-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1438.132002][ T187] usb 5-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1438.144122][ T187] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1438.155626][ T187] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1438.165933][ T187] usb 5-1: config 254 interface 235 has no altsetting 0 [ 1438.176532][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.193934][ T187] usb 5-1: Product: syz [ 1438.198287][ T187] usb 5-1: Manufacturer: syz [ 1438.202927][ T187] usb 5-1: SerialNumber: syz [ 1438.228814][T18531] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1438.323867][T13839] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 1438.449632][T18531] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1438.462309][ T187] usbtest 5-1:254.235: Linux gadget zero [ 1438.474202][ T187] usbtest 5-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt) [ 1438.479736][T13839] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1438.496305][T13839] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 70, changing to 4 [ 1438.537472][T13839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.550818][T13839] usb 7-1: Product: syz [ 1438.558220][T13839] usb 7-1: Manufacturer: syz [ 1438.564676][T13839] usb 7-1: SerialNumber: syz [ 1438.672744][ T5691] usb 5-1: USB disconnect, device number 99 [ 1438.683461][T18559] openvswitch: netlink: Tunnel attr 60 out of range max 16 [ 1438.845322][T13839] usb 7-1: Can't get UAC3 power state for id 10 [ 1438.870558][T13839] usb 7-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 1438.890767][T13839] usb 7-1: 0:3 : does not exist [ 1438.902805][T13839] usb 7-1: 0:4 : does not exist [ 1438.912931][T13839] usb 7-1: 0:5 : does not exist [ 1438.929751][T13839] usb 7-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 1439.031074][T13839] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1439.059213][T13839] usb 7-1: USB disconnect, device number 38 [ 1439.119708][T15683] udevd[15683]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1439.193785][ T5691] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1439.354155][ T5691] usb 6-1: Using ep0 maxpacket: 32 [ 1439.360496][ T5691] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1439.380688][ T5691] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1439.394290][ T5691] usb 6-1: config 0 has no interface number 0 [ 1439.405418][ T5691] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1439.429069][T18576] loop5: detected capacity change from 0 to 7 [ 1439.433956][ T5691] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1439.452850][T18576] Dev loop5: unable to read RDB block 7 [ 1439.459813][T18576] loop5: AHDI p1 p2 p3 [ 1439.464605][T18576] loop5: partition table partially beyond EOD, truncated [ 1439.472265][T18576] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1439.477795][ T5691] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1439.483049][T18576] loop5: p3 start 335544320 is beyond EOD, [ 1439.493228][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1439.500840][ T5691] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1439.524188][T18576] truncated [ 1439.536647][ T5691] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1439.586895][ T5691] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1439.624194][ T5691] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1439.645844][ T5691] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1439.658308][ T5691] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1439.669407][ T5691] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1439.696750][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.707343][ T5691] usb 6-1: Product: syz [ 1439.714093][ T5691] usb 6-1: Manufacturer: syz [ 1439.724869][ T5691] usb 6-1: SerialNumber: syz [ 1439.755839][ T5691] usb 6-1: config 0 descriptor?? [ 1439.774872][T18564] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1439.796366][T18564] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1439.829551][ T5691] usb 6-1: will this work? Response EP is not usually 3 [ 1439.844103][ T5691] usb 6-1: will this work? Image data EP is not usually 2 [ 1439.880289][ T5691] scsi host1: microtekX6 [ 1440.003964][ T187] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1440.073775][T15097] usb 6-1: USB disconnect, device number 67 [ 1440.084432][ T1630] usb 6-1: error -19 submitting URB [ 1440.193985][ T187] usb 5-1: Using ep0 maxpacket: 8 [ 1440.217474][ T187] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1440.255127][ T187] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1440.273710][ T187] usb 5-1: config 0 has no interface number 0 [ 1440.280029][ T187] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1440.296973][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.342157][ T187] usb 5-1: config 0 descriptor?? [ 1440.383127][ T187] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1440.735314][ T4980] Dev loop5: unable to read RDB block 7 [ 1440.772775][ T4980] loop5: AHDI p1 p2 p3 [ 1440.781157][ T4980] loop5: partition table partially beyond EOD, truncated [ 1440.808233][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1440.847299][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1441.239099][T18621] netlink: 'syz.3.2846': attribute type 3 has an invalid length. [ 1441.276618][T18621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1441.307907][ T4980] Dev loop5: unable to read RDB block 7 [ 1441.326005][T18622] vlan0: left promiscuous mode [ 1441.344235][ T4980] loop5: AHDI p1 p2 p3 [ 1441.349344][ T4980] loop5: partition table partially beyond EOD, truncated [ 1441.364192][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1441.395767][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1441.607580][T18631] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2851'. [ 1441.644921][T18631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1441.816116][ T4980] Dev loop5: unable to read RDB block 7 [ 1441.821793][ T4980] loop5: AHDI p1 p2 p3 [ 1441.837300][ T4980] loop5: partition table partially beyond EOD, truncated [ 1441.853245][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1441.869493][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1441.984634][ T4980] Dev loop5: unable to read RDB block 7 [ 1442.000204][ T4980] loop5: AHDI p1 p2 p3 [ 1442.011001][ T4980] loop5: partition table partially beyond EOD, truncated [ 1442.034426][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1442.055465][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1442.292310][ T4980] Dev loop5: unable to read RDB block 7 [ 1442.314888][ T4980] loop5: AHDI p1 p2 p3 [ 1442.330005][ T4980] loop5: partition table partially beyond EOD, truncated [ 1442.356093][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1442.363482][T18660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2864'. [ 1442.391606][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1442.506554][T15097] usb 5-1: USB disconnect, device number 100 [ 1443.114388][ T5691] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1443.264689][ T5691] usb 5-1: Using ep0 maxpacket: 8 [ 1443.278176][ T5691] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1443.293621][ T5691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1443.306781][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.330181][ T5691] usb 5-1: config 0 descriptor?? [ 1443.552975][ T5691] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1443.661901][T18704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1443.679193][T18704] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1443.718450][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2885'. [ 1443.820860][ T5691] usb 5-1: USB disconnect, device number 101 [ 1443.945687][ T30] audit: type=1326 audit(1786364856.749:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.2.2889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1444.019743][ T30] audit: type=1326 audit(1786364856.769:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.2.2889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1444.088049][ T30] audit: type=1326 audit(1786364856.769:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.2.2889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1444.137449][ T30] audit: type=1326 audit(1786364856.779:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.2.2889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=179 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1444.202615][ T30] audit: type=1326 audit(1786364856.779:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.2.2889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1444.241548][ T30] audit: type=1326 audit(1786364856.779:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.2.2889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1444.271456][ T30] audit: type=1326 audit(1786364856.779:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.2.2889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1444.305682][ T30] audit: type=1326 audit(1786364856.779:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.2.2889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1444.334152][ T30] audit: type=1326 audit(1786364856.779:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.2.2889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1444.418853][T18727] bond0: option arp_all_targets: invalid value (1073741824) [ 1444.484948][T15097] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1444.644561][T15097] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1444.671145][T15097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.697275][T15097] usb 4-1: config 0 descriptor?? [ 1444.974348][T15097] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1445.011887][T15097] [drm:udl_init] *ERROR* Selecting channel failed [ 1445.102192][T15097] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1445.131970][T15097] [drm] Initialized udl on minor 1 [ 1445.155636][T15097] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1445.186165][T15097] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1445.217537][ T187] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1445.238050][ T187] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1445.245614][T15097] usb 4-1: USB disconnect, device number 109 [ 1445.739762][T18762] bond0: option ad_actor_sys_prio: invalid value (0) [ 1445.776503][T18762] bond0: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1445.787630][T18762] bond0 (unregistering): Released all slaves [ 1446.614086][T15097] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1446.773800][T15097] usb 5-1: Using ep0 maxpacket: 8 [ 1446.791864][T15097] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1446.817211][T15097] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1446.843198][T15097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.869222][T15097] usb 5-1: config 0 descriptor?? [ 1447.019720][T18800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2926'. [ 1447.092503][T15097] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1447.378305][ T187] usb 5-1: USB disconnect, device number 102 [ 1447.863833][ T5691] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1448.014207][T13839] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1448.033924][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 1448.048273][ T5691] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1448.074589][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1448.100086][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.130862][ T5691] usb 3-1: config 0 descriptor?? [ 1448.158343][T18854] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1448.190337][T13839] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1448.215507][T13839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.251272][T13839] usb 7-1: config 0 descriptor?? [ 1448.361814][ T5691] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1448.516079][T13839] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1448.539990][T13839] [drm:udl_init] *ERROR* Selecting channel failed [ 1448.608279][T13839] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 1 [ 1448.628454][T13839] [drm] Initialized udl on minor 1 [ 1448.641537][T13839] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1448.656082][ T5691] usb 3-1: USB disconnect, device number 8 [ 1448.667472][T13839] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1448.683542][T13838] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1448.737290][T13839] usb 7-1: USB disconnect, device number 39 [ 1448.747932][T13838] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1448.758123][T13838] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1449.429925][T18885] xt_socket: unknown flags 0x50 [ 1449.763832][T15097] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1449.784298][ T187] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1449.925309][T15097] usb 5-1: Using ep0 maxpacket: 16 [ 1449.936432][T15097] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1449.954172][ T187] usb 6-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice= 0.40 [ 1449.964900][T15097] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1449.975224][ T187] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1449.989726][T15097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.002061][ T187] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1450.013331][T15097] usb 5-1: config 0 has no interface number 0 [ 1450.021176][ T187] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1450.031276][T15097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.049642][T15097] usb 5-1: Product: syz [ 1450.060142][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.069635][T15097] usb 5-1: Manufacturer: syz [ 1450.077341][T15097] usb 5-1: SerialNumber: syz [ 1450.082326][ T187] usb 6-1: Product: syz [ 1450.087424][ T187] usb 6-1: Manufacturer: syz [ 1450.093362][ T187] usb 6-1: SerialNumber: syz [ 1450.099256][T15097] usb 5-1: config 0 descriptor?? [ 1450.118758][T15097] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1450.128813][T15097] uvcvideo 5-1:0.105: No valid video chain found. [ 1450.318752][T15097] usb 5-1: USB disconnect, device number 103 [ 1450.371815][ T187] vmk80xx 6-1:1.0: driver 'vmk80xx' failed to auto-configure device. [ 1450.410368][ T187] usb 6-1: USB disconnect, device number 68 [ 1450.604874][T13839] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 1450.786091][T13839] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1450.801966][T13839] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1450.823521][T13839] usb 3-1: config 0 has no interface number 0 [ 1450.840731][T13839] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1450.856477][T13839] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1450.879817][T13839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.909498][T13839] usb 3-1: config 0 descriptor?? [ 1450.941620][T18909] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1450.979050][T13839] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1451.194870][T13839] usb 3-1: USB disconnect, device number 9 [ 1451.404924][T18929] loop5: detected capacity change from 0 to 7 [ 1451.415926][T18929] Dev loop5: unable to read RDB block 7 [ 1451.433596][T18929] loop5: AHDI p1 p2 p3 [ 1451.451531][T18929] loop5: partition table partially beyond EOD, truncated [ 1451.481292][T18929] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1451.502956][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2983'. [ 1451.528801][T18929] loop5: p3 start 335544320 is beyond EOD, truncated [ 1451.815141][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2985'. [ 1451.884504][T13839] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1452.054816][T13839] usb 6-1: Using ep0 maxpacket: 8 [ 1452.072464][T13839] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1452.094010][ T5691] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1452.110502][T13839] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1452.130021][T13839] usb 6-1: config 0 has no interface number 0 [ 1452.145905][T13839] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1452.187816][T13839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.218178][T13839] usb 6-1: config 0 descriptor?? [ 1452.223836][ T187] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1452.260913][T13839] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1452.287512][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 1452.308312][ T5691] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1452.339084][ T5691] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1452.369106][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.394726][ T5691] usb 3-1: Product: syz [ 1452.399352][ T187] usb 5-1: Using ep0 maxpacket: 8 [ 1452.417342][ T187] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1452.440213][ T5691] usb 3-1: Manufacturer: syz [ 1452.456349][ T187] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1452.456876][ T5691] usb 3-1: SerialNumber: syz [ 1452.497333][ T187] usb 5-1: config 0 has no interface number 0 [ 1452.514964][ T187] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1452.544380][ T5691] usb 3-1: config 0 descriptor?? [ 1452.558543][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.582496][ T5691] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1452.610113][ T5691] usb 3-1: setting power ON [ 1452.620942][ T5691] dvb-usb: bulk message failed: -22 (2/0) [ 1452.636201][ T187] usb 5-1: config 0 descriptor?? [ 1452.669726][ T5691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1452.709663][ T187] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1452.727206][ T5691] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1452.752728][ T5691] usb 3-1: media controller created [ 1452.801367][T18937] dvb-usb: bulk message failed: -22 (3/0) [ 1452.840649][T18937] cxusb: i2c wr: len=79 is too big! [ 1452.840649][T18937] [ 1452.866160][ T5691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1452.954215][ T5691] usb 3-1: selecting invalid altsetting 6 [ 1452.965960][ T5691] usb 3-1: digital interface selection failed (-22) [ 1452.972969][ T5691] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1452.990958][ T5691] usb 3-1: setting power OFF [ 1452.998243][ T5691] dvb-usb: bulk message failed: -22 (2/0) [ 1453.006832][ T5691] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1453.017270][ T5691] (NULL device *): no alternate interface [ 1453.127638][ T5691] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1453.142469][ T5691] usb 3-1: USB disconnect, device number 10 [ 1454.406293][ T5691] usb 6-1: USB disconnect, device number 69 [ 1454.413765][ T187] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1454.584006][ T187] usb 7-1: Using ep0 maxpacket: 8 [ 1454.605262][ T4980] Dev loop5: unable to read RDB block 7 [ 1454.618833][ T187] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1454.623169][ T4980] loop5: AHDI p1 p2 p3 [ 1454.645206][ T4980] loop5: partition table partially beyond EOD, truncated [ 1454.654249][ T187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1454.657967][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1454.672891][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1454.685530][ T187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.712689][ T187] usb 7-1: config 0 descriptor?? [ 1454.819535][ T5691] usb 5-1: USB disconnect, device number 104 [ 1454.914908][T18987] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1454.940802][ T187] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1454.968487][ T4980] Dev loop5: unable to read RDB block 7 [ 1454.987831][ T4980] loop5: AHDI p1 p2 p3 [ 1455.001578][ T4980] loop5: partition table partially beyond EOD, truncated [ 1455.028807][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1455.058775][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1455.209898][T11957] usb 7-1: USB disconnect, device number 40 [ 1455.274734][ T187] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1455.444676][ T187] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1455.465790][ T187] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1455.491698][ T187] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1455.520110][ T187] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1455.521983][T19005] loop5: detected capacity change from 0 to 7 [ 1455.531206][ T187] usb 6-1: Product: syz [ 1455.554055][ T187] usb 6-1: Manufacturer: syz [ 1455.579260][T19005] Dev loop5: unable to read RDB block 7 [ 1455.585576][ T187] hub 6-1:4.0: USB hub found [ 1455.599723][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3013'. [ 1455.634739][T19005] loop5: AHDI p1 p2 p3 [ 1455.656363][T19005] loop5: partition table partially beyond EOD, truncated [ 1455.686946][T19005] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1455.735734][T19005] loop5: p3 start 335544320 is beyond EOD, truncated [ 1455.807377][ T187] hub 6-1:4.0: 2 ports detected [ 1456.093804][T11957] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1456.207865][ T187] hub 6-1:4.0: set hub depth failed [ 1456.230701][ T187] usb 6-1: USB disconnect, device number 70 [ 1456.244161][ T5691] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1456.276562][T11957] usb 5-1: Using ep0 maxpacket: 8 [ 1456.396503][T11957] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1456.414392][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 1456.432648][T11957] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1456.437353][ T5691] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1456.460966][T11957] usb 5-1: config 0 has no interface number 0 [ 1456.479649][T11957] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1456.500457][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1456.537688][T11957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.543190][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.595474][ T5691] usb 3-1: config 0 descriptor?? [ 1456.603221][T11957] usb 5-1: config 0 descriptor?? [ 1456.655302][T19020] random: crng reseeded on system resumption [ 1456.661819][T11957] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1456.854727][ T5691] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1456.884262][ T4980] Dev loop5: unable to read RDB block 7 [ 1456.891751][ T4980] loop5: AHDI p1 p2 p3 [ 1456.899782][ T4980] loop5: partition table partially beyond EOD, truncated [ 1456.912306][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1456.919238][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1457.119972][ T187] usb 3-1: USB disconnect, device number 11 [ 1457.207225][ T4980] Dev loop5: unable to read RDB block 7 [ 1457.220106][ T4980] loop5: AHDI p1 p2 p3 [ 1457.225168][ T4980] loop5: partition table partially beyond EOD, truncated [ 1457.233041][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1457.241158][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1457.332668][T11957] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1457.493806][ T5691] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1457.496166][T11957] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1457.512471][T11957] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 1457.522040][T11957] usb 7-1: config 0 has no interface number 0 [ 1457.529403][T11957] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1457.541342][T11957] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1457.552593][T11957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.566658][T11957] usb 7-1: config 0 descriptor?? [ 1457.579800][T11957] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input72 [ 1457.650310][ T5691] usb 6-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 1457.662048][ T5691] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1457.674081][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1457.684705][ T187] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1457.687916][ T5691] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1457.708038][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.722345][ T5691] usb 6-1: config 0 descriptor?? [ 1457.738710][T19028] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1457.801958][T13838] usb 7-1: USB disconnect, device number 41 [ 1457.854074][ T187] usb 4-1: Using ep0 maxpacket: 8 [ 1457.860363][ T187] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1457.880592][ T187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1457.893594][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.908647][ T187] usb 4-1: config 0 descriptor?? [ 1458.127961][ T187] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1458.145226][T19038] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1458.163567][T19038] bond0 (unregistering): Released all slaves [ 1458.189337][ T5691] hid-steam 0003:28DE:1205.0012: : USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.5-1/input0 [ 1458.264527][ T5691] hid-steam 0003:28DE:1205.0012: Steam Controller 'XXXXXXXXXX' connected [ 1458.296397][ T5691] input: Steam Deck as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1205.0012/input/input73 [ 1458.353220][ T5691] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1205.0012/input/input74 [ 1458.410594][T13838] usb 4-1: USB disconnect, device number 110 [ 1458.511623][ T187] usb 5-1: USB disconnect, device number 105 [ 1458.742215][ T5691] hid-steam 0003:28DE:1205.0013: hidraw0: USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.5-1/input0 [ 1458.774158][T13839] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1458.792482][ T5691] usb 6-1: USB disconnect, device number 71 [ 1458.896869][T19047] fido_id[19047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1458.960394][T13839] usb 7-1: Using ep0 maxpacket: 16 [ 1458.973351][T13839] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1459.002792][T13839] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.037722][T13839] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1459.062196][ T5691] hid-steam 0003:28DE:1205.0012: Steam Controller 'XXXXXXXXXX' disconnected [ 1459.095774][T13839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.114369][ T30] audit: type=1326 audit(1786364871.909:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19052 comm="syz.2.3033" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1459.118887][T13839] usb 7-1: Product: syz [ 1459.210006][T13839] usb 7-1: Manufacturer: syz [ 1459.226397][ T30] audit: type=1326 audit(1786364871.909:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19052 comm="syz.2.3033" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1459.229926][T13839] usb 7-1: SerialNumber: syz [ 1459.272193][T19057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3034'. [ 1459.284566][ T30] audit: type=1326 audit(1786364871.959:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19052 comm="syz.2.3033" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d74eb code=0x7ffc0000 [ 1459.311971][ T30] audit: type=1326 audit(1786364871.959:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19052 comm="syz.2.3033" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71d74eb code=0x7ffc0000 [ 1459.339338][ T30] audit: type=1326 audit(1786364871.959:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19052 comm="syz.2.3033" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1459.366965][ T30] audit: type=1326 audit(1786364871.959:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19052 comm="syz.2.3033" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=305 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1459.405056][T13839] usb 7-1: 0:2 : does not exist [ 1459.432491][ T30] audit: type=1326 audit(1786364871.959:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19052 comm="syz.2.3033" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 1459.568367][T19069] bond0: option packets_per_slave: invalid value (65536) [ 1459.575749][T19069] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1459.606645][T13839] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1459.645740][ T5691] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 1459.717095][T13839] usb 7-1: USB disconnect, device number 42 [ 1459.746918][T19075] xt_limit: Overflow, try lower: 324384747/4200216962 [ 1459.780696][T15696] udevd[15696]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1459.816394][ T5691] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1459.837493][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1459.868021][ T5691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.879017][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.896448][ T5691] usb 6-1: config 0 descriptor?? [ 1459.964064][T11957] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1460.125938][T11957] usb 5-1: Using ep0 maxpacket: 16 [ 1460.134581][T11957] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1460.145612][T11957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.158505][T11957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1460.168472][ T187] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1460.176570][T11957] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1460.191566][T11957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.205434][T11957] usb 5-1: config 0 descriptor?? [ 1460.333819][ T187] usb 4-1: Using ep0 maxpacket: 8 [ 1460.350235][ T5691] hid_parser_main: 1160 callbacks suppressed [ 1460.350259][ T5691] aquacomputer_d5next 0003:0C70:F0B6.0014: unknown main item tag 0x7 [ 1460.353398][ T187] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1460.376292][ T187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1460.388475][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.399474][ T5691] aquacomputer_d5next 0003:0C70:F0B6.0014: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 1460.422880][ T187] usb 4-1: config 0 descriptor?? [ 1460.543926][T15097] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1460.551621][ T5691] usb 6-1: USB disconnect, device number 72 [ 1460.654876][ T187] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1460.680533][T11957] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0015/input/input75 [ 1460.714217][T15097] usb 3-1: Using ep0 maxpacket: 32 [ 1460.728051][T15097] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1460.743871][T15097] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1460.757570][T15097] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1460.768452][T15097] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1460.775590][T15097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.798491][T15097] usb 3-1: config 0 descriptor?? [ 1460.820235][T11957] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1460.891097][T11957] usb 5-1: USB disconnect, device number 106 [ 1460.918219][ T187] usb 4-1: USB disconnect, device number 111 [ 1461.062828][T19101] fido_id[19101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1461.255515][T15097] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 1461.280138][T15097] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 1461.292195][T15097] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 1461.300405][T15097] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 1461.310155][T15097] corsair-psu 0003:1B1C:1C09.0016: unknown main item tag 0x0 [ 1461.337190][T15097] corsair-psu 0003:1B1C:1C09.0016: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 1461.405003][T15097] corsair-psu 0003:1B1C:1C09.0016: unable to initialize device (-90) [ 1461.461898][T15097] corsair-psu 0003:1B1C:1C09.0016: probe with driver corsair-psu failed with error -90 [ 1461.515322][T15097] usb 3-1: USB disconnect, device number 12 [ 1461.756939][T19124] program syz.5.3065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1461.933823][T11957] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1462.084589][T11957] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1462.102097][T11957] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1462.115233][T11957] usb 5-1: config 0 has no interface number 0 [ 1462.121602][T11957] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.140052][T11957] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.159025][T11957] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1462.198336][T11957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.235198][T11957] usb 5-1: config 0 descriptor?? [ 1462.423812][ T5691] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1462.583764][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 1462.590969][ T5691] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1462.616944][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1462.631553][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.653005][ T5691] usb 3-1: config 0 descriptor?? [ 1462.861528][T11957] uclogic 0003:28BD:0042.0017: failed retrieving string descriptor #100: -71 [ 1462.878976][T11957] uclogic 0003:28BD:0042.0017: failed retrieving pen parameters: -71 [ 1462.892120][T11957] uclogic 0003:28BD:0042.0017: pen probing failed: -71 [ 1462.903635][T11957] uclogic 0003:28BD:0042.0017: failed probing parameters: -71 [ 1462.905619][ T5691] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1462.944747][T11957] uclogic 0003:28BD:0042.0017: probe with driver uclogic failed with error -71 [ 1462.974505][T11957] usb 5-1: USB disconnect, device number 107 [ 1463.063823][ T187] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1463.187617][ T5691] usb 3-1: USB disconnect, device number 13 [ 1463.224595][ T187] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1463.255717][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.277846][ T187] usb 4-1: config 0 descriptor?? [ 1463.548841][ T187] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1463.579030][ T187] [drm:udl_init] *ERROR* Selecting channel failed [ 1463.673307][ T187] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1463.690274][ T187] [drm] Initialized udl on minor 1 [ 1463.715366][ T187] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1463.753315][ T187] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1463.778516][T15097] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1463.792429][ T187] usb 4-1: USB disconnect, device number 112 [ 1463.821197][T15097] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1463.865130][T11957] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1464.035209][T11957] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1464.054074][T11957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.082185][T11957] usb 5-1: config 0 descriptor?? [ 1464.093601][T11957] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1464.374224][ T5691] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1464.507484][T11957] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1464.532364][T11957] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1464.548594][ T5691] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1464.570239][ T5691] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1464.584911][ T5691] usb 3-1: config 0 has no interface number 0 [ 1464.596651][ T5691] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1464.624958][ T5691] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1464.652308][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1464.665332][ T5691] usb 3-1: Manufacturer: syz [ 1464.670091][ T5691] usb 3-1: SerialNumber: syz [ 1464.680749][ T5691] usb 3-1: config 0 descriptor?? [ 1464.735684][T13839] usb 5-1: USB disconnect, device number 108 [ 1465.112018][ T5691] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1465.139953][ T5691] usb 3-1: USB disconnect, device number 14 [ 1465.343835][T19186] loop5: detected capacity change from 0 to 7 [ 1465.351816][T19186] Dev loop5: unable to read RDB block 7 [ 1465.362485][T19186] loop5: AHDI p1 p2 p3 [ 1465.367615][T19186] loop5: partition table partially beyond EOD, truncated [ 1465.375232][T19186] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1465.382991][T19186] loop5: p3 start 335544320 is beyond EOD, truncated [ 1465.400287][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3089'. [ 1465.463423][T19188] netlink: 14752 bytes leftover after parsing attributes in process `syz.6.3090'. [ 1465.754299][ T5691] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1465.924645][ T5691] usb 5-1: Using ep0 maxpacket: 8 [ 1465.936095][ T5691] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1465.944326][T11957] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1465.967392][ T5691] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1465.983970][T19205] macsec1: entered promiscuous mode [ 1465.988829][ T5691] usb 5-1: config 0 has no interface number 0 [ 1465.994604][T19205] dummy0: entered promiscuous mode [ 1466.011048][ T5691] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1466.033603][T19205] macsec1: entered allmulticast mode [ 1466.039158][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.061165][ T5691] usb 5-1: config 0 descriptor?? [ 1466.065033][ T4980] Dev loop5: unable to read RDB block 7 [ 1466.077986][ T4980] loop5: AHDI p1 p2 p3 [ 1466.090452][ T5691] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1466.091596][ T4980] loop5: partition table partially beyond EOD, [ 1466.101391][T19205] dummy0: left promiscuous mode [ 1466.115985][T11957] usb 3-1: Using ep0 maxpacket: 16 [ 1466.133284][ T4980] truncated [ 1466.138848][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1466.145917][T11957] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1466.164889][T11957] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 1466.174665][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1466.189757][T11957] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1466.220622][T11957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1466.257853][T11957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1466.297622][T11957] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1466.319930][T11957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.344676][T11957] usb 3-1: config 0 descriptor?? [ 1466.355795][T19197] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1466.409296][T11957] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input77 [ 1466.614887][ T5691] usb 3-1: USB disconnect, device number 15 [ 1466.703812][T13839] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1466.863821][T13839] usb 4-1: Using ep0 maxpacket: 32 [ 1466.870401][T13839] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1466.882474][T13839] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1466.892361][T13839] usb 4-1: config 0 has no interface number 0 [ 1466.899434][T13839] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1466.912306][T13839] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1466.928259][T13839] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1466.945938][T13839] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1466.962532][T13839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.971447][T13839] usb 4-1: Product: syz [ 1466.975895][T13839] usb 4-1: Manufacturer: syz [ 1466.980559][T13839] usb 4-1: SerialNumber: syz [ 1466.989076][T13839] usb 4-1: config 0 descriptor?? [ 1467.001790][T19215] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1467.022078][T13839] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input78 [ 1467.047504][ T4965] usb 4-1: BOGUS urb xfer, pipe 1 != type 3 [ 1467.082114][ C1] bcm5974 4-1:0.119: trackpad urb failed: -1 [ 1467.098798][ T4980] Dev loop5: unable to read RDB block 7 [ 1467.112104][ T4980] loop5: AHDI p1 p2 p3 [ 1467.120498][ T4980] loop5: partition table partially beyond EOD, truncated [ 1467.137664][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1467.151656][T19226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3107'. [ 1467.156081][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1467.360880][ T187] usb 4-1: USB disconnect, device number 113 [ 1467.575384][T11957] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1467.744740][T11957] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1467.763983][T11957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.786510][T11957] usb 3-1: config 0 descriptor?? [ 1468.051673][T11957] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1468.086225][T11957] [drm:udl_init] *ERROR* Selecting channel failed [ 1468.161493][T11957] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1468.179643][T11957] [drm] Initialized udl on minor 1 [ 1468.208414][T11957] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1468.236859][T11957] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1468.245897][ T187] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1468.259024][T11957] usb 3-1: USB disconnect, device number 16 [ 1468.265573][ T5691] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1468.265875][ T187] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1468.303154][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 1468.336379][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 1468.391918][ T187] usb 5-1: USB disconnect, device number 109 [ 1468.446847][ T5691] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1468.473283][ T5691] usb 7-1: too many configurations: 191, using maximum allowed: 8 [ 1468.516781][ T5691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.546497][ T5691] usb 7-1: Product: syz [ 1468.559213][ T5691] usb 7-1: Manufacturer: syz [ 1468.575313][ T5691] usb 7-1: SerialNumber: syz [ 1468.649439][T13839] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1468.817614][T19250] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1469.054082][ T5691] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1469.213813][ T5691] usb 4-1: Using ep0 maxpacket: 16 [ 1469.220480][ T5691] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1469.231913][ T5691] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 1469.240463][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1469.253789][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1469.265267][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1469.274485][ T187] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1469.279667][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1469.298290][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.310858][ T5691] usb 4-1: config 0 descriptor?? [ 1469.319112][T19252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1469.324909][T11957] usb 7-1: USB disconnect, device number 43 [ 1469.358120][ T5691] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input79 [ 1469.446754][ T187] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1469.457482][ T187] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.468175][ T187] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.482329][ T187] usb 6-1: Dual-Role OTG device on HNP port [ 1469.488775][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.497209][ T187] usb 6-1: Product: syz [ 1469.501431][ T187] usb 6-1: Manufacturer: syz [ 1469.506465][ T187] usb 6-1: SerialNumber: syz [ 1469.518172][ T187] cdc_mbim 6-1:1.0: skipping garbage [ 1469.524600][ T187] cdc_mbim 6-1:1.0: skipping garbage [ 1469.529961][ T187] usb 6-1: selecting invalid altsetting 1 [ 1469.570251][T15097] usb 4-1: USB disconnect, device number 114 [ 1469.726398][ T187] cdc_mbim 6-1:1.0: bind() failure [ 1469.756656][ T187] usb 6-1: USB disconnect, device number 73 [ 1469.774523][T19261] xt_socket: unknown flags 0x20 [ 1470.027624][T19271] loop5: detected capacity change from 0 to 7 [ 1470.037018][T19271] Dev loop5: unable to read RDB block 7 [ 1470.042771][T19271] loop5: AHDI p1 p2 p3 [ 1470.049280][T19271] loop5: partition table partially beyond EOD, truncated [ 1470.056911][T19271] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1470.064659][T19271] loop5: p3 start 335544320 is beyond EOD, truncated [ 1470.080780][T19271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3127'. [ 1470.125755][T13839] usb 7-1: Service connection timeout for: 257 [ 1470.151094][T13839] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1470.175402][T13839] ath9k_htc: Failed to initialize the device [ 1470.210734][T11957] usb 7-1: ath9k_htc: USB layer deinitialized [ 1470.337383][ T4980] Dev loop5: unable to read RDB block 7 [ 1470.361139][ T4980] loop5: AHDI p1 p2 p3 [ 1470.377224][ T4980] loop5: partition table partially beyond EOD, truncated [ 1470.396414][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1470.413630][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1470.492834][T19289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 1470.536393][T11957] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1470.576336][ T4980] Dev loop5: unable to read RDB block 7 [ 1470.588446][ T4980] loop5: AHDI p1 p2 p3 [ 1470.598226][ T4980] loop5: partition table partially beyond EOD, truncated [ 1470.621071][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1470.637462][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1470.664870][T19298] tipc: Enabling of bearer rejected, failed to enable media [ 1470.693761][T11957] usb 7-1: Using ep0 maxpacket: 8 [ 1470.706625][T11957] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1470.727908][T11957] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1470.743019][T11957] usb 7-1: config 0 has no interface number 0 [ 1470.760496][T11957] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1470.788731][T11957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.823477][T11957] usb 7-1: config 0 descriptor?? [ 1470.847239][T11957] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1470.945830][ T4980] Dev loop5: unable to read RDB block 7 [ 1470.951750][ T4980] loop5: AHDI p1 p2 p3 [ 1470.961844][ T4980] loop5: partition table partially beyond EOD, truncated [ 1470.983931][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1471.007604][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1471.144601][ T5691] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1471.162487][T19313] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1471.303893][ T5691] usb 3-1: Using ep0 maxpacket: 16 [ 1471.311866][ T5691] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1471.320316][ T5691] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1471.331056][ T5691] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 1471.340347][ T5691] usb 3-1: config 127 has no interface number 0 [ 1471.347359][ T5691] usb 3-1: config 127 interface 124 has no altsetting 0 [ 1471.355474][T11957] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1471.360445][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.371162][ T5691] usb 3-1: Product: syz [ 1471.375900][ T5691] usb 3-1: Manufacturer: syz [ 1471.380584][ T5691] usb 3-1: SerialNumber: syz [ 1471.484009][ T187] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1471.515883][T11957] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1471.526778][T11957] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1471.536971][T11957] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1471.548216][T11957] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1471.558750][T11957] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1471.569858][T11957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.578241][T11957] usb 6-1: Product: syz [ 1471.582590][T11957] usb 6-1: Manufacturer: syz [ 1471.587935][T11957] usb 6-1: SerialNumber: syz [ 1471.598312][T11957] usb 6-1: config 0 descriptor?? [ 1471.644408][ T187] usb 4-1: Using ep0 maxpacket: 16 [ 1471.650693][ T187] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1471.661734][ T187] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1471.676275][ T187] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1471.683021][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.703077][ T187] usb 4-1: config 0 descriptor?? [ 1471.823088][T11957] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input80 [ 1471.836598][ T4965] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1471.847473][ T4965] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1471.860505][ T4965] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1471.870948][ T4965] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1471.921377][T16028] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1471.949508][ T4965] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1471.976360][ T4965] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1471.998076][ T4965] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1472.033882][T19311] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1472.054125][T13839] usb 6-1: USB disconnect, device number 74 [ 1472.173825][ T187] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1472.182866][ T187] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x6 [ 1472.193910][ T187] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1472.202377][ T187] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1472.210220][ T187] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1472.218105][ T187] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1472.226155][ T187] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1472.233567][ T187] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1472.241727][ T187] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1472.249590][ T187] magicmouse 0003:05AC:0269.0018: unknown main item tag 0x0 [ 1472.266712][ T187] magicmouse 0003:05AC:0269.0018: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 1472.320976][ T5691] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 1472.423120][ T187] usb 4-1: USB disconnect, device number 115 [ 1472.517176][ T5691] usb 3-1: device firmware changed [ 1472.567437][ T5691] usb 3-1: USB disconnect, device number 17 [ 1472.636421][ T4980] Dev loop5: unable to read RDB block 7 [ 1472.647680][ T4980] loop5: AHDI p1 p2 p3 [ 1472.656242][ T4980] loop5: partition table partially beyond EOD, truncated [ 1472.670627][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1472.679425][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1472.744422][ T5691] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1472.905271][ T5691] usb 3-1: Using ep0 maxpacket: 16 [ 1472.923299][ T5691] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1472.951907][ T4980] Dev loop5: unable to read RDB block 7 [ 1472.958931][ T4980] loop5: AHDI p1 p2 p3 [ 1472.958948][ T5691] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 1472.964501][ T4980] loop5: partition table partially beyond EOD, truncated [ 1472.984950][ T4980] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1472.993009][ T4980] loop5: p3 start 335544320 is beyond EOD, truncated [ 1473.001057][ T5691] usb 3-1: config 127 has no interface number 0 [ 1473.016423][ T5691] usb 3-1: config 127 interface 124 has no altsetting 0 [ 1473.046238][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.065320][ T5691] usb 3-1: Product: syz [ 1473.097564][ T5691] usb 3-1: Manufacturer: syz [ 1473.113490][ T5691] usb 3-1: SerialNumber: syz [ 1473.167269][ T187] usb 7-1: USB disconnect, device number 44 [ 1473.534636][T19343] futex_wake_op: syz.6.3154 tries to shift op by -1; fix this program [ 1474.013820][T13839] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1474.094410][T13838] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1474.185001][T13839] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1474.195682][T13839] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1474.204026][T13839] usb 5-1: config 0 has no interface number 0 [ 1474.210418][ T5691] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 1474.220259][T13839] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.231664][T13839] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.241930][ T5691] usb 3-1: device reset changed ep0 maxpacket size! [ 1474.256164][T13839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.264321][T13838] usb 7-1: Using ep0 maxpacket: 16 [ 1474.273437][T13838] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1474.288392][ T5691] usb 3-1: USB disconnect, device number 18 [ 1474.300479][T13839] usb 5-1: config 0 descriptor?? [ 1474.304359][ T187] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1474.313927][T13838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.335542][T13838] usb 7-1: Product: syz [ 1474.342315][T13838] usb 7-1: Manufacturer: syz [ 1474.352042][T13838] usb 7-1: SerialNumber: syz [ 1474.483781][ T187] usb 6-1: Using ep0 maxpacket: 32 [ 1474.494163][ T187] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1474.503831][ T5691] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1474.517133][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.528308][ T187] usb 6-1: Product: syz [ 1474.536701][ T5612] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1474.541425][ T187] usb 6-1: Manufacturer: syz [ 1474.545483][ T5612] Bluetooth: hci5: Injecting HCI hardware error event [ 1474.555269][ T5612] Bluetooth: hci5: hardware error 0x00 [ 1474.592983][ T187] usb 6-1: SerialNumber: syz [ 1474.625136][T13838] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1474.638158][T13838] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1474.650463][T13838] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1474.662051][ T187] usb 6-1: config 0 descriptor?? [ 1474.667611][T13838] usb 7-1: media controller created [ 1474.684071][ T187] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1474.693798][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 1474.700124][ T187] dvb-usb: bulk message failed: -22 (2/0) [ 1474.708808][ T5691] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1474.728300][T13838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1474.738352][ T5691] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1474.750022][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.768972][ T5691] usb 3-1: config 0 descriptor?? [ 1474.784213][ T187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1474.807283][ T187] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1474.820910][ T187] usb 6-1: media controller created [ 1474.836022][T13839] uclogic 0003:28BD:0905.0019: Interface probing failed: -22 [ 1474.860278][T13839] uclogic 0003:28BD:0905.0019: interface is invalid, ignoring [ 1474.896902][ T187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1474.910780][T19355] ------------[ cut here ]------------ [ 1474.917060][T19355] usb 7-1: BOGUS control dir, pipe 80002d80 doesn't match bRequestType c0 [ 1474.925907][T19355] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.5.3160/19355 [ 1474.936516][T19355] Modules linked in: [ 1474.940842][T19355] CPU: 0 UID: 0 PID: 19355 Comm: syz.5.3160 Tainted: G L syzkaller #0 PREEMPT(full) [ 1474.952100][T19355] Tainted: [L]=SOFTLOCKUP [ 1474.956527][T19355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1474.966771][T19355] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 1474.974879][T19355] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 1474.995222][T19355] RSP: 0018:ffffc9000d3276f8 EFLAGS: 00010246 [ 1475.001419][T19355] RAX: 0000000000000000 RBX: ffff88801fb29700 RCX: 0000000080002d80 [ 1475.009620][T19355] RDX: ffff88801bb44020 RSI: ffffffff8ca2d4e0 RDI: ffffffff90653c70 [ 1475.017753][T19355] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 1475.025944][T19355] R10: ffffc9000d3277e0 R11: fffff52001a64f08 R12: 1ffff1100e9394e4 [ 1475.034141][T19355] R13: ffff8880749ca720 R14: ffff88801bb44020 R15: 0000000080002d80 [ 1475.042173][T19355] FS: 0000000000000000(0000) GS:ffff888124f55000(0063) knlGS:00000000f53f6b40 [ 1475.051266][T19355] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1475.057988][T19355] CR2: 00000000800b9018 CR3: 0000000053c90000 CR4: 00000000003526f0 [ 1475.066083][T19355] Call Trace: [ 1475.069407][T19355] [ 1475.072392][T19355] usb_start_wait_urb+0x13f/0x5b0 [ 1475.077557][T19355] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1475.083185][T19355] usb_control_msg+0x234/0x3e0 [ 1475.088103][T19355] gl861_ctrl_msg+0x207/0x420 [ 1475.092955][T19355] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1475.098293][T19355] ? aa_file_perm+0x4ed/0x15f0 [ 1475.103121][T19355] gl861_i2c_master_xfer+0x439/0x6a0 [ 1475.108532][T19355] __i2c_transfer+0x7be/0x1fe0 [ 1475.113470][T19355] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1475.119550][T19355] ? lockdep_hardirqs_on+0x7a/0x110 [ 1475.124907][T19355] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1475.130837][T19355] ? rt_mutex_lock_nested+0x156/0x1c0 [ 1475.136539][T19355] ? i2c_transfer+0xc8/0x2d0 [ 1475.141186][T19355] i2c_transfer+0x1cc/0x2d0 [ 1475.145853][T19355] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1475.151579][T19355] ? __lock_acquire+0x683/0x2cf0 [ 1475.156740][T19355] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1475.162946][T19355] ? i2cdev_read+0xe8/0x250 [ 1475.167721][T19355] i2cdev_read+0x10d/0x250 [ 1475.172229][T19355] ? __pfx_i2cdev_read+0x10/0x10 [ 1475.177342][T19355] vfs_read+0x213/0xa80 [ 1475.181559][T19355] ? __pfx_vfs_read+0x10/0x10 [ 1475.186347][T19355] ? __fget_files+0x2a/0x420 [ 1475.191263][T19355] ? __fget_files+0x2a/0x420 [ 1475.196074][T19355] ? __fget_files+0x3a2/0x420 [ 1475.200804][T19355] ? __fget_files+0x2a/0x420 [ 1475.205655][T19355] ksys_read+0x150/0x270 [ 1475.210004][T19355] ? __pfx_ksys_read+0x10/0x10 [ 1475.214907][T19355] __do_fast_syscall_32+0x23e/0x6f0 [ 1475.220187][T19355] ? do_fast_syscall_32+0x33/0x70 [ 1475.225336][T19355] ? lockdep_hardirqs_on+0x7a/0x110 [ 1475.230589][T19355] ? asm_int80_emulation+0x1a/0x20 [ 1475.235921][T19355] ? do_int80_emulation+0x29f/0x550 [ 1475.241267][T19355] ? trace_irq_disable+0x3b/0x140 [ 1475.246629][T19355] do_fast_syscall_32+0x33/0x70 [ 1475.251631][T19355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1475.258095][T19355] RIP: 0023:0xf7f360ec [ 1475.262213][T19355] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1475.282001][T19355] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1475.290546][T19355] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 1475.298670][T19355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1475.306758][T19355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1475.314847][T19355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1475.322859][T19355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1475.331363][T19355] [ 1475.334646][T19355] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1475.341981][T19355] CPU: 0 UID: 0 PID: 19355 Comm: syz.5.3160 Tainted: G L syzkaller #0 PREEMPT(full) [ 1475.352954][T19355] Tainted: [L]=SOFTLOCKUP [ 1475.357309][T19355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1475.367384][T19355] Call Trace: [ 1475.370689][T19355] [ 1475.373657][T19355] vpanic+0x56c/0xa60 [ 1475.377720][T19355] ? __pfx__printk+0x10/0x10 [ 1475.382361][T19355] ? __pfx_vpanic+0x10/0x10 [ 1475.386899][T19355] ? is_bpf_text_address+0x292/0x2b0 [ 1475.392232][T19355] ? is_bpf_text_address+0x26/0x2b0 [ 1475.397479][T19355] panic+0xc5/0xd0 [ 1475.401236][T19355] ? __pfx_panic+0x10/0x10 [ 1475.405703][T19355] __warn+0x315/0x4c0 [ 1475.409723][T19355] ? usb_submit_urb+0x1057/0x18b0 [ 1475.414782][T19355] ? usb_submit_urb+0x1057/0x18b0 [ 1475.419829][T19355] __report_bug+0x276/0x570 [ 1475.424447][T19355] ? usb_submit_urb+0x1057/0x18b0 [ 1475.429501][T19355] ? __pfx___report_bug+0x10/0x10 [ 1475.434582][T19355] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1475.440425][T19355] ? __kmalloc_noprof+0x1ad/0x720 [ 1475.445482][T19355] ? kasan_save_track+0x4f/0x80 [ 1475.450367][T19355] report_bug_entry+0x19a/0x290 [ 1475.455248][T19355] ? usb_submit_urb+0x1100/0x18b0 [ 1475.460307][T19355] ? usb_submit_urb+0x1105/0x18b0 [ 1475.465361][T19355] handle_bug+0xce/0x200 [ 1475.469643][T19355] exc_invalid_op+0x1a/0x50 [ 1475.474176][T19355] asm_exc_invalid_op+0x1a/0x20 [ 1475.479065][T19355] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 1475.484758][T19355] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 1475.504402][T19355] RSP: 0018:ffffc9000d3276f8 EFLAGS: 00010246 [ 1475.510510][T19355] RAX: 0000000000000000 RBX: ffff88801fb29700 RCX: 0000000080002d80 [ 1475.518504][T19355] RDX: ffff88801bb44020 RSI: ffffffff8ca2d4e0 RDI: ffffffff90653c70 [ 1475.526591][T19355] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 1475.534589][T19355] R10: ffffc9000d3277e0 R11: fffff52001a64f08 R12: 1ffff1100e9394e4 [ 1475.542577][T19355] R13: ffff8880749ca720 R14: ffff88801bb44020 R15: 0000000080002d80 [ 1475.550596][T19355] ? usb_submit_urb+0x1091/0x18b0 [ 1475.555689][T19355] usb_start_wait_urb+0x13f/0x5b0 [ 1475.560777][T19355] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1475.566383][T19355] usb_control_msg+0x234/0x3e0 [ 1475.571201][T19355] gl861_ctrl_msg+0x207/0x420 [ 1475.575916][T19355] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1475.581239][T19355] ? aa_file_perm+0x4ed/0x15f0 [ 1475.586029][T19355] gl861_i2c_master_xfer+0x439/0x6a0 [ 1475.591341][T19355] __i2c_transfer+0x7be/0x1fe0 [ 1475.596173][T19355] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1475.602009][T19355] ? lockdep_hardirqs_on+0x7a/0x110 [ 1475.607237][T19355] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1475.613069][T19355] ? rt_mutex_lock_nested+0x156/0x1c0 [ 1475.618474][T19355] ? i2c_transfer+0xc8/0x2d0 [ 1475.623100][T19355] i2c_transfer+0x1cc/0x2d0 [ 1475.627640][T19355] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1475.633334][T19355] ? __lock_acquire+0x683/0x2cf0 [ 1475.638309][T19355] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1475.644506][T19355] ? i2cdev_read+0xe8/0x250 [ 1475.649048][T19355] i2cdev_read+0x10d/0x250 [ 1475.653497][T19355] ? __pfx_i2cdev_read+0x10/0x10 [ 1475.658472][T19355] vfs_read+0x213/0xa80 [ 1475.662668][T19355] ? __pfx_vfs_read+0x10/0x10 [ 1475.667388][T19355] ? __fget_files+0x2a/0x420 [ 1475.672010][T19355] ? __fget_files+0x2a/0x420 [ 1475.676627][T19355] ? __fget_files+0x3a2/0x420 [ 1475.681337][T19355] ? __fget_files+0x2a/0x420 [ 1475.685956][T19355] ksys_read+0x150/0x270 [ 1475.690238][T19355] ? __pfx_ksys_read+0x10/0x10 [ 1475.695044][T19355] __do_fast_syscall_32+0x23e/0x6f0 [ 1475.700282][T19355] ? do_fast_syscall_32+0x33/0x70 [ 1475.705335][T19355] ? lockdep_hardirqs_on+0x7a/0x110 [ 1475.710569][T19355] ? asm_int80_emulation+0x1a/0x20 [ 1475.715725][T19355] ? do_int80_emulation+0x29f/0x550 [ 1475.720953][T19355] ? trace_irq_disable+0x3b/0x140 [ 1475.726011][T19355] do_fast_syscall_32+0x33/0x70 [ 1475.731063][T19355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1475.737439][T19355] RIP: 0023:0xf7f360ec [ 1475.741546][T19355] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1475.761184][T19355] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1475.769633][T19355] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 1475.777635][T19355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1475.785625][T19355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1475.793701][T19355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1475.801708][T19355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1475.809735][T19355] [ 1475.813378][T19355] Kernel Offset: disabled [ 1475.817729][T19355] Rebooting in 86400 seconds..