last executing test programs: 10m48.835993323s ago: executing program 2 (id=1646): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) open(&(0x7f0000000300)='./file0\x00', 0x9c41, 0x6) 10m48.703888472s ago: executing program 2 (id=1649): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c0000000000"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m48.466748606s ago: executing program 2 (id=1652): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r2, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000240)={@multicast2, @remote}, 0x8) 10m48.235528791s ago: executing program 2 (id=1655): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b770711e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0xa748a1016cff1f1b, 0xdd1, 0x7, 0xb, 0x800, 0x0, 0x0, 0x182, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x0, &(0x7f0000000240)) 10m47.968127833s ago: executing program 2 (id=1660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) 10m47.788593225s ago: executing program 2 (id=1662): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x400) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x6}, 0x8) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sync() sync() sync() sync() sync() sync() sync() ioprio_set$pid(0x1, 0x0, 0x6000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00', 0x2}, 0x0) write$cgroup_pid(r2, &(0x7f0000000440), 0x12) r3 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) 10m32.756018992s ago: executing program 32 (id=1662): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x400) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x6}, 0x8) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sync() sync() sync() sync() sync() sync() sync() ioprio_set$pid(0x1, 0x0, 0x6000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00', 0x2}, 0x0) write$cgroup_pid(r2, &(0x7f0000000440), 0x12) r3 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='THAWED\x00', 0x7) 9m39.460827496s ago: executing program 3 (id=2607): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000ff0200000000fb", @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x3800c8c0}, 0x400c0) 9m39.33152713s ago: executing program 3 (id=2611): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000010062000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) 9m39.176208408s ago: executing program 3 (id=2614): r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000000)=0x5, 0x4) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1}, 0x1c) 9m39.096645053s ago: executing program 3 (id=2617): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x16}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880), 0x0, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000040055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 9m38.910332835s ago: executing program 3 (id=2618): sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) write(r1, &(0x7f0000000100), 0xfffffe5d) execve(0x0, 0x0, 0x0) 9m37.975979679s ago: executing program 3 (id=2622): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r1, &(0x7f00000019c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x8, 0x8, 0xc1}) mkdirat(0xffffffffffffff9c, 0x0, 0x1a5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x6, 0x7, 0x4000000000000e51, 0xffffffffffffffff, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x7000, 0x80cd4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9m22.863882357s ago: executing program 33 (id=2622): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r1, &(0x7f00000019c0)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x8, 0x8, 0xc1}) mkdirat(0xffffffffffffff9c, 0x0, 0x1a5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x6, 0x7, 0x4000000000000e51, 0xffffffffffffffff, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x7000, 0x80cd4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m4.803848579s ago: executing program 0 (id=4929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0x20001084) 5m4.703618156s ago: executing program 0 (id=4930): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="3303120081fd140000007ef52f555f2a0c09000000fd88a800f788a83baa88a80f8588a832f4", 0x26, 0x40000, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0xcf}, 0x14) 5m4.681663521s ago: executing program 0 (id=4931): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0x12) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0xef}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xcd}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000000140)={'vlan1\x00', @random="02000000002b"}) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) 5m3.715901205s ago: executing program 0 (id=4933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) 5m3.71571752s ago: executing program 0 (id=4934): keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) 5m3.693615985s ago: executing program 0 (id=4935): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000200)=0x3ff) 4m48.622628985s ago: executing program 34 (id=4935): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000200)=0x3ff) 4.885349413s ago: executing program 1 (id=8336): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@newtaction={0x1c8, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xe4, 0x1, [@m_bpf={0xe0, 0xe, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa6, 0x2, 0x8, 0x3ad}, {0x43f, 0x5, 0x33, 0x2000200}, {0x800, 0x4, 0xe, 0xd}, {0xe, 0xe0, 0xa, 0x1ff}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x7d, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f33fb311b8891e5737cded0da82817fe816da70d22"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0xd0, 0x1, [@m_nat={0x60, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x35, 0x6, "dfa2e46668bdfeb90a1f19baf8f88d4bce8a9ffaab1356402d505c36607f09166862341b38d61f52d18d13014960b0dd53"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x6c, 0xd, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x20000000, 0xcf4e, 0x2e4f7af}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15c3, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x6, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.594305693s ago: executing program 1 (id=8340): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c0400904000001030000000921090000012289"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000040)=0x3) read$hiddev(r2, &(0x7f0000001140)=""/126, 0x7e) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000040)="1000000a00f95b") 2.275435596s ago: executing program 7 (id=8380): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bb8}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x3500}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x4000}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x20004800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x7800, 0x80, 0x7321, 0xffffffff, {{0x42, 0x4, 0x2, 0x20, 0x108, 0x67, 0x0, 0x3, 0x4, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x76, 0x3, 0x8, [{@multicast1, 0xff}, {@broadcast, 0x1}, {@local, 0xd}, {@remote, 0x60f9}]}, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0x68, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64010102, @empty, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x35}]}, @generic={0x89, 0x9, "01501bba3920da"}, @timestamp_addr={0x44, 0x34, 0x92, 0x1, 0x8, [{@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x2}, {@loopback, 0x75}, {@remote, 0x7}, {@remote, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x3ff}]}, @timestamp_prespec={0x44, 0x54, 0xee, 0x3, 0x4, [{@empty}, {@multicast2, 0xd916}, {@broadcast, 0x2}, {@broadcast, 0xe426c68a}, {@multicast1, 0xb1}, {@local, 0x1}, {@private=0xa010100, 0x200}, {@dev={0xac, 0x14, 0x14, 0x22}}, {@multicast1}, {@remote, 0x6e3}]}, @end, @timestamp={0x44, 0x10, 0x29, 0x0, 0x5, [0x7, 0x2, 0x3]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff, 0xffff}, {0xb, 0x8}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xa}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x6c4c}, @TCA_CHAIN={0x8, 0xb, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000f, 0x8010, r2, 0xcdb23000) 2.094140128s ago: executing program 7 (id=8382): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}, 0xd}], 0x1, 0x40000021, 0x0) write$tun(r1, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x28, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e26, 0x4e20, 0x14, 0x0, @gue={{0x1, 0x1, 0x0, 0x8, 0x0, @void}, "6a93a1fc83e4f238"}}}}, 0x36) 1.610629054s ago: executing program 7 (id=8388): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x10448) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40002}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "8fb3b5cbd53218b9", "a3376431f154184c22ae4fde8562a3ee", "d9b2e399"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 927.672619ms ago: executing program 4 (id=8405): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 894.394829ms ago: executing program 6 (id=8406): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f00000004c0)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000940), &(0x7f0000000980)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) r6 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0x4e20, 0x3, 0x4e21, 0x4, 0x2, 0x10, 0xa0, 0x0, r5, r6}, {0x401, 0x7, 0xec, 0x81, 0x7f, 0x7914, 0x3, 0x2}, {0xffffffff, 0xdd7, 0xfffffffffffffffe, 0x10}, 0xfffffffb, 0x6e6bbe, 0x0, 0x0, 0x2, 0x1}, {{@in=@remote, 0x4d3, 0x6c}, 0x2, @in=@broadcast, 0x3504, 0x0, 0x3, 0x40, 0xfd5, 0x14, 0x6c}}, 0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r7, 0x0, 0x4004084) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc080) sendmmsg(r0, &(0x7f0000007c40)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)="5d3e8983a57bd2a7fbd816bc0a69d7cb82cb7f82ba7e5802d8f7f7437b4e2832fe4a5c2819c6bc6c00266df02076a066b8a123213071b440175fa51286f9", 0x3e}, {&(0x7f0000000240)="8811538006703714756bf0452cc11ff046776d1fc5", 0x15}, {&(0x7f0000000340)="beb7bb51d944b2afe2c6a932032fa0810efa0c9c6a9cd842d47e4a97faa0a4de6316a456d08ec88063316d7fe6e10ea4911fcb99809e2638e0d718d4012c8159d7f2044a3bab4097408e58c930d6f9c89a3f0cd2caf957f426b7254b60ad2016536730d25e8329fcdd57a91ef83cff56f23d253d4e06598003da396082c9b3147a367d6685cfcaaf52ab901aa67e742210eee5f1f35f46683a8cb7dd0ac33a3a2c0b16211a9d434c5f589ef5e3c5d953030842bf7117f3a1152b50", 0xbb}, {&(0x7f0000000400)="865791482608754e59de2cc5888d6eccba40ea663ad099cc149b2f36933ab256a1c6a2fb84737dad529599ad7fc6a594f20ef7387ccd210fbc4517bd19cdbac32cfa06c0eae0da7d2e7ba92a67c7640f6d017e4c1a71c68055f499", 0x5b}], 0x4}}, {{&(0x7f0000000500)=@ll={0x11, 0x15, 0x0, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001380)="f31a70c05e49362b6d459c04e42c8b7dab71965dd186f0742f3744134ae0d270b96ef99f6f4f6c2d5363642e41112d9a526441a8f1db80c8122c7eedddc85bf47fa9d72bd87795022fe93569b89d2f8b7e4d37617948861f14a0a36d86fb6f3167f4ceb24a1732b5397094f778eda611b914b0eff392d58dba327b4e35900834918c1abee5293c4672c8492956b25fddd3f882e9c55b70526491e53742cd2d59e810fa60eb02f64239db948b5e50a47ad7d79b21ec9ca4e6a30b272c9627f705c01425e7dbc6b7bf2467093361bf5c061caa735120d923e3864471cfe07848e029cc6720c84b5d1f79dceeb1026f0ced9676ee7df81f230de48ad2e452df173a6b234ef17ecd451e975b1150a42840a6232617c3a57a7233b00ea88670e755290d537c793ce942ae2cea881e58fd8fb53662a1fcce0fd17b275fffcfca1a5401189cfc3b4995b9e4deb6834e7ca648be26ec29bd0de71c2621fa83b507dfd50f629722388efaa25d1219ebde19c692afbfc0bdff8844dfccf446425ef0cfe1cdc9df60109d14a929f5eb04d9d25e8de68b3bab12fae5802f8498069730af3262b70c5804b27870eb89e2f76a060d7c8004782ba0de5f2406311ecc88eaa5b9df078fb4a5e526d7d0f1ba2d41c9da73575d5e0908acb419bbc766277a4b546172326dfeaa157c607a75ce6a7a452fd1260def55f48e95069e09df16bf4acf84a81dcc0a28304fc0eab0df0e46620032acd418a3159712c05416d0d8df71b3e586bee140e57e68a76c3a70f88961ed16d0d237bb44de4c57442c7805f9e4d953834ee0866c34cdce5d2488a9ecde1cb69afa0820796ae9b97af6acd06998c7ce3cd996ad87064313896cbeff68e2935c8081f9f5f4be7f6fd295562c35bfec374b1eb85f2c4ff571322f5874836f1d6933320a8851eb1ddcbb5573d8e2a22d530c8f6367838a8fe7af18b901be345f3bb0b0ef6ed24d3998858c2d4f7d65763fe474d32a75b811155e76c515447591b673f3b77fa838bab491036d0963d1d20e05e3781cef32e9fb8c8410907d2cab31346ab456c40686cec50b5a06ad477389b937084f40f684d73f799e6a750fef4a5c7fb8eef6c5d53564f6d70ca56d5905f2c1f9ff7edc4fd2e4bc2004399fceba0230313260bfa14c2db1ab40d901a9ce3f9c3957848f3b6bd0201b2a0769f1c6e9fa3d5e7f8b58dbb2e7f66cfccbf55721be49fa9f46b00851d508fc7592d96df262f15a52027877c39714456f4f37bc6ad4fe7331dd012d9bbc1e7485334ea16eaec0b52e3c207098922f283f9ec41f82d02f46d1e7a501bb71d9c15488eaec79f9b821746ba6b609aa9c6f089d096f9e47d227fcccf097aa9e770c6944f725fea432d2b3b997dd09a5b9230514575e7f5254c71cbce2e3a97c0847dbc25eb89a408e8b17d4b2187f248aa8c02d5f0ee941c3b9093c767158a703c50dbbc3f38e3262a92ea01b8b085d4526551ac9ce51ec345ed31d9ca6271e2319d67fe1b06350ca01ac33f50a9a4be39b4f8e0040ec6f2fdb48dc1f1bc2fc1c258508d2cfdc2ef22ee61996d974af37db75d7ee99e3b605658ece4c428b92f63dcffcfda22b39615f91b207041f21aee76e28785f2cd4a2d6d8bba9e5b134909ea65d65078ea29042517d34465a14c117595e86d2f04f352ce9fb0b7e94203b1b065c545e1a8af0a8b0bba11ff86742425a1b5727c510a64028b87e2f23c7a904519bfa8af0973cc6e67c3cc22c00cbadcb557c4244b7035f21a92aca0d62193c93237e8a9189daa6b23a989d391d55eae908166b48fda81215a7bb6231392548dc20680fbed9af950742d5fbfe85f7812a83faa768615dd76140b57a02ce728a9be6d13cc2096cdc968ed12ea9952887eba88de694db6dba34952f818fabdb61c8fac034aba0c5f3e1cfabe5271c03ca6cf8928c07e47e33246af0d552121aaceb64214a189ca4fb2b6304b138629f9baa2802ef632439e03be184ebc13f25e7873de27a8f5d0603967a08d7975d74699f4f2ca5a4c8fa14d28de90567763ec9814b246fcc2dadb4b742d6be668b8d37e7fcb3751d64858fef61c3f2f50064b7d533894a8ab76bf842a12f42c7380d19548857645fee0a6ea4e8a9d77f4a7550e019f6ebf1046d319c4219c35d3c8a58da5743005bc0cfac8e583c530f12dea973d4f48f64001e1c7ebb5dc50ccda82de6e69006579100ac61f7d97f99759160c522a9f94c9a341191f91ebf1fbbf2789ff245518e17d0889878727babb1dc034a496127262267848ee6adafa519539c8e2708a9766e5acf305740038c2ae2108530eb20bf698dadd440f6f93298396fc7b43373374cfa7818c7092bd05c7b751a8bd965402e26e51431ec1f36a4db7576877ecfeabf394fe0b595cad3b382f972721f08d496f6e02d68665db49e51b4a16fe40825d1933c83048461505cc95c34e49edeaf7ec31642f666e214a3e8d2df4d92b51e2c8e44b4eb86e17657d6b376ba8fe606ef305becd92e04ec4162cfae66ebe73a2630562da7c0aee3985891b52eb65d8b4b6880672f7734bb515539c5cbfbbaa00b4146d5fdeb818cb6d2f9c9e071809e9458e7289db9068064235cb64265eeb14ffa56babcc32b2139f8869b1e7dd6db69bd83c33116ab98009cc60b60b5a925ce357c2b4a49dee8cb6230bcf737c7822603611105533f8884ab0c9480d853821d41efed8abaf8c8a523d45598f0f67ca3299006eaf6b3c0f8e4661ea8726e41ade85a7b43b27bca1106a36f36bc2970b0b21b1e8c9bbde7d67eeff204fe27ed53c91b4b1e3db970cf4a3c18c3bafda5cacdbea087b5bdc4eff7748536d40203e95ffef8c6e227223a8b6f0fc2c82213253024bebcc21e3eebc17503a25f34ae010402e8d5de957a2b0be31ad3d6b815e7dae8990365263a71d03f8e68a4d3c110db58e22a216c341f082a6c4f1585720c0483e7043fb3ba9acf27812045d06fa802fccfd2753850f6b40375ad2d56f21e819698d47f2068ac92d2dede1ed896ab154cdcff8525be77aa0f9a00f019a943ebb338890f55ac90f848174cfd8e5883d26558ea85ecb41ae5712f3e7924eeb62ed3e80c49dab3ba1dc2c79ae97e0e4d2cc1097966a1659dfb2eb07fd09890a832774128f258941eae94cb78df3297ca7fe3735f8f27e7c9e70420dd24be917b019d5b41187052a93e11f04c37f14a9f42e686aab3851a406512005f9c15312acf732fe4e619ccfeaf01f68d92b3e14d7410da548696d2c1e433e823ab34caa5e1326b4f339334ccdfac52fedcfb8aa8245eec1e65b68303ce05242d47545284271d4f480d360f1cf1e878fe0434b20050b86f6ee6b60b904d45e111074cc0a003efd5fed76279b3c5636a6194677c2375ae3d598363b9c13e4701943caa24ff2b7c7b5334407613b06fdb96bb9125eb8ac0b0240b9c0c7f89c22989cd9c22b06afb0312f00651d7769bb3942c2a74e80de98fab376a13ab40b9e04571c4e8ccd1eff22024fea10163078e6628f567c6255ec28a07da24f64f6a8b023f62599a2c90e8c69e18ac93d67c84f831a7dbd26aef271639e015757e94aae143b495733048d07c5d737dffa783ba72cdddc319854ab6e25fb02bd2a11f37b3b702639468929d75116d6d50b1d738e74a988794c02d50a809a4627f08f8700dfc81c55867c4e5a2db2aa57a77533bf92f4b3db1831fe4317030709a8c01ab40211859e3240e74318c24a1cc0651e84145b64dc4a3ecc5b393518d8496df37401aa94f570b0eb2a380bed48a00ccafa668fdbb00580ea79dc0695f7f3e1dbff01c2d9d296e71c5f0d7c536dba60be26f593d4425ac39ce784a41fd06dbec48e1eb1e49f57ea6be0ecca017a57e1e98ff1e086ffd18adef7745e3764c11fe077e80d23953795ee8d1e0b36b1c3f66b7899197e62c00857b6eb35332910405bafe1d205e0aa553fb71f1ed9b3337462f93605101c13539c1361dc211782d58038b0b5e86f591c672a93bf3cfd9676d9716e64ecde377dcf22c9df8375454d1b45da5db1388321c6e69185b4ea190f944a7fe4720083eed6f9827f66a0b8d77b2d80f60750c25b304cb4a3c2e1f9b838f3df40265cef4fe62fbc85ee68600ee749375105b2ff60e3cf946c81e6d31e9de133ca55273b5f82c185903c1a28f25f9f7fabb82e21ea757b5d3d0865167b61bc424ce2dede1dde0aba6e2568420881deabb1add48158237a5dbc4f4c269464edd486741bea4bc004171856155ec80b3d5a943079b79930124b7bcf727bcec95c210a5bdc3132a82f36eec33f5de68f08425b348502703976c74042aa92db89ae72891086bf334fe32dc0498dbed188ba058481dd3b12759e635bfc4747fbcbe2c807324ac54535179845fea1e43f36fd6793fe9f9745fa29045498c0dd0d8cae60480ae7e775a33a84a2ed0cc353bda875b94ba50510e69cc0ca4f5118f48ea80b6d27afb56dc95637b750fd03fd336463f5796ce609173736935af975d38d5bf2bfca51c5c47b7459da9472665a1f6db9502fdb9389b9a0842ff7e39f6cb1f2942376c050203d9c7e5436b125213f73ddc7eb151fb560f6cd048ae5cd509c962a009de8135da36cbf768488ba2a087688798bf4dcc576080ff461062229c261cd2654360a92130c28d173c35447bddb1f0adce2b35d91a59b9a5c8da01c1d84ac16ad9f58af67ce1ae710b06957699850571878711b143cbd2f3a916fa8617a9a8c7453580a19f9fcaac0bd573873b3efeb9c69e0a3c25322def7c2985fb7d016e5f6be97ef0ce56e378db91128bd6e807628b54d172cb2495e562081265ce3ad85d56ef8a1345878f1d1d236a92d3f5de3dc80cc2c985d1574b4f773dd6e91c950d3b0daa53be106ca08a036912957b9a3f85d739cbb0d0a0eb4ad820a949f522b50a3ca6a733c1feac0a0bb1a9a32e8ab84392b806ce230414630795e250eb3f424ca6505e52d7cbb6ceae4b4a9c3e73fc39d58f71d37c9415d6797481b4c40ed90c7445f86fb984c1e99f881b9320d75548620701d604921368a3ec603f02801d9ab0091584c03b0f29e9621eac93649fb2ee77c29b57a5a334754de453e2ed472f2c4412f3b45134499696ae5bc1ecb063bfc882c5575cc1d3c8c1084a4be3bc7cdac88c30931f61e55b92757fa3b5b7b093ed155c435b0e220949ac72ff7910cd7e88d0a5a7292dc14f219e052782f6310817e4f97b4753929cdf28be536802e91c5f134309304169926aadad635c7f06af6d4ce3035af8ad5bdc34f999fc49bdfd316c73fbfe70b87f13fa31a589dd065b4b10744066f4be99539b295a0105b39a6e4e6a4a9914e4a2dacb299043d610ad37c3d1bb0d7b4e2ce72109c73b1818961c46b67125db3c3b1b6a5c49c60b924510df00b1b903fbdf6ba744d658445b4a65e0c8bc47fe26bbb6e49d1c80326f960618825509ea6cfff22b814c9d4220e7c9ad8e93c0ee2ed716d44cdb7bac95fc83a492f3fa61966b32bdca2e2630100de0f944526e98f617439fba3af8b2e8b1b3e2e6e938e73be61d6abf410d8eac3b8969f70bb56615b87fe33278710197df30cc9b789bd344bcd53847aeefc82bb1a9b783c327532806241a67bd0d2fa1f458844670f9ad6bef8ee7ae1cc3c769859f3ba3c67c3589c0e7b31c00fc879d8f70fd9109e06079cae5e2350a02dfcd916e9098035d8317282c27910897c9117563f31fc195e88b2279c4e8be9d7fe4ba00f5d33e5b987fb83e7d9ca407c0ef5161cd17565c70b35ce4645f7fff", 0xffe}, {&(0x7f0000002380)="a1fe5ec30eac890fd6cf8e9cd614513304cdd0ab05bb9d07d0dd5ecdd8bff458f04e0cd799b8498e6af449d717b0589c2a22a99668a258ca985ab48721daf4f25e", 0x41}], 0x2}}, {{&(0x7f0000002440)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000024c0)}, {&(0x7f0000002500)="fa1bea0e6e654b798a096981891866d1de08fe640d8b63d3745a569bfc7efed59f3ed36c59b39610ca06265f15a4ba37a2b09a69ea09b80033e7e575680bdf57f020f751eb7afa0b80e57089a6fd5003ff7bf5d02628453ea42e5107e4f92d3709f45cec371799edc4be21bed5c815c715f0c7571609e95c052d924a618407f31c5d6248b3", 0x85}, {&(0x7f00000026c0)="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", 0xe00}], 0x3}}, {{&(0x7f0000003a00)=@caif=@rfm={0x25, 0x7, "c85b66c4e6eaaa9f77ae2a1e31997bea"}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003a80)="b2e5911bdc1e6a6433ad53573da76be4e2b13fae1160c85ed28e0407d2fc74dd371d3b2a0228c220e4cefeeb05804718e06aa1e5c4eed02f0ebcc601e0db746890e983d20a934fc2512ad0c4dbb81512e38c163e50e893b1883fd73a4944f9900ec4cb17a4095eb7e19d32233027cea38b8e462fae3ca2df85cc738c11a1886407a4aa23f84c7b68829f3db8767041ae689cad83323c4b8ce3d422803fbd9622691dc5ec6ce6703cc2aa7c060046c34fdb8ca38c8683b6327ee67fec7cf0aa7f3a786635b3c41dd2311c103f966dc994fc56646e349adb33a02ef0ac1f13a67ab76a45737670abdb4367ed4017fb70", 0xef}, {&(0x7f0000003b80)="349decf33ec8738ec89dde9be9cb2903ef2916b05d5e01cd59efba0b36e2a24994f22f7c0f146ce80998a3636be5020117a1928d809cb4f5df9c3397013fbef4d574f7716deecec276546f70ef3577462951659475eb00f59c2e08a90d58d16fb97b999e13f94e103108a991fdc3ae2bbf3288ade0d1fbb73b89421c8fe1b4123c193be485c275bbcf29", 0x8a}], 0x2, &(0x7f0000003c80)=[{0xa0, 0x10a, 0xffffffff, "7f51a5d4a659b9c3df8c453f270f846867578a1519a4075cbac9009b742e22ce1be2efd75018025e629f14b2d754dd09a2d8fe26cedbd4c8e11365624005091a1c08c6c44b06b4c3c822432dc4c827bd0475cce230dd95a7b6235b3b46e63917b9d5b03ce744100f127f4f7e89940e68653a9ec76d797cd852b53988ddf484842230bc48e0e0e4ebaf090eb69961ecb435"}, {0xbc, 0x109, 0x4, "1575e075eed9d092510cb260ffbf0d86b6fac6feef3d3e42fe05699174a7d5aa43bf4a363bff6ce31730072a26925f2c193d37423c95ea2094027839552c4310a027fd311e9b0ab1934dfd6dfa096427e8685eddcd7507a87369b9f2102cd3ffccca59691af88f4f0841c6d27ca62eaa4f2953ab5fe7c16fbe96476764767ae60d91987a422be960a6c72abb5b97f893465e5062d5fb7f65c0ba4c3f8b6f6581611648051f64d838f0ba5bdb04719e"}, {0xe0c, 0x114, 0x2, "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"}], 0xf68}}, {{0x0, 0x0, &(0x7f0000007b80)}}], 0x5, 0x0) 823.804877ms ago: executing program 4 (id=8408): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x400) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000280)) 766.455318ms ago: executing program 5 (id=8409): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x3, 0x0, 0x0) 752.745052ms ago: executing program 6 (id=8410): recvmmsg(0xffffffffffffffff, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f0000004940)=[{0x0}, {&(0x7f0000002fc0)=""/43, 0x2b}], 0x2}, 0x2}], 0x1, 0x40002122, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x8) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=""/172, 0xac}, 0x110}], 0x400000000000180, 0x1822b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 655.380151ms ago: executing program 5 (id=8411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0x1, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x3, 0xffffffff, 0x8, 0x9, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x206, 0x5f, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0xafb, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0xa, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}], 0x1}, 0x4) 655.100316ms ago: executing program 4 (id=8412): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@newtaction={0x1c8, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0xe4, 0x1, [@m_bpf={0xe0, 0xe, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0xa6, 0x2, 0x8, 0x3ad}, {0x800, 0x4, 0xe, 0xd}, {0xfffd, 0xe2, 0xc0, 0x2}, {0xe, 0xe0, 0xa, 0x1ff}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x7d, 0x6, "5ebee8cb5ec798bed9e14471cd7fc80ada4a347f0a471b97541b3746862f593b574dd0b277a884f0ec7a65593a424488dee51eac7e3301dcd335734b379d1f821b27f9ace9c0ec57aa91fb75ea79531b85b941055b331912532963810dd2e455d7e1fce8f33fb311b8891e5737cded0da82817fe816da70d22"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0xd0, 0x1, [@m_nat={0x60, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x35, 0x6, "dfa2e46668bdfeb90a1f19baf8f88d4bce8a9ffaab1356402d505c36607f09166862341b38d61f52d18d13014960b0dd53"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x6c, 0xd, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x20000000, 0xcf4e, 0x2e4f7af}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x15c3, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x6, 0x6, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 633.805923ms ago: executing program 7 (id=8413): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0), 0x0, 0xff14) 608.119357ms ago: executing program 5 (id=8414): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002400)=ANY=[@ANYBLOB="8002000043000701fefffffffcdbdf25017c0000040045806802018064029f8004002f805c02b5804502378008004200", @ANYRES32=0x0, @ANYBLOB="7501b0808d001c8004008c8008003300", @ANYRES32=0x0, @ANYBLOB='\b\x00i\x00', @ANYRES32, @ANYBLOB="04001b800400b38008000a00", @ANYRES32, @ANYBLOB="08009600", @ANYRES32=0x0, @ANYBLOB="0800a100", @ANYRES32, @ANYBLOB="8708c8e339d794ed9adc67ed148a0b9f92c24a0879e3b7427ada6a212a30fc6fbe729f741ae4111437957ab1b351", @ANYRES32, @ANYBLOB="2200ec0085abe5dd4f565397591c5c49b8a10546ac218800c3af8a2dc1601d0b952400002552869e228a94da22cd735e3bba5fea1c3ff1a45d8bc0ee0ca29b8c2ec63199ff514fef47d8da0e25fd9ea73c082394001bc21d9307122008b2957b7c98342f502a152beff1e14e77a7b22f03a6077d5edca5369a8498fda2668720376446994b059f73e95cddbde3bbb4679414fecee67c8602f27054d5a955421b8ed287d79af8273a3e8b9e406fe06378560095cb9b27076ea1b79c739c7c4abc7aff9222096fbf172d08004900", @ANYRES32=0x0, @ANYBLOB="0500ac0000000000000000cfe136f749809bc4043e662bef056ccd2e88fc8b2ab8000fac4349227d1ec7ef0eee273a3194d817de000ac074ba1f3097f3dd4b93f9f276f6cb63c6ef24570b86a8d87215c01081e325ddfe0ccf8e6401d9595701c887c7ccc6f94e9b6e00741a009bf25a39c19819bf64f8fd8157952556a2fc8015718a2732e74984075bb84131ad069e495eb22d91706a4ce2b002397e9b4b853eae1a4164b1471ad0be6b82fdcb8077da7afd18f1c00d76ebe90e008a004e4c424c5f4d474d6b000000080044", @ANYRES32=0x0, @ANYBLOB="0800cc00ac"], 0x280}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 541.441138ms ago: executing program 1 (id=8415): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x60) 539.609932ms ago: executing program 6 (id=8416): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c896}, 0xc0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}}, 0x0) 523.083879ms ago: executing program 4 (id=8417): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/102, 0x66}, 0x200}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 488.442351ms ago: executing program 5 (id=8418): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f00000002c0)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4004000) 383.983771ms ago: executing program 7 (id=8419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x48000000000000}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 369.834733ms ago: executing program 1 (id=8420): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @private1, @mcast2, {[], @time_exceed={0x4, 0x1, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @local}, [], "af34000000000000"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740), 0x0, 0x2000, 0x0) 369.020525ms ago: executing program 6 (id=8421): unshare(0x8040480) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x100000001, 0x4) 327.772644ms ago: executing program 4 (id=8422): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0), 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x8, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0xffffffff, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x4006, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x6522, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0x9, 0x1, 0x0, 0x3, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0xb, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x0, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x380, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0x20000d67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x9, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0xa3, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0xb, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0x5e33, 0xffffffff, 0xfffffff6, 0x10000, 0x9, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x3, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000480)={0x1, 0x3, [0x18c, 0x346, 0xa6a, 0x6b6]}) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf0500050012", 0x2d}], 0x1}, 0x48000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 265.961482ms ago: executing program 5 (id=8423): r0 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000005a40)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000940)={0x54, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0xc) 200.125201ms ago: executing program 1 (id=8424): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfffffffc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x802) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x34, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}, @nested={0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 199.217236ms ago: executing program 6 (id=8425): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x8, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0xffffffff, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x4006, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x6522, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0x9, 0x1, 0x0, 0x3, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0xb, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x0, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x380, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0x20000d67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x9, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0xa3, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0xb, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0x5e33, 0xffffffff, 0xfffffff6, 0x10000, 0x9, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x3, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(0x0, r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000480)={0x1, 0x3, [0x18c, 0x346, 0xa6a, 0x6b6]}) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 151.674791ms ago: executing program 4 (id=8426): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0) r2 = syz_open_dev$hidraw(0x0, 0x82, 0x2) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, 0x0) syz_usb_connect(0x2, 0x396, &(0x7f0000000040)=ANY=[@ANYBLOB="120100023ee6f410"], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000cc0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 141.127478ms ago: executing program 7 (id=8427): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x5, 0x0, 0x8, 0x94d430193590d839, 0x0}}, 0x10) sendfile(r2, r1, 0x0, 0x401) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000000014000100fc000000000000"], 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 128.336655ms ago: executing program 5 (id=8428): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x198321, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) 90.569724ms ago: executing program 6 (id=8429): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 0s ago: executing program 1 (id=8430): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c0400904000001030000000921090000012289"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000040)=0x3) read$hiddev(r2, &(0x7f0000001140)=""/126, 0x7e) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000040)="1000000a00f95b") kernel console output (not intermixed with test programs): 98867][T24411] netlink: zone id is out of range [ 783.319852][ T5910] usb 8-1: USB disconnect, device number 29 [ 783.337804][T24411] netlink: zone id is out of range [ 783.352225][T24411] netlink: zone id is out of range [ 783.366768][T24411] netlink: zone id is out of range [ 783.375720][T24411] netlink: zone id is out of range [ 783.381239][T24411] netlink: zone id is out of range [ 783.390584][T24411] netlink: zone id is out of range [ 783.391780][T24416] __nla_validate_parse: 2 callbacks suppressed [ 783.391793][T24416] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7356'. [ 783.395811][T24411] netlink: zone id is out of range [ 783.419354][T24411] netlink: zone id is out of range [ 783.424699][T24411] netlink: zone id is out of range [ 783.742725][T24425] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7359'. [ 784.487140][T24447] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 784.506557][T24447] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 784.787836][ T1209] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 784.971460][ T1209] usb 5-1: unable to get BOS descriptor or descriptor too short [ 784.981331][ T1209] usb 5-1: config 1 interface 0 has no altsetting 0 [ 784.993122][ T1209] usb 5-1: string descriptor 0 read error: -22 [ 785.008054][ T1209] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 785.028986][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.050579][T24467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7377'. [ 785.483416][ T1209] usbhid 5-1:1.0: can't add hid device: -32 [ 785.500560][ T1209] usbhid 5-1:1.0: probe with driver usbhid failed with error -32 [ 785.526760][ T1209] usb 5-1: USB disconnect, device number 102 [ 786.360267][T24497] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7390'. [ 786.800196][ T10] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 786.960216][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 786.987871][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 787.018251][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 787.038321][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 787.058502][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 787.077852][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.106513][ T10] usb 5-1: config 0 descriptor?? [ 787.123475][T24503] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 787.152515][ T10] hub 5-1:0.0: USB hub found [ 787.347239][ T10] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 787.392415][T24522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7402'. [ 787.576123][ T10] usbhid 5-1:0.0: can't add hid device: -32 [ 787.602451][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 787.649076][ T10] usb 5-1: USB disconnect, device number 103 [ 787.693512][T24528] tipc: Enabled bearer , priority 0 [ 787.719409][T24528] syzkaller0: entered promiscuous mode [ 787.738967][T24528] syzkaller0: entered allmulticast mode [ 787.749558][T24528] tipc: Resetting bearer [ 787.760964][T24527] tipc: Resetting bearer [ 787.800896][T24527] tipc: Disabling bearer [ 787.988436][T24536] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7409'. [ 788.103401][ T10] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 788.307829][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 788.319823][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 788.347957][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 788.364895][T24545] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7414'. [ 788.372562][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 788.397997][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 788.417992][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.430005][ T10] usb 5-1: config 0 descriptor?? [ 788.438184][T24503] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 788.463582][ T10] hub 5-1:0.0: USB hub found [ 788.588752][T24552] net_ratelimit: 35 callbacks suppressed [ 788.588772][T24552] netlink: zone id is out of range [ 788.627898][T24552] netlink: zone id is out of range [ 788.633061][T24552] netlink: zone id is out of range [ 788.648954][T24552] netlink: zone id is out of range [ 788.654480][T24552] netlink: zone id is out of range [ 788.664738][ T10] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 788.667803][T24552] netlink: zone id is out of range [ 788.683419][T24552] netlink: zone id is out of range [ 788.691958][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 788.698115][T24552] netlink: zone id is out of range [ 788.708195][T24552] netlink: zone id is out of range [ 788.710244][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 788.721128][T24552] netlink: zone id is out of range [ 788.747926][ T5896] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 788.759190][ T10] usb 5-1: USB disconnect, device number 104 [ 788.906226][T24562] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7422'. [ 788.919424][ T5896] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.938152][ T5896] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 788.957177][ T5896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.988220][ T5896] usb 8-1: config 0 descriptor?? [ 789.211014][ T5896] usbhid 8-1:0.0: can't add hid device: -71 [ 789.217051][ T5896] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 789.252613][ T5896] usb 8-1: USB disconnect, device number 30 [ 789.424232][T24576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7429'. [ 789.728385][ T5896] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 789.761960][T24591] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7434'. [ 789.902195][ T5896] usb 8-1: Using ep0 maxpacket: 16 [ 789.924641][ T5896] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.936186][ T5896] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 789.948048][ T5896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.978398][ T5896] usb 8-1: config 0 descriptor?? [ 790.061480][T24599] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7438'. [ 790.071779][T24599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7438'. [ 790.229389][T24605] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 790.246892][T24605] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 790.406213][ T5896] kye 0003:0458:5016.0042: control desc unexpectedly large [ 790.416522][ T5896] kye 0003:0458:5016.0042: control desc unexpectedly large [ 790.438429][ T5896] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.0042/input/input83 [ 790.487505][T24619] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7448'. [ 790.559252][ T5896] kye 0003:0458:5016.0042: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.7-1/input0 [ 790.844775][ T10] usb 8-1: USB disconnect, device number 31 [ 790.857881][T16852] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 790.916601][T24639] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7457'. [ 790.918683][T24637] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 790.930584][T24639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7457'. [ 790.933140][T24637] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 791.009645][T16852] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 791.032880][T16852] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 791.052871][T16852] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 791.067001][T16852] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 791.078463][T16852] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 791.108415][T16852] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 791.117829][T16852] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 791.125833][T16852] usb 2-1: Product: syz [ 791.150750][T16852] usb 2-1: Manufacturer: syz [ 791.160703][T16852] cdc_wdm 2-1:1.0: skipping garbage [ 791.165944][T16852] cdc_wdm 2-1:1.0: skipping garbage [ 791.189465][T16852] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 791.200417][T16852] cdc_wdm 2-1:1.0: Unknown control protocol [ 791.401985][T24655] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7464'. [ 791.569966][ C1] wdm_int_callback: 26 callbacks suppressed [ 791.569992][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 791.640773][ C1] wdm_int_callback: 24 callbacks suppressed [ 791.640800][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 791.653458][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 791.659832][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 791.662114][T24669] tipc: Enabling of bearer rejected, already enabled [ 791.666443][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 791.683054][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 791.689683][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 791.696069][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 791.702688][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 791.709055][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 791.715668][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 791.721999][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 791.728612][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 791.735657][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 791.740930][T24666] syzkaller0: entered promiscuous mode [ 791.742289][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 791.754813][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 791.761433][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 791.767873][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 791.774486][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 791.780838][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 791.789256][ T5910] usb 2-1: USB disconnect, device number 118 [ 791.795299][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 791.798810][T24666] syzkaller0: entered allmulticast mode [ 792.044051][T24682] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7476'. [ 792.187874][ T5896] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 792.288925][T24696] tipc: Enabled bearer , priority 0 [ 792.296505][T24696] syzkaller0: entered promiscuous mode [ 792.314504][T24696] syzkaller0: entered allmulticast mode [ 792.341898][T24696] tipc: Resetting bearer [ 792.355255][T24695] tipc: Resetting bearer [ 792.369425][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.383424][ T5896] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 792.383890][T24695] tipc: Disabling bearer [ 792.393165][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.417624][ T5896] usb 5-1: config 0 descriptor?? [ 792.436724][T24702] ipvlan2: entered promiscuous mode [ 792.444661][T24702] team0: Device ipvlan2 failed to register rx_handler [ 792.647592][ T5896] usbhid 5-1:0.0: can't add hid device: -71 [ 792.658392][ T5896] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 792.698591][ T5896] usb 5-1: USB disconnect, device number 105 [ 792.981259][T24732] tipc: Enabling of bearer rejected, already enabled [ 793.182429][ T5896] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 793.198115][ T5883] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 793.337834][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 793.345694][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.359898][ T5883] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 793.377412][ T5896] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 793.387799][ T5883] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 793.387823][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.404210][ T5896] usb 5-1: config 0 descriptor?? [ 793.411241][ T5883] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 793.431295][ T5883] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 793.455123][ T5883] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 793.484415][ T5883] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 793.518021][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 793.526148][ T5883] usb 7-1: Product: syz [ 793.530655][ T5883] usb 7-1: Manufacturer: syz [ 793.551854][ T5883] cdc_wdm 7-1:1.0: skipping garbage [ 793.559636][ T5883] cdc_wdm 7-1:1.0: skipping garbage [ 793.575942][ T5883] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 793.584106][T24756] tipc: Enabling of bearer rejected, already enabled [ 793.592534][ T5883] cdc_wdm 7-1:1.0: Unknown control protocol [ 793.836716][ T5896] kye 0003:0458:5016.0043: control desc unexpectedly large [ 793.849379][ T5896] kye 0003:0458:5016.0043: control desc unexpectedly large [ 793.865533][ T5896] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0043/input/input84 [ 794.027759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 794.161066][ T10] usb 7-1: USB disconnect, device number 104 [ 794.161094][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 794.208294][ T5896] kye 0003:0458:5016.0043: input,hiddev1,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 794.293267][ T5896] usb 5-1: USB disconnect, device number 106 [ 794.384433][T24773] fido_id[24773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 794.569218][ T1209] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 794.729764][ T1209] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 794.741828][ T1209] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 794.754105][ T1209] usb 6-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 794.771935][ T1209] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 794.797967][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 794.805995][ T1209] usb 6-1: SerialNumber: syz [ 795.004703][T24794] __nla_validate_parse: 3 callbacks suppressed [ 795.004721][T24794] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7527'. [ 795.040469][ T1209] rndis_host 6-1:253.0: RNDIS init failed, -71 [ 795.056049][ T1209] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -71 [ 795.087008][ T1209] usb 6-1: USB disconnect, device number 96 [ 795.567904][ T1209] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 795.729163][ T1209] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 795.740366][ T1209] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 795.751944][ T1209] usb 6-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 795.766978][ T1209] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 795.781822][ T1209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 795.790003][ T1209] usb 6-1: SerialNumber: syz [ 796.021367][T24779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.048494][T24779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.075310][ T1209] rndis_host 6-1:253.0: RNDIS init failed, -71 [ 796.090640][ T1209] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -71 [ 796.120411][ T1209] usb 6-1: USB disconnect, device number 97 [ 796.267818][ T5896] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 796.439231][ T5896] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 796.457847][ T5896] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 796.488528][ T5896] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 796.497557][ T5896] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 796.520302][ T5896] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 796.554077][ T5896] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 796.563540][ T5896] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 796.572161][ T5896] usb 8-1: Product: syz [ 796.576492][ T5896] usb 8-1: Manufacturer: syz [ 796.594451][ T5896] cdc_wdm 8-1:1.0: skipping garbage [ 796.634444][ T5896] cdc_wdm 8-1:1.0: skipping garbage [ 796.658307][ T5896] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 796.664261][ T5896] cdc_wdm 8-1:1.0: Unknown control protocol [ 797.126412][ C0] wdm_int_callback: 21 callbacks suppressed [ 797.126437][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 4 bytes [ 797.193688][ C0] wdm_int_callback: 19 callbacks suppressed [ 797.193713][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 797.194020][ T5812] usb 8-1: USB disconnect, device number 32 [ 797.199646][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 797.199669][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 797.889074][T24882] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7560'. [ 798.798135][T24912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7574'. [ 798.811973][T24912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7574'. [ 799.030026][ T1209] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 799.052164][T24927] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7581'. [ 799.119694][T24930] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7583'. [ 799.168849][T24930] syzkaller0: entered promiscuous mode [ 799.181753][T24930] syzkaller0: entered allmulticast mode [ 799.238546][ T1209] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 799.247191][ T1209] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 799.300089][ T1209] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 799.309627][ T1209] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 799.348106][ T1209] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 799.379732][ T1209] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 799.399605][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 799.407626][ T1209] usb 2-1: Product: syz [ 799.422951][ T1209] usb 2-1: Manufacturer: syz [ 799.439195][ T1209] cdc_wdm 2-1:1.0: skipping garbage [ 799.444659][ T1209] cdc_wdm 2-1:1.0: skipping garbage [ 799.456803][ T1209] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 799.465373][ T1209] cdc_wdm 2-1:1.0: Unknown control protocol [ 799.507842][ T5812] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 799.669434][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.684877][ T5812] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 799.701375][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.701568][T24956] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7594'. [ 799.730013][T24958] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7595'. [ 799.817654][ T5812] usb 6-1: config 0 descriptor?? [ 799.847683][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 4 bytes [ 799.909320][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 799.913201][ T5896] usb 2-1: USB disconnect, device number 119 [ 799.915961][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 799.927988][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 800.075683][ T5812] usbhid 6-1:0.0: can't add hid device: -71 [ 800.085728][ T5812] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 800.124954][ T5812] usb 6-1: USB disconnect, device number 98 [ 800.191046][T24967] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7599'. [ 800.202696][T24967] syzkaller0: entered promiscuous mode [ 800.208281][T24967] syzkaller0: entered allmulticast mode [ 800.534695][T24975] net_ratelimit: 350 callbacks suppressed [ 800.534715][T24975] netlink: zone id is out of range [ 800.549140][T24975] netlink: zone id is out of range [ 800.554308][T24975] netlink: zone id is out of range [ 800.559528][T24975] netlink: zone id is out of range [ 800.564692][T24975] netlink: zone id is out of range [ 800.570060][ T5812] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 800.586353][T24977] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode [ 800.590418][T24975] netlink: zone id is out of range [ 800.599051][T24977] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode [ 800.599286][T24975] netlink: zone id is out of range [ 800.614069][T24975] netlink: zone id is out of range [ 800.619351][T24975] netlink: zone id is out of range [ 800.624573][T24975] netlink: zone id is out of range [ 800.717837][ T5812] usb 6-1: Using ep0 maxpacket: 16 [ 800.738922][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.767923][ T5812] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 800.785924][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.830912][ T5812] usb 6-1: config 0 descriptor?? [ 800.885915][T24988] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7610'. [ 800.928032][T24988] syzkaller0: entered promiscuous mode [ 800.957838][T24988] syzkaller0: entered allmulticast mode [ 801.246723][ T5812] kye 0003:0458:5016.0044: control desc unexpectedly large [ 801.274452][ T5812] kye 0003:0458:5016.0044: control desc unexpectedly large [ 801.325111][ T5812] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0044/input/input85 [ 801.467409][ T5812] kye 0003:0458:5016.0044: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 801.745900][ T1209] usb 6-1: USB disconnect, device number 99 [ 801.829441][T25007] fido_id[25007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 802.183363][T25026] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7624'. [ 802.751290][T25059] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7638'. [ 803.008433][T25063] tipc: Enabled bearer , priority 0 [ 803.038842][T25063] tipc: Resetting bearer [ 803.060243][T25061] tipc: Disabling bearer [ 803.207883][ T5812] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 803.339066][T25081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7649'. [ 803.372897][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.399105][ T5812] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 803.419494][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.445737][ T5812] usb 2-1: config 0 descriptor?? [ 803.679376][ T5812] usbhid 2-1:0.0: can't add hid device: -71 [ 803.697928][ T5812] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 803.719339][ T5812] usb 2-1: USB disconnect, device number 120 [ 803.739704][T25094] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 803.747218][T25094] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 804.247817][ T5812] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 804.417825][ T5812] usb 2-1: Using ep0 maxpacket: 16 [ 804.430474][ T5812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.450012][ T5812] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 804.467837][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.489097][ T5812] usb 2-1: config 0 descriptor?? [ 804.632890][ T1209] usb 7-1: new full-speed USB device number 105 using dummy_hcd [ 804.800625][ T1209] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 804.827851][ T1209] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 804.836455][T25135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.847771][ T1209] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 804.862376][T25135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7675'. [ 804.874583][T25135] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode [ 804.882944][T25135] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode [ 804.900657][ T1209] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.915300][ T5812] kye 0003:0458:5016.0045: control desc unexpectedly large [ 804.917786][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 804.930832][ T5812] kye 0003:0458:5016.0045: control desc unexpectedly large [ 804.932580][ T1209] usb 7-1: SerialNumber: syz [ 804.966274][ T5812] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0045/input/input86 [ 805.069909][ T5812] kye 0003:0458:5016.0045: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 805.111659][T25144] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7679'. [ 805.121754][ C0] kye 0003:0458:5016.0045: Event data for report 16 was too short (7 vs 3) [ 805.166579][ T1209] rndis_host 7-1:253.0: RNDIS init failed, -71 [ 805.175472][ T1209] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -71 [ 805.192623][ T1209] usb 7-1: USB disconnect, device number 105 [ 805.248053][ T5910] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 805.323848][ T5812] usb 2-1: USB disconnect, device number 121 [ 805.398818][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 805.411979][T17148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 805.421253][T17148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 805.429225][T17148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 805.437333][T17148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 805.445568][T17148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 805.469400][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 805.489466][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 805.500734][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 805.513121][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 805.522259][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.533661][ T5910] usb 5-1: config 0 descriptor?? [ 805.541393][T25142] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 805.556077][ T5910] hub 5-1:0.0: USB hub found [ 805.642907][ T1209] usb 7-1: new full-speed USB device number 106 using dummy_hcd [ 805.760191][ T5910] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 805.808384][ T1209] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 805.829323][ T1209] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 805.840727][ T1209] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 805.862142][ T1209] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 805.884771][ T1209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 805.893297][ T1209] usb 7-1: SerialNumber: syz [ 805.992785][ T5910] usbhid 5-1:0.0: can't add hid device: -32 [ 806.008816][T25159] netlink: 27 bytes leftover after parsing attributes in process `syz.7.7684'. [ 806.009890][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 806.028261][T25148] chnl_net:caif_netlink_parms(): no params data found [ 806.080227][ T5910] usb 5-1: USB disconnect, device number 107 [ 806.108271][T25122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.134809][T25122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.157119][ T1209] rndis_host 7-1:253.0: RNDIS init failed, -71 [ 806.180727][ T1209] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -71 [ 806.204197][ T1209] usb 7-1: USB disconnect, device number 106 [ 806.351015][T25148] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.361891][T25148] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.370661][T25148] bridge_slave_0: entered allmulticast mode [ 806.378721][T25148] bridge_slave_0: entered promiscuous mode [ 806.441314][T25148] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.464111][T25148] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.478883][T25148] bridge_slave_1: entered allmulticast mode [ 806.495166][T25148] bridge_slave_1: entered promiscuous mode [ 806.528688][ T5910] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 806.609777][T25148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.623625][T25148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.709347][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 806.722273][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 806.766067][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 806.808852][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 806.841691][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 806.867820][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.884501][T25183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.907512][ T5910] usb 5-1: config 0 descriptor?? [ 806.926559][T25183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7690'. [ 806.936151][T25142] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 806.970008][ T5910] hub 5-1:0.0: USB hub found [ 807.105386][ T35] bond0 (unregistering): Released all slaves [ 807.154880][T25148] team0: Port device team_slave_0 added [ 807.189084][ T5910] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 807.190963][T25148] team0: Port device team_slave_1 added [ 807.247316][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 807.256055][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 807.284418][ T35] tipc: Left network mode [ 807.312616][ T5910] usb 5-1: USB disconnect, device number 108 [ 807.347660][T25148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.381957][T25148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.431803][T25148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.461166][T25197] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7693'. [ 807.475863][T25148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.485673][T25148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.512078][T25148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.526704][T25202] syzkaller0: entered promiscuous mode [ 807.532609][T17148] Bluetooth: hci1: command tx timeout [ 807.533095][T25202] syzkaller0: entered allmulticast mode [ 807.706975][T25148] hsr_slave_0: entered promiscuous mode [ 807.729070][T25148] hsr_slave_1: entered promiscuous mode [ 807.800771][T25210] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7696'. [ 807.834108][ T35] hsr_slave_0: left promiscuous mode [ 807.845104][ T35] hsr_slave_1: left promiscuous mode [ 808.516759][T25231] netlink: 'syz.4.7702': attribute type 1 has an invalid length. [ 808.568354][T25231] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7702'. [ 808.660435][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.666992][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.731956][T25235] netlink: 27 bytes leftover after parsing attributes in process `syz.7.7703'. [ 809.079606][T25251] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7708'. [ 809.099831][T25251] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 809.127485][T25251] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 809.150613][T25249] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 809.168523][T25249] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 809.336643][T25264] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7715'. [ 809.380427][T25266] netlink: 'syz.1.7714': attribute type 1 has an invalid length. [ 809.388634][T25266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7714'. [ 809.466002][T25148] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 809.489372][T25148] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 809.582984][T25148] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 809.592607][T25276] netlink: 27 bytes leftover after parsing attributes in process `syz.7.7718'. [ 809.613749][ T5833] Bluetooth: hci1: command tx timeout [ 809.624501][T25148] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 809.790982][ T5910] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 809.841203][T25148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.903121][T25294] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 809.912564][T25294] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 809.932850][T25148] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.950060][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.957221][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.989381][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.996536][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.999452][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.022497][ T5910] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 810.071468][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.108347][ T5910] usb 5-1: config 0 descriptor?? [ 810.160174][T25148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 810.203885][T25304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.239278][T25148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.248388][T25304] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode [ 810.256147][T25304] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode [ 810.331306][T25148] veth0_vlan: entered promiscuous mode [ 810.351296][T25312] netlink: 'syz.1.7729': attribute type 1 has an invalid length. [ 810.366292][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 810.378771][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 810.397017][T25148] veth1_vlan: entered promiscuous mode [ 810.428584][ T5910] usb 5-1: USB disconnect, device number 109 [ 810.483036][T25148] veth0_macvtap: entered promiscuous mode [ 810.502685][T25148] veth1_macvtap: entered promiscuous mode [ 810.597555][T25148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.615369][T25148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.644064][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.671219][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.690898][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.706674][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.730597][ T5833] Bluetooth: hci7: command 0x0406 tx timeout [ 810.877824][ T5910] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 811.012119][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.030403][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.047958][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 811.059431][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.096739][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.106892][ T5910] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 811.109760][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.129974][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.159030][T25338] __nla_validate_parse: 5 callbacks suppressed [ 811.159048][T25338] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7735'. [ 811.176790][ T5910] usb 5-1: config 0 descriptor?? [ 811.243647][T25338] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 811.273882][T25338] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 811.342154][T25343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.355470][T25343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.405248][T25343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.416514][T25343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.624815][ T5910] kye 0003:0458:5016.0046: control desc unexpectedly large [ 811.633366][ T5910] kye 0003:0458:5016.0046: control desc unexpectedly large [ 811.641098][ T59] usb 7-1: new full-speed USB device number 107 using dummy_hcd [ 811.665531][ T5910] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0046/input/input87 [ 811.688497][T17148] Bluetooth: hci1: command tx timeout [ 811.734986][ T5910] kye 0003:0458:5016.0046: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 811.827026][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.867827][ T59] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 811.894154][ T59] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 811.935053][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.970807][ T59] usb 7-1: config 0 descriptor?? [ 811.990905][ T59] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 812.017058][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 812.034430][T25361] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7740'. [ 812.038271][ T59] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 812.073713][ T59] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 812.087059][ T59] usb 7-1: media controller created [ 812.108525][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 812.150084][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 812.170100][ T59] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 812.199360][ T59] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input88 [ 812.241667][T25334] netlink: 'syz.6.7730': attribute type 1 has an invalid length. [ 812.248842][ T59] dvb-usb: schedule remote query interval to 150 msecs. [ 812.264140][ T59] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 812.274077][T25334] dibusb: i2c wr: len=61 is too big! [ 812.274077][T25334] [ 812.283554][T25368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7742'. [ 812.295408][T25370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.335254][T25370] netlink: 'syz.7.7743': attribute type 10 has an invalid length. [ 812.347590][T25370] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 812.365217][T25370] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode [ 812.372839][T25370] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode [ 812.414219][T25373] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7744'. [ 812.417825][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 812.429519][ T59] dvb-usb: error while querying for an remote control event. [ 812.546323][T25378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7746'. [ 812.555071][T25380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7747'. [ 812.597925][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 812.603705][ T59] dvb-usb: error while querying for an remote control event. [ 812.715706][T25386] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 812.724816][T25386] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 812.732969][T25386] tipc: Resetting bearer [ 812.777919][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 812.784858][ T59] dvb-usb: error while querying for an remote control event. [ 812.822011][T25391] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7752'. [ 812.939175][T25396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7755'. [ 812.969001][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 812.974899][ T5910] dvb-usb: error while querying for an remote control event. [ 812.988446][T25400] net_ratelimit: 142 callbacks suppressed [ 812.988464][T25400] netlink: zone id is out of range [ 812.999689][T25400] netlink: zone id is out of range [ 813.004872][T25400] netlink: zone id is out of range [ 813.011484][T25400] netlink: zone id is out of range [ 813.017064][T25400] netlink: zone id is out of range [ 813.024118][T25400] netlink: zone id is out of range [ 813.030277][T25400] netlink: zone id is out of range [ 813.035504][T25400] netlink: zone id is out of range [ 813.040992][T25400] netlink: zone id is out of range [ 813.046318][T25400] netlink: zone id is out of range [ 813.137891][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 813.138998][ T1209] usb 5-1: USB disconnect, device number 110 [ 813.145052][ T5910] dvb-usb: error while querying for an remote control event. [ 813.319787][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 813.325638][ T5910] dvb-usb: error while querying for an remote control event. [ 813.361033][T25413] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7764'. [ 813.490103][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 813.495887][ T5910] dvb-usb: error while querying for an remote control event. [ 813.514380][ T1209] usb 7-1: USB disconnect, device number 107 [ 813.520131][T25423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7768'. [ 813.564197][T25420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.613701][T25420] netlink: 'syz.7.7766': attribute type 10 has an invalid length. [ 813.623325][ T1209] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 813.770228][T17148] Bluetooth: hci1: command tx timeout [ 813.840530][T25432] syzkaller0: entered promiscuous mode [ 813.846039][T25432] syzkaller0: entered allmulticast mode [ 814.472254][T25467] syzkaller0: entered promiscuous mode [ 814.477919][T25467] syzkaller0: entered allmulticast mode [ 814.902822][T25485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.927385][T25485] netlink: 'syz.5.7797': attribute type 10 has an invalid length. [ 815.012725][T25485] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 815.167818][ T5910] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 815.341222][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.361953][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 815.384345][T25499] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 815.390233][ T5910] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 815.407356][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.417802][T25499] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 815.432592][ T5910] usb 2-1: config 0 descriptor?? [ 815.460759][ T5910] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 815.467406][ T5910] dvb-usb: bulk message failed: -22 (3/0) [ 815.483306][T25502] tipc: Enabled bearer , priority 0 [ 815.484635][ T5910] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 815.519000][ T5910] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 815.526206][ T5910] usb 2-1: media controller created [ 815.538029][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 815.552630][ T5910] dvb-usb: bulk message failed: -22 (6/0) [ 815.558715][ T5910] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 815.569483][ T5910] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input89 [ 815.582056][T25502] tipc: Resetting bearer [ 815.591553][ T5910] dvb-usb: schedule remote query interval to 150 msecs. [ 815.599921][ T5910] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 815.667521][T25501] tipc: Disabling bearer [ 815.704088][T25468] netlink: 'syz.1.7781': attribute type 1 has an invalid length. [ 815.716695][T25468] dibusb: i2c wr: len=61 is too big! [ 815.716695][T25468] [ 815.761040][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 815.780151][ T5910] dvb-usb: error while querying for an remote control event. [ 815.957856][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 815.963747][ T5910] dvb-usb: error while querying for an remote control event. [ 816.016156][T25524] syzkaller0: entered promiscuous mode [ 816.023021][T25524] syzkaller0: entered allmulticast mode [ 816.082817][T25527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.093537][T25528] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 816.101195][T25528] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 816.112134][T25528] tipc: Resetting bearer [ 816.129657][T25527] netlink: 'syz.7.7818': attribute type 10 has an invalid length. [ 816.161210][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 816.166993][ T5812] dvb-usb: error while querying for an remote control event. [ 816.179751][T25527] __nla_validate_parse: 13 callbacks suppressed [ 816.179769][T25527] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7818'. [ 816.204929][T25527] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode [ 816.225672][T25527] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode [ 816.275887][T25536] tipc: Enabled bearer , priority 0 [ 816.287227][T25536] tipc: Resetting bearer [ 816.308262][T25535] tipc: Disabling bearer [ 816.366932][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 816.375086][ T5910] dvb-usb: error while querying for an remote control event. [ 816.409345][ T1039] tipc: Resetting bearer [ 816.457811][ T5812] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 816.518530][T25547] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7827'. [ 816.522845][T25548] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7828'. [ 816.556481][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 816.562831][ T5910] dvb-usb: error while querying for an remote control event. [ 816.619245][ T5812] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 816.639363][ T5812] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 816.654469][ T5812] usb 6-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 816.669118][ T5812] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 816.678498][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 816.686580][ T5812] usb 6-1: SerialNumber: syz [ 816.715643][T25556] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7832'. [ 816.727938][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 816.728887][T25556] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 816.734642][ T5910] dvb-usb: error while querying for an remote control event. [ 816.741636][T25556] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 816.757841][T25556] tipc: Resetting bearer [ 816.848030][T16852] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 816.919317][ T5812] rndis_host 6-1:253.0: RNDIS init failed, -71 [ 816.928061][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 816.929397][T25562] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 816.933814][ T5910] dvb-usb: error while querying for an remote control event. [ 816.936005][ T5812] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -71 [ 816.945496][T25562] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 816.966292][ T5812] usb 6-1: USB disconnect, device number 100 [ 817.020644][T16852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.052722][T16852] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 817.068460][T16852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.088872][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 817.094980][T16852] usb 7-1: config 0 descriptor?? [ 817.094990][ T5910] dvb-usb: error while querying for an remote control event. [ 817.098659][T25568] tipc: Enabling of bearer rejected, already enabled [ 817.219097][ T1209] usb 2-1: USB disconnect, device number 122 [ 817.280414][T25574] netlink: 27 bytes leftover after parsing attributes in process `syz.7.7840'. [ 817.299795][ T1209] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 817.323934][T16852] usbhid 7-1:0.0: can't add hid device: -71 [ 817.335802][T16852] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 817.361504][T16852] usb 7-1: USB disconnect, device number 108 [ 817.390077][T25576] netlink: 160 bytes leftover after parsing attributes in process `syz.4.7842'. [ 817.458328][T25580] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 817.458883][ T5812] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 817.466029][T25580] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 817.484734][T25580] tipc: Resetting bearer [ 817.494344][T25578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.508119][T25578] netlink: 'syz.7.7843': attribute type 10 has an invalid length. [ 817.516894][T25578] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7843'. [ 817.539793][T25578] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode [ 817.547149][T25578] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode [ 817.641340][ T5812] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 817.656529][ T5812] usb 6-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 817.675296][ T5812] usb 6-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 817.691148][ T5812] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.700728][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 817.709344][ T5812] usb 6-1: SerialNumber: syz [ 817.788911][T25593] tipc: Enabling of bearer rejected, already enabled [ 817.798779][T25593] tipc: Resetting bearer [ 817.849513][T16852] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 817.924697][T25532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.936114][T25532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.009161][T25602] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7855'. [ 818.009473][T16852] usb 7-1: Using ep0 maxpacket: 16 [ 818.029715][T16852] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.049833][T16852] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 818.067776][T16852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.088964][T16852] usb 7-1: config 0 descriptor?? [ 818.139421][T25604] tipc: Resetting bearer [ 818.154889][ T5812] rndis_host 6-1:253.0: RNDIS init failed, -71 [ 818.171607][ T5812] rndis_host 6-1:253.0: probe with driver rndis_host failed with error -71 [ 818.190612][ T5812] usb 6-1: USB disconnect, device number 101 [ 818.538302][T16852] kye 0003:0458:5016.0047: control desc unexpectedly large [ 818.545756][T16852] kye 0003:0458:5016.0047: control desc unexpectedly large [ 818.588287][T16852] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0047/input/input90 [ 818.687831][ T5896] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 818.902202][T16852] kye 0003:0458:5016.0047: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 818.962136][T16852] usb 7-1: USB disconnect, device number 109 [ 818.980666][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.000192][ T5896] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 819.021769][ T5896] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 819.037368][T25628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7865'. [ 819.066661][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.097540][ T5896] usb 5-1: config 0 descriptor?? [ 819.106258][T25626] fido_id[25626]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 819.116206][ T5896] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 819.135357][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 819.137553][T25631] tipc: Started in network mode [ 819.159273][ T5896] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 819.166447][T25631] tipc: Node identity fff, cluster identity 10 [ 819.176251][ T5896] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 819.184534][T25631] tipc: Node number set to 4095 [ 819.205476][T25631] tipc: Cannot configure node identity twice [ 819.212342][ T5896] usb 5-1: media controller created [ 819.225980][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 819.269225][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 819.276678][ T5896] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 819.305544][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input91 [ 819.330458][T25609] netlink: 'syz.4.7854': attribute type 1 has an invalid length. [ 819.339133][T25609] dibusb: i2c wr: len=61 is too big! [ 819.339133][T25609] [ 819.356367][ T5896] dvb-usb: schedule remote query interval to 150 msecs. [ 819.392575][ T5896] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 819.557806][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 819.563665][ T5896] dvb-usb: error while querying for an remote control event. [ 819.581676][T25647] netlink: 27 bytes leftover after parsing attributes in process `syz.6.7875'. [ 819.741730][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 819.747594][ T5896] dvb-usb: error while querying for an remote control event. [ 819.927988][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 819.933791][ T5896] dvb-usb: error while querying for an remote control event. [ 820.107982][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 820.124897][ T5896] dvb-usb: error while querying for an remote control event. [ 820.297904][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 820.303847][ T5896] dvb-usb: error while querying for an remote control event. [ 820.331682][T25682] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 820.342761][T25682] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 820.471222][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 820.477007][T16852] dvb-usb: error while querying for an remote control event. [ 820.657826][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 820.672668][T16852] dvb-usb: error while querying for an remote control event. [ 820.848039][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 820.853869][ T5896] dvb-usb: error while querying for an remote control event. [ 820.927011][T25714] syzkaller0: entered promiscuous mode [ 820.941374][T25714] syzkaller0: entered allmulticast mode [ 820.993639][ T59] usb 5-1: USB disconnect, device number 111 [ 821.051563][ T59] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 821.286201][T25732] __nla_validate_parse: 10 callbacks suppressed [ 821.286220][T25732] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7912'. [ 821.330211][T25732] syzkaller0: entered promiscuous mode [ 821.335756][T25732] syzkaller0: entered allmulticast mode [ 821.594095][T25747] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7920'. [ 821.655722][T25751] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7925'. [ 821.944119][T25769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.982142][T25769] netlink: 'syz.4.7932': attribute type 10 has an invalid length. [ 821.998350][T25769] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 822.035776][T25769] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 822.052442][T25769] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 822.074196][T25769] tipc: Resetting bearer [ 822.169867][T25780] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7936'. [ 822.349784][T25786] netlink: 27 bytes leftover after parsing attributes in process `syz.5.7939'. [ 822.488258][ T5812] usb 7-1: new full-speed USB device number 110 using dummy_hcd [ 822.521096][T25791] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 822.528375][T25791] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 822.535920][T25791] tipc: Resetting bearer [ 822.561986][T25789] syzkaller0: entered promiscuous mode [ 822.567520][T25789] syzkaller0: entered allmulticast mode [ 822.649651][ T5812] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.669314][ T5812] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 822.707939][ T5812] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 822.877778][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.889140][ T5812] usb 7-1: config 0 descriptor?? [ 822.914280][ T5812] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 822.959564][ T5812] dvb-usb: bulk message failed: -22 (3/0) [ 822.986127][ T5812] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 823.010950][ T5812] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 823.028177][ T5812] usb 7-1: media controller created [ 823.034963][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.067422][ T5812] dvb-usb: bulk message failed: -22 (6/0) [ 823.080522][ T5812] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 823.110833][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input92 [ 823.142342][T25811] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7951'. [ 823.153259][ T5812] dvb-usb: schedule remote query interval to 150 msecs. [ 823.168394][T25755] netlink: 'syz.6.7926': attribute type 1 has an invalid length. [ 823.188420][ T5812] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 823.240485][T25755] dibusb: i2c wr: len=61 is too big! [ 823.240485][T25755] [ 823.348197][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 823.358577][ T5812] dvb-usb: error while querying for an remote control event. [ 823.539549][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 823.545398][ T5910] dvb-usb: error while querying for an remote control event. [ 823.627842][ T5812] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 823.717808][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 823.723586][ T5910] dvb-usb: error while querying for an remote control event. [ 823.791444][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.816251][ T5812] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 823.831436][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.852804][ T5812] usb 6-1: config 0 descriptor?? [ 823.898220][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 823.904118][ T5910] dvb-usb: error while querying for an remote control event. [ 824.068357][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 824.084029][ T5910] dvb-usb: error while querying for an remote control event. [ 824.098991][ T5812] usbhid 6-1:0.0: can't add hid device: -71 [ 824.111884][ T5812] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 824.131632][T25857] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7972'. [ 824.162122][ T5812] usb 6-1: USB disconnect, device number 102 [ 824.267980][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 824.279064][ T5910] dvb-usb: error while querying for an remote control event. [ 824.448908][T25871] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode [ 824.456366][T25871] mac80211_hwsim hwsim24 syzkaller0: left allmulticast mode [ 824.464036][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 824.470655][ T5910] dvb-usb: error while querying for an remote control event. [ 824.500518][T25869] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 824.518594][T25869] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 824.534596][T25869] tipc: Resetting bearer [ 824.600129][ T5812] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 824.637943][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 824.643825][ T5910] dvb-usb: error while querying for an remote control event. [ 824.700496][ T5910] usb 7-1: USB disconnect, device number 110 [ 824.727390][ T5910] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 824.757850][ T5812] usb 6-1: Using ep0 maxpacket: 16 [ 824.781154][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.812498][ T5812] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 824.831513][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.852168][ T5812] usb 6-1: config 0 descriptor?? [ 824.867815][ T1209] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 825.053915][ T1209] usb 2-1: Using ep0 maxpacket: 32 [ 825.063417][ T1209] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.076840][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 825.088811][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 825.100512][ T1209] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 825.109933][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.123275][ T1209] usb 2-1: config 0 descriptor?? [ 825.129341][T25883] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 825.139662][ T1209] hub 2-1:0.0: USB hub found [ 825.268510][ T5812] kye 0003:0458:5016.0048: control desc unexpectedly large [ 825.284521][ T5812] kye 0003:0458:5016.0048: control desc unexpectedly large [ 825.310404][ T5812] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0048/input/input93 [ 825.350941][ T1209] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 825.386669][T25900] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7991'. [ 825.420435][ T5812] kye 0003:0458:5016.0048: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 825.491745][ C1] kye 0003:0458:5016.0048: Event data for report 16 was too short (7 vs 6) [ 825.575152][ T1209] usbhid 2-1:0.0: can't add hid device: -32 [ 825.594054][ T1209] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 825.670098][ T1209] usb 2-1: USB disconnect, device number 123 [ 825.693898][ T5812] usb 6-1: USB disconnect, device number 103 [ 826.010052][T25913] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7997'. [ 826.036774][T25913] syzkaller0: entered promiscuous mode [ 826.043670][T25913] syzkaller0: entered allmulticast mode [ 826.137804][ T1209] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 826.391221][T25925] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8002'. [ 826.447772][ T1209] usb 2-1: Using ep0 maxpacket: 32 [ 826.459874][ T1209] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 826.477973][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 826.489316][T16852] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 826.508240][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 826.519679][ T1209] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 826.528790][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.540648][ T1209] usb 2-1: config 0 descriptor?? [ 826.548865][T25883] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 826.558633][ T1209] hub 2-1:0.0: USB hub found [ 826.662418][T25930] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8004'. [ 826.680923][T16852] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.712975][T16852] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 826.723547][T25932] netlink: 27 bytes leftover after parsing attributes in process `syz.7.8007'. [ 826.750706][T16852] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 826.771445][ T1209] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 826.787621][T16852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.798539][ T1209] usbhid 2-1:0.0: can't add hid device: -71 [ 826.804539][ T1209] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 826.815371][T16852] usb 5-1: config 0 descriptor?? [ 826.841414][T16852] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 826.852405][T16852] dvb-usb: bulk message failed: -22 (3/0) [ 826.877077][T16852] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 826.888531][ T1209] usb 2-1: USB disconnect, device number 124 [ 826.930192][T16852] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 826.937295][T16852] usb 5-1: media controller created [ 826.945899][T16852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 826.980792][T16852] dvb-usb: bulk message failed: -22 (6/0) [ 826.988680][T16852] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 827.007928][T16852] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input94 [ 827.059854][T16852] dvb-usb: schedule remote query interval to 150 msecs. [ 827.070658][T25915] netlink: 'syz.4.7995': attribute type 1 has an invalid length. [ 827.085409][T16852] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 827.101958][T25915] dibusb: i2c wr: len=61 is too big! [ 827.101958][T25915] [ 827.176234][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 827.186220][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 827.194255][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 827.202459][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 827.214156][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 827.247969][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 827.259567][ T1209] dvb-usb: error while querying for an remote control event. [ 827.458030][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 827.463814][ T1209] dvb-usb: error while querying for an remote control event. [ 827.537061][T25953] syzkaller0: entered promiscuous mode [ 827.547765][T25953] syzkaller0: entered allmulticast mode [ 827.564047][T25946] chnl_net:caif_netlink_parms(): no params data found [ 827.638030][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 827.650420][ T1209] dvb-usb: error while querying for an remote control event. [ 827.811174][T25962] tipc: Cannot configure node identity twice [ 827.817487][T25962] tipc: Cannot configure node identity twice [ 827.835278][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 827.854798][T16852] dvb-usb: error while querying for an remote control event. [ 827.960350][ T1039] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.013335][T25946] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.021138][T25946] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.028428][T25946] bridge_slave_0: entered allmulticast mode [ 828.036181][T25946] bridge_slave_0: entered promiscuous mode [ 828.050676][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 828.052078][T25946] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.064156][T25946] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.071668][T25946] bridge_slave_1: entered allmulticast mode [ 828.079570][T25946] bridge_slave_1: entered promiscuous mode [ 828.082964][T16852] dvb-usb: error while querying for an remote control event. [ 828.144867][ T1039] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.207123][T25983] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8024'. [ 828.236751][T25946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.259532][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 828.265648][T16852] dvb-usb: error while querying for an remote control event. [ 828.286661][ T1039] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.303908][T25946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.384883][T25991] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8029'. [ 828.398208][ T1039] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.419320][T25987] syzkaller0: entered promiscuous mode [ 828.424934][T25987] syzkaller0: entered allmulticast mode [ 828.431474][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 828.439732][T25946] team0: Port device team_slave_0 added [ 828.444796][T16852] dvb-usb: error while querying for an remote control event. [ 828.469601][T25946] team0: Port device team_slave_1 added [ 828.570994][T25946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.579797][T25946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.637859][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 828.637899][T25946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.645913][T16852] dvb-usb: error while querying for an remote control event. [ 828.679959][T25946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.686937][T25946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.744712][ T5812] usb 5-1: USB disconnect, device number 112 [ 828.754392][T25946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.791674][ T5812] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 828.986750][T26009] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8037'. [ 828.994436][T25946] hsr_slave_0: entered promiscuous mode [ 829.026164][T25946] hsr_slave_1: entered promiscuous mode [ 829.038820][T25946] debugfs: 'hsr0' already exists in 'hsr' [ 829.044766][T25946] Cannot create hsr debugfs directory [ 829.201009][ T1039] bridge_slave_1: left allmulticast mode [ 829.249734][ T1039] bridge_slave_1: left promiscuous mode [ 829.253716][T26021] netlink: 27 bytes leftover after parsing attributes in process `syz.5.8044'. [ 829.255527][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.289728][T17148] Bluetooth: hci0: command tx timeout [ 829.305354][ T1039] bridge_slave_0: left allmulticast mode [ 829.311400][ T1039] bridge_slave_0: left promiscuous mode [ 829.317201][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.452214][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.463802][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.474391][ T1039] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 829.483165][ T1039] bond0 (unregistering): Released all slaves [ 829.582068][ T1039] tipc: Disabling bearer [ 829.627197][ T1039] tipc: Left network mode [ 829.759548][T26029] syzkaller0: entered promiscuous mode [ 829.765450][T26029] syzkaller0: entered allmulticast mode [ 830.507943][ T59] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 830.674163][ T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.684860][ T59] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 830.693933][ T59] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 830.703559][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.715139][ T59] usb 5-1: config 0 descriptor?? [ 830.730935][ T59] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 830.746268][ T59] dvb-usb: bulk message failed: -22 (3/0) [ 830.768838][ T59] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 830.778065][ T59] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 830.785195][ T59] usb 5-1: media controller created [ 830.792208][ T59] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 830.811404][ T59] dvb-usb: bulk message failed: -22 (6/0) [ 830.828626][ T59] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 830.838869][ T59] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input95 [ 830.859434][ T59] dvb-usb: schedule remote query interval to 150 msecs. [ 830.866431][ T59] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 830.970158][T26039] netlink: 'syz.4.8047': attribute type 1 has an invalid length. [ 830.979830][T26039] dibusb: i2c wr: len=61 is too big! [ 830.979830][T26039] [ 831.019520][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 831.025315][ T59] dvb-usb: error while querying for an remote control event. [ 831.190577][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 831.196343][ T59] dvb-usb: error while querying for an remote control event. [ 831.371855][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 831.377626][ T59] dvb-usb: error while querying for an remote control event. [ 831.377918][T17148] Bluetooth: hci0: command tx timeout [ 831.539560][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 831.545324][ T59] dvb-usb: error while querying for an remote control event. [ 831.664506][T26047] tipc: Enabling of bearer rejected, failed to enable media [ 831.707811][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 831.722104][ T59] dvb-usb: error while querying for an remote control event. [ 831.898584][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 831.904378][ T59] dvb-usb: error while querying for an remote control event. [ 832.110380][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 832.129468][ T796] dvb-usb: error while querying for an remote control event. [ 832.154494][ T1039] hsr_slave_0: left promiscuous mode [ 832.168465][ T1039] hsr_slave_1: left promiscuous mode [ 832.183876][ T1039] veth1_macvtap: left allmulticast mode [ 832.193420][ T1039] veth1_macvtap: left promiscuous mode [ 832.199541][ T1039] veth0_macvtap: left promiscuous mode [ 832.205714][T26073] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8057'. [ 832.214904][ T1039] veth1_vlan: left promiscuous mode [ 832.220399][ T1039] veth0_vlan: left promiscuous mode [ 832.312687][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 832.318722][ T796] dvb-usb: error while querying for an remote control event. [ 832.478110][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 832.484092][ T796] dvb-usb: error while querying for an remote control event. [ 832.683592][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 832.707919][ T796] dvb-usb: error while querying for an remote control event. [ 832.921288][T16852] usb 5-1: USB disconnect, device number 113 [ 832.927831][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 832.933744][ T796] dvb-usb: error while querying for an remote control event. [ 833.161365][T16852] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 833.190760][ T1039] team0 (unregistering): Port device team_slave_1 removed [ 833.234028][ T1039] team0 (unregistering): Port device team_slave_0 removed [ 833.447791][T17148] Bluetooth: hci0: command tx timeout [ 833.456108][T26091] syzkaller0: entered promiscuous mode [ 833.491078][T26091] syzkaller0: entered allmulticast mode [ 833.608153][T26098] tipc: Enabling of bearer rejected, already enabled [ 833.914782][T25946] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 834.156763][T25946] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 834.258448][T25946] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 834.301187][T25946] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 834.696701][T25946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.744344][T25946] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.783826][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.791032][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.856848][T13016] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.864068][T13016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.986392][T25946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 835.105692][T25946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.288029][ T796] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 835.383576][T25946] veth0_vlan: entered promiscuous mode [ 835.400693][T25946] veth1_vlan: entered promiscuous mode [ 835.408020][T26152] tipc: Enabled bearer , priority 0 [ 835.482975][T26155] tipc: Resetting bearer [ 835.523921][T26151] tipc: Disabling bearer [ 835.528753][ T796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.530768][T17148] Bluetooth: hci0: command tx timeout [ 835.609187][ T796] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 835.688317][ T796] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 835.697583][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.725633][ T796] usb 6-1: config 0 descriptor?? [ 835.740956][ T796] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 835.743569][T25946] veth0_macvtap: entered promiscuous mode [ 835.747628][ T796] dvb-usb: bulk message failed: -22 (3/0) [ 835.791854][ T796] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 835.808542][ T796] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 835.815653][ T796] usb 6-1: media controller created [ 835.815758][T25946] veth1_macvtap: entered promiscuous mode [ 835.839903][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 835.840698][T26159] net_ratelimit: 35 callbacks suppressed [ 835.840714][T26159] openvswitch: netlink: EtherType 0 is less than min 600 [ 835.874128][ T796] dvb-usb: bulk message failed: -22 (6/0) [ 835.891143][T25946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.891222][ T796] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 835.933405][ T796] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input96 [ 835.947394][T25946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.986271][ T796] dvb-usb: schedule remote query interval to 150 msecs. [ 835.995715][T26140] netlink: 'syz.5.8071': attribute type 1 has an invalid length. [ 836.016176][ T796] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 836.030991][T26140] dibusb: i2c wr: len=61 is too big! [ 836.030991][T26140] [ 836.032851][T13016] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.062741][T13016] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.112202][T13016] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.145015][T13016] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.168684][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 836.175184][T26163] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 836.183054][ T796] dvb-usb: error while querying for an remote control event. [ 836.190978][T26163] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 836.199805][T26163] tipc: Resetting bearer [ 836.306979][T13016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.324516][T13016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.357827][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 836.363784][ T796] dvb-usb: error while querying for an remote control event. [ 836.400698][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.418886][T26171] netlink: 168 bytes leftover after parsing attributes in process `syz.6.8085'. [ 836.433351][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.549658][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 836.559743][ T5812] dvb-usb: error while querying for an remote control event. [ 836.638142][T26177] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8010'. [ 836.664155][T26178] syzkaller0: entered promiscuous mode [ 836.685224][T26178] syzkaller0: entered allmulticast mode [ 836.729555][T26182] syzkaller0: entered promiscuous mode [ 836.735264][T26182] syzkaller0: entered allmulticast mode [ 836.737811][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 836.748076][ T5812] dvb-usb: error while querying for an remote control event. [ 836.908053][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 836.916080][ T5812] dvb-usb: error while querying for an remote control event. [ 837.087790][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 837.093575][ T796] dvb-usb: error while querying for an remote control event. [ 837.260911][T26198] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 837.268599][T26198] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 837.276744][T26198] tipc: Resetting bearer [ 837.277964][ T796] dvb-usb: bulk message failed: -22 (1/0) [ 837.294729][ T796] dvb-usb: error while querying for an remote control event. [ 837.366105][T26202] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8099'. [ 837.477824][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 837.483607][ T5812] dvb-usb: error while querying for an remote control event. [ 837.604078][ T10] usb 6-1: USB disconnect, device number 104 [ 837.642791][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 837.687954][ T796] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 837.696574][T26209] syzkaller0: entered promiscuous mode [ 837.716059][T26209] syzkaller0: entered allmulticast mode [ 837.749393][T26211] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8103'. [ 837.770784][T26211] syzkaller0: entered promiscuous mode [ 837.776282][T26211] syzkaller0: entered allmulticast mode [ 837.861855][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.880280][ T796] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 837.898333][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.914922][ T796] usb 2-1: config 0 descriptor?? [ 838.033263][T26218] syzkaller0: entered promiscuous mode [ 838.046043][T26218] syzkaller0: entered allmulticast mode [ 838.156930][ T796] usbhid 2-1:0.0: can't add hid device: -71 [ 838.166647][ T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 838.206782][ T796] usb 2-1: USB disconnect, device number 125 [ 838.291974][T26227] netlink: 27 bytes leftover after parsing attributes in process `syz.7.8111'. [ 838.685399][ T796] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 838.857704][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 839.092320][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.103403][ T796] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 839.112535][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.128881][ T796] usb 2-1: config 0 descriptor?? [ 839.196705][T26249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.197780][ T10] usb 7-1: new full-speed USB device number 111 using dummy_hcd [ 839.211425][T26249] netlink: 'syz.5.8120': attribute type 10 has an invalid length. [ 839.244651][T26249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8120'. [ 839.400246][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.410613][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 839.419875][ T10] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 839.429463][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.448854][ T10] usb 7-1: config 0 descriptor?? [ 839.460442][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 839.467086][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 839.485747][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 839.499253][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 839.506339][ T10] usb 7-1: media controller created [ 839.514589][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 839.540979][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 839.547308][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 839.551950][ T796] kye 0003:0458:5016.0049: control desc unexpectedly large [ 839.570014][ T796] kye 0003:0458:5016.0049: control desc unexpectedly large [ 839.582762][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input97 [ 839.593321][ T796] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0049/input/input98 [ 839.621016][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 839.648170][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 839.726227][ T796] kye 0003:0458:5016.0049: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 839.742175][T26238] netlink: 'syz.6.8112': attribute type 1 has an invalid length. [ 839.788652][T26238] dibusb: i2c wr: len=61 is too big! [ 839.788652][T26238] [ 839.818615][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 839.825111][ T10] dvb-usb: error while querying for an remote control event. [ 839.833968][ C0] kye 0003:0458:5016.0049: Event data for report 16 was too short (7 vs 3) [ 839.910985][T26254] netlink: zone id is out of range [ 839.916385][T26254] netlink: zone id is out of range [ 839.923259][T26254] netlink: zone id is out of range [ 839.928854][T26254] netlink: zone id is out of range [ 839.934107][T26254] netlink: zone id is out of range [ 839.940147][T26254] netlink: zone id is out of range [ 839.946454][T26254] netlink: zone id is out of range [ 839.956983][T26254] netlink: zone id is out of range [ 839.967667][T26254] netlink: zone id is out of range [ 840.021321][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 840.027745][ T10] dvb-usb: error while querying for an remote control event. [ 840.082496][T26257] netlink: 27 bytes leftover after parsing attributes in process `syz.5.8123'. [ 840.198255][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 840.208030][T16852] dvb-usb: error while querying for an remote control event. [ 840.398326][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 840.406310][T16852] dvb-usb: error while querying for an remote control event. [ 840.590144][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 840.597150][T16852] dvb-usb: error while querying for an remote control event. [ 840.785006][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 840.801448][T16852] dvb-usb: error while querying for an remote control event. [ 840.879099][T26281] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8135'. [ 840.965485][T26289] tipc: Started in network mode [ 840.971417][T26289] tipc: Node identity fff, cluster identity 10 [ 840.978776][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 840.984795][T16852] dvb-usb: error while querying for an remote control event. [ 840.990249][T26289] tipc: Node number set to 4095 [ 841.004676][T26289] tipc: Cannot configure node identity twice [ 841.102781][T16852] usb 2-1: USB disconnect, device number 126 [ 841.157118][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 841.163481][ T1209] dvb-usb: error while querying for an remote control event. [ 841.311273][T26303] syzkaller1: entered promiscuous mode [ 841.338009][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 841.343839][ T5896] dvb-usb: error while querying for an remote control event. [ 841.358169][T26303] syzkaller1: entered allmulticast mode [ 841.395143][ T5896] usb 7-1: USB disconnect, device number 111 [ 841.469755][ T5896] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 841.986520][T26323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.001818][T26325] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8155'. [ 842.011176][T26323] netlink: 'syz.7.8154': attribute type 10 has an invalid length. [ 842.056247][T26323] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 842.087658][T26323] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8154'. [ 842.234371][T26332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8158'. [ 842.959467][T26355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8169'. [ 843.118039][ T1209] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 843.214455][T26361] bond_slave_0: entered promiscuous mode [ 843.220569][T26361] bond_slave_1: entered promiscuous mode [ 843.226337][T26361] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 843.256917][T26361] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 843.269578][T26361] team0: Port device macvlan3 added [ 843.317937][ T1209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.345027][ T1209] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 843.370358][ T1209] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 843.397457][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.439944][ T1209] usb 2-1: config 0 descriptor?? [ 843.464885][ T1209] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 843.482481][ T1209] dvb-usb: bulk message failed: -22 (3/0) [ 843.502903][ T1209] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 843.532822][ T1209] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 843.548024][ T1209] usb 2-1: media controller created [ 843.560995][ T1209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 843.606377][ T1209] dvb-usb: bulk message failed: -22 (6/0) [ 843.629071][ T1209] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 843.642407][ T1209] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input99 [ 843.683905][T26348] netlink: 'syz.1.8162': attribute type 1 has an invalid length. [ 843.686141][ T1209] dvb-usb: schedule remote query interval to 150 msecs. [ 843.707902][T26348] dibusb: i2c wr: len=61 is too big! [ 843.707902][T26348] [ 843.721610][T26371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.737832][ T1209] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 843.751083][T26371] netlink: 'syz.7.8176': attribute type 10 has an invalid length. [ 843.779610][T26371] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8176'. [ 843.897795][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 843.903575][ T1209] dvb-usb: error while querying for an remote control event. [ 844.098602][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 844.114528][ T1209] dvb-usb: error while querying for an remote control event. [ 844.297892][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 844.303784][T16852] dvb-usb: error while querying for an remote control event. [ 844.478087][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 844.483957][ T1209] dvb-usb: error while querying for an remote control event. [ 844.660646][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 844.667385][ T1209] dvb-usb: error while querying for an remote control event. [ 844.848071][ T1209] dvb-usb: bulk message failed: -22 (1/0) [ 844.861277][ T1209] dvb-usb: error while querying for an remote control event. [ 844.994547][T26420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.014299][T26420] netlink: 'syz.7.8199': attribute type 10 has an invalid length. [ 845.028965][T26420] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8199'. [ 845.038121][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 845.048303][ T5896] dvb-usb: error while querying for an remote control event. [ 845.208349][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 845.214282][ T5896] dvb-usb: error while querying for an remote control event. [ 845.388616][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 845.404656][T26424] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8201'. [ 845.413757][T26424] net_ratelimit: 35 callbacks suppressed [ 845.413777][T26424] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 845.418084][ T5896] dvb-usb: error while querying for an remote control event. [ 845.508423][ T1209] usb 2-1: USB disconnect, device number 127 [ 845.565212][T26426] tipc: Enabled bearer , priority 0 [ 845.571473][ T1209] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 845.581785][T26426] syzkaller0: entered promiscuous mode [ 845.608874][T26426] syzkaller0: entered allmulticast mode [ 845.721796][T26426] tipc: Resetting bearer [ 845.770681][T26425] tipc: Resetting bearer [ 845.806404][T26425] tipc: Disabling bearer [ 846.039022][T26443] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 846.056287][T26443] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 846.153734][T26448] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8212'. [ 846.175182][T26448] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 846.187897][T26448] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 846.228297][T26448] tipc: Resetting bearer [ 846.255539][T26453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.288960][T26453] netlink: 'syz.7.8214': attribute type 10 has an invalid length. [ 846.318026][ T5896] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 846.336929][T26453] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8214'. [ 846.369310][T26453] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode [ 846.387859][T26453] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode [ 846.491488][ T5896] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 846.504453][ T5896] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 846.514993][ T5896] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 846.524323][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 846.917799][ T796] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 846.977761][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 847.083586][ T796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.127627][ T796] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 847.129105][ T5896] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 847.147756][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 847.157800][ T5896] usb 7-1: Product: syz [ 847.161986][ T5896] usb 7-1: Manufacturer: syz [ 847.170184][ T796] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 847.188616][ T5896] cdc_wdm 7-1:1.0: skipping garbage [ 847.193849][ T5896] cdc_wdm 7-1:1.0: skipping garbage [ 847.209922][ T5896] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 847.226415][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.234596][ T5896] cdc_wdm 7-1:1.0: Unknown control protocol [ 847.420973][ T796] usb 2-1: config 0 descriptor?? [ 847.450685][ T796] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 847.457354][ T796] dvb-usb: bulk message failed: -22 (3/0) [ 847.555857][ T796] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 847.623523][ T796] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 847.654832][ C0] cdc_wdm 7-1:1.0: Unexpected error -71 [ 847.660524][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 847.664875][ T59] usb 7-1: USB disconnect, device number 112 [ 847.667125][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 847.679239][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 847.693227][ T796] usb 2-1: media controller created [ 847.718268][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 847.728724][T26450] netlink: 'syz.1.8213': attribute type 1 has an invalid length. [ 847.740306][ T796] dvb-usb: bulk message failed: -22 (6/0) [ 847.763269][T26450] dibusb: i2c wr: len=61 is too big! [ 847.763269][T26450] [ 847.777558][ T796] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 847.785884][T26490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.808266][T26490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.810906][ T796] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input100 [ 847.835911][T26490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.857469][ T796] dvb-usb: schedule remote query interval to 150 msecs. [ 847.874710][ T796] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 847.885843][T26490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.027792][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 848.033570][ T59] dvb-usb: error while querying for an remote control event. [ 848.218648][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 848.224428][ T59] dvb-usb: error while querying for an remote control event. [ 848.380770][T26505] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8225'. [ 848.408266][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 848.414053][ T59] dvb-usb: error while querying for an remote control event. [ 848.429093][T26505] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 848.436590][T26505] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 848.545902][T26509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.584811][T26509] netlink: 'syz.5.8227': attribute type 10 has an invalid length. [ 848.607842][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 848.613951][ T59] dvb-usb: error while querying for an remote control event. [ 848.621906][T26509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8227'. [ 848.788255][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 848.794038][ T59] dvb-usb: error while querying for an remote control event. [ 848.957875][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 848.965598][ T59] dvb-usb: error while querying for an remote control event. [ 849.137830][ T59] dvb-usb: bulk message failed: -22 (1/0) [ 849.157783][ T59] dvb-usb: error while querying for an remote control event. [ 849.203719][ T1209] usb 2-1: USB disconnect, device number 2 [ 849.250677][ T1209] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 849.294828][T26545] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8238'. [ 849.465898][T26544] syzkaller0: entered promiscuous mode [ 849.481918][T26544] syzkaller0: entered allmulticast mode [ 850.067807][ T1209] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 850.171600][T26576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.192721][T26576] netlink: 'syz.7.8249': attribute type 10 has an invalid length. [ 850.229472][ T1209] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 850.239724][ T1209] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 850.252487][ T1209] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 850.266130][T26579] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8249'. [ 850.276042][ T1209] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 850.288227][ T1209] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 850.308954][ T1209] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 850.333455][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 850.364848][ T1209] usb 2-1: Product: syz [ 850.375009][ T1209] usb 2-1: Manufacturer: syz [ 850.404537][ T1209] cdc_wdm 2-1:1.0: skipping garbage [ 850.412679][ T1209] cdc_wdm 2-1:1.0: skipping garbage [ 850.434780][ T1209] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 850.448417][ T1209] cdc_wdm 2-1:1.0: Unknown control protocol [ 850.866254][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 850.871923][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 850.878527][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 850.884904][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 850.891609][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 850.898810][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 850.905425][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 850.912258][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 850.918866][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 850.925339][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 850.931944][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 850.938429][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 850.945030][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 850.951378][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 850.957979][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 850.964266][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 850.970870][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 850.977139][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 850.983829][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 850.991284][T16852] usb 2-1: USB disconnect, device number 3 [ 850.997141][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 851.163692][ T5896] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 851.340590][ T5896] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.350802][ T5896] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 851.367166][ T5896] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 851.376516][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.393128][ T5896] usb 6-1: config 0 descriptor?? [ 851.405827][ T5896] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 851.412787][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 851.424216][ T5896] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 851.433858][ T5896] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 851.442068][ T5896] usb 6-1: media controller created [ 851.452625][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 851.472517][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 851.478773][ T5896] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 851.498776][ T5896] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input101 [ 851.512835][ T5896] dvb-usb: schedule remote query interval to 150 msecs. [ 851.521380][ T5896] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 851.615428][T26588] netlink: 'syz.5.8250': attribute type 1 has an invalid length. [ 851.624191][T26588] dibusb: i2c wr: len=61 is too big! [ 851.624191][T26588] [ 851.682429][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 851.695435][ T5896] dvb-usb: error while querying for an remote control event. [ 851.875909][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 851.881917][ T5896] dvb-usb: error while querying for an remote control event. [ 852.049788][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 852.055572][ T5896] dvb-usb: error while querying for an remote control event. [ 852.154369][T26582] mac80211_hwsim hwsim36 syzkaller0: left promiscuous mode [ 852.173386][T26582] mac80211_hwsim hwsim36 syzkaller0: left allmulticast mode [ 852.228904][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 852.257227][ T5896] dvb-usb: error while querying for an remote control event. [ 852.378360][T26597] netlink: 160 bytes leftover after parsing attributes in process `syz.7.8252'. [ 852.398588][T26596] openvswitch: netlink: Message has 592 unknown bytes. [ 852.405503][T26596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.427831][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 852.445479][ T5896] dvb-usb: error while querying for an remote control event. [ 852.627861][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 852.633719][ T5896] dvb-usb: error while querying for an remote control event. [ 852.818016][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 852.823806][ T5896] dvb-usb: error while querying for an remote control event. [ 852.911169][T26622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.945582][T26622] netlink: 'syz.4.8263': attribute type 10 has an invalid length. [ 852.980676][T26622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8263'. [ 853.007815][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 853.021656][ T5896] dvb-usb: error while querying for an remote control event. [ 853.023234][T26622] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 853.037385][T26622] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 853.045947][T26622] tipc: Resetting bearer [ 853.067598][T26628] netlink: 160 bytes leftover after parsing attributes in process `syz.1.8266'. [ 853.191983][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 853.198233][ T5896] dvb-usb: error while querying for an remote control event. [ 853.215118][T26637] netlink: 392 bytes leftover after parsing attributes in process `syz.1.8269'. [ 853.380386][T16852] dvb-usb: bulk message failed: -22 (1/0) [ 853.386378][T16852] dvb-usb: error while querying for an remote control event. [ 853.485113][ T59] usb 6-1: USB disconnect, device number 105 [ 853.589712][ T59] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 853.837809][T16852] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 854.069505][T16852] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 854.079310][T16852] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 854.109967][T16852] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 854.133716][T16852] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 854.158743][T16852] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 854.193691][T16852] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 854.203636][T16852] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 854.219053][T16852] usb 7-1: Product: syz [ 854.228039][T16852] usb 7-1: Manufacturer: syz [ 854.261962][T16852] cdc_wdm 7-1:1.0: skipping garbage [ 854.267216][T16852] cdc_wdm 7-1:1.0: skipping garbage [ 854.322598][T16852] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 854.367895][T16852] cdc_wdm 7-1:1.0: Unknown control protocol [ 854.633518][T26694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.646684][T26694] netlink: 'syz.1.8284': attribute type 10 has an invalid length. [ 854.662026][T26694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8284'. [ 854.675608][T26694] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 854.683073][T26694] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 854.690851][T26694] tipc: Resetting bearer [ 854.732706][ C0] cdc_wdm 7-1:1.0: Unexpected error -71 [ 854.738377][ C0] wdm_int_callback: 8 callbacks suppressed [ 854.738397][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 854.750769][ C0] wdm_int_callback: 8 callbacks suppressed [ 854.750788][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 854.763145][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 854.769761][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 854.771003][T26701] netlink: zone id is out of range [ 854.776189][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 854.781488][T26701] netlink: zone id is out of range [ 854.787596][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 854.793114][T26701] netlink: zone id is out of range [ 854.799747][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 854.810638][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 854.817318][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 854.823932][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 854.830229][ T5896] usb 7-1: USB disconnect, device number 113 [ 854.836381][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 854.836407][T26701] netlink: zone id is out of range [ 854.836404][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 854.836422][T26701] netlink: zone id is out of range [ 854.836426][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 854.836459][T26701] netlink: zone id is out of range [ 854.875774][T26701] netlink: zone id is out of range [ 854.881725][T26701] netlink: zone id is out of range [ 854.919036][T16852] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 855.089350][T16852] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.100740][T16852] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 855.110891][T16852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.130848][T16852] usb 8-1: config 0 descriptor?? [ 855.164219][T26711] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 855.173024][T26711] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 855.182143][T26711] tipc: Resetting bearer [ 855.250285][T26713] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 855.258819][T26713] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 855.267058][T26713] tipc: Resetting bearer [ 855.274642][T26715] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8292'. [ 855.297689][T26715] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 855.305512][T26715] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 855.314173][T26715] tipc: Resetting bearer [ 855.344199][T16852] usbhid 8-1:0.0: can't add hid device: -71 [ 855.357252][T16852] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 855.371439][T16852] usb 8-1: USB disconnect, device number 33 [ 855.694147][T26732] netlink: 160 bytes leftover after parsing attributes in process `syz.5.8300'. [ 855.708406][T26733] syzkaller0: entered promiscuous mode [ 855.717823][T26733] syzkaller0: entered allmulticast mode [ 855.807871][ T5883] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 855.914071][T26743] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8305'. [ 855.925495][T26743] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 855.939828][T26743] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 856.132966][ T5883] usb 8-1: Using ep0 maxpacket: 16 [ 856.141232][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.152274][ T5883] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 856.161542][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.189157][ T5883] usb 8-1: config 0 descriptor?? [ 856.414496][ T5896] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 856.504629][T26765] netlink: 79 bytes leftover after parsing attributes in process `syz.5.8314'. [ 856.573710][ T5896] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 856.582600][ T5896] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 856.593283][ T5896] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 856.606623][T26767] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 856.614225][ T5883] kye 0003:0458:5016.004A: control desc unexpectedly large [ 856.619978][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 856.635862][ T5883] kye 0003:0458:5016.004A: control desc unexpectedly large [ 856.635989][T26767] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 856.654479][ T5896] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 856.664471][ T5883] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5016.004A/input/input102 [ 856.666557][T26767] tipc: Resetting bearer [ 856.684845][ T5896] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 856.694169][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 856.717809][ T5896] usb 7-1: Product: syz [ 856.722004][ T5896] usb 7-1: Manufacturer: syz [ 856.739646][ T5896] cdc_wdm 7-1:1.0: skipping garbage [ 856.744877][ T5896] cdc_wdm 7-1:1.0: skipping garbage [ 856.788051][ T5896] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 856.793999][ T5896] cdc_wdm 7-1:1.0: Unknown control protocol [ 856.828893][ T5883] kye 0003:0458:5016.004A: input,hiddev1,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.7-1/input0 [ 856.975776][T26776] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8319'. [ 856.998568][T26776] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 857.016463][ T5883] usb 8-1: USB disconnect, device number 34 [ 857.017821][T26776] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 857.039536][T26776] tipc: Resetting bearer [ 857.201202][ C0] cdc_wdm 7-1:1.0: Unexpected error -71 [ 857.202694][ T59] usb 7-1: USB disconnect, device number 114 [ 857.206873][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 857.219397][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 857.225482][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 857.500474][T26798] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 857.508688][T26798] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 857.612483][T26804] netlink: 'syz.7.8330': attribute type 3 has an invalid length. [ 857.638324][T26806] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8331'. [ 857.660286][T26806] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 857.669051][T26806] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 857.677507][T26806] tipc: Resetting bearer [ 857.810919][T26813] net_ratelimit: 152 callbacks suppressed [ 857.810940][T26813] netlink: zone id is out of range [ 857.823197][T26813] netlink: zone id is out of range [ 857.828645][T26813] netlink: zone id is out of range [ 857.834015][T26813] netlink: zone id is out of range [ 857.839682][T26813] netlink: zone id is out of range [ 857.845544][T26813] netlink: zone id is out of range [ 857.852191][T26813] netlink: zone id is out of range [ 857.857622][T26813] netlink: zone id is out of range [ 857.863459][T26813] netlink: zone id is out of range [ 857.869435][T26813] netlink: zone id is out of range [ 858.243160][T26826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8338'. [ 858.318064][T26826] veth1_macvtap: left promiscuous mode [ 858.493583][T26836] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8344'. [ 858.506228][T26836] syzkaller0: entered promiscuous mode [ 858.512366][T26836] syzkaller0: entered allmulticast mode [ 858.587992][ T5883] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 858.752122][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.778424][ T5883] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 858.808061][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.832275][ T5883] usb 2-1: config 0 descriptor?? [ 858.960769][T26859] netlink: 'syz.5.8354': attribute type 1 has an invalid length. [ 859.057024][ T5883] usbhid 2-1:0.0: can't add hid device: -71 [ 859.068296][ T5883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 859.086672][ T5883] usb 2-1: USB disconnect, device number 4 [ 859.157157][T26869] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8358'. [ 859.174334][T26869] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 859.188146][T26869] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 859.436710][T26875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.506740][T26874] netlink: 'syz.5.8359': attribute type 10 has an invalid length. [ 859.544486][T26874] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 859.560234][T26874] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 859.818018][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 859.967984][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 859.984386][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.988914][T26893] __nla_validate_parse: 1 callbacks suppressed [ 859.988930][T26893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8367'. [ 860.017146][T26893] netlink: 'syz.6.8367': attribute type 10 has an invalid length. [ 860.019042][ T5883] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 860.025813][T26893] netlink: 2 bytes leftover after parsing attributes in process `syz.6.8367'. [ 860.048265][T26893] hsr0: entered promiscuous mode [ 860.054483][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.055823][T26893] bridge0: port 1(hsr0) entered blocking state [ 860.076240][T26893] bridge0: port 1(hsr0) entered disabled state [ 860.082905][T26893] hsr0: entered allmulticast mode [ 860.084919][ T5883] usb 2-1: config 0 descriptor?? [ 860.090685][T26893] hsr_slave_0: entered allmulticast mode [ 860.098873][T26893] hsr_slave_1: entered allmulticast mode [ 860.107065][T26893] bridge0: port 1(hsr0) entered blocking state [ 860.113414][T26893] bridge0: port 1(hsr0) entered forwarding state [ 860.142192][T26896] netlink: 'syz.6.8367': attribute type 27 has an invalid length. [ 860.168286][T26898] netlink: 79 bytes leftover after parsing attributes in process `syz.7.8368'. [ 860.225224][T26900] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8369'. [ 860.241298][T26900] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 860.249117][T26900] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 860.602935][ T5883] kye 0003:0458:5016.004B: control desc unexpectedly large [ 860.625157][ T5883] kye 0003:0458:5016.004B: control desc unexpectedly large [ 860.666305][ T5883] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.004B/input/input103 [ 860.673986][T26925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8380'. [ 860.787488][ T5883] kye 0003:0458:5016.004B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 860.813731][T26928] netlink: 79 bytes leftover after parsing attributes in process `syz.4.8381'. [ 860.936549][T26932] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 860.962029][T26932] bridge0: port 1(hsr0) entered disabled state [ 860.970715][ C1] kye 0003:0458:5016.004B: Event data for report 16 was too short (7 vs 6) [ 861.001374][T26933] syzkaller1: entered promiscuous mode [ 861.006955][T26933] syzkaller1: entered allmulticast mode [ 861.016829][T26937] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8384'. [ 861.581547][T26958] netlink: 79 bytes leftover after parsing attributes in process `syz.6.8394'. [ 861.710004][T26966] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8398'. [ 861.913710][T26975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8402'. [ 862.290702][ T59] usb 2-1: USB disconnect, device number 5 [ 862.552826][T27009] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 862.585029][T27009] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 862.833096][T27025] ------------[ cut here ]------------ [ 862.839382][T27025] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 862.851849][T27025] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#1: syz.7.8427/27025 [ 862.862406][T27025] Modules linked in: [ 862.868255][T27025] CPU: 1 UID: 0 PID: 27025 Comm: syz.7.8427 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.879517][T27025] Tainted: [L]=SOFTLOCKUP [ 862.883892][T27025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 862.894182][T27025] RIP: 0010:u32_change+0x1daf/0x2720 [ 862.899833][T27025] Code: 3d 36 5e 42 06 01 75 33 e8 6e 6f 0c f8 eb 50 e8 67 6f 0c f8 48 8d 3d d0 90 67 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 40 af e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 42 6f 0c f8 eb 24 e8 3b 6f 0c f8 [ 862.919576][T27025] RSP: 0018:ffffc9000f446f80 EFLAGS: 00010283 [ 862.925663][T27025] RAX: ffffffff89b96459 RBX: ffff888065409800 RCX: 0000000000000010 [ 862.933706][T27025] RDX: ffffffff8ce1af40 RSI: 0000000000000020 RDI: ffffffff9020f530 [ 862.941780][T27025] RBP: ffffc9000f447138 R08: 0000000000000dc0 R09: 00000000ffffffff [ 862.950059][T27025] R10: dffffc0000000000 R11: fffffbfff2023c17 R12: ffff88806540a0e8 [ 862.958248][T27025] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 862.966249][T27025] FS: 0000000000000000(0000) GS:ffff888125551000(0063) knlGS:00000000f5456b40 [ 862.975262][T27025] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 862.981921][T27025] CR2: 0000000080006040 CR3: 000000005f37e000 CR4: 00000000003526f0 [ 862.989992][T27025] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 862.998055][T27025] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 863.006040][T27025] Call Trace: [ 863.009435][T27025] [ 863.012404][T27025] ? __pfx_u32_change+0x10/0x10 [ 863.017284][T27025] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 863.023014][T27025] tc_new_tfilter+0xff8/0x1780 [ 863.027848][T27025] ? __pfx_tc_new_tfilter+0x10/0x10 [ 863.033098][T27025] ? __pfx_tc_new_tfilter+0x10/0x10 [ 863.038378][T27025] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 863.043339][T27025] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 863.048559][T27025] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.054043][T27025] ? ref_tracker_free+0x693/0x840 [ 863.059152][T27025] ? __copy_skb_header+0xa3/0x4a0 [ 863.064204][T27025] ? __pfx_ref_tracker_free+0x10/0x10 [ 863.069651][T27025] ? __skb_clone+0x63/0x7a0 [ 863.074181][T27025] netlink_rcv_skb+0x232/0x4b0 [ 863.079032][T27025] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.084512][T27025] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 863.089868][T27025] ? netlink_deliver_tap+0x2e/0x1b0 [ 863.095090][T27025] netlink_unicast+0x80f/0x9b0 [ 863.099936][T27025] ? __pfx_netlink_unicast+0x10/0x10 [ 863.105241][T27025] ? netlink_sendmsg+0x650/0xb40 [ 863.110270][T27025] ? skb_put+0x11b/0x210 [ 863.114537][T27025] netlink_sendmsg+0x813/0xb40 [ 863.119380][T27025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.124699][T27025] ? aa_sock_msg_perm+0xf1/0x1b0 [ 863.129917][T27025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 863.135248][T27025] ____sys_sendmsg+0x972/0x9f0 [ 863.140106][T27025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 863.145418][T27025] ? futex_unqueue+0x22/0x240 [ 863.150165][T27025] ___sys_sendmsg+0x2a5/0x360 [ 863.154866][T27025] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.160158][T27025] ? __pfx___futex_wait+0x10/0x10 [ 863.165208][T27025] ? get_futex_key+0x8cd/0x1690 [ 863.170165][T27025] ? __fget_files+0x2a/0x420 [ 863.174768][T27025] ? __fget_files+0x3a0/0x420 [ 863.179518][T27025] __sys_sendmmsg+0x2e7/0x4e0 [ 863.184223][T27025] ? __pfx___sys_sendmmsg+0x10/0x10 [ 863.189530][T27025] ? __pfx_do_futex+0x10/0x10 [ 863.194249][T27025] ? rcu_is_watching+0x15/0xb0 [ 863.199086][T27025] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 863.204657][T27025] __do_fast_syscall_32+0x20d/0x640 [ 863.209932][T27025] ? lockdep_hardirqs_on+0x7a/0x110 [ 863.215161][T27025] ? do_fast_syscall_32+0x33/0x70 [ 863.220256][T27025] ? irqentry_exit+0x10e/0x620 [ 863.225044][T27025] ? trace_irq_disable+0x3b/0x150 [ 863.230133][T27025] do_fast_syscall_32+0x33/0x70 [ 863.234998][T27025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 863.241401][T27025] RIP: 0023:0xf7f93f6c [ 863.245483][T27025] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 863.265199][T27025] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 863.273686][T27025] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 863.281716][T27025] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 863.289785][T27025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 863.297814][T27025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 863.298155][ T1209] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 863.305790][T27025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 863.305823][T27025] [ 863.305848][T27025] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 863.305865][T27025] CPU: 1 UID: 0 PID: 27025 Comm: syz.7.8427 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.305890][T27025] Tainted: [L]=SOFTLOCKUP [ 863.305899][T27025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 863.305913][T27025] Call Trace: [ 863.305923][T27025] [ 863.305931][T27025] vpanic+0x56c/0xa60 [ 863.305969][T27025] ? __pfx__printk+0x10/0x10 [ 863.305989][T27025] ? __pfx_vpanic+0x10/0x10 [ 863.306013][T27025] ? is_bpf_text_address+0x292/0x2b0 [ 863.306036][T27025] ? is_bpf_text_address+0x26/0x2b0 [ 863.306065][T27025] panic+0xc5/0xd0 [ 863.306090][T27025] ? __pfx_panic+0x10/0x10 [ 863.306130][T27025] __warn+0x315/0x4f0 [ 863.306155][T27025] ? u32_change+0x1da0/0x2720 [ 863.306182][T27025] ? u32_change+0x1da0/0x2720 [ 863.306210][T27025] __report_bug+0x29a/0x540 [ 863.306237][T27025] ? ___sys_sendmsg+0x2a5/0x360 [ 863.306263][T27025] ? __sys_sendmmsg+0x2e7/0x4e0 [ 863.306288][T27025] ? __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 863.306318][T27025] ? u32_change+0x1da0/0x2720 [ 863.306345][T27025] ? __pfx___report_bug+0x10/0x10 [ 863.306389][T27025] report_bug_entry+0x19a/0x290 [ 863.306417][T27025] ? u32_change+0x1daf/0x2720 [ 863.306443][T27025] ? u32_change+0x1db4/0x2720 [ 863.306468][T27025] handle_bug+0xce/0x200 [ 863.306489][T27025] exc_invalid_op+0x1a/0x50 [ 863.306510][T27025] asm_exc_invalid_op+0x1a/0x20 [ 863.306529][T27025] RIP: 0010:u32_change+0x1daf/0x2720 [ 863.306557][T27025] Code: 3d 36 5e 42 06 01 75 33 e8 6e 6f 0c f8 eb 50 e8 67 6f 0c f8 48 8d 3d d0 90 67 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 40 af e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 42 6f 0c f8 eb 24 e8 3b 6f 0c f8 [ 863.306574][T27025] RSP: 0018:ffffc9000f446f80 EFLAGS: 00010283 [ 863.306592][T27025] RAX: ffffffff89b96459 RBX: ffff888065409800 RCX: 0000000000000010 [ 863.306607][T27025] RDX: ffffffff8ce1af40 RSI: 0000000000000020 RDI: ffffffff9020f530 [ 863.306622][T27025] RBP: ffffc9000f447138 R08: 0000000000000dc0 R09: 00000000ffffffff [ 863.306636][T27025] R10: dffffc0000000000 R11: fffffbfff2023c17 R12: ffff88806540a0e8 [ 863.306651][T27025] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 863.306670][T27025] ? u32_change+0x1d99/0x2720 [ 863.306716][T27025] ? __pfx_u32_change+0x10/0x10 [ 863.306741][T27025] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 863.306791][T27025] tc_new_tfilter+0xff8/0x1780 [ 863.306840][T27025] ? __pfx_tc_new_tfilter+0x10/0x10 [ 863.306894][T27025] ? __pfx_tc_new_tfilter+0x10/0x10 [ 863.306918][T27025] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 863.306946][T27025] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 863.306974][T27025] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.306997][T27025] ? ref_tracker_free+0x693/0x840 [ 863.307019][T27025] ? __copy_skb_header+0xa3/0x4a0 [ 863.307047][T27025] ? __pfx_ref_tracker_free+0x10/0x10 [ 863.307069][T27025] ? __skb_clone+0x63/0x7a0 [ 863.307103][T27025] netlink_rcv_skb+0x232/0x4b0 [ 863.307127][T27025] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 863.307153][T27025] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 863.307186][T27025] ? netlink_deliver_tap+0x2e/0x1b0 [ 863.307215][T27025] netlink_unicast+0x80f/0x9b0 [ 863.307243][T27025] ? __pfx_netlink_unicast+0x10/0x10 [ 863.307265][T27025] ? netlink_sendmsg+0x650/0xb40 [ 863.307288][T27025] ? skb_put+0x11b/0x210 [ 863.307315][T27025] netlink_sendmsg+0x813/0xb40 [ 863.307347][T27025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.307373][T27025] ? aa_sock_msg_perm+0xf1/0x1b0 [ 863.307395][T27025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 863.307421][T27025] ____sys_sendmsg+0x972/0x9f0 [ 863.307456][T27025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 863.307489][T27025] ? futex_unqueue+0x22/0x240 [ 863.307517][T27025] ___sys_sendmsg+0x2a5/0x360 [ 863.307549][T27025] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.307579][T27025] ? __pfx___futex_wait+0x10/0x10 [ 863.307605][T27025] ? get_futex_key+0x8cd/0x1690 [ 863.307652][T27025] ? __fget_files+0x2a/0x420 [ 863.307671][T27025] ? __fget_files+0x3a0/0x420 [ 863.307702][T27025] __sys_sendmmsg+0x2e7/0x4e0 [ 863.307734][T27025] ? __pfx___sys_sendmmsg+0x10/0x10 [ 863.307770][T27025] ? __pfx_do_futex+0x10/0x10 [ 863.307810][T27025] ? rcu_is_watching+0x15/0xb0 [ 863.307844][T27025] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 863.307873][T27025] __do_fast_syscall_32+0x20d/0x640 [ 863.307892][T27025] ? lockdep_hardirqs_on+0x7a/0x110 [ 863.307919][T27025] ? do_fast_syscall_32+0x33/0x70 [ 863.307936][T27025] ? irqentry_exit+0x10e/0x620 [ 863.307969][T27025] ? trace_irq_disable+0x3b/0x150 [ 863.307991][T27025] do_fast_syscall_32+0x33/0x70 [ 863.308010][T27025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 863.308033][T27025] RIP: 0023:0xf7f93f6c [ 863.308051][T27025] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 863.308067][T27025] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 863.308087][T27025] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 863.308102][T27025] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 863.308114][T27025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 863.308126][T27025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 863.308138][T27025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 863.308165][T27025] [ 863.313596][T27025] Kernel Offset: disabled