last executing test programs: 2m59.487508044s ago: executing program 2 (id=296): socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x63682, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5, 0x8100) socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x20, 0x0, 0x4, 0x1) (async) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x20, 0x0, 0x4, 0x1) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000c00)=@generic={0x1, 0x8000000000000001}) (async) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000c00)=@generic={0x1, 0x8000000000000001}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f0000000400)={0xce, 0x0, r7}) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4127, 0x101f}], 0x1}, 0x10102) (async) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4127, 0x101f}], 0x1}, 0x10102) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r9, @ANYRES8, @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)={0x2, 0x2, 0x9, 0x7, 0x28, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d4}, @sadb_lifetime={0x4, 0x4, 0xb6, 0x0, 0x1, 0x3ff}, @sadb_ident={0x2, 0xa, 0x1}, @sadb_key={0x13, 0x9, 0x448, 0x0, "42dd42bf1e35339089c333e15a6f897f5c6828590d9b225b35bf9ed54f68a73413f6255c2a7b6ecc2c84cfc5dbd83292b2845f70f1b93bf29133c74a2c96aec5f0f11975b4fcb74b927b8a12cab13f8e022701ddfe74deb7289f0d20cded9260b7316843678e83c16671a30defcd72d2bb1b707b8cbc76f395f472e0f754d99c73fd5fcac98b133394"}, @sadb_x_sa2={0x2, 0x13, 0xd8, 0x0, 0x0, 0x70bd25}, @sadb_x_filter={0x5, 0x1a, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x10, 0x6, 0x10}, @sadb_lifetime={0x4, 0x2, 0xdca4, 0xb, 0x80000001, 0x4}]}, 0x140}}, 0x40000) (async) sendmsg$key(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)={0x2, 0x2, 0x9, 0x7, 0x28, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d4}, @sadb_lifetime={0x4, 0x4, 0xb6, 0x0, 0x1, 0x3ff}, @sadb_ident={0x2, 0xa, 0x1}, @sadb_key={0x13, 0x9, 0x448, 0x0, "42dd42bf1e35339089c333e15a6f897f5c6828590d9b225b35bf9ed54f68a73413f6255c2a7b6ecc2c84cfc5dbd83292b2845f70f1b93bf29133c74a2c96aec5f0f11975b4fcb74b927b8a12cab13f8e022701ddfe74deb7289f0d20cded9260b7316843678e83c16671a30defcd72d2bb1b707b8cbc76f395f472e0f754d99c73fd5fcac98b133394"}, @sadb_x_sa2={0x2, 0x13, 0xd8, 0x0, 0x0, 0x70bd25}, @sadb_x_filter={0x5, 0x1a, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x10, 0x6, 0x10}, @sadb_lifetime={0x4, 0x2, 0xdca4, 0xb, 0x80000001, 0x4}]}, 0x140}}, 0x40000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a"], 0x7c}}, 0x40010) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002d0110a"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)={0x1}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)={0x1}) 2m59.149800114s ago: executing program 2 (id=298): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(r1, 0x9) r5 = gettid() sched_setattr(r5, &(0x7f00000000c0)={0x38, 0x0, 0x10000032, 0x8001, 0x2d3, 0x9, 0x0, 0x5, 0x2ed, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0xe0000012}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 2m55.781724477s ago: executing program 2 (id=310): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async, rerun: 32) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x3, 0x2, 0x0, @generic=0x5, 0x6, 0x74}) (async, rerun: 64) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x3f6, 0x200, 0x70bd31, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socket(0xa, 0x3, 0x3a) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) (async) sendto$inet6(r4, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) (async) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x64, 0x100, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000018000000324900008200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000006000000000000000020e11a00748fc4ea6ef45676c5bb6a7659c823310ece3e002a1592aa39fe1b21a025c90e3f5c8c26f400260ce2be46fe4693217862c973966129e95e44b1196aaac344206e3bfd5b02"], 0x50) (rerun: 32) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r5, &(0x7f0000002740), 0x0}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000020605000000000000681bade6a0d122c389a52efde377000000000000000900020073797a31000000000c000300686173683a6970000500040001000000e4aad7b443633d354698142bb57a1d8014a153844405087b8325b9d73adad1148fd1db8e6519ab42698d64a4ff9ba5b9b60aab7df2c8093e1192dbb9b57d52c999595a03b49733f877eef3cb1e51618cefd11c415474615e55b961013959bdb8bbfbb0e8f756b88dbc7fefa0f09f2c1a78cf94883d9ad5b12db835c2dbeaadebff9cb9c77852d41eedb8a6ac255207e1334dff3824d0a2f9d8c8b8633c13e65882584bb9778121a7744cc01504750c6d4dcee8caa76cfe7dac71e944f02e04f3e17b7a50dcb3580eb7e5ab"], 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) 2m55.435526965s ago: executing program 2 (id=313): r0 = socket$pppl2tp(0x18, 0x1, 0x1) read(r0, &(0x7f0000000500)=""/142, 0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000047a000/0x3000)=nil, 0x3000, 0x300000e, 0x1010, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x800) ioctl$XFS_IOC_FSCOUNTS(r9, 0x80205871, &(0x7f0000000200)) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)={0x44, r7, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x400}}, 0x20}}, 0x20000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10) 2m54.575841417s ago: executing program 2 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=@newtaction={0x268, 0x76, 0x800, 0xfffffffc, 0x0, {}, [{0x4}, {0x250, 0x1, [@m_connmark={0x180, 0x16, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x9737, 0x1, 0x8000, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x7, 0x6, 0x87a8}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3800000, 0x0, 0x8, 0x4}, 0x3d63}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x3, 0x0, 0x9afc}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7, 0x3, 0x1, 0xdc5}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x6, 0x0, 0x46, 0x8}, 0x1}}]}, {0xa7, 0x6, "c14da8d5444d633d9295383b41fd2f5a81f99e9805d6751e289a3ab3577a681f4be330dac40548fa053c128b663db610590dc4372edf540625375bba13fe9bcb7c87cb63d67a7c1b5f8251b39783cbd3bf37def16b341b83bf33901a30962b3dcbb255f839b86ab2d543eba02a34e245557f45d2ca60f504df8a476e9c464cfc837df410723f6c5b0dabd3b76b366b5085426c1db677e392a09e96794657e4fad35d18"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xcc, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}]}, {0x8a, 0x6, "28deb5c08cf6281cd7225c300e7ef7c53207e7d0467242c228afd4d140c3ec18492e1c271a58519bb4fcb0f0b5b456ff6d199f59bc4436d4aedfd869152c3bc09dfc2c60948edbc200e78174b7c3d33a318454f847a21da0b9f2b50acebf7fd48b1a09d4ae77598d1b873c278a9c58763b96e99dcacbd9ffc9d1cf0ef37158e298ba2033810a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x268}}, 0x0) 2m54.295606318s ago: executing program 2 (id=319): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x6) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000040)) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="07010100ffd9f810f80600b0f97d0102030109022c0401000000020904000001ff615a00090588bb", @ANYRESHEX=r2, @ANYRES64=0x0], 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x6) (async) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) (async) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) (async) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="07010100ffd9f810f80600b0f97d0102030109022c0401000000020904000001ff615a00090588bb", @ANYRESHEX=r2, @ANYRES64=0x0], 0x0) (async) 2m38.788091299s ago: executing program 32 (id=319): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x6) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000040)) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="07010100ffd9f810f80600b0f97d0102030109022c0401000000020904000001ff615a00090588bb", @ANYRESHEX=r2, @ANYRES64=0x0], 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000200)=0x6) (async) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) (async) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) (async) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) (async) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="07010100ffd9f810f80600b0f97d0102030109022c0401000000020904000001ff615a00090588bb", @ANYRESHEX=r2, @ANYRES64=0x0], 0x0) (async) 8.679931397s ago: executing program 0 (id=1004): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000680)={'syz', 0x1}, &(0x7f0000001700)="99be27834a722764e4e370cb0c0db319e997dfda54839bf20e4aae57f300732126da667b0f53b23b27ee4fe210d7637968129cda70f75cf57e684f906d960d95d2902391a51f620bc9", 0x49, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r2}) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r6, r5, 0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @random="495d832339cf"}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0x0, 0xff, 0x0, 0xff]}]}}]}, 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r9], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8.580935288s ago: executing program 1 (id=1005): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f6010203010902"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0483d2da"]}]}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902", @ANYRESHEX=r2, @ANYRES16=0x0, @ANYRES8], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000580)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f00005f6000/0x3000)=nil, 0x3000}}) 8.037887958s ago: executing program 3 (id=1007): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$vbi(&(0x7f0000003140), 0x3, 0x2) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000", @ANYRES8, @ANYBLOB, @ANYRES8], 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c00020000000003000000ffa8960977e1894763dbafe0ac744115e1b0d28b64aa1fd52a49c912483ddc6d19ee8d1b874e4d1d5bc2fec7c5dbbed8e47fcc1d5d8a2f0751b29820993aa2e9c74bc9cc90faf75878578c5140212c60b53e2e6d0ec31b00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0xda96) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) unshare(0x100) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 8.037237094s ago: executing program 0 (id=1008): r0 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010800ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) lsm_list_modules(&(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000000)=0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00J', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) io_setup(0x9, &(0x7f0000000740)) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x20) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0xb6e8, 0x8000, 0x1, 0x0, 0x0, r6}) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x1) 7.357891215s ago: executing program 5 (id=1012): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4,,:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4004000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$amidi(&(0x7f00000000c0), 0x3, 0x10000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x10000}]}]}, 0x64}}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000000240)=0x3fa, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) preadv(r6, 0x0, 0x0, 0x111, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x24020400) socket$kcm(0x29, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) 6.464980271s ago: executing program 4 (id=1015): socket(0x40000000015, 0x5, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000002d40), 0x0, 0x20000) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000002c00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000000c0)="79043a5d46d968f7743ecf3e2e572858a06d19e82f52649df456cbc00cf1572cfa048e1763584cf0705da2ad2f4a012d3a1426f14f99cf7049f6fa86e4e0818ec31565da270e09bb2c460b40a84671144a4aa24bd7c6cea03b5af04356dabc2b7983", 0x62}, {&(0x7f0000001900)}, {&(0x7f00000019c0)="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", 0x776}], 0x4}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x2, @loopback, 0xfffffc01}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001780)}, {&(0x7f00000029c0)}], 0x2, &(0x7f0000002a40)=ANY=[@ANYBLOB], 0x1a8}}], 0x2, 0x40804) sendto$rxrpc(r0, &(0x7f00000002c0)="5a86a2850ca7035f7014eceda41da9d8c5f9452519f71c2736a62740b07e6cda211bf9004709c76c70d362d654ebc3d0a217a0fe2e4924a5b6c7949306bb3aeffe7de3849eb1a30683339a41adad4fabdf643a1e70af7132082c3e5aec7be19a938b1850268d405945a02beffecae68b1726c411844882c6620f01dcf2f96ea550b8a08df803def20c73de96d7c5ce0b17", 0x91, 0x841, 0x0, 0x0) r5 = io_uring_setup(0x1ad4, &(0x7f0000002cc0)={0x0, 0xb45e, 0x1, 0x3, 0x29d}) syz_io_uring_setup(0xbdd, &(0x7f0000000440)={0x0, 0x2655, 0x8, 0x2, 0x2d, 0x0, r5}, &(0x7f0000002c80), &(0x7f0000000280)) (async) r6 = syz_io_uring_setup(0xbdd, &(0x7f0000000440)={0x0, 0x2655, 0x8, 0x2, 0x2d, 0x0, r5}, &(0x7f0000002c80), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, &(0x7f0000003e00)={&(0x7f0000003dc0)={&(0x7f0000002dc0)="c30b67f66b5ae94af50edc5aa1f7212a7275184b7b59a0af4c1315f3806cc91e26a73d75e08dcb175a6f967bcade52f59ec12b31ea5e755f4871e3c69524be8207ef60f4b2a909445e3a43cbb6f91d4ae30faed2282920c645fd0c4be712893184886ed91b8717eeca33ea315a7401c307106fbfd82ebc1a30f5bc2c12ffa6947caac1b355cc49de181c9e735016f018462309ac0b296811bf0d545633111add8cc200c83a834c26b1ab3ee93dd582edcaeec9f4dcc90d469be5481f312f2c7989b56731435b184f292bd51e2e134c84d69f19947dbba8b1c742b7bd747c6e1181723526ed24dd32ca52d9d12d824a8ce3bb3868e1545366d51382982374d3f81b23dac1d1a4c93460752bb58f78c45f2bba3bfd11949fadfe023d169464b22ff6b6582379f0e0022edcaf4c79df3e350d831406f1c5b6e918b677036edcb849f4754671253eb776ffdc06b4c5bbb9d86c8c185fba59fbed19177f5337b9ea9da2bdbe5d6f31f073bae12e1114185fe4531e7868d641171c45f72182e2023f621776c4d94a6387b400ba4ee49724b2ac067c07d3641cb2685653d44810d4094753c6824232589ce166239b3d0b04609684b6ea230d3bba7ece37b01cca52eae4d5860573c619aaa6f7c730420da0fabaa4addba0e3aba6d60402ec81d5940d1a63f9de5b20178047700f487f0f6db6fa897a932a4393e4581c1230f353e803e0de818b65c49d9a369ca0f242cb5e9599bce5b7dc5113d81b6fd74862d1983240bc0e0a61b4c895a8217520f81eb41edb1667dc423949748e099e91d8a3725120fe94eaabc5b14aa1035e312343410c5e339bfb755e8566cabef22ee30860287ce4d48284baa3a4f1fcf572204b58e35c12bb0839b70fe13d87cfd4af7edd36858c909459f5a259728cdb72eb6135f8dd2443a8ae37bfc3cf25e380e30955a7b99c6670b97d6d6011a39a1f8b412d1eec560298ab6c521ee1df726f82509435e51ff39005ab252985b2b8690a91cb16f1f44545dda28333db9cb3f34241b43576656560306c2d8abff2a2753d98c6ad543d6ca5ea8588283f54c4657c902a4a42bc8a42cead8fba96045bfc6ec9d6d5cecfa776682fd2e3361be4c02371f8d71f4e2417fb376a62024744f676751e1d08e0d5a2881c5c7a5debd83394758dc5a04d4c8eca66167b3fe1e270be5beefe34db37fdcc00181720b586f75498163927810e5ccd1a28bac740e9a7be5ccdc0543620d193185a51a2f4390c0685fe88da136ade812a98110f1a361c4e8ebd134409a197861eac8b712804dfe0c8197eec536ab5cdedef35c2ac2c98469fc22e1445b4c52b12785a792922ee57442ccbc1aa156008dc5dc6d8c30d84839ab0798803985b6647c3416f7cd33b4c0dd02e2e68b91f904029373495ea988a67f4603bf26c39c44c1e96e012c7ea8511a10d011ac0afd842226a8e63f0027081f1c1cef8a7ad500a680e88ceb477c7c0b4baab54d41b3c81d979dbfd4b26cdc46cb37bcc2ac4faa6de41660433c6cc0b83398001bf31c29f9da3ea6c345842012b874f1ae176d15e4b6f975211d6c3a65ecfdcb6679cc26a9a4eb3c0a8c9c3b32eb0f60d38eaaee1f2432a9f884b79568e0e7c624181865cad02731714312abaa3d99f42f0ac17cb9f261aaeab0ec0c0dfdd11d9f44c5c37694d8fd05a272221d477b2874fe0145354baf3b4db0fa0a6c73f13e8c7387fcfb669576f9b4339b02888dd7cb24f1817bd9a4da898bd0360d135061997f15109a035ce4aefbe9d8105ae52711068575003f95d1816cea1e00fadfda16325b632ac30397a32522cb3308e6403b36b1c2b61034a01d2725304b6d6e0c189ac597534eec04137bf0893d6a5aff09ab1bdc0b4b5158ff18e6882f9e319e02d5a3028319d33097a715e93b8d776eca7a9b64bc8dcf8afd1b0e96d4c6d44d95db0246118e173f24e7fa09a7c2c9e842dcfcc944dd16a9880cc3bbc8b4eff1a2434221943f48a6f95fec1977396ef5205c99ee3d60aee4c4aa8a7b7804327ebd0ba132e47df07fd1e6a69aebf14b949d6c04c744e890316c8afc0385bfcf8c0e41cfa3c0e1bfadd5b996b6e671c7633ba5b50d920585d907ba1c83738029c475a347ab028ccb483c5e64cc073163fa7b01d0ffd95115dd229d087b600f101bd26de564685c6a589b05c6d640e23f3b1668f382f8d26595c688997587ef1387964bb4879f13ac75886560d037e3fda781deff31cb7a36b937d83ccd9c1040e69102af2e7f7e84bff277cf65ce334d6851af2a74fbe11b0fbf4ff8300a0baf2379b80ecd8b65740e8b24131db2e1a66eb87adbb8c6fa0af286a163f54552781729f6a50a60d29ceb6be4e90a770061b29de1fdb015aaaf9be35620a45d0f498ae83c7693b86c17722a48da9d23fd05d0962a2185f9ddf3118d4e211c87d9ccb20e6982be7c30249abdf8c62eee9510931ab93fdec8038ba8329d4f0fa7de37eb8b440b7fedc947071c2a55c6c11d8448cf472ff19d7437a609285a72b9e85ef33f30d55794b24e2b8f94bf25c2eb379519d3b31aa01797a8199510335a3210cbbe9e65eee99e495f4a0a239bfe15c6debc87cd205143ee35f1589b7df398459726a6ff8945185ed5a521a05d28814761fd1677af6e0540061cec95c050ae0d53aabd025547ff88ce24e20b3b38e05bea6a2b7ab4ddc0058135b0646e8b10fdcef98e022ef7b30e2e7e873a916fa04181b245c2a045b23b8bf4526d0898a89e749840e480c9f8eb3733094f5c21c47e04057391332", 0x7b5, 0x0, 0x6, 0x2}}, 0x1) (async) io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, &(0x7f0000003e00)={&(0x7f0000003dc0)={&(0x7f0000002dc0)="c30b67f66b5ae94af50edc5aa1f7212a7275184b7b59a0af4c1315f3806cc91e26a73d75e08dcb175a6f967bcade52f59ec12b31ea5e755f4871e3c69524be8207ef60f4b2a909445e3a43cbb6f91d4ae30faed2282920c645fd0c4be712893184886ed91b8717eeca33ea315a7401c307106fbfd82ebc1a30f5bc2c12ffa6947caac1b355cc49de181c9e735016f018462309ac0b296811bf0d545633111add8cc200c83a834c26b1ab3ee93dd582edcaeec9f4dcc90d469be5481f312f2c7989b56731435b184f292bd51e2e134c84d69f19947dbba8b1c742b7bd747c6e1181723526ed24dd32ca52d9d12d824a8ce3bb3868e1545366d51382982374d3f81b23dac1d1a4c93460752bb58f78c45f2bba3bfd11949fadfe023d169464b22ff6b6582379f0e0022edcaf4c79df3e350d831406f1c5b6e918b677036edcb849f4754671253eb776ffdc06b4c5bbb9d86c8c185fba59fbed19177f5337b9ea9da2bdbe5d6f31f073bae12e1114185fe4531e7868d641171c45f72182e2023f621776c4d94a6387b400ba4ee49724b2ac067c07d3641cb2685653d44810d4094753c6824232589ce166239b3d0b04609684b6ea230d3bba7ece37b01cca52eae4d5860573c619aaa6f7c730420da0fabaa4addba0e3aba6d60402ec81d5940d1a63f9de5b20178047700f487f0f6db6fa897a932a4393e4581c1230f353e803e0de818b65c49d9a369ca0f242cb5e9599bce5b7dc5113d81b6fd74862d1983240bc0e0a61b4c895a8217520f81eb41edb1667dc423949748e099e91d8a3725120fe94eaabc5b14aa1035e312343410c5e339bfb755e8566cabef22ee30860287ce4d48284baa3a4f1fcf572204b58e35c12bb0839b70fe13d87cfd4af7edd36858c909459f5a259728cdb72eb6135f8dd2443a8ae37bfc3cf25e380e30955a7b99c6670b97d6d6011a39a1f8b412d1eec560298ab6c521ee1df726f82509435e51ff39005ab252985b2b8690a91cb16f1f44545dda28333db9cb3f34241b43576656560306c2d8abff2a2753d98c6ad543d6ca5ea8588283f54c4657c902a4a42bc8a42cead8fba96045bfc6ec9d6d5cecfa776682fd2e3361be4c02371f8d71f4e2417fb376a62024744f676751e1d08e0d5a2881c5c7a5debd83394758dc5a04d4c8eca66167b3fe1e270be5beefe34db37fdcc00181720b586f75498163927810e5ccd1a28bac740e9a7be5ccdc0543620d193185a51a2f4390c0685fe88da136ade812a98110f1a361c4e8ebd134409a197861eac8b712804dfe0c8197eec536ab5cdedef35c2ac2c98469fc22e1445b4c52b12785a792922ee57442ccbc1aa156008dc5dc6d8c30d84839ab0798803985b6647c3416f7cd33b4c0dd02e2e68b91f904029373495ea988a67f4603bf26c39c44c1e96e012c7ea8511a10d011ac0afd842226a8e63f0027081f1c1cef8a7ad500a680e88ceb477c7c0b4baab54d41b3c81d979dbfd4b26cdc46cb37bcc2ac4faa6de41660433c6cc0b83398001bf31c29f9da3ea6c345842012b874f1ae176d15e4b6f975211d6c3a65ecfdcb6679cc26a9a4eb3c0a8c9c3b32eb0f60d38eaaee1f2432a9f884b79568e0e7c624181865cad02731714312abaa3d99f42f0ac17cb9f261aaeab0ec0c0dfdd11d9f44c5c37694d8fd05a272221d477b2874fe0145354baf3b4db0fa0a6c73f13e8c7387fcfb669576f9b4339b02888dd7cb24f1817bd9a4da898bd0360d135061997f15109a035ce4aefbe9d8105ae52711068575003f95d1816cea1e00fadfda16325b632ac30397a32522cb3308e6403b36b1c2b61034a01d2725304b6d6e0c189ac597534eec04137bf0893d6a5aff09ab1bdc0b4b5158ff18e6882f9e319e02d5a3028319d33097a715e93b8d776eca7a9b64bc8dcf8afd1b0e96d4c6d44d95db0246118e173f24e7fa09a7c2c9e842dcfcc944dd16a9880cc3bbc8b4eff1a2434221943f48a6f95fec1977396ef5205c99ee3d60aee4c4aa8a7b7804327ebd0ba132e47df07fd1e6a69aebf14b949d6c04c744e890316c8afc0385bfcf8c0e41cfa3c0e1bfadd5b996b6e671c7633ba5b50d920585d907ba1c83738029c475a347ab028ccb483c5e64cc073163fa7b01d0ffd95115dd229d087b600f101bd26de564685c6a589b05c6d640e23f3b1668f382f8d26595c688997587ef1387964bb4879f13ac75886560d037e3fda781deff31cb7a36b937d83ccd9c1040e69102af2e7f7e84bff277cf65ce334d6851af2a74fbe11b0fbf4ff8300a0baf2379b80ecd8b65740e8b24131db2e1a66eb87adbb8c6fa0af286a163f54552781729f6a50a60d29ceb6be4e90a770061b29de1fdb015aaaf9be35620a45d0f498ae83c7693b86c17722a48da9d23fd05d0962a2185f9ddf3118d4e211c87d9ccb20e6982be7c30249abdf8c62eee9510931ab93fdec8038ba8329d4f0fa7de37eb8b440b7fedc947071c2a55c6c11d8448cf472ff19d7437a609285a72b9e85ef33f30d55794b24e2b8f94bf25c2eb379519d3b31aa01797a8199510335a3210cbbe9e65eee99e495f4a0a239bfe15c6debc87cd205143ee35f1589b7df398459726a6ff8945185ed5a521a05d28814761fd1677af6e0540061cec95c050ae0d53aabd025547ff88ce24e20b3b38e05bea6a2b7ab4ddc0058135b0646e8b10fdcef98e022ef7b30e2e7e873a916fa04181b245c2a045b23b8bf4526d0898a89e749840e480c9f8eb3733094f5c21c47e04057391332", 0x7b5, 0x0, 0x6, 0x2}}, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) (async) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r9, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r9, 0x5501) write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x3fd, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0xdcf, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81b39d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x9, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x6, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0xd5, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) (async) write$uinput_user_dev(r8, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x3fd, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0xdcf, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81b39d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x9, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x6, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0xd5, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) socket$kcm(0x29, 0x5, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000500)) r10 = socket$alg(0x26, 0x5, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_MODE_ADDFB(r11, 0xc01c64ae, &(0x7f0000000380)={0x0, 0x98, 0xffff, 0xfffffffd, 0x1, 0x7, 0xe96}) (async) ioctl$DRM_IOCTL_MODE_ADDFB(r11, 0xc01c64ae, &(0x7f0000000380)={0x0, 0x98, 0xffff, 0xfffffffd, 0x1, 0x7, 0xe96}) bind$alg(r10, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x0) (async) accept4(r10, 0x0, 0x0, 0x0) 6.301885542s ago: executing program 1 (id=1016): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000980)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x6}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x4, {0xfd}, {0x4}, @note={0x81, 0x0, 0xad, 0x0, 0x8}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x3, 0x6}, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x111, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) memfd_create(&(0x7f0000000080)='y\x10u\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2000000002004cb, 0x0, 0xa1d, 0x68ff, 0x2, 0x0, 0x3, 0x94d7000000000000], 0x10000, 0x2004}) 6.301355725s ago: executing program 5 (id=1017): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x4004) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/mem_sleep', 0x80, 0xd6fb509096be2cd5) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7ff, r3, &(0x7f00000000c0)=' ', 0x1, 0x3}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x2}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5b1654539cca2d41305599d7e2207a0ed95e214033f04b7d9121fd18d315771b7bab9a8f5caa9a8f75336596c53b20fde4d75dcc45b9705e0a528135a066e5c832fedb4935d9c3179c55a60ec4d2818a56a6e8029743b32dfb23a457ce08df83ba649fe7b276032a40407f024f6be49ea5b5", 0x72}], 0x1}, 0x40000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendmmsg$sock(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x67}}], 0x2, 0xc000) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x61}, {0x3, 0x4, 0xc}, {0x8, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x5, 0x26}, {0xcf, 0x7, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x36, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xf, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) (async) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x4004) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/mem_sleep', 0x80, 0xd6fb509096be2cd5) (async) io_setup(0x81, &(0x7f0000000040)) (async) io_submit(r4, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7ff, r3, &(0x7f00000000c0)=' ', 0x1, 0x3}]) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x2}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5b1654539cca2d41305599d7e2207a0ed95e214033f04b7d9121fd18d315771b7bab9a8f5caa9a8f75336596c53b20fde4d75dcc45b9705e0a528135a066e5c832fedb4935d9c3179c55a60ec4d2818a56a6e8029743b32dfb23a457ce08df83ba649fe7b276032a40407f024f6be49ea5b5", 0x72}], 0x1}, 0x40000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) (async) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) (async) sendmmsg$sock(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x67}}], 0x2, 0xc000) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x61}, {0x3, 0x4, 0xc}, {0x8, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x5, 0x26}, {0xcf, 0x7, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x36, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xf, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) (async) 6.152650758s ago: executing program 3 (id=1018): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000), 0x4) 6.030692811s ago: executing program 1 (id=1019): fsopen(&(0x7f0000000500)='pipefs\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000feffffffffffffff00000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a05000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380080001400000000008000240fffffffd180003801400010064766d7270310000000000000000000048000000160a01f6c501000b000000000000010000000900020073797a300000000009009b1bba877a30000000001c000380180003801400010064766d72703100000000000000000000140000001000010000000000000000000000000a"], 0xe8}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0), 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x10002, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x2, 0x8000, 0xfffffffc, 0x80000006, 0x8000}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000440)={r5, @in6={{0xa, 0x4e21, 0xfe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}}}, 0x84) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x800, 0x1, 0x1, 0x0, 0x1}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000880)=@vmx={0x4, 0x0, 0x2080, {0x100000, 0x2, {}, 0x0, 0x8}, {"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", "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"}}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xfff) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000080)={0x10, 0x10, 0x4, 0x2, 0x1, 0xff7f}) nanosleep(&(0x7f0000000300), 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000540)='@\x01\x1c<\xddk \xf0\xd2\x15R\xc3\x00i\x9c\x9d\xf6\xca\xef?\xd1\xc3UA\xca\xd5\xcf\x15\xc7\xa2\xf4f\xa9>\xedgI\xdf\x9e\x88l\x8a)\xd0\xf6iu\x00\xafk\x83\x02\xfb\xa2\xa5\xd6\xf0Dr\x1d\xb5R\x96\x1c.\xbb\xf8a\xb3\xc9\xb4\xcaRAH\xb6\x1e\x80\xaa\xe8\xb6,\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000180)='O', 0x1) 5.957021814s ago: executing program 3 (id=1020): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) syz_open_dev$audion(&(0x7f0000000280), 0xe6f, 0x80040) unlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) 5.683750705s ago: executing program 3 (id=1021): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0xe, @capture={0x1000, 0x1, {0x7, 0x1}, 0x9, 0x883ff}}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80000, 0xfff) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x42c80) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2d) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fsmount(r2, 0x0, 0x89) 5.683355657s ago: executing program 5 (id=1022): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 5.535501995s ago: executing program 3 (id=1023): openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b800800030004000000b6ffffff0200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000180)={0x0, 0x1}) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2825) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) r6 = io_uring_setup(0x168f, &(0x7f00000003c0)={0x0, 0x631d, 0x1000, 0x2, 0x299}) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) 5.386523264s ago: executing program 5 (id=1024): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280)) io_uring_enter(r2, 0x66a8, 0x4000, 0xf, 0x0, 0x18) r3 = syz_io_uring_setup(0xeeb, &(0x7f0000000140)={0x0, 0x65fe, 0x4000, 0x0, 0x0, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r9, 0x6, 0x1a, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f00000002c0)={0xffffffffffffffef, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) io_uring_enter(r3, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) 4.035477383s ago: executing program 4 (id=1025): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x2000) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000440)={0x9, @sdr={0x34325258, 0x400}}) openat$procfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x46) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x0, 0xfffffffd, {{0x7, 0x4, 0x0, 0x6, 0x1c, 0x63, 0x1, 0x0, 0x5e55b37311de6d89, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast2, {[@generic={0x94, 0x7, "78810aeb8a"}]}}}}}) (async) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ftruncate(r3, 0x7000000) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) (async) lseek(0xffffffffffffffff, 0x9, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x20a2081, &(0x7f0000000340)=ANY=[@ANYBLOB='gd<', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000180)={0x9, 0x0, 0x203, 0xe0, '\x00', '\x00', '\x00', 0xfff, 0xaff, 0x8c2, 0x2, "ee2315e339cd6b154e24e2ac792522f7"}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x22080, 0x0) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$uac2(r4, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400b9fbd0000e28e76ef1da1e5bb395228ee0bdd94eefff42f8ce54b47dd7bdd3f65360c0cae"], 0x0, 0x0, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) close(r6) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) (async) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) 3.917836793s ago: executing program 5 (id=1026): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.842275812s ago: executing program 4 (id=1027): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x17b}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 3.760082159s ago: executing program 1 (id=1028): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0xfffffffffffffefc) (async) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e6702, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ppoll(&(0x7f0000000280)=[{r4, 0x1021}, {r4, 0x2452}], 0x2, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x618, 0x3c0, 0xffffff80, 0x178, 0x3c0, 0x178, 0x548, 0x22b, 0x258, 0x548, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {0x0, 0x0, 0xf8}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x2, 0xfe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfc}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x8a}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xffffff00], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x120, 0x188, 0x0, {}, [@common=@ah={{0x30}}, @common=@hbh={{0x48}, {0x8, 0x2, 0x1, [0x9, 0x1, 0x9, 0xf, 0x7, 0xba36, 0x7, 0x9, 0x1ff, 0x4, 0x9, 0xc4ff, 0x800, 0x5, 0x10, 0xfe01], 0xd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) (async) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x26, &(0x7f00000011c0)=ANY=[@ANYBLOB="8dee93f035232d6503ea41e87f9f27543c04926d5be14403af081b5fb12e0c00f7a5fea06fa5b48f6bdadf627eb39738b3205cbaa32e039139f6d0a7d66562acc5140d816273a719295c5dbeb2c69c93080f7d2a0b1586db3dba52deda7f5373886c2a7f7c2598ef9b378e0eaee54609b709d4cc571fbc42c2e9c671ab7fb311d087ee96ed74c8f6a816"], 0x0) (async) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f00000010c0)={0xd, 0xb63}) listen(r0, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000001b80)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000200)="734a61c73e3960", 0x7}], 0x1}}, {{&(0x7f0000001080)={0xa, 0x4e24, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000001100)="c29f2f466453b6b5e801e8b0094f68ce9b2286e0652ff5dca0a4c7224294e376051400"/45, 0x2d}, {&(0x7f0000001280)="fbe68beff168f8dd3a6028f7441a8cf89f8dc6852c4f1b9a44b87381cbd81018c63d1296a3bdc678e8127a76f2680eb3bb4ef02464e4e2a6954400f6613dd93771bec739fd93bfc975380c36530bea9cbdef291f104f585ae7a36f54e37a281ee3e666e931fcc99da9d11f9e19d192aa93a7f394624da354243b7aec60e883b34ae7271cbabd261936c22afec0793d60dcbbc7ba906171796d6bdf18ac71179be8ea6f9d21aaf21b59f0", 0xaa}], 0x2, &(0x7f0000001380)}}, {{&(0x7f0000001480)={0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0x32}, 0x3a}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000014c0)="c7cec10df67ea43522f44b90b6f1f256df958eebd725d61cd74843c221a4bf1aad05904a329570c4ef2d05a49338082cbbc9eb7ca893f152c880bb9d61003feaf1391aa00c09e20941d931564e58fbd4fb2e991d51b1668a0f7be643c570ccf815235448c0ce8f8feb6d38a2d9e4cc6c615504105c641130818d41122ca85a5edb37f1728806a5a71fed3d87a4c36852cff3612e3d5d13527a3885d1a44448a3a44392a6964cbbcce657415ad199a8348198af3ee0dbc2593107432a5ff2dca7ea", 0xc1}, {&(0x7f00000015c0)="6d8d576e89cb0a819b70fe8ef9ebe4f2772bec5a41128258fdf8bdfc27f2430b35363d4ed461327c606a3f05bf83e8f8cfb6a2b496463d7a2b998f519691cda651378fc2ce8fa3d74e169a607d16bfe571da614acb67f442f2f4ca2ac79d5dc7e96ae49f91105479162d8f5bd79c2fb05b81edcbab939d5a880d61260fa130d5aea55d8ffc99a059b63392ea7e982dae035aad362e7d541eb637dcaf1fe256b5d70ed780c0d1a5e5043eae2dd4d0ea0fd9214009fc564c514e4bfb68544cc5a23107562d8972292d44963720d1621a9ef8d495b93ce23386064fb2816511075843e9910fe54b", 0xe6}, {&(0x7f00000016c0)="1ddd455ffd6729a8178943be7f781c5371a4de7d4e322a8a9fb1d0e73263659727e09fd067dac7ca2cb8edfbf7cad514edd67d36990f97ec4bf5a6f69978b9a764a82ebc5aa0f24c7312363613a3d60268293885b6fe6f0472ffa80f109ce1ee04e866a29c992ce58378e9df6a88e29bafaf92", 0x73}], 0x3}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001900)="e83d2f3a69e44421d6e1e3e12b0d5904e5a9172da32c234c847c4a3f973774d37c96a4f45ed9c0ddb5e11f50aa9ef88bdab85df54de663f55ab83fa5232da78fcf2a7a0d0a0fa88dbb44adcd2ddbad2bafc80394c789c3585c32651b1ca54ae52f3602fadf8a5777b73240c96e3622591fad450f8b2d8480295aec0326a7daded7926d3882de0224adb0fe2f5809a973a18acb8e3afa4015f268b34527f837a674b0f722520020dd0534825f8f8e9ccf335d2845900ef186bcd6c2da63cd6fd4", 0xc0}, {&(0x7f0000001840)="7f6f987c40a67188c74df4ff9d70df7c6b1dfeef084d714e01363f0740f88d786e756fab9dabd034f5de4bc7cc30af533afbd3cbacd2607a82", 0x39}, {&(0x7f0000001880)="f101b4e9eb23529a3da97e9ee7b3061dc302fbc0873762a24049c825ee17624ba7d947dc938e0e6c290b0864430f4eda2969c2d41f1ff868127346af", 0x3c}], 0x3, &(0x7f0000001c80)=ANY=[@ANYBLOB="480000000000000029000000390000008706010700000000fc020000000000000000000000000001fc010000000000000000000000000000ff020000000000000000000000000001c80000000000000029000000040000000015000000000000c2040000000101080000000000000000c910fe8000000000000000000000000000430720000000000608f3fd0900000000000000f7ffffffffffffff0500000000000000c2040000000205020005074800000002106b0800060000000000000006000000000000000101000000000000ffff0000000000000900000000000000000040004000000003000000000000000900000000000000c910fc01000000000000000000000000000100000000000024000000000000002900000032000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="000000b3f104779eb512840024140000000000002900000032000000fc020000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000380000000000000029000000390000007304010200000000fc010000000000000000000000000001ff020000000000000000000000000001"], 0x198}}], 0x4, 0x0) (async) shutdown(r6, 0x1) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000001140), 0xcd, 0x12040) (async) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000002c0)='illinois', 0x8) 3.625738565s ago: executing program 4 (id=1029): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.156039266s ago: executing program 1 (id=1030): socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_open_procfs(0x0, &(0x7f0000001200)='net/raw\x00') syz_open_procfs(0x0, &(0x7f0000001480)='fdinfo\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = fsopen(&(0x7f0000000040)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fspick(r4, &(0x7f0000001300)='.\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x48001, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0x800, 0xffffffff}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x80000}) r7 = syz_open_procfs(0x0, &(0x7f0000001440)='net/connector\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) recvmmsg(0xffffffffffffffff, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000019c0)=""/4061, 0xfdd}, {0x0}, {0x0}, {&(0x7f0000001340)=""/213, 0xd5}, {0x0}, {&(0x7f0000001500)=""/138, 0x8a}], 0x1}, 0x7}], 0x1, 0x10120, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000140)={'vlan0\x00', @multicast}) 2.292226797s ago: executing program 0 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003700010324bd7002ffdbdf2501000000ed00aefdb6f220429a12ac"], 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x40000000) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000007c0)=""/217, 0xd9}, {&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000003200)=""/4102, 0x1006}], 0x5}, 0x70003}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xfffff001}], 0x3, 0x10103, 0x0) 2.261607593s ago: executing program 0 (id=1032): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r3 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, 0x0) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = syz_io_uring_setup(0x1008f1, &(0x7f0000000140)={0x0, 0x114dc, 0x0, 0x0, 0x80100088}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) openat$fb0(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40281, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000000)=0x1) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x0, @fd=r4, 0x8, 0xffffffffffffffff, 0x2, 0x6, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2.00243263s ago: executing program 0 (id=1033): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502"], 0x0) 1.66841258s ago: executing program 3 (id=1034): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) futex(0x0, 0xb, 0x0, 0x0, 0xfffffffffffffffc, 0x3) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000003980)=[{{&(0x7f0000000940)={0xa, 0x4e02, 0x7, @remote, 0xa}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000000180)="1523bfb9d4f8", 0x6}], 0x1}}], 0x1, 0x20004000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) shutdown(r0, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, r7, 0xd55319eec59dfa33, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x68}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_virt_wifi\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x20004880) shutdown(r5, 0x1) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r10, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r11, 0x0, 0x10001, 0x0, 0x2, 0x2ebad4, 0xa0f97}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r11, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x82, &(0x7f0000000000)={0x0, 0x12001}, &(0x7f0000000040)=0x8) 1.559141549s ago: executing program 4 (id=1035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9f3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x980914, 0xfffffffd}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x7, 0xa}, {0x0, 0xf}}}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$rds(0xffffffffffffffff, 0x0, 0xc8) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x18, r6, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x11}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) 1.195459996s ago: executing program 1 (id=1036): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100), 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000000)='syzkaller\x00', 0xb8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r6, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0x1000000000000}) r8 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000023c0), 0x1, 0x0) writev(r9, &(0x7f0000003600)=[{&(0x7f0000002400)='\n', 0x1}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x54) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000000)=0x4, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, "cb933c", 0x0, 0x2, 0x1, @remote, @local}}}}, 0x0) 935.083436ms ago: executing program 5 (id=1037): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x3, 0x7, 0x1a, 0x19, 0xa, 0x8}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20040}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x200101}, {0xeb4, 0x198f}, 0x1001, 0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) r3 = socket(0x10, 0x3, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f00000000c0)}], 0x3, 0x3, 0xe) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 398.132226ms ago: executing program 4 (id=1038): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10, 0x739, 0x0, 0x0, 0x0, 0x5a6c103, 0x400, 0xfffffffffffffffd, 0x4, 0x5, 0x0, 0xfffffffffffffc00, 0xfffffffffffffffd}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) clock_adjtime(0x7, &(0x7f00000005c0)={0x8, 0xdf, 0x3, 0x4c, 0x68f, 0x4, 0x1, 0x3ff, 0x10000, 0x8, 0x7, 0x8, 0x6, 0x50, 0xf, 0xfffffffffffffe01, 0x0, 0x5, 0xa67, 0x10001, 0x2, 0x100000001, 0xd34, 0x3, 0x8001, 0x6}) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r3, r3, 0x9, 0x0, @val=@iter={&(0x7f0000000380)=@map_fd=r3, 0x10}}, 0x20) setsockopt$packet_int(r4, 0x107, 0x3, 0x0, 0x0) syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x32c}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r5 = add_key$user(&(0x7f0000000500), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000540)="424f14a9693535145b1215b520b6eacc7e6bffdba93bd20b3ae1a71f5130004628d84be6c8e3249baef1571672fd8750a57db333580c8ac0b68018e70becc96a11cb616db8741c0db0c8d3c8c991827684dedb38b89f3b2f82f77a61f5bf56e37ce9450df476a97da344", 0x6a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 0s ago: executing program 0 (id=1039): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000200)) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x3e, 0x81, 0x38}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000020005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024005000012080001400000000014000300"], 0xc4}, 0x1, 0x1000000}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') exit(0xf) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='!\x00', 0xfffffffffffffff8) r7 = eventfd2(0x6, 0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f00000001c0)={r7, 0xe, 0x3, r6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000180)={0x4, 0x7000, 0x8}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x8, 0x4, 0x4004, 0x1000, 0x4000f0, 0x0, 0x0, 0x5, 0x10000000000000, 0x1, 0x0, 0x5, 0x0, 0x8], 0xfec00000, 0x347255}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b5, 0x100, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0xf7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x100, 0x8000000000000001, 0xfffffffffffffff9, 0x463d, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x106, 0xfffffffffffffffb, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8d, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0x0, 0xe94, 0x7, 0xfffffffffffffff9, 0xa7, 0xb9fd, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x2, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0x3, 0x80000000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x9, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x0, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) kernel console output (not intermixed with test programs): fig 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.159643][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.179654][ T1216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.191330][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.203507][ T1216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 269.216702][ T24] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 269.227007][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.236687][ T1216] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 269.252626][ T1216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.264847][ T24] usb 6-1: config 0 descriptor?? [ 269.330663][ T1216] usb 1-1: config 0 descriptor?? [ 269.338876][ T5877] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 269.483667][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 269.496400][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 269.525132][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 269.566839][ T5877] usb 4-1: config 3 has an invalid interface number: 194 but max is 0 [ 269.576584][ T24] usb 6-1: USB disconnect, device number 20 [ 269.584076][ T5877] usb 4-1: config 3 has no interface number 0 [ 269.591676][ T5877] usb 4-1: config 3 interface 194 altsetting 31 has an invalid descriptor for endpoint zero, skipping [ 269.600416][ T5905] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 269.611025][ T5877] usb 4-1: config 3 interface 194 has no altsetting 0 [ 269.621616][ T5877] usb 4-1: New USB device found, idVendor=0cad, idProduct=9011, bcdDevice=eb.f3 [ 269.631520][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.640648][ T5877] usb 4-1: Product: syz [ 269.647140][ T5877] usb 4-1: Manufacturer: syz [ 269.654413][ T5877] usb 4-1: SerialNumber: syz [ 269.750517][ T1216] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 269.774331][ T1216] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 269.783040][ T1216] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 269.790436][ T1216] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 269.808856][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 269.813514][ T5910] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 269.826859][ T5905] usb 5-1: config 0 has no interfaces? [ 269.836337][ T5905] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 269.847569][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.858033][ T5905] usb 5-1: Product: syz [ 269.871871][ T5905] usb 5-1: Manufacturer: syz [ 269.876630][ T5905] usb 5-1: SerialNumber: syz [ 269.896018][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.906435][ T5905] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 269.918636][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.928409][ T5905] usb 5-1: no configuration chosen from 1 choice [ 269.963028][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.985994][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.999723][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.001425][ T1216] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 270.029377][ T1216] microsoft 0003:045E:07DA.0009: no inputs found [ 270.036023][ T1216] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 270.059723][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.072383][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 270.080658][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 270.097065][ T5910] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.117926][ T5910] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 270.147583][ T5910] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.163434][ T5910] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 270.182452][ T1216] usb 1-1: USB disconnect, device number 32 [ 270.194180][ T5877] usb_serial_simple 4-1:3.194: motorola_tetra converter detected [ 270.217933][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.231300][ T5910] usb 2-1: Product: syz [ 270.235795][ T5910] usb 2-1: Manufacturer: syz [ 270.243521][ T5910] usb 2-1: SerialNumber: syz [ 270.248582][ T5877] usb 4-1: motorola_tetra converter now attached to ttyUSB0 [ 270.281887][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.298955][ T5910] usb 2-1: config 0 descriptor?? [ 270.306568][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.323799][ T5877] usb 4-1: USB disconnect, device number 39 [ 270.334157][ T24] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 270.346854][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.359920][ T5877] motorola_tetra ttyUSB0: motorola_tetra converter now disconnected from ttyUSB0 [ 270.378108][ T5877] usb_serial_simple 4-1:3.194: device disconnected [ 270.388873][ T24] usb 6-1: config 0 descriptor?? [ 270.782691][ T5910] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 270.891651][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 270.918350][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 270.936355][ T24] usb 6-1: USB disconnect, device number 21 [ 271.035771][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.073849][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.179935][ T5910] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 271.269933][ T5910] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 271.325503][ T5910] usb 2-1: USB disconnect, device number 38 [ 271.375583][ T5905] usb 5-1: USB disconnect, device number 43 [ 271.505077][ T8560] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 271.770642][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 271.847152][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.672'. [ 271.872419][ T8564] fuse: Bad value for 'rootmode' [ 272.831476][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.675'. [ 272.913698][ T8584] 8021q: adding VLAN 0 to HW filter on device team1 [ 273.032070][ T8588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.678'. [ 273.299176][ T5944] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 273.461257][ T5944] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 273.471139][ T5829] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 273.486847][ T5944] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 273.538913][ T5944] usb 5-1: config 8 has no interface number 0 [ 273.555452][ T5944] usb 5-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 273.573758][ T5944] usb 5-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 273.596731][ T5944] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 273.628619][ T5944] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 273.678951][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.691370][ T8602] loop5: detected capacity change from 0 to 7 [ 273.728109][ T5944] usb 5-1: NFC: intf ffff88801dbd0000 id ffffffff8f1d1600 [ 273.736861][ T8602] Dev loop5: unable to read RDB block 7 [ 273.766768][ T8602] loop5: AHDI p1 p2 p3 [ 273.784806][ T8602] loop5: partition table partially beyond EOD, truncated [ 273.819569][ T8602] loop5: p1 start 1601398130 is beyond EOD, truncated [ 273.837016][ T8602] loop5: p2 start 1702059890 is beyond EOD, truncated [ 273.933191][ T5944] usb 5-1: USB disconnect, device number 44 [ 274.058927][ T30] audit: type=1326 audit(1772491653.311:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2299c799 code=0x7ffc0000 [ 274.117850][ T30] audit: type=1326 audit(1772491653.321:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2299c799 code=0x7ffc0000 [ 274.145305][ T5904] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 274.162878][ T8608] fuse: Bad value for 'rootmode' [ 274.187919][ T30] audit: type=1326 audit(1772491653.321:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fce2299c799 code=0x7ffc0000 [ 274.276683][ T30] audit: type=1326 audit(1772491653.331:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2299c799 code=0x7ffc0000 [ 274.351643][ T5904] usb 2-1: unable to get BOS descriptor or descriptor too short [ 274.371249][ T30] audit: type=1326 audit(1772491653.331:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce2299c799 code=0x7ffc0000 [ 274.424276][ T5904] usb 2-1: config 0 has no interfaces? [ 274.449024][ T5904] usb 2-1: language id specifier not provided by device, defaulting to English [ 274.508841][ T30] audit: type=1326 audit(1772491653.331:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2299c799 code=0x7ffc0000 [ 274.563719][ T8619] binder: 8618:8619 ioctl c0306201 0 returned -14 [ 274.586762][ T30] audit: type=1326 audit(1772491653.341:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce2299c799 code=0x7ffc0000 [ 274.587461][ T5904] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 274.690538][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.700127][ T5904] usb 2-1: Product: syz [ 274.708975][ T5904] usb 2-1: SerialNumber: syz [ 274.720688][ T30] audit: type=1326 audit(1772491653.361:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2299c799 code=0x7ffc0000 [ 274.745039][ T5904] usb 2-1: config 0 descriptor?? [ 274.758925][ T5910] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 274.836627][ T30] audit: type=1326 audit(1772491653.361:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2299c799 code=0x7ffc0000 [ 274.872864][ T30] audit: type=1326 audit(1772491653.371:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce2299c799 code=0x7ffc0000 [ 274.968895][ T5910] usb 1-1: device descriptor read/64, error -71 [ 275.021609][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.047342][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.083857][ T24] usb 2-1: USB disconnect, device number 39 [ 275.168886][ T1216] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 275.219069][ T5910] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 275.351008][ T1216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.363343][ T1216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.375733][ T1216] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.389379][ T5910] usb 1-1: device descriptor read/64, error -71 [ 275.396708][ T1216] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.421069][ T1216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.432875][ T1216] usb 4-1: config 0 descriptor?? [ 275.510170][ T5910] usb usb1-port1: attempt power cycle [ 275.845880][ T1216] hid_parser_main: 10 callbacks suppressed [ 275.845907][ T1216] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 275.860155][ T5910] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 275.874408][ T1216] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 275.885207][ T1216] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x2 [ 275.893824][ T1216] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 275.902941][ T5910] usb 1-1: device descriptor read/8, error -71 [ 275.911914][ T1216] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 275.923328][ T1216] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 275.931270][ T1216] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 275.941922][ T1216] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 275.988829][ T1216] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 276.019471][ T1216] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 276.069787][ T1216] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 276.107958][ T8640] loop5: detected capacity change from 0 to 7 [ 276.137888][ T5969] Dev loop5: unable to read RDB block 7 [ 276.145489][ T5969] loop5: unable to read partition table [ 276.158025][ T5969] loop5: partition table beyond EOD, truncated [ 276.159317][ T5910] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 276.192487][ T8640] Dev loop5: unable to read RDB block 7 [ 276.207101][ T8640] loop5: unable to read partition table [ 276.214598][ T5910] usb 1-1: device descriptor read/8, error -71 [ 276.224441][ T8640] loop5: partition table beyond EOD, truncated [ 276.244893][ T8640] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 276.361774][ T5910] usb usb1-port1: unable to enumerate USB device [ 276.464446][ T1216] usb 4-1: USB disconnect, device number 40 [ 276.780205][ T5944] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 276.985933][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 277.008513][ T5944] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.022273][ T5944] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.044957][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 277.079223][ T5944] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 277.158115][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.191428][ T5944] usb 5-1: config 0 descriptor?? [ 277.268925][ T5904] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 277.358687][ T8652] fuse: Bad value for 'rootmode' [ 277.413573][ T8645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.435867][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.693313][ T5944] cougar 0003:060B:500A.000B: collection stack underflow [ 277.723287][ T5944] cougar 0003:060B:500A.000B: item 0 0 0 12 parsing failed [ 277.749451][ T5944] cougar 0003:060B:500A.000B: parse failed [ 277.770188][ T5944] cougar 0003:060B:500A.000B: probe with driver cougar failed with error -22 [ 277.869802][ T8645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.911495][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.920181][ T5877] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 277.962367][ T5944] usb 5-1: USB disconnect, device number 45 [ 278.059119][ T5877] usb 6-1: device descriptor read/64, error -71 [ 278.337435][ T5877] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 278.473195][ T8674] deleting an unspecified loop device is not supported. [ 278.519270][ T5877] usb 6-1: device descriptor read/64, error -71 [ 278.574227][ T8674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.702'. [ 278.586752][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.702'. [ 278.624130][ T8677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.703'. [ 278.633858][ T5877] usb usb6-port1: attempt power cycle [ 278.649207][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 279.033463][ T5877] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 279.063021][ T5877] usb 6-1: device descriptor read/8, error -71 [ 279.368865][ T5877] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 279.409205][ T5877] usb 6-1: device descriptor read/8, error -71 [ 279.518940][ T5910] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 279.527041][ T5877] usb usb6-port1: unable to enumerate USB device [ 279.690657][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 279.772117][ T5910] usb 2-1: config 0 has no interfaces? [ 279.786475][ T5910] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 279.808563][ T5910] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 279.822308][ T5910] usb 2-1: Manufacturer: syz [ 279.860179][ T5910] usb 2-1: config 0 descriptor?? [ 279.895267][ T8693] fuse: Bad value for 'rootmode' [ 280.127919][ T8687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.704'. [ 280.642903][ T8706] loop2: detected capacity change from 0 to 7 [ 280.650827][ T8706] Dev loop2: unable to read RDB block 7 [ 280.656430][ T8706] loop2: AHDI p2 p3 [ 280.776323][ T8706] loop2: partition table partially beyond EOD, truncated [ 280.794210][ T8706] loop2: p3 start 335544320 is beyond EOD, truncated [ 281.099756][ T8717] binder: 8715:8717 ioctl c00c620f 2000000000c0 returned -22 [ 281.685841][ T8727] netlink: 60 bytes leftover after parsing attributes in process `syz.5.717'. [ 281.869213][ T5877] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 282.041178][ T5877] usb 1-1: config 3 interface 0 has no altsetting 0 [ 282.079989][ T5877] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=d0.db [ 282.153558][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.231639][ T5877] usb 1-1: Product: syz [ 282.235860][ T5877] usb 1-1: Manufacturer: syz [ 282.257179][ T8739] netlink: 'syz.3.719': attribute type 4 has an invalid length. [ 282.325848][ T5877] usb 1-1: SerialNumber: syz [ 282.471204][ T5910] usb 2-1: USB disconnect, device number 40 [ 282.551009][ T8725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.569149][ T8725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.697948][ T5877] usb 1-1: USB disconnect, device number 37 [ 282.860386][ T8741] fuse: Bad value for 'rootmode' [ 282.976603][ T8745] netlink: 'syz.5.722': attribute type 11 has an invalid length. [ 283.706444][ T8768] binder: 8766:8768 ioctl c0a85322 200000000240 returned -22 [ 283.770973][ T8772] binder: 8769:8772 ioctl c018620c 200000000240 returned -22 [ 284.106269][ T8784] loop2: detected capacity change from 0 to 7 [ 284.142651][ T8784] Dev loop2: unable to read RDB block 7 [ 284.158298][ T8784] loop2: unable to read partition table [ 284.187730][ T8784] loop2: partition table beyond EOD, truncated [ 284.210268][ T8784] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 284.255166][ T8787] netlink: 'syz.4.732': attribute type 12 has an invalid length. [ 284.568936][ T5877] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 284.579812][ T8791] fuse: Bad value for 'rootmode' [ 284.738865][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 284.747251][ T5877] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 284.753106][ T5944] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 284.780893][ T5877] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 284.801058][ T5877] usb 5-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 284.812492][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.822964][ T5877] usb 5-1: Product: syz [ 284.827205][ T5877] usb 5-1: Manufacturer: syz [ 284.832100][ T5877] usb 5-1: SerialNumber: syz [ 284.908903][ T5944] usb 6-1: Using ep0 maxpacket: 8 [ 284.912564][ T1216] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 284.931343][ T5944] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 284.944507][ T5944] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 284.954617][ T5944] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.965762][ T5944] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.981724][ T5944] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.990943][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.081633][ T1216] usb 2-1: not running at top speed; connect to a high speed hub [ 285.090350][ T1542] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 285.101730][ T1216] usb 2-1: config 139 has an invalid interface number: 165 but max is 1 [ 285.111886][ T1216] usb 2-1: config 139 has an invalid interface number: 65 but max is 1 [ 285.123042][ T1216] usb 2-1: config 139 has no interface number 0 [ 285.129932][ T1216] usb 2-1: config 139 has no interface number 1 [ 285.162974][ T1216] usb 2-1: config 139 interface 165 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.230131][ T1216] usb 2-1: config 139 interface 165 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 285.242185][ T1216] usb 2-1: config 139 interface 65 has no altsetting 0 [ 285.250984][ T1542] usb 1-1: not running at top speed; connect to a high speed hub [ 285.263826][ T1216] usb 2-1: New USB device found, idVendor=f3b0, idProduct=74f4, bcdDevice=67.34 [ 285.273540][ T1542] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 285.282294][ T1542] usb 1-1: config 95 has no interface number 0 [ 285.282814][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.321585][ T1542] usb 1-1: config 95 interface 1 has no altsetting 0 [ 285.346389][ T1542] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 285.356639][ T1542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.366497][ T1216] usb 2-1: Product: 桸⬥ްžꍵ⯮ຝ鲬쫷୲ꋌ乼珳﯀⚔톣ᔌ㧢빅㡏䕗줓⒫۬쭻 [ 285.369326][ T1542] usb 1-1: Product: syz [ 285.386459][ T1542] usb 1-1: Manufacturer: syz [ 285.391471][ T1216] usb 2-1: Manufacturer: 쬛ꀛÃ㨞벟뒅℞놪쪮鬢쓁⧢㭷ⴞ뭘袲ﾫꅀ㈡浌洷랽퀭란㠤ﵾ曪⯨ͺ [ 285.396734][ T1542] usb 1-1: SerialNumber: syz [ 285.460955][ T1216] usb 2-1: SerialNumber: syz [ 285.488942][ T8796] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 285.590318][ T5877] usb 5-1: USB disconnect, device number 46 [ 285.727622][ T1216] usb-storage 2-1:139.165: USB Mass Storage device detected [ 285.827323][ T1216] cdc_ether 2-1:139.65: More than one union descriptor, skipping ... [ 285.845952][ T1216] usb 2-1: bad CDC descriptors [ 285.868207][ T1216] usb 2-1: USB disconnect, device number 41 [ 286.372658][ T8818] vlan0: entered promiscuous mode [ 286.749038][ T1216] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 286.855568][ T1542] usb 1-1: USB disconnect, device number 38 [ 286.919420][ T1216] usb 2-1: Using ep0 maxpacket: 16 [ 286.939901][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 286.970726][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.003037][ T1216] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 287.028324][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.073781][ T1216] usb 2-1: Product: syz [ 287.099711][ T1216] usb 2-1: Manufacturer: syz [ 287.134887][ T1216] usb 2-1: SerialNumber: syz [ 287.176369][ T1216] usb 2-1: config 0 descriptor?? [ 287.226531][ T1216] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 287.257251][ T8824] loop2: detected capacity change from 0 to 7 [ 287.265734][ T1216] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 287.288572][ T8824] Dev loop2: unable to read RDB block 7 [ 287.304596][ T8824] loop2: unable to read partition table [ 287.315254][ T8824] loop2: partition table beyond EOD, truncated [ 287.325019][ T8824] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 287.435639][ T5944] usb 6-1: usb_control_msg returned -71 [ 287.448499][ T5944] usbtmc 6-1:16.0: can't read capabilities [ 287.498385][ T5944] usb 6-1: USB disconnect, device number 26 [ 287.637881][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.745'. [ 287.673240][ T8828] 8021q: adding VLAN 0 to HW filter on device team4 [ 287.789788][ T8822] sctp: [Deprecated]: syz.0.743 (pid 8822) Use of int in max_burst socket option. [ 287.789788][ T8822] Use struct sctp_assoc_value instead [ 287.823711][ T1216] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 287.830233][ T8830] fuse: Bad value for 'rootmode' [ 287.847709][ T8830] netlink: 'syz.4.746': attribute type 13 has an invalid length. [ 288.331696][ T1216] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 288.416397][ T8844] netlink: 'syz.0.749': attribute type 12 has an invalid length. [ 288.457785][ T1216] em28xx 2-1:0.0: board has no eeprom [ 288.679295][ T1542] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 288.708893][ T5944] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 288.818843][ T1216] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 288.827191][ T1216] em28xx 2-1:0.0: dvb set to bulk mode. [ 288.834447][ T5910] em28xx 2-1:0.0: Binding DVB extension [ 288.846768][ T1542] usb 4-1: Using ep0 maxpacket: 8 [ 288.856878][ T1542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.868967][ T5944] usb 1-1: Using ep0 maxpacket: 16 [ 288.878696][ T1542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.902796][ T5944] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 288.938985][ T5944] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 288.957849][ T1542] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 288.992010][ T5944] usb 1-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 289.052477][ T1542] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 289.066887][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.075703][ T1542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.084079][ T5944] usb 1-1: Product: syz [ 289.088577][ T5944] usb 1-1: Manufacturer: syz [ 289.098058][ T5944] usb 1-1: SerialNumber: syz [ 289.147157][ T1542] usb 4-1: config 0 descriptor?? [ 289.394305][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.415509][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.665998][ T8849] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 289.677069][ T1542] hid_parser_main: 13 callbacks suppressed [ 289.677088][ T1542] elecom 0003:056E:00FE.000C: unknown main item tag 0x4 [ 289.706688][ T1542] elecom 0003:056E:00FE.000C: unknown main item tag 0x6 [ 289.735474][ T1542] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 289.747052][ T1542] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 289.759213][ T1542] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 289.768057][ T1542] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 289.776754][ T1542] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 289.786903][ T1542] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 289.820642][ T1542] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 289.846561][ T1542] elecom 0003:056E:00FE.000C: unknown main item tag 0x0 [ 289.886721][ T1542] elecom 0003:056E:00FE.000C: item fetching failed at offset 68/70 [ 289.929242][ T1542] elecom 0003:056E:00FE.000C: probe with driver elecom failed with error -22 [ 289.964858][ T5944] usb 1-1: USB disconnect, device number 39 [ 289.973378][ T8847] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 290.019463][ T1542] usb 4-1: USB disconnect, device number 42 [ 290.045262][ T5904] usb 2-1: USB disconnect, device number 42 [ 290.090396][ T5904] em28xx 2-1:0.0: Disconnecting em28xx [ 290.217600][ T5910] em28xx 2-1:0.0: Registering input extension [ 290.247304][ T5904] em28xx 2-1:0.0: Closing input extension [ 290.280066][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 290.325675][ T8865] batadv_slave_1: entered promiscuous mode [ 290.328669][ T5904] em28xx 2-1:0.0: Freeing device [ 290.346295][ T8864] batadv_slave_1: left promiscuous mode [ 290.441145][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 290.452002][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 290.468824][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 290.487381][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 290.501936][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.513499][ T24] usb 6-1: Product: syz [ 290.517774][ T24] usb 6-1: Manufacturer: syz [ 290.525306][ T24] usb 6-1: SerialNumber: syz [ 290.526172][ T8871] netlink: 104 bytes leftover after parsing attributes in process `syz.4.757'. [ 290.545945][ T24] usb 6-1: config 0 descriptor?? [ 290.556457][ T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 290.576265][ T24] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 290.580221][ T1542] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 290.673755][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 290.768868][ T1542] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.793286][ T1542] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 290.814595][ T1542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.842996][ T1542] usb 4-1: config 0 descriptor?? [ 290.862683][ T1542] pwc: Askey VC010 type 2 USB webcam detected. [ 290.974364][ T8873] 8021q: adding VLAN 0 to HW filter on device team3 [ 291.009520][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 291.069678][ T8881] 8021q: adding VLAN 0 to HW filter on device team1 [ 291.160856][ T24] em28xx 6-1:0.0: chip ID is em28174 [ 291.280947][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 291.292595][ T1542] pwc: recv_control_msg error -32 req 02 val 2b00 [ 291.302225][ T1542] pwc: recv_control_msg error -32 req 02 val 2700 [ 291.349416][ T1542] pwc: recv_control_msg error -71 req 02 val 2c00 [ 291.357441][ T1542] pwc: recv_control_msg error -71 req 04 val 1000 [ 291.375278][ T1542] pwc: recv_control_msg error -71 req 04 val 1300 [ 291.383709][ T1542] pwc: recv_control_msg error -71 req 04 val 1400 [ 291.393506][ T1542] pwc: recv_control_msg error -71 req 02 val 2000 [ 291.445312][ T1542] pwc: recv_control_msg error -71 req 02 val 2100 [ 291.460111][ T1542] pwc: recv_control_msg error -71 req 04 val 1500 [ 291.480317][ T1542] pwc: recv_control_msg error -71 req 02 val 2500 [ 291.489678][ T1542] pwc: recv_control_msg error -71 req 02 val 2400 [ 291.497157][ T1542] pwc: recv_control_msg error -71 req 02 val 2600 [ 291.512027][ T1542] pwc: recv_control_msg error -71 req 02 val 2900 [ 291.523252][ T1542] pwc: recv_control_msg error -71 req 02 val 2800 [ 291.533554][ T1542] pwc: recv_control_msg error -71 req 04 val 1100 [ 291.541377][ T1542] pwc: recv_control_msg error -71 req 04 val 1200 [ 291.558376][ T1542] pwc: Registered as video103. [ 291.577627][ T1542] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 291.667022][ T1542] usb 4-1: USB disconnect, device number 43 [ 291.702458][ T8895] netlink: 48 bytes leftover after parsing attributes in process `syz.3.762'. [ 291.765647][ T8899] netlink: 48 bytes leftover after parsing attributes in process `syz.3.762'. [ 292.121750][ T8905] netlink: 'syz.3.764': attribute type 12 has an invalid length. [ 292.170907][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 292.350836][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.366331][ T24] usb 2-1: config 0 has no interface number 0 [ 292.378297][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 292.387915][ T5910] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 292.401368][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.427472][ T24] usb 2-1: config 0 descriptor?? [ 292.445982][ T24] cp210x 2-1:0.1: cp210x converter detected [ 292.578969][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 292.590288][ T5910] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 292.607053][ T5910] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 292.622180][ T5910] usb 4-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 292.633040][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.641748][ T5910] usb 4-1: Product: syz [ 292.649874][ T5910] usb 4-1: Manufacturer: syz [ 292.655338][ T5910] usb 4-1: SerialNumber: syz [ 292.903988][ T24] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 292.946669][ T24] cp210x 2-1:0.1: failed to get vendor val 0x3711 size 2: -71 [ 292.968665][ T24] cp210x 2-1:0.1: GPIO initialisation failed: -71 [ 293.019756][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 293.038976][ T5884] usb 6-1: USB disconnect, device number 27 [ 293.048704][ T5884] em28xx 6-1:0.0: Disconnecting em28xx [ 293.069583][ T5884] em28xx 6-1:0.0: Freeing device [ 293.079733][ T8922] netlink: 'syz.1.768': attribute type 10 has an invalid length. [ 293.131480][ T24] usb 2-1: USB disconnect, device number 43 [ 293.189849][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 293.327459][ T8922] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 293.364397][ T8926] fuse: Bad value for 'rootmode' [ 293.373698][ T24] cp210x 2-1:0.1: device disconnected [ 293.399167][ T8926] netlink: 'syz.5.769': attribute type 13 has an invalid length. [ 293.713294][ T5910] usb 4-1: USB disconnect, device number 44 [ 294.012657][ T8941] netdevsim netdevsim3: Direct firmware load for . [ 294.012657][ T8941] failed with error -2 [ 294.083902][ T8943] loop5: detected capacity change from 0 to 7 [ 294.103517][ T8941] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 294.103517][ T8941] [ 294.115443][ T8943] loop5: [ 294.120779][ T8943] loop5: partition table partially beyond EOD, truncated [ 295.224707][ T5905] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 295.451541][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.463524][ T5905] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 295.474404][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.517340][ T5905] usb 5-1: config 0 descriptor?? [ 295.582507][ T5905] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 295.678987][ T1542] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 295.846152][ T1542] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.857506][ T1542] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.868937][ T1542] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.923781][ T1542] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.953804][ T1542] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.998885][ T5905] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 296.079001][ T1542] usb 2-1: config 0 descriptor?? [ 296.258994][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 296.272042][ T5905] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 296.289930][ T5905] usb 6-1: config 179 has no interface number 0 [ 296.306939][ T5905] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 296.348855][ T5905] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 296.411203][ T5905] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 296.453065][ T5905] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 296.478051][ T5944] usb 5-1: USB disconnect, device number 47 [ 296.585151][ T5905] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 296.682937][ T1542] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 296.705627][ T5905] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 296.773041][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.813925][ T8967] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 296.979221][ T8979] netlink: 'syz.3.782': attribute type 12 has an invalid length. [ 297.019945][ T24] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 297.084182][ T5905] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input17 [ 297.222274][ T24] usb 1-1: device descriptor read/64, error -71 [ 297.239011][ T5910] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 297.261535][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.279351][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.354081][ T5905] usb 6-1: USB disconnect, device number 28 [ 297.360117][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 297.360164][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 297.409553][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 297.427726][ T5910] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 297.463922][ T5910] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 297.511289][ T24] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 297.541347][ T5910] usb 4-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 297.561961][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.572912][ T5910] usb 4-1: Product: syz [ 297.587750][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.783'. [ 297.620958][ T8987] 8021q: adding VLAN 0 to HW filter on device team2 [ 297.650925][ T5910] usb 4-1: Manufacturer: syz [ 297.666600][ T5910] usb 4-1: SerialNumber: syz [ 297.689226][ T24] usb 1-1: device descriptor read/64, error -71 [ 297.799905][ T24] usb usb1-port1: attempt power cycle [ 297.937656][ T8965] usb 2-1: string descriptor 0 read error: -71 [ 298.060759][ T5905] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 298.163061][ T24] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 298.190088][ T24] usb 1-1: device descriptor read/8, error -71 [ 298.218893][ T5905] usb 2-1: device descriptor read/64, error -32 [ 298.438900][ T24] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 298.459120][ T5905] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 298.462646][ T5910] usb 4-1: USB disconnect, device number 45 [ 298.479410][ T24] usb 1-1: device descriptor read/8, error -71 [ 298.601362][ T24] usb usb1-port1: unable to enumerate USB device [ 298.623796][ T5905] usb 2-1: device descriptor read/64, error -32 [ 298.758154][ T9001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.810171][ T5939] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 298.938883][ T5905] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 298.969276][ T5905] usb 2-1: device descriptor read/8, error -32 [ 298.977073][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.993164][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.008384][ T5939] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 299.026701][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.051483][ T5939] usb 6-1: config 0 descriptor?? [ 299.230611][ T5905] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 299.262974][ T5905] usb 2-1: device descriptor read/8, error -32 [ 299.298167][ T8984] raw-gadget.1 gadget.1: failed to queue suspend event [ 299.305565][ T8984] raw-gadget.1 gadget.1: failed to queue disconnect event [ 299.423475][ T1542] usb 2-1: USB disconnect, device number 44 [ 299.671333][ T5939] arvo 0003:1E7D:30D4.000E: unbalanced collection at end of report description [ 299.684447][ T5939] arvo 0003:1E7D:30D4.000E: parse failed [ 299.700969][ T5939] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -22 [ 299.768952][ T1542] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 299.930496][ T5939] usb 6-1: USB disconnect, device number 29 [ 299.945242][ T1542] usb 2-1: Using ep0 maxpacket: 16 [ 299.971029][ T1542] usb 2-1: unable to get BOS descriptor or descriptor too short [ 299.989986][ T1542] usb 2-1: config 7 has an invalid interface number: 48 but max is 0 [ 300.006740][ T1542] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 300.030075][ T1542] usb 2-1: config 7 has no interface number 0 [ 300.058316][ T1542] usb 2-1: config 7 interface 48 has no altsetting 0 [ 300.074202][ T1542] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=56.2c [ 300.083880][ T1542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.102389][ T1542] usb 2-1: Product: syz [ 300.109621][ T1542] usb 2-1: Manufacturer: syz [ 300.114746][ T1542] usb 2-1: SerialNumber: syz [ 300.290700][ T9013] loop5: detected capacity change from 0 to 7 [ 300.306382][ T9013] Dev loop5: unable to read RDB block 7 [ 300.313007][ T9013] loop5: AHDI p1 p2 p3 [ 300.317448][ T9013] loop5: partition table partially beyond EOD, truncated [ 300.326243][ T9013] loop5: p1 start 1601398130 is beyond EOD, truncated [ 300.335631][ T9013] loop5: p2 start 1702059890 is beyond EOD, truncated [ 300.364019][ T1542] cdc_phonet 2-1:7.48: probe with driver cdc_phonet failed with error -22 [ 300.391803][ T5829] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 300.411082][ T1542] usb 2-1: USB disconnect, device number 45 [ 300.750320][ T9028] loop5: detected capacity change from 0 to 7 [ 300.757893][ T9028] Dev loop5: unable to read RDB block 7 [ 300.763885][ T9028] loop5: unable to read partition table [ 300.770661][ T9028] loop5: partition table beyond EOD, truncated [ 300.776850][ T9028] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 300.824408][ T9027] ======================================================= [ 300.824408][ T9027] WARNING: The mand mount option has been deprecated and [ 300.824408][ T9027] and is ignored by this kernel. Remove the mand [ 300.824408][ T9027] option from the mount to silence this warning. [ 300.824408][ T9027] ======================================================= [ 300.939076][ T5939] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 300.975545][ T9034] netlink: 'syz.3.796': attribute type 12 has an invalid length. [ 300.977570][ T9033] x_tables: duplicate underflow at hook 1 [ 301.073832][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'. [ 301.098954][ T5939] usb 6-1: device descriptor read/64, error -71 [ 301.229625][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 301.237449][ T5910] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 301.350213][ T5939] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 301.399137][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 301.404825][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 301.412334][ T5910] usb 2-1: config 1 has an invalid interface number: 58 but max is 0 [ 301.421449][ T5910] usb 2-1: config 1 has no interface number 0 [ 301.427780][ T5910] usb 2-1: config 1 interface 58 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 1024 [ 301.438442][ T5910] usb 2-1: config 1 interface 58 altsetting 6 bulk endpoint 0xB has invalid maxpacket 64 [ 301.449470][ T5910] usb 2-1: config 1 interface 58 has no altsetting 0 [ 301.456550][ T24] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 301.467664][ T24] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 301.482682][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 301.489023][ T5939] usb 6-1: device descriptor read/64, error -71 [ 301.499238][ T5910] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=bd.e4 [ 301.518873][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.527392][ T1216] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 301.537115][ T5910] usb 2-1: Product: syz [ 301.543269][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.552610][ T5910] usb 2-1: Manufacturer: syz [ 301.557358][ T5910] usb 2-1: SerialNumber: syz [ 301.563679][ T24] usb 4-1: Product: syz [ 301.568281][ T24] usb 4-1: Manufacturer: syz [ 301.577160][ T9033] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 301.578484][ T24] usb 4-1: SerialNumber: syz [ 301.609337][ T5939] usb usb6-port1: attempt power cycle [ 301.609344][ T9033] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 301.701962][ T1216] usb 5-1: not running at top speed; connect to a high speed hub [ 301.713065][ T1216] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 301.722047][ T1216] usb 5-1: config 95 has no interface number 0 [ 301.728454][ T1216] usb 5-1: config 95 interface 1 has no altsetting 0 [ 301.739384][ T1216] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 301.749107][ T1216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.757530][ T1216] usb 5-1: Product: syz [ 301.762293][ T1216] usb 5-1: Manufacturer: syz [ 301.767668][ T1216] usb 5-1: SerialNumber: syz [ 301.813113][ T9033] ALSA: mixer_oss: invalid OSS volume '' [ 301.824370][ T5910] kvaser_usb 2-1:1.58: error -ENODEV: Cannot get usb endpoint(s) [ 301.843950][ T5910] usb 2-1: USB disconnect, device number 46 [ 301.938900][ T5877] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 301.988888][ T5939] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 302.021490][ T5939] usb 6-1: device descriptor read/8, error -71 [ 302.101904][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short [ 302.111515][ T5877] usb 1-1: not running at top speed; connect to a high speed hub [ 302.123012][ T5877] usb 1-1: config 9 has an invalid interface number: 124 but max is 0 [ 302.132564][ T5877] usb 1-1: config 9 has no interface number 0 [ 302.139187][ T5877] usb 1-1: config 9 interface 124 altsetting 195 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 302.152013][ T5877] usb 1-1: config 9 interface 124 has no altsetting 0 [ 302.166531][ T5877] usb 1-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=42.b4 [ 302.177039][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.187673][ T5877] usb 1-1: Product: syz [ 302.193188][ T5877] usb 1-1: Manufacturer: syz [ 302.202107][ T5877] usb 1-1: SerialNumber: syz [ 302.268984][ T5939] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 302.299602][ T5939] usb 6-1: device descriptor read/8, error -71 [ 302.353903][ T24] usb 4-1: USB disconnect, device number 46 [ 302.431145][ T5939] usb usb6-port1: unable to enumerate USB device [ 302.530836][ T9048] loop2: detected capacity change from 0 to 7 [ 302.548633][ T9048] loop2: [ 302.557946][ T9048] loop2: partition table partially beyond EOD, truncated [ 302.620275][ T1216] usb 5-1: USB disconnect, device number 48 [ 302.762494][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.815435][ T9050] fuse: Bad value for 'rootmode' [ 302.843035][ T9050] netlink: 'syz.3.803': attribute type 13 has an invalid length. [ 302.952800][ T5877] usbtest 1-1:9.124: couldn't get endpoints, -22 [ 302.979083][ T5877] usbtest 1-1:9.124: probe with driver usbtest failed with error -22 [ 303.000125][ T5877] usb 1-1: USB disconnect, device number 44 [ 303.080685][ T5939] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 303.277189][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 303.309280][ T5939] usb 2-1: config 123 interface 0 has no altsetting 0 [ 303.321849][ T5939] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 303.344598][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.365083][ T5939] usb 2-1: Product: syz [ 303.375245][ T5939] usb 2-1: Manufacturer: syz [ 303.389252][ T5939] usb 2-1: SerialNumber: syz [ 303.535057][ T5877] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 303.632451][ T5939] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 303.676307][ T5939] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 303.705621][ T5939] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 303.799352][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 303.811319][ T5939] usb 2-1: media controller created [ 303.818958][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.854935][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.861079][ T5884] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 303.968934][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.983272][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 304.004377][ T5877] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 304.013955][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.055321][ T5193] Dev loop5: unable to read RDB block 7 [ 304.083578][ T5939] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 304.091884][ T5193] loop5: unable to read partition table [ 304.117249][ T5939] error writing reg: 0xff, val: 0x00 [ 304.127976][ T5193] loop5: partition table beyond EOD, truncated [ 304.176955][ T5939] dvb_usb_mxl111sf 2-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 304.208962][ T5884] usb 4-1: device descriptor read/64, error -71 [ 304.234539][ T5877] usb 5-1: config 0 descriptor?? [ 304.286815][ T5939] usb 2-1: USB disconnect, device number 47 [ 304.350692][ T9071] syzkaller0: entered promiscuous mode [ 304.381725][ T9071] syzkaller0: entered allmulticast mode [ 304.426368][ T9077] netlink: 'syz.5.811': attribute type 12 has an invalid length. [ 304.449032][ T5884] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 304.620015][ T5884] usb 4-1: device descriptor read/64, error -71 [ 304.676465][ T5877] hid_parser_main: 39 callbacks suppressed [ 304.676492][ T5877] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 304.691664][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 304.732015][ T5884] usb usb4-port1: attempt power cycle [ 304.793801][ T5877] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 304.852374][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 304.857688][ T5877] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 304.874384][ T9060] random: crng reseeded on system resumption [ 304.902810][ T5877] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 304.915111][ T24] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 304.972765][ T5877] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 304.983853][ T24] usb 6-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 305.010498][ T9083] loop2: detected capacity change from 0 to 7 [ 305.024452][ T9079] fuse: Bad value for 'user_id' [ 305.048284][ T9083] Dev loop2: unable to read RDB block 7 [ 305.055804][ T9083] loop2: unable to read partition table [ 305.079046][ T9079] fuse: Bad value for 'user_id' [ 305.085623][ T9083] loop2: partition table beyond EOD, truncated [ 305.093982][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 305.114677][ T9083] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 305.137768][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.147326][ T5877] input: HID 0955:7214 Haptics as /devices/virtual/input/input18 [ 305.159560][ T5884] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 305.189824][ T24] usb 6-1: Product: syz [ 305.217338][ T24] usb 6-1: Manufacturer: syz [ 305.240605][ T5884] usb 4-1: device descriptor read/8, error -71 [ 305.252407][ T24] usb 6-1: SerialNumber: syz [ 305.346734][ T5877] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 305.364191][ T5877] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 305.479482][ T5884] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 305.523403][ T5884] usb 4-1: device descriptor read/8, error -71 [ 305.676828][ T5884] usb usb4-port1: unable to enumerate USB device [ 305.679106][ T5904] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 305.820033][ T5904] usb 2-1: device descriptor read/64, error -71 [ 306.009918][ T24] usb 6-1: USB disconnect, device number 34 [ 306.011709][ T9089] loop2: detected capacity change from 0 to 7 [ 306.059365][ T5904] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 306.067908][ T6172] Dev loop2: unable to read RDB block 7 [ 306.083753][ T6172] loop2: AHDI p2 p3 [ 306.102435][ T6172] loop2: partition table partially beyond EOD, truncated [ 306.134023][ T5193] Dev loop5: unable to read RDB block 7 [ 306.144211][ T6172] loop2: p3 start 335544320 is beyond EOD, truncated [ 306.162364][ T5193] loop5: unable to read partition table [ 306.176191][ T9089] Dev loop2: unable to read RDB block 7 [ 306.185914][ T5193] loop5: partition table beyond EOD, truncated [ 306.196394][ T9089] loop2: AHDI p2 p3 [ 306.208966][ T5904] usb 2-1: device descriptor read/64, error -71 [ 306.218946][ T9089] loop2: partition table partially beyond EOD, truncated [ 306.246959][ T9089] loop2: p3 start 335544320 is beyond EOD, truncated [ 306.330305][ T5904] usb usb2-port1: attempt power cycle [ 306.575105][ T5910] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 306.613973][ T5910] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 306.669189][ T5910] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 306.698896][ T5904] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 306.707337][ T5910] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 306.758256][ T5904] usb 2-1: device descriptor read/8, error -71 [ 306.990106][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.020036][ T5904] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 307.026619][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.070254][ T5904] usb 2-1: device descriptor read/8, error -71 [ 307.191940][ T5904] usb usb2-port1: unable to enumerate USB device [ 307.353595][ T5884] usb 5-1: USB disconnect, device number 49 [ 307.400328][ T9125] loop2: detected capacity change from 0 to 7 [ 307.430051][ T5969] Dev loop2: unable to read RDB block 7 [ 307.435692][ T5969] loop2: unable to read partition table [ 307.452387][ T5969] loop2: partition table beyond EOD, truncated [ 307.471939][ T9125] Dev loop2: unable to read RDB block 7 [ 307.484926][ T9125] loop2: unable to read partition table [ 307.495296][ T9125] loop2: partition table beyond EOD, truncated [ 307.501996][ T5939] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 307.521574][ T9125] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 307.528440][ T9091] binder: 9090:9091 ioctl 400c620e 200000000100 returned -22 [ 307.755704][ T5193] Dev loop5: unable to read RDB block 7 [ 307.773874][ T5939] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 307.789158][ T5939] usb 4-1: can't read configurations, error -71 [ 307.820638][ T5193] loop5: unable to read partition table [ 307.826983][ T5193] loop5: partition table beyond EOD, truncated [ 308.074679][ T9138] netlink: 40 bytes leftover after parsing attributes in process `syz.0.826'. [ 308.388922][ T5877] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 308.469583][ T5939] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 308.541127][ T5877] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 308.551520][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.564553][ T5877] usb 5-1: config 0 descriptor?? [ 308.593788][ T5877] usb 5-1: bad CDC descriptors [ 308.632982][ T5939] usb 4-1: unable to get BOS descriptor or descriptor too short [ 308.646648][ T5939] usb 4-1: config 0 has no interfaces? [ 308.661070][ T5939] usb 4-1: language id specifier not provided by device, defaulting to English [ 308.685247][ T5939] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 308.847555][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.856122][ T5905] usb 5-1: USB disconnect, device number 50 [ 308.881431][ T5939] usb 4-1: Product: syz [ 308.885669][ T5939] usb 4-1: SerialNumber: syz [ 308.896548][ T5939] usb 4-1: config 0 descriptor?? [ 309.065223][ T5193] Dev loop5: unable to read RDB block 7 [ 309.072059][ T5193] loop5: unable to read partition table [ 309.089081][ T5193] loop5: partition table beyond EOD, truncated [ 309.125943][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.165927][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.206873][ T5939] usb 4-1: USB disconnect, device number 52 [ 309.328257][ T9153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.831'. [ 309.583279][ T5193] Dev loop5: unable to read RDB block 7 [ 309.593732][ T5193] loop5: unable to read partition table [ 309.621476][ T5193] loop5: partition table beyond EOD, truncated [ 309.740435][ T9160] xt_hashlimit: size too large, truncated to 1048576 [ 309.888844][ T5939] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 309.908973][ T5905] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 310.039092][ T5905] usb 1-1: device descriptor read/64, error -71 [ 310.062344][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.078923][ T5939] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 310.117446][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.136888][ T5939] usb 5-1: config 0 descriptor?? [ 310.157777][ T9166] loop2: detected capacity change from 0 to 7 [ 310.181340][ T9166] Dev loop2: unable to read RDB block 7 [ 310.187120][ T9166] loop2: unable to read partition table [ 310.198228][ T9166] loop2: partition table beyond EOD, truncated [ 310.208248][ T9166] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 310.255408][ T5193] Dev loop5: unable to read RDB block 7 [ 310.261584][ T5193] loop5: unable to read partition table [ 310.275392][ T5193] loop5: partition table beyond EOD, truncated [ 310.290127][ T5905] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 310.347523][ T5939] usb 5-1: string descriptor 0 read error: -71 [ 310.448851][ T5905] usb 1-1: device descriptor read/64, error -71 [ 310.465359][ T5193] Dev loop5: unable to read RDB block 7 [ 310.472868][ T5193] loop5: unable to read partition table [ 310.487893][ T5193] loop5: partition table beyond EOD, truncated [ 310.570865][ T5905] usb usb1-port1: attempt power cycle [ 310.591789][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 310.660045][ T9179] 8021q: adding VLAN 0 to HW filter on device team5 [ 310.798829][ T5904] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 310.801327][ T5910] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 310.928844][ T5905] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 310.939183][ T5904] usb 2-1: device descriptor read/64, error -71 [ 310.961031][ T5905] usb 1-1: device descriptor read/8, error -71 [ 310.961040][ T5910] usb 6-1: config 0 has no interfaces? [ 310.961075][ T5910] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 310.988319][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.010366][ T5939] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 311.025677][ T5910] usb 6-1: config 0 descriptor?? [ 311.150187][ T5939] usb 5-1: device descriptor read/64, error -71 [ 311.178833][ T5904] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 311.228834][ T5905] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 311.270070][ T5905] usb 1-1: device descriptor read/8, error -71 [ 311.318881][ T5904] usb 2-1: device descriptor read/64, error -71 [ 311.392533][ T5939] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 311.402911][ T5905] usb usb1-port1: unable to enumerate USB device [ 311.430230][ T5904] usb usb2-port1: attempt power cycle [ 311.549929][ T5939] usb 5-1: device descriptor read/64, error -71 [ 311.778882][ T5904] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 311.790724][ T5939] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 311.801707][ T5904] usb 2-1: device descriptor read/8, error -71 [ 311.832547][ T5939] usb 5-1: device descriptor read/8, error -71 [ 311.963029][ T9187] loop2: detected capacity change from 0 to 7 [ 311.970523][ T9187] Dev loop2: unable to read RDB block 7 [ 311.976132][ T9187] loop2: AHDI p2 p3 [ 311.980412][ T9187] loop2: partition table partially beyond EOD, truncated [ 311.988002][ T9187] loop2: p3 start 335544320 is beyond EOD, truncated [ 312.039947][ T5904] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 312.072732][ T5904] usb 2-1: device descriptor read/8, error -71 [ 312.079196][ T5939] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 312.122216][ T5939] usb 5-1: device descriptor read/8, error -71 [ 312.199112][ T5904] usb usb2-port1: unable to enumerate USB device [ 312.250867][ T5939] usb 5-1: USB disconnect, device number 51 [ 312.391958][ T5939] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 312.527903][ T9196] delete_channel: no stack [ 312.539321][ T5939] usb 5-1: device descriptor read/64, error -71 [ 313.006812][ T9208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.079104][ T5939] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 313.101330][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.850'. [ 313.110712][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 313.251027][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.262747][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.274299][ T5939] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 313.286915][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.305632][ T5939] usb 5-1: config 0 descriptor?? [ 313.339038][ T5904] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 313.385861][ T9219] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.397123][ T9219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 313.465544][ T9221] loop2: detected capacity change from 0 to 7 [ 313.472721][ T9221] Dev loop2: unable to read RDB block 7 [ 313.478603][ T9221] loop2: AHDI p2 p3 [ 313.483416][ T9221] loop2: partition table partially beyond EOD, truncated [ 313.492120][ T9221] loop2: p3 start 335544320 is beyond EOD, truncated [ 313.519366][ T5904] usb 4-1: unable to get BOS descriptor or descriptor too short [ 313.562373][ T5904] usb 4-1: config 0 has no interfaces? [ 313.573580][ T5904] usb 4-1: language id specifier not provided by device, defaulting to English [ 313.614084][ T5904] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 313.631412][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.642993][ T5904] usb 4-1: Product: syz [ 313.647324][ T5904] usb 4-1: SerialNumber: syz [ 313.675213][ T5877] usb 6-1: USB disconnect, device number 35 [ 313.678136][ T5904] usb 4-1: config 0 descriptor?? [ 313.711175][ T5193] Dev loop5: unable to read RDB block 7 [ 313.721799][ T5193] loop5: unable to read partition table [ 313.736578][ T5939] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 313.739450][ T5193] loop5: partition table beyond EOD, truncated [ 313.786481][ T5939] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 313.994131][ T5939] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 314.018660][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.038130][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.066035][ T9236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.857'. [ 314.257259][ T5877] usb 4-1: USB disconnect, device number 53 [ 314.877344][ T5910] usb 5-1: USB disconnect, device number 53 [ 315.283165][ T9250] program syz.3.860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.341719][ T9250] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.860'. [ 315.673704][ T9254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.861'. [ 315.683313][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'. [ 315.758398][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'. [ 315.906435][ T5193] Dev loop5: unable to read RDB block 7 [ 315.927429][ T5193] loop5: unable to read partition table [ 315.952561][ T5193] loop5: partition table beyond EOD, truncated [ 316.039189][ T9261] 8021q: adding VLAN 0 to HW filter on device team6 [ 316.122030][ T5877] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 316.330797][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.342340][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.353093][ T5877] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 316.371660][ T5877] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 316.392050][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.418972][ T5904] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 316.436930][ T5877] usb 6-1: config 0 descriptor?? [ 316.538951][ T5939] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 316.578965][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 316.593613][ T5904] usb 1-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 316.605849][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.615634][ T5904] usb 1-1: Product: syz [ 316.626276][ T5904] usb 1-1: Manufacturer: syz [ 316.638982][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 316.639006][ T30] audit: type=1326 audit(1772491695.891:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9262 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc639c799 code=0x7fc00000 [ 316.679034][ T5904] usb 1-1: SerialNumber: syz [ 316.700499][ T5939] usb 2-1: Using ep0 maxpacket: 8 [ 316.777133][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 316.820349][ T5939] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 316.933307][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 316.945851][ T5877] usbhid 6-1:0.0: can't add hid device: -71 [ 316.985310][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 317.102330][ T5877] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 317.137687][ T5877] usb 6-1: USB disconnect, device number 36 [ 317.156830][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 317.178393][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.185173][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.198062][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 317.213986][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 317.241758][ T5939] usb 2-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 317.253981][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.266894][ T5939] usb 2-1: Product: syz [ 317.277286][ T5939] usb 2-1: Manufacturer: syz [ 317.307190][ T5939] usb 2-1: SerialNumber: syz [ 317.476392][ T5939] usb 2-1: config 0 descriptor?? [ 317.486149][ T5193] Dev loop5: unable to read RDB block 7 [ 317.493863][ T5193] loop5: unable to read partition table [ 317.513731][ T5193] loop5: partition table beyond EOD, truncated [ 319.490024][ T5944] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 319.500926][ T5939] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.508870][ T5884] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 319.658023][ T5944] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 319.695691][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 319.699960][ T5944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.719115][ T5939] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 319.748365][ T5884] usb 4-1: unable to get BOS descriptor or descriptor too short [ 319.793742][ T5944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 319.836730][ T5939] usb 2-1: USB disconnect, device number 56 [ 319.848894][ T5944] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.927519][ T5904] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 319.951728][ T5944] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 319.969072][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 320.010912][ T5884] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 320.049305][ T5884] usb 4-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 320.084019][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.147942][ T5904] usb 1-1: USB disconnect, device number 49 [ 320.159273][ T5944] usb 5-1: Product: syz [ 320.165124][ T5944] usb 5-1: Manufacturer: syz [ 320.213581][ T5193] Dev loop5: unable to read RDB block 7 [ 320.241883][ T5193] loop5: unable to read partition table [ 320.277718][ T5193] loop5: partition table beyond EOD, truncated [ 320.339289][ T5884] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 320.350164][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.358298][ T5884] usb 4-1: Product: syz [ 320.366970][ T5884] usb 4-1: Manufacturer: syz [ 320.372843][ T5884] usb 4-1: SerialNumber: syz [ 320.397432][ T5944] cdc_wdm 5-1:1.0: skipping garbage [ 320.465389][ T5944] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 320.516471][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.168943][ T5877] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 321.321133][ T5877] usb 6-1: config 0 has no interfaces? [ 321.330780][ T5877] usb 6-1: string descriptor 0 read error: -22 [ 321.337555][ T5877] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 321.377233][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.441104][ T5877] usb 6-1: config 0 descriptor?? [ 321.706453][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.877'. [ 321.727026][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'. [ 322.184788][ T9334] netlink: 'syz.0.879': attribute type 8 has an invalid length. [ 322.252159][ T9336] netlink: 'syz.1.880': attribute type 1 has an invalid length. [ 322.581227][ T9337] bond1: (slave gretap1): making interface the new active one [ 322.634116][ T9337] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 322.743520][ T9339] vlan3: entered allmulticast mode [ 322.770412][ T9339] bond1: entered allmulticast mode [ 322.802893][ T5910] usb 5-1: USB disconnect, device number 54 [ 322.847295][ T9339] gretap1: entered allmulticast mode [ 322.925675][ T9339] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 323.146983][ T9343] lo: Caught tx_queue_len zero misconfig [ 323.154192][ T5884] usb 4-1: USB disconnect, device number 54 [ 323.486177][ T5939] usb 6-1: USB disconnect, device number 37 [ 323.758259][ T5193] Dev loop5: unable to read RDB block 7 [ 323.784006][ T5193] loop5: unable to read partition table [ 323.804898][ T5193] loop5: partition table beyond EOD, truncated [ 324.030153][ T5910] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 324.195091][ T9371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.889'. [ 324.200246][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 324.214351][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.889'. [ 324.223836][ T5910] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 324.244113][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.256776][ T5193] Dev loop5: unable to read RDB block 7 [ 324.276202][ T5193] loop5: unable to read partition table [ 324.294677][ T5910] usb 4-1: config 0 has no interface number 0 [ 324.302718][ T5193] loop5: partition table beyond EOD, truncated [ 324.318293][ T5910] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.358969][ T5144] Bluetooth: hci5: command 0x0406 tx timeout [ 324.389268][ T5939] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 324.415925][ T5910] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 324.428068][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.436294][ T5910] usb 4-1: Product: syz [ 324.446540][ T5910] usb 4-1: Manufacturer: syz [ 324.451316][ T5910] usb 4-1: SerialNumber: syz [ 324.483455][ T5910] usb 4-1: config 0 descriptor?? [ 324.507183][ T5910] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 324.524757][ T5910] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 324.548910][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 324.567023][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 324.581938][ T5193] Dev loop5: unable to read RDB block 7 [ 324.588628][ T5193] loop5: unable to read partition table [ 324.617265][ T5193] loop5: partition table beyond EOD, truncated [ 324.630168][ T5939] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 324.649695][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.658118][ T5939] usb 2-1: Product: syz [ 324.688431][ T5939] usb 2-1: Manufacturer: syz [ 324.754493][ T5939] usb 2-1: SerialNumber: syz [ 324.800264][ T5939] usb 2-1: config 0 descriptor?? [ 324.827719][ T5939] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 324.853336][ T5193] Dev loop5: unable to read RDB block 7 [ 324.864074][ T5939] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 324.880889][ T5193] loop5: unable to read partition table [ 324.888444][ T5193] loop5: partition table beyond EOD, truncated [ 324.936320][ T9384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.157348][ T5193] Dev loop5: unable to read RDB block 7 [ 325.166134][ T5193] loop5: unable to read partition table [ 325.172772][ T5193] loop5: partition table beyond EOD, truncated [ 325.380670][ T9395] fuse: Unknown parameter 'user_id00000000000000000000' [ 325.396728][ T5884] usb 4-1: USB disconnect, device number 55 [ 325.418582][ T5939] em28xx 2-1:0.0: chip ID is em2765 [ 325.901971][ T5193] Dev loop5: unable to read RDB block 7 [ 325.907776][ T5193] loop5: unable to read partition table [ 325.913815][ T5193] loop5: partition table beyond EOD, truncated [ 326.065326][ T5939] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 326.089673][ T5939] em28xx 2-1:0.0: board has no eeprom [ 326.279155][ T5910] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 326.389145][ T5939] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 326.404304][ T5939] em28xx 2-1:0.0: dvb set to bulk mode. [ 326.421154][ T5904] em28xx 2-1:0.0: Binding DVB extension [ 326.428862][ T5910] usb 6-1: device descriptor read/64, error -71 [ 326.464315][ T5939] usb 2-1: USB disconnect, device number 57 [ 326.515160][ T5939] em28xx 2-1:0.0: Disconnecting em28xx [ 326.605418][ T5904] em28xx 2-1:0.0: Registering input extension [ 326.628591][ T5939] em28xx 2-1:0.0: Closing input extension [ 326.664374][ T5939] em28xx 2-1:0.0: Freeing device [ 326.678890][ T5910] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 326.839714][ T5910] usb 6-1: device descriptor read/64, error -71 [ 326.960651][ T5910] usb usb6-port1: attempt power cycle [ 326.999300][ T9423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.065460][ T9423] batadv_slave_0: entered promiscuous mode [ 327.092996][ T5829] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 327.318832][ T5910] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 327.376029][ T5829] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 327.394789][ T5910] usb 6-1: device descriptor read/8, error -71 [ 327.444959][ T9432] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.907'. [ 327.606532][ T9438] fuse: Unknown parameter 'user_id00000000000000000000' [ 327.678919][ T5884] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 327.691308][ T5910] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 327.727576][ T5910] usb 6-1: device descriptor read/8, error -71 [ 327.828895][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 327.838432][ T5884] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 327.850637][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.859431][ T5910] usb usb6-port1: unable to enumerate USB device [ 327.900451][ T5884] usb 1-1: config 0 descriptor?? [ 327.923883][ T5884] gspca_main: sq930x-2.14.0 probing 041e:403c [ 328.138901][ T5904] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 328.188952][ T5877] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 328.248873][ T5939] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 328.270258][ T5904] usb 4-1: device descriptor read/64, error -71 [ 328.351306][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 328.361978][ T5877] usb 5-1: config 0 has no interfaces? [ 328.368343][ T5877] usb 5-1: language id specifier not provided by device, defaulting to English [ 328.379003][ T5939] usb 2-1: device descriptor read/64, error -71 [ 328.387507][ T5877] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 328.397236][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.405839][ T5877] usb 5-1: Product: syz [ 328.410270][ T5877] usb 5-1: SerialNumber: syz [ 328.418004][ T5877] usb 5-1: config 0 descriptor?? [ 328.508951][ T5904] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 328.618868][ T5939] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 328.636863][ T9450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.646872][ T5904] usb 4-1: device descriptor read/64, error -71 [ 328.653860][ T9450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.671019][ T5944] usb 5-1: USB disconnect, device number 55 [ 328.759325][ T5939] usb 2-1: device descriptor read/64, error -71 [ 328.765827][ T5904] usb usb4-port1: attempt power cycle [ 328.870331][ T5939] usb usb2-port1: attempt power cycle [ 328.948844][ T5884] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 329.008990][ T5884] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 329.022189][ T5884] usb 1-1: USB disconnect, device number 50 [ 329.053637][ T5193] Dev loop5: unable to read RDB block 7 [ 329.059637][ T5193] loop5: unable to read partition table [ 329.065629][ T5193] loop5: partition table beyond EOD, truncated [ 329.118834][ T5904] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 329.139106][ T5193] Dev loop5: unable to read RDB block 7 [ 329.144794][ T5193] loop5: unable to read partition table [ 329.152873][ T5904] usb 4-1: device descriptor read/8, error -71 [ 329.159557][ T5193] loop5: partition table beyond EOD, truncated [ 329.208851][ T5939] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 329.240410][ T5939] usb 2-1: device descriptor read/8, error -71 [ 329.399011][ T5904] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 329.421734][ T5904] usb 4-1: device descriptor read/8, error -71 [ 329.443597][ T5884] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 329.481942][ T5939] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 329.519660][ T5939] usb 2-1: device descriptor read/8, error -71 [ 329.531271][ T5904] usb usb4-port1: unable to enumerate USB device [ 329.575823][ T5829] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 329.614507][ T5884] usb 6-1: Invalid ep0 maxpacket: 32 [ 329.639310][ T5939] usb usb2-port1: unable to enumerate USB device [ 329.752062][ T5884] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 329.919253][ T5884] usb 6-1: Invalid ep0 maxpacket: 32 [ 329.927016][ T5884] usb usb6-port1: attempt power cycle [ 330.279137][ T5884] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 330.309586][ T5884] usb 6-1: Invalid ep0 maxpacket: 32 [ 330.456560][ T5884] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 330.504548][ T5884] usb 6-1: Invalid ep0 maxpacket: 32 [ 330.514910][ T5884] usb usb6-port1: unable to enumerate USB device [ 330.834046][ T9483] fuse: Unknown parameter 'user_id00000000000000000000' [ 331.306174][ T9496] lo: Caught tx_queue_len zero misconfig [ 331.359136][ T5904] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 331.549073][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 331.556455][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.585723][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 331.595901][ T5904] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.732115][ T5904] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 331.752018][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.794676][ T5904] hub 1-1:1.0: bad descriptor, ignoring hub [ 331.811569][ T5904] hub 1-1:1.0: probe with driver hub failed with error -5 [ 331.840288][ T5904] cdc_wdm 1-1:1.0: skipping garbage [ 331.852304][ T5904] cdc_wdm 1-1:1.0: skipping garbage [ 331.864792][ T5904] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 332.089512][ T5904] usb 1-1: USB disconnect, device number 51 [ 332.098923][ T5884] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 332.188859][ T5910] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 332.258374][ T5193] Dev loop5: unable to read RDB block 7 [ 332.272681][ T5193] loop5: unable to read partition table [ 332.274254][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 332.297055][ T5193] loop5: partition table beyond EOD, truncated [ 332.310457][ T5884] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 332.338915][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.374946][ T5884] usb 2-1: config 0 has no interface number 0 [ 332.401105][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 332.411804][ T5884] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 332.433644][ T5884] usb 2-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 332.445783][ T5884] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.462036][ T5910] usb 5-1: config 0 has no interfaces? [ 332.470097][ T5910] usb 5-1: language id specifier not provided by device, defaulting to English [ 332.493892][ T5910] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 332.507441][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.515944][ T5884] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 332.533376][ T5910] usb 5-1: Product: syz [ 332.538180][ T5910] usb 5-1: SerialNumber: syz [ 332.543105][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.562498][ T5910] usb 5-1: config 0 descriptor?? [ 332.578903][ T5884] usb 2-1: Product: syz [ 332.583174][ T5884] usb 2-1: Manufacturer: syz [ 332.598852][ T5904] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 332.608953][ T5884] usb 2-1: SerialNumber: syz [ 332.618581][ T5829] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 332.641310][ T5884] usb 2-1: config 0 descriptor?? [ 332.659599][ T5884] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 332.671945][ T5884] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 332.720950][ T5939] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 332.768857][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 332.779868][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.798837][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 332.808291][ T5904] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.828032][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.859413][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.868885][ T5904] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 332.878119][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.897897][ T5884] usb 5-1: USB disconnect, device number 56 [ 332.922714][ T5904] hub 1-1:1.0: bad descriptor, ignoring hub [ 332.933418][ T5939] usb 6-1: not running at top speed; connect to a high speed hub [ 332.959908][ T5904] hub 1-1:1.0: probe with driver hub failed with error -5 [ 332.969355][ T5939] usb 6-1: config 1 interface 0 altsetting 252 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.992764][ T5904] cdc_wdm 1-1:1.0: skipping garbage [ 332.998062][ T5904] cdc_wdm 1-1:1.0: skipping garbage [ 333.015327][ T5939] usb 6-1: config 1 interface 0 has no altsetting 0 [ 333.032474][ T5904] cdc_wdm 1-1:1.0: invalid descriptor buffer length [ 333.049740][ T5904] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 333.070250][ T5939] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.40 [ 333.085894][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.104605][ T5939] usb 6-1: Product: 獶⟩먟棬쒲㡡㯎ᨯ䞳㴟돰ህ쎘ꝩᡷ豫隹赹⡜䐄侖ꢎ羪쁅ᜈﰢ喙䦹⢠㧱뵛ꍲࣄ硿챷䨹ᘳ둤癱哩嶴≷ [ 333.143587][ T5939] usb 6-1: Manufacturer: Е [ 333.164258][ T5939] usb 6-1: SerialNumber: Љ [ 333.186041][ T9504] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 333.237712][ T9489] bond2: option xmit_hash_policy: invalid value (14) [ 333.254926][ T9489] bond2 (unregistering): Released all slaves [ 333.307629][ T9502] bond2: option xmit_hash_policy: invalid value (14) [ 333.318515][ T9502] bond2 (unregistering): Released all slaves [ 333.451697][ T5939] usbhid 6-1:1.0: can't add hid device: -71 [ 333.459665][ T5939] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 333.465792][ T5910] usb 2-1: USB disconnect, device number 62 [ 333.480163][ T5939] usb 6-1: USB disconnect, device number 46 [ 333.535333][ T5940] usb 1-1: USB disconnect, device number 52 [ 333.675000][ T9519] macvlan1: entered allmulticast mode [ 333.971694][ T9524] fuse: Bad value for 'fd' [ 334.015314][ T5193] Dev loop5: unable to read RDB block 7 [ 334.029188][ T5193] loop5: unable to read partition table [ 334.037608][ T5193] loop5: partition table beyond EOD, truncated [ 334.429408][ T5884] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 334.549916][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 334.626958][ T9541] netlink: 'syz.1.938': attribute type 13 has an invalid length. [ 334.639507][ T5884] usb 1-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 334.661583][ T5884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 334.695023][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 334.740225][ T9539] 8021q: adding VLAN 0 to HW filter on device team7 [ 334.742055][ T5884] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 334.825215][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.839946][ T5884] usb 1-1: Product: syz [ 334.846974][ T5884] usb 1-1: Manufacturer: syz [ 334.854296][ T5884] usb 1-1: SerialNumber: syz [ 334.879763][ T5884] usb 1-1: config 0 descriptor?? [ 334.992972][ T5193] Dev loop5: unable to read RDB block 7 [ 335.003166][ T5193] loop5: unable to read partition table [ 335.015392][ T5193] loop5: partition table beyond EOD, truncated [ 335.114028][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.123753][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.140559][ T5884] uvcvideo 1-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 335.159213][ T5884] uvcvideo 1-1:0.0: No valid video chain found. [ 335.167956][ T5884] usb 1-1: USB disconnect, device number 53 [ 335.464557][ T9551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.548848][ T5939] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 335.568912][ T5940] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 335.661519][ T9552] netlink: 148 bytes leftover after parsing attributes in process `syz.5.939'. [ 335.729898][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 335.735379][ T9551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.742460][ T5939] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 335.777153][ T5940] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 335.788834][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.912336][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.928433][ T5940] usb 2-1: config 0 has no interface number 0 [ 335.935179][ T5939] usb 5-1: Product: syz [ 335.939567][ T5939] usb 5-1: Manufacturer: syz [ 335.955318][ T5940] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.974385][ T5939] usb 5-1: SerialNumber: syz [ 336.102040][ T5939] usb 5-1: config 0 descriptor?? [ 336.109297][ T5940] usb 2-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 336.279384][ T5939] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 336.295836][ T5940] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.332574][ T5940] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 336.351433][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.389923][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.399976][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.440252][ T5940] usb 2-1: Product: syz [ 336.519327][ T5884] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 336.540846][ T5940] usb 2-1: Manufacturer: syz [ 336.545729][ T5940] usb 2-1: SerialNumber: syz [ 336.634734][ T5940] usb 2-1: config 0 descriptor?? [ 336.688301][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 336.713523][ T5884] usb 1-1: config 0 has no interfaces? [ 336.748936][ T5884] usb 1-1: language id specifier not provided by device, defaulting to English [ 336.775652][ T5884] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 336.789918][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.799463][ T5940] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 336.801676][ T5884] usb 1-1: Product: syz [ 336.814283][ T5884] usb 1-1: SerialNumber: syz [ 336.855403][ T5940] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 336.894791][ T5939] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 336.895463][ T5884] usb 1-1: config 0 descriptor?? [ 336.902510][ T5939] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 336.967710][ T5939] usb 5-1: USB disconnect, device number 57 [ 337.054447][ T9566] fuse: Bad value for 'fd' [ 337.158496][ T5193] Dev loop5: unable to read RDB block 7 [ 337.195051][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.209010][ T5193] loop5: unable to read partition table [ 337.214962][ T5193] loop5: partition table beyond EOD, truncated [ 337.225373][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.257188][ T5884] usb 1-1: USB disconnect, device number 54 [ 337.391494][ T5193] Dev loop5: unable to read RDB block 7 [ 337.397218][ T5193] loop5: unable to read partition table [ 337.419164][ T5193] loop5: partition table beyond EOD, truncated [ 337.487847][ T9573] xt_hashlimit: size too large, truncated to 1048576 [ 337.515003][ T5877] usb 2-1: USB disconnect, device number 63 [ 337.580982][ T9575] tipc: Failed to remove unknown binding: 66,0,0/0:1072801689/1072801691 [ 337.613020][ T9575] tipc: Failed to remove unknown binding: 66,0,0/0:1072801689/1072801690 [ 337.638197][ T9575] tipc: Failed to remove unknown binding: 66,0,0/0:1072801689/1072801691 [ 337.708974][ T9575] tipc: Failed to remove unknown binding: 66,0,0/0:1072801689/1072801690 [ 338.426567][ T9604] C: renamed from team_slave_0 (while UP) [ 338.467928][ T5193] Dev loop5: unable to read RDB block 7 [ 338.513049][ T5193] loop5: unable to read partition table [ 338.539166][ T5193] loop5: partition table beyond EOD, truncated [ 338.564121][ T9604] netlink: 152 bytes leftover after parsing attributes in process `syz.3.954'. [ 338.846450][ T9621] loop2: detected capacity change from 0 to 7 [ 338.859012][ T5940] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 338.897063][ T9621] loop2: [ 338.906162][ T9621] loop2: partition table partially beyond EOD, truncated [ 339.005239][ T9623] fuse: Bad value for 'fd' [ 339.028936][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 339.061401][ T5940] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 339.093748][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.115889][ T5940] usb 6-1: config 0 has no interface number 0 [ 339.126203][ T5940] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 339.136634][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.145419][ T5940] usb 6-1: Product: syz [ 339.150196][ T5940] usb 6-1: Manufacturer: syz [ 339.154987][ T5940] usb 6-1: SerialNumber: syz [ 339.180413][ T5940] usb 6-1: config 0 descriptor?? [ 339.416346][ T5940] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 339.436597][ T5940] uvcvideo 6-1:0.105: No valid video chain found. [ 339.450112][ T9645] raw_sendmsg: syz.0.964 forgot to set AF_INET. Fix it! [ 339.526303][ T5877] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 339.552019][ T9647] netlink: 'syz.4.965': attribute type 13 has an invalid length. [ 339.634288][ T5884] usb 6-1: USB disconnect, device number 47 [ 339.658964][ T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 339.681204][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 339.688476][ T5877] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 339.699347][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.710761][ T5877] usb 4-1: config 0 has no interface number 0 [ 339.717147][ T5877] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 339.730210][ T5877] usb 4-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 339.742745][ T5877] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.760923][ T5877] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 339.772545][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.786546][ T5877] usb 4-1: Product: syz [ 339.793055][ T5877] usb 4-1: Manufacturer: syz [ 339.798589][ T5877] usb 4-1: SerialNumber: syz [ 339.812235][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 339.826452][ T24] usb 2-1: config 0 has no interfaces? [ 339.836051][ T5877] usb 4-1: config 0 descriptor?? [ 339.851338][ T24] usb 2-1: language id specifier not provided by device, defaulting to English [ 339.869536][ T5877] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 339.886874][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 339.897655][ T5877] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 339.907862][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.921037][ T24] usb 2-1: Product: syz [ 339.968992][ T24] usb 2-1: SerialNumber: syz [ 339.981723][ T24] usb 2-1: config 0 descriptor?? [ 340.168290][ T5193] Dev loop5: unable to read RDB block 7 [ 340.174175][ T5193] loop5: unable to read partition table [ 340.180557][ T5193] loop5: partition table beyond EOD, truncated [ 340.216071][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.237101][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.273507][ T5940] usb 2-1: USB disconnect, device number 64 [ 340.330038][ T5193] Dev loop5: unable to read RDB block 7 [ 340.342712][ T5193] loop5: unable to read partition table [ 340.363211][ T5193] loop5: partition table beyond EOD, truncated [ 340.622522][ T5884] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 340.637507][ T5939] usb 4-1: USB disconnect, device number 60 [ 340.762650][ T9663] bond1: option mode: unable to set because the bond device is up [ 340.774868][ T9663] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 340.789617][ T5884] usb 6-1: device descriptor read/64, error -71 [ 340.800005][ T9663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.809795][ T9664] loop2: detected capacity change from 0 to 7 [ 340.823030][ T9663] bond1: (slave lo): making interface the new active one [ 340.834070][ T9664] loop2: [ 340.838102][ T9664] loop2: partition table partially beyond EOD, truncated [ 340.861153][ T9663] bond1: (slave lo): Enslaving as an active interface with an up link [ 340.908938][ T9663] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 341.038435][ T5884] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 341.188270][ T9671] fuse: Unknown parameter '0x0000000000000003' [ 341.208942][ T5884] usb 6-1: device descriptor read/64, error -71 [ 341.249708][ T9675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.975'. [ 341.258645][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.975'. [ 341.348658][ T5884] usb usb6-port1: attempt power cycle [ 341.429935][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 341.472007][ T9685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.605061][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 341.613728][ T9689] netlink: 104 bytes leftover after parsing attributes in process `syz.0.979'. [ 341.633833][ T24] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 341.654236][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.681290][ T24] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 341.700659][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.712415][ T5884] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 341.722359][ T24] usb 4-1: Product: syz [ 341.726779][ T24] usb 4-1: Manufacturer: syz [ 341.748053][ T24] usb 4-1: SerialNumber: syz [ 341.755465][ T5884] usb 6-1: device descriptor read/8, error -71 [ 341.770156][ T24] usb 4-1: config 0 descriptor?? [ 341.778338][ T9669] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.998896][ T5884] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 342.020334][ T5884] usb 6-1: device descriptor read/8, error -71 [ 342.129488][ T5884] usb usb6-port1: unable to enumerate USB device [ 342.148842][ T5940] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 342.190616][ T24] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 342.199944][ T24] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 342.318871][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 342.330994][ T5940] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 342.348850][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.369113][ T5940] usb 2-1: config 0 has no interface number 0 [ 342.382236][ T5940] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.412349][ T5940] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 342.431893][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.447648][ T5940] usb 2-1: Product: syz [ 342.454321][ T5940] usb 2-1: Manufacturer: syz [ 342.464926][ T5940] usb 2-1: SerialNumber: syz [ 342.477394][ T5940] usb 2-1: config 0 descriptor?? [ 342.493904][ T5940] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 342.515302][ T5940] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 343.095658][ T30] audit: type=1326 audit(1772491722.351:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc639c799 code=0x7ffc0000 [ 343.125747][ T30] audit: type=1326 audit(1772491722.351:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc639c799 code=0x7ffc0000 [ 343.151913][ T30] audit: type=1326 audit(1772491722.361:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadc639c799 code=0x7ffc0000 [ 343.180361][ T30] audit: type=1326 audit(1772491722.361:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc639c799 code=0x7ffc0000 [ 343.206867][ T30] audit: type=1326 audit(1772491722.361:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc639c799 code=0x7ffc0000 [ 343.233193][ T30] audit: type=1326 audit(1772491722.371:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fadc639c799 code=0x7ffc0000 [ 343.257109][ T30] audit: type=1326 audit(1772491722.371:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc639c799 code=0x7ffc0000 [ 343.281062][ T30] audit: type=1326 audit(1772491722.371:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadc639c799 code=0x7ffc0000 [ 343.311041][ T30] audit: type=1326 audit(1772491722.371:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc639c799 code=0x7ffc0000 [ 343.361602][ T30] audit: type=1326 audit(1772491722.371:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fadc639c799 code=0x7ffc0000 [ 343.473459][ T5193] Dev loop5: unable to read RDB block 7 [ 343.491332][ T5193] loop5: unable to read partition table [ 343.511841][ T5884] usb 2-1: USB disconnect, device number 65 [ 343.531321][ T5193] loop5: partition table beyond EOD, truncated [ 343.545851][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.982'. [ 343.570355][ T9702] loop2: detected capacity change from 0 to 7 [ 343.577529][ T9702] loop2: [ 343.580749][ T9702] loop2: partition table partially beyond EOD, truncated [ 343.629319][ T9706] : renamed from bond_slave_0 (while UP) [ 343.848908][ T5877] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 343.897219][ T9713] netlink: 56 bytes leftover after parsing attributes in process `syz.1.986'. [ 344.068902][ T5884] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 344.088825][ T5877] usb 5-1: device descriptor read/64, error -71 [ 344.115909][ T24] usb 4-1: USB disconnect, device number 61 [ 344.241271][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short [ 344.251752][ T5884] usb 6-1: config 0 has no interfaces? [ 344.261328][ T5884] usb 6-1: language id specifier not provided by device, defaulting to English [ 344.282639][ T5884] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 344.292701][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.330143][ T9716] fuse: Unknown parameter '0x0000000000000003' [ 344.634105][ T5877] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 344.694948][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.988'. [ 344.720658][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 344.734020][ T5884] usb 6-1: Product: syz [ 344.792216][ T5884] usb 6-1: SerialNumber: syz [ 344.841178][ T5877] usb 5-1: device descriptor read/64, error -71 [ 344.980932][ T5884] usb 6-1: config 0 descriptor?? [ 345.080221][ T5877] usb usb5-port1: attempt power cycle [ 345.206877][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.222857][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.347956][ T5940] usb 6-1: USB disconnect, device number 52 [ 345.429070][ T5877] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 345.451627][ T5877] usb 5-1: device descriptor read/8, error -71 [ 345.468796][ T5939] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 345.626539][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 345.635331][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.673871][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.689211][ T5877] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 345.708837][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 17920, setting to 1024 [ 345.741303][ T5877] usb 5-1: device descriptor read/8, error -71 [ 345.751634][ T5939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 345.780344][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.825034][ T5939] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 345.852229][ T5939] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 345.875975][ T5939] usb 4-1: Manufacturer: syz [ 345.889890][ T5877] usb usb5-port1: unable to enumerate USB device [ 345.900663][ T5939] usb 4-1: config 0 descriptor?? [ 346.127090][ T9734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.992'. [ 346.184049][ T5193] Dev loop5: unable to read RDB block 7 [ 346.207048][ T5193] loop5: unable to read partition table [ 346.235261][ T5193] loop5: partition table beyond EOD, truncated [ 346.279982][ T5939] rc_core: IR keymap rc-hauppauge not found [ 346.288974][ T5939] Registered IR keymap rc-empty [ 346.302881][ T5939] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 346.333101][ T9744] netlink: 'syz.5.995': attribute type 21 has an invalid length. [ 346.349170][ T5877] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 346.365556][ T5939] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 346.399490][ T9744] netlink: 128 bytes leftover after parsing attributes in process `syz.5.995'. [ 346.410150][ T5939] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 346.427236][ T5939] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 346.439840][ T9744] netlink: 'syz.5.995': attribute type 5 has an invalid length. [ 346.450396][ T9744] netlink: 'syz.5.995': attribute type 6 has an invalid length. [ 346.459732][ T9744] netlink: 3 bytes leftover after parsing attributes in process `syz.5.995'. [ 346.476310][ T5939] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 346.503061][ T5939] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 346.534478][ T5939] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 346.569430][ T5939] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 346.600095][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 346.607045][ T5939] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 346.620620][ T5877] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 346.642603][ T5193] Dev loop5: unable to read RDB block 7 [ 346.648277][ T5193] loop5: unable to read partition table [ 346.654061][ T5939] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 346.668780][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.668812][ T5877] usb 1-1: config 0 has no interface number 0 [ 346.668859][ T5877] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.671656][ T5939] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 346.690856][ T5939] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 346.698277][ T5877] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 346.713568][ T5939] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 346.759523][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.768397][ T5193] loop5: partition table beyond EOD, truncated [ 346.770016][ T5939] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 346.786638][ T5877] usb 1-1: Product: syz [ 346.800951][ T5877] usb 1-1: Manufacturer: syz [ 346.962269][ T5940] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 346.984866][ T5877] usb 1-1: SerialNumber: syz [ 346.997649][ T5939] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 347.013985][ T5939] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 347.026791][ T5877] usb 1-1: config 0 descriptor?? [ 347.060470][ T5939] usb 4-1: USB disconnect, device number 62 [ 347.123093][ T5877] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 347.135501][ T5940] usb 6-1: config 160 has an invalid interface number: 200 but max is 0 [ 347.150585][ T5940] usb 6-1: config 160 has no interface number 0 [ 347.167333][ T5940] usb 6-1: config 160 interface 200 has no altsetting 0 [ 347.177945][ T5877] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 347.194638][ T5940] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 347.204271][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.213236][ T5940] usb 6-1: Product: syz [ 347.221161][ T5940] usb 6-1: Manufacturer: syz [ 347.226488][ T9758] fuse: Unknown parameter '0x0000000000000003' [ 347.247341][ T5940] usb 6-1: SerialNumber: syz [ 347.483714][ T9750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.518341][ T9750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.550523][ T9750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.567906][ T9750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.612826][ T5940] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.623044][ T5940] usb 6-1: MIDIStreaming interface descriptor not found [ 347.786209][ T5940] usb 6-1: USB disconnect, device number 53 [ 347.926052][ T5910] usb 1-1: USB disconnect, device number 55 [ 347.974707][ T9767] netlink: 8324 bytes leftover after parsing attributes in process `syz.1.1000'. [ 347.994184][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.271157][ T5193] Dev loop5: unable to read RDB block 7 [ 348.302086][ T5193] loop5: unable to read partition table [ 348.308007][ T5193] loop5: partition table beyond EOD, truncated [ 348.729119][ T9787] input: syz0 as /devices/virtual/input/input23 [ 349.285769][ T5193] Dev loop5: unable to read RDB block 7 [ 349.309278][ T5193] loop5: unable to read partition table [ 349.316537][ T5193] loop5: partition table beyond EOD, truncated [ 349.369432][ T5940] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 349.378968][ T5939] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 349.409453][ T5904] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 349.424844][ T9803] loop2: detected capacity change from 0 to 7 [ 349.434027][ T9803] loop2: [ 349.437053][ T9803] loop2: partition table partially beyond EOD, truncated [ 349.501104][ T5193] Dev loop5: unable to read RDB block 7 [ 349.517201][ T5193] loop5: unable to read partition table [ 349.524113][ T5193] loop5: partition table beyond EOD, truncated [ 349.556929][ T5939] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 349.578781][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.589371][ T5939] usb 1-1: Product: syz [ 349.597409][ T9805] fuse: Unknown parameter '0x0000000000000003' [ 349.600691][ T5904] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.618190][ T5939] usb 1-1: Manufacturer: syz [ 349.639073][ T5939] usb 1-1: SerialNumber: syz [ 349.647780][ T5940] usb 2-1: unable to get BOS descriptor or descriptor too short [ 349.657829][ T5904] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.670902][ T5939] usb 1-1: config 0 descriptor?? [ 349.682970][ T5940] usb 2-1: config 0 has no interfaces? [ 349.691435][ T5940] usb 2-1: language id specifier not provided by device, defaulting to English [ 349.703871][ T5904] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 349.716195][ T5939] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 349.723874][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 349.732450][ T5939] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 349.742660][ T5904] usb 4-1: SerialNumber: syz [ 349.747886][ T5939] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 349.779364][ T5940] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 349.788516][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.812153][ T9809] loop2: detected capacity change from 0 to 7 [ 349.829858][ T5940] usb 2-1: Product: syz [ 349.834267][ T5940] usb 2-1: SerialNumber: syz [ 349.846009][ T9809] Dev loop2: unable to read RDB block 7 [ 349.860875][ T9809] loop2: unable to read partition table [ 349.869564][ T5940] usb 2-1: config 0 descriptor?? [ 349.873724][ T9809] loop2: partition table beyond EOD, truncated [ 349.906200][ T9809] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 349.938056][ T5193] Dev loop5: unable to read RDB block 7 [ 349.946851][ T5193] loop5: unable to read partition table [ 349.952967][ T5193] loop5: partition table beyond EOD, truncated [ 350.044607][ T9798] netlink: 'syz.3.1007': attribute type 10 has an invalid length. [ 350.112605][ T9814] libceph: resolve '4' (ret=-3): failed [ 350.122467][ T9790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.132560][ T9814] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 350.160148][ T9790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.178556][ T9814] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 350.224787][ T9798] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 350.267864][ T5940] usb 2-1: USB disconnect, device number 66 [ 350.325734][ T9798] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 350.354786][ T9815] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1007'. [ 350.453488][ T5904] usb 4-1: skipping empty audio interface (v1) [ 350.612702][ T5904] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 350.637568][ T5904] usb 4-1: USB disconnect, device number 63 [ 350.686185][ T9756] udevd[9756]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.985724][ T5193] Dev loop5: unable to read RDB block 7 [ 350.997035][ T5193] loop5: unable to read partition table [ 351.007615][ T5193] loop5: partition table beyond EOD, truncated [ 351.302307][ T9829] kvm: Disabled LAPIC found during irq injection [ 351.386848][ T9839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1019'. [ 351.615657][ T5193] Dev loop5: unable to read RDB block 7 [ 351.644601][ T5193] loop5: unable to read partition table [ 351.665391][ T5193] loop5: partition table beyond EOD, truncated [ 351.702865][ T9846] fuse: Unknown parameter '0x0000000000000003' [ 351.908519][ T5193] Dev loop5: unable to read RDB block 7 [ 351.931994][ T5193] loop5: unable to read partition table [ 351.946686][ T5193] loop5: partition table beyond EOD, truncated [ 352.060757][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 352.075171][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 352.086618][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 352.098502][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 352.126105][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 352.137394][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 352.148984][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 352.173761][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 352.184360][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 352.194849][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 352.337595][ T9853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.377869][ T5193] Dev loop5: unable to read RDB block 7 [ 353.401869][ T5193] loop5: unable to read partition table [ 353.495277][ T5193] loop5: partition table beyond EOD, truncated [ 353.709935][ T9873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.098240][ T9880] 8021q: adding VLAN 0 to HW filter on device team2 [ 354.203167][ T9878] 8021q: adding VLAN 0 to HW filter on device team3 [ 354.349871][ T5940] usb 1-1: USB disconnect, device number 56 [ 354.445585][ T9885] : renamed from vlan0 (while UP) [ 355.678892][ T5910] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 355.828982][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 355.856414][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.877057][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 355.889862][ T9900] netlink: 'syz.4.1035': attribute type 12 has an invalid length. [ 355.926280][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.976987][ T5910] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.018020][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.099001][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 356.137559][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.180601][ T5910] usb 1-1: config 0 descriptor?? [ 356.364549][ T5193] Dev loop5: unable to read RDB block 7 [ 356.373580][ T5193] loop5: unable to read partition table [ 356.479077][ T5193] loop5: partition table beyond EOD, truncated [ 356.511958][ T5940] usb 1-1: USB disconnect, device number 57 [ 356.549434][ T9909] ip6tnl0: Caught tx_queue_len zero misconfig [ 356.858827][ T5910] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 357.026409][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 357.037161][ T5910] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 357.099402][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 357.122063][ T9913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.163304][ T5910] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 357.173576][ T5910] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 357.182242][ T5910] usb 6-1: Manufacturer: syz [ 357.191903][ T5910] usb 6-1: config 0 descriptor?? [ 357.313858][ T5910] smsusb:smsusb_probe: board id=9, interface number 0 [ 357.329627][ T5910] smsusb:siano_media_device_register: media controller created [ 357.341534][ T5910] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 357.393795][ T5910] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 357.452377][ T5910] ------------[ cut here ]------------ [ 357.458120][ T5910] !PageLargeKmalloc(page) [ 357.458146][ T5910] WARNING: mm/slub.c:6371 at free_large_kmalloc+0xa3/0x140, CPU#1: kworker/1:7/5910 [ 357.473175][ T5910] Modules linked in: [ 357.477306][ T5910] CPU: 1 UID: 0 PID: 5910 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.489243][ T5910] Tainted: [L]=SOFTLOCKUP [ 357.493626][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.505475][ T5910] Workqueue: usb_hub_wq hub_event [ 357.510798][ T5910] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 357.516966][ T5910] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 ee c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 10 db f0 8d 5b 41 5e 5d e9 67 e3 03 ff [ 357.538334][ T5910] RSP: 0018:ffffc9000441eb40 EFLAGS: 00010206 [ 357.544742][ T5910] RAX: 00000000ff000000 RBX: ffffea00011ab880 RCX: 0000000000100001 [ 357.553368][ T5910] RDX: ffffc9001a50a000 RSI: ffff888046ae2000 RDI: ffffea00011ab880 [ 357.562309][ T5910] RBP: 0000000000000000 R08: ffff88802b04b603 R09: 1ffff110056096c0 [ 357.571088][ T5910] R10: dffffc0000000000 R11: ffffed10056096c1 R12: 1ffff1100b3d4882 [ 357.579371][ T5910] R13: 0000000000000000 R14: ffff88802b04b660 R15: dffffc0000000000 [ 357.587383][ T5910] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 357.596745][ T5910] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.603729][ T5910] CR2: 000020000029b030 CR3: 000000007eee8000 CR4: 00000000003526f0 [ 357.611935][ T5910] Call Trace: [ 357.615262][ T5910] [ 357.618234][ T5910] usb_free_urb+0xd0/0x120 [ 357.623201][ T5910] smsusb_term_device+0x1d7/0x3e0 [ 357.629104][ T5910] smsusb_probe+0x1aba/0x2280 [ 357.633874][ T5910] ? __pfx_smsusb_probe+0x10/0x10 [ 357.639196][ T5910] ? do_raw_spin_lock+0x12b/0x2f0 [ 357.644422][ T5910] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 357.650451][ T5910] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 357.656361][ T5910] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 357.662872][ T5910] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 357.668808][ T5910] usb_probe_interface+0x668/0xc90 [ 357.674806][ T5910] ? __pfx_usb_probe_interface+0x10/0x10 [ 357.680831][ T5910] really_probe+0x267/0xaf0 [ 357.687079][ T5910] __driver_probe_device+0x18c/0x320 [ 357.692838][ T5910] driver_probe_device+0x4f/0x240 [ 357.697899][ T5910] __device_attach_driver+0x2d4/0x4c0 [ 357.703355][ T5910] bus_for_each_drv+0x258/0x2f0 [ 357.708243][ T5910] ? __pfx___device_attach_driver+0x10/0x10 [ 357.714365][ T5910] ? __pfx_bus_for_each_drv+0x10/0x10 [ 357.719934][ T5910] ? lockdep_hardirqs_on+0x7a/0x110 [ 357.725874][ T5910] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 357.732270][ T5910] __device_attach+0x2c5/0x450 [ 357.737136][ T5910] ? __pfx___device_attach+0x10/0x10 [ 357.742593][ T5910] ? _raw_spin_unlock+0x28/0x50 [ 357.747569][ T5910] device_initial_probe+0xa1/0xd0 [ 357.752659][ T5910] bus_probe_device+0x12a/0x220 [ 357.757593][ T5910] ? device_add+0x726/0xb70 [ 357.762289][ T5910] device_add+0x7b6/0xb70 [ 357.766763][ T5910] usb_set_configuration+0x1a87/0x2110 [ 357.772379][ T5910] usb_generic_driver_probe+0x8d/0x150 [ 357.777932][ T5910] usb_probe_device+0x1c4/0x3b0 [ 357.782838][ T5910] ? __pfx_usb_probe_device+0x10/0x10 [ 357.788273][ T5910] really_probe+0x267/0xaf0 [ 357.793653][ T5910] __driver_probe_device+0x18c/0x320 [ 357.799358][ T5910] driver_probe_device+0x4f/0x240 [ 357.804523][ T5910] __device_attach_driver+0x2d4/0x4c0 [ 357.809941][ T5910] bus_for_each_drv+0x258/0x2f0 [ 357.815007][ T5910] ? __pfx___device_attach_driver+0x10/0x10 [ 357.820974][ T5910] ? __pfx_bus_for_each_drv+0x10/0x10 [ 357.826594][ T5910] ? lockdep_hardirqs_on+0x7a/0x110 [ 357.832012][ T5910] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 357.837910][ T5910] __device_attach+0x2c5/0x450 [ 357.842751][ T5910] ? __pfx___device_attach+0x10/0x10 [ 357.848064][ T5910] ? _raw_spin_unlock+0x28/0x50 [ 357.852969][ T5910] device_initial_probe+0xa1/0xd0 [ 357.858006][ T5910] bus_probe_device+0x12a/0x220 [ 357.862914][ T5910] ? device_add+0x726/0xb70 [ 357.867427][ T5910] device_add+0x7b6/0xb70 [ 357.871798][ T5910] usb_new_device+0xa08/0x16f0 [ 357.876586][ T5910] ? __pfx_usb_new_device+0x10/0x10 [ 357.881879][ T5910] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.887148][ T5910] hub_event+0x2a1c/0x4f30 [ 357.892028][ T5910] ? __pfx_hub_event+0x10/0x10 [ 357.896824][ T5910] ? process_scheduled_works+0xa25/0x1830 [ 357.902614][ T5910] ? process_scheduled_works+0xa25/0x1830 [ 357.908375][ T5910] process_scheduled_works+0xb02/0x1830 [ 357.913988][ T5910] ? __pfx_process_scheduled_works+0x10/0x10 [ 357.920040][ T5910] ? assign_work+0x3d5/0x5e0 [ 357.924656][ T5910] worker_thread+0xa50/0xfc0 [ 357.929510][ T5910] kthread+0x388/0x470 [ 357.933641][ T5910] ? __pfx_worker_thread+0x10/0x10 [ 357.939073][ T5910] ? __pfx_kthread+0x10/0x10 [ 357.943681][ T5910] ret_from_fork+0x51e/0xb90 [ 357.948420][ T5910] ? __pfx_ret_from_fork+0x10/0x10 [ 357.953613][ T5910] ? __switch_to+0xc7d/0x1450 [ 357.958909][ T5910] ? __pfx_kthread+0x10/0x10 [ 357.963618][ T5910] ret_from_fork_asm+0x1a/0x30 [ 357.968413][ T5910] [ 357.971613][ T5910] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 357.979205][ T5910] CPU: 1 UID: 0 PID: 5910 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.991397][ T5910] Tainted: [L]=SOFTLOCKUP [ 357.998808][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.011433][ T5910] Workqueue: usb_hub_wq hub_event [ 358.017000][ T5910] Call Trace: [ 358.020575][ T5910] [ 358.023724][ T5910] vpanic+0x56c/0xa60 [ 358.028183][ T5910] ? __pfx__printk+0x10/0x10 [ 358.033147][ T5910] ? __pfx_vpanic+0x10/0x10 [ 358.038436][ T5910] ? is_bpf_text_address+0x292/0x2b0 [ 358.043842][ T5910] ? is_bpf_text_address+0x26/0x2b0 [ 358.049071][ T5910] panic+0xc5/0xd0 [ 358.052849][ T5910] ? __pfx_panic+0x10/0x10 [ 358.057488][ T5910] ? ret_from_fork_asm+0x1a/0x30 [ 358.062486][ T5910] __warn+0x315/0x4f0 [ 358.066496][ T5910] ? free_large_kmalloc+0xa3/0x140 [ 358.071884][ T5910] ? free_large_kmalloc+0xa3/0x140 [ 358.077121][ T5910] __report_bug+0x29a/0x540 [ 358.082290][ T5910] ? device_initial_probe+0xa1/0xd0 [ 358.087595][ T5910] ? bus_probe_device+0x12a/0x220 [ 358.092633][ T5910] ? device_add+0x7b6/0xb70 [ 358.097181][ T5910] ? free_large_kmalloc+0xa3/0x140 [ 358.102933][ T5910] ? __pfx___report_bug+0x10/0x10 [ 358.107987][ T5910] ? lockdep_hardirqs_on+0x7a/0x110 [ 358.113294][ T5910] ? irqentry_exit+0x59e/0x620 [ 358.118450][ T5910] ? trace_irq_disable+0x3b/0x150 [ 358.123531][ T5910] ? free_large_kmalloc+0xa5/0x140 [ 358.128829][ T5910] ? free_large_kmalloc+0xa3/0x140 [ 358.135027][ T5910] report_bug+0x16a/0x220 [ 358.139404][ T5910] ? free_large_kmalloc+0xa3/0x140 [ 358.144996][ T5910] ? free_large_kmalloc+0xa5/0x140 [ 358.150190][ T5910] handle_bug+0x9c/0x200 [ 358.154449][ T5910] exc_invalid_op+0x1a/0x50 [ 358.158986][ T5910] asm_exc_invalid_op+0x1a/0x20 [ 358.164239][ T5910] RIP: 0010:free_large_kmalloc+0xa3/0x140 [ 358.170328][ T5910] Code: f8 ff 74 17 25 00 00 00 ff 3d 00 00 00 f8 0f 85 a0 00 00 00 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 ee c7 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 10 db f0 8d 5b 41 5e 5d e9 67 e3 03 ff [ 358.191076][ T5910] RSP: 0018:ffffc9000441eb40 EFLAGS: 00010206 [ 358.198081][ T5910] RAX: 00000000ff000000 RBX: ffffea00011ab880 RCX: 0000000000100001 [ 358.206791][ T5910] RDX: ffffc9001a50a000 RSI: ffff888046ae2000 RDI: ffffea00011ab880 [ 358.215102][ T5910] RBP: 0000000000000000 R08: ffff88802b04b603 R09: 1ffff110056096c0 [ 358.223291][ T5910] R10: dffffc0000000000 R11: ffffed10056096c1 R12: 1ffff1100b3d4882 [ 358.231299][ T5910] R13: 0000000000000000 R14: ffff88802b04b660 R15: dffffc0000000000 [ 358.242098][ T5910] usb_free_urb+0xd0/0x120 [ 358.246555][ T5910] smsusb_term_device+0x1d7/0x3e0 [ 358.251693][ T5910] smsusb_probe+0x1aba/0x2280 [ 358.256405][ T5910] ? __pfx_smsusb_probe+0x10/0x10 [ 358.261437][ T5910] ? do_raw_spin_lock+0x12b/0x2f0 [ 358.266567][ T5910] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 358.272155][ T5910] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 358.277980][ T5910] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 358.283806][ T5910] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 358.289458][ T5910] usb_probe_interface+0x668/0xc90 [ 358.294584][ T5910] ? __pfx_usb_probe_interface+0x10/0x10 [ 358.300307][ T5910] really_probe+0x267/0xaf0 [ 358.304826][ T5910] __driver_probe_device+0x18c/0x320 [ 358.310141][ T5910] driver_probe_device+0x4f/0x240 [ 358.315354][ T5910] __device_attach_driver+0x2d4/0x4c0 [ 358.321693][ T5910] bus_for_each_drv+0x258/0x2f0 [ 358.326655][ T5910] ? __pfx___device_attach_driver+0x10/0x10 [ 358.332556][ T5910] ? __pfx_bus_for_each_drv+0x10/0x10 [ 358.337955][ T5910] ? lockdep_hardirqs_on+0x7a/0x110 [ 358.343200][ T5910] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 358.349043][ T5910] __device_attach+0x2c5/0x450 [ 358.353820][ T5910] ? __pfx___device_attach+0x10/0x10 [ 358.359221][ T5910] ? _raw_spin_unlock+0x28/0x50 [ 358.365463][ T5910] device_initial_probe+0xa1/0xd0 [ 358.370523][ T5910] bus_probe_device+0x12a/0x220 [ 358.375517][ T5910] ? device_add+0x726/0xb70 [ 358.380042][ T5910] device_add+0x7b6/0xb70 [ 358.384391][ T5910] usb_set_configuration+0x1a87/0x2110 [ 358.389881][ T5910] usb_generic_driver_probe+0x8d/0x150 [ 358.395373][ T5910] usb_probe_device+0x1c4/0x3b0 [ 358.400257][ T5910] ? __pfx_usb_probe_device+0x10/0x10 [ 358.405734][ T5910] really_probe+0x267/0xaf0 [ 358.410266][ T5910] __driver_probe_device+0x18c/0x320 [ 358.415585][ T5910] driver_probe_device+0x4f/0x240 [ 358.420636][ T5910] __device_attach_driver+0x2d4/0x4c0 [ 358.426038][ T5910] bus_for_each_drv+0x258/0x2f0 [ 358.430907][ T5910] ? __pfx___device_attach_driver+0x10/0x10 [ 358.437548][ T5910] ? __pfx_bus_for_each_drv+0x10/0x10 [ 358.443390][ T5910] ? lockdep_hardirqs_on+0x7a/0x110 [ 358.448626][ T5910] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 358.454462][ T5910] __device_attach+0x2c5/0x450 [ 358.459351][ T5910] ? __pfx___device_attach+0x10/0x10 [ 358.464660][ T5910] ? _raw_spin_unlock+0x28/0x50 [ 358.469532][ T5910] device_initial_probe+0xa1/0xd0 [ 358.474746][ T5910] bus_probe_device+0x12a/0x220 [ 358.479607][ T5910] ? device_add+0x726/0xb70 [ 358.484144][ T5910] device_add+0x7b6/0xb70 [ 358.488778][ T5910] usb_new_device+0xa08/0x16f0 [ 358.493601][ T5910] ? __pfx_usb_new_device+0x10/0x10 [ 358.498919][ T5910] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.504188][ T5910] hub_event+0x2a1c/0x4f30 [ 358.508664][ T5910] ? __pfx_hub_event+0x10/0x10 [ 358.513476][ T5910] ? process_scheduled_works+0xa25/0x1830 [ 358.519580][ T5910] ? process_scheduled_works+0xa25/0x1830 [ 358.525600][ T5910] process_scheduled_works+0xb02/0x1830 [ 358.531635][ T5910] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.537773][ T5910] ? assign_work+0x3d5/0x5e0 [ 358.542411][ T5910] worker_thread+0xa50/0xfc0 [ 358.547097][ T5910] kthread+0x388/0x470 [ 358.551185][ T5910] ? __pfx_worker_thread+0x10/0x10 [ 358.556310][ T5910] ? __pfx_kthread+0x10/0x10 [ 358.560910][ T5910] ret_from_fork+0x51e/0xb90 [ 358.565698][ T5910] ? __pfx_ret_from_fork+0x10/0x10 [ 358.570822][ T5910] ? __switch_to+0xc7d/0x1450 [ 358.575517][ T5910] ? __pfx_kthread+0x10/0x10 [ 358.580133][ T5910] ret_from_fork_asm+0x1a/0x30 [ 358.584945][ T5910] [ 358.588857][ T5910] Kernel Offset: disabled [ 358.593232][ T5910] Rebooting in 86400 seconds..