last executing test programs: 12.725437748s ago: executing program 3 (id=1395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000001e0001060000000000f833d6b648"], 0x1c}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0xf0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x5c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x1c, 0x5, @mcast2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0xf0}}, 0x0) 12.394034368s ago: executing program 3 (id=1396): syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2000) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x600100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x51, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x800) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 9.225753762s ago: executing program 3 (id=1412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0x66, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x8, 0xfe, 0x0, 0x200, 0x2, 0xf, 0xf6, 0x9, 0x2, 0xe8, 0x6, 0x0, 0xe5, 0x74, 0x7, 0x2, 0x40, 0x9, '\x00', 0x2, 0x7}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 7.64400189s ago: executing program 4 (id=1416): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r3], 0x4}}, 0x0) sendfile(r8, r6, 0x0, 0x100000000) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000440)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x6, 0x2, r1, 0x0}]) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.346404526s ago: executing program 4 (id=1417): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = semget$private(0x0, 0x5, 0xcc) semop(r1, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r1, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semop(r1, &(0x7f0000000200)=[{0x3, 0x3, 0x800}, {0x3, 0x6}], 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xeb, "bf763c47510b9fa6d40974fe009125363f3aa94a9b5f6f296cf2d54c07774c0706ffc02c1aacbcf487b821098d2247783acc608fe44d15e61ceb37d4b31d24179ff1a46d1dbb9f924f03786921a9768f285639f296bd685a4c575cf7ea3af8b70059343ca0faff59ddd338a4d9f0bffdac3de5b986324706d4f80791e5fcfb052ab23730af3b1d39bb8f04a61b17937ce06135ae1b27e68933fc0fa41120beef52c7275c1dd2fba02f8761b27220ec025ffa90ebea5a655d944840e91302c76784480a5925866585cc52917b717f932f9f626491bb119a2009526db9b8f1d5151c9df8a556ddc6adf27ba0"}, &(0x7f00000001c0)=0xf3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001380)="515a6d3b586b2277695c2b79ca45c7e94c042338698418c6f54aa56c4a7396ed05d25a7e0f39dad345bd9a96c49e2501", 0x30}, {&(0x7f00000013c0)="4946c9ef4e16fb69d1aa585c3ab749b6de683e7602b4dab4d68f648bf169488a1d0803a40a3fd57e500ec5c1d13c3352e1ab1558ccfe39c92d5a17d1c3ecafef981c0ec70a7f375df51d8cb122a102c8d8fb4e843d23c8198c8a43be76d919d4fd1767dc", 0x64}, {&(0x7f0000001440)="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", 0x1000}], 0x3, &(0x7f0000002480)=[@rthdr={{0x78, 0x29, 0x39, {0x4, 0xc, 0x1, 0x9e, 0x0, [@mcast1, @private0, @loopback, @dev={0xfe, 0x80, '\x00', 0x18}, @loopback, @private2]}}}], 0x78}, 0x8000) r7 = socket(0x1, 0x803, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x40) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={r2, 0xf2, 0x839, 0x0, 0x4, 0x8, 0xfff8, 0x8, {r3, @in={{0x2, 0x4e21, @broadcast}}, 0x8, 0x6, 0xffa, 0xc, 0xb}}, &(0x7f0000000340)=0xb0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}], 0x1, 0x4040000) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}]}, 0x10) sendmmsg(r9, &(0x7f0000001c00), 0x400000000000159, 0x40840) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004900010028bd7000fedbdf250a000000", @ANYRES32, @ANYBLOB="030000001400010000000000000000000000000000000001080002"], 0x38}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.715302794s ago: executing program 1 (id=1420): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x4}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="2bd0036ca89dea0e669b2edcd65be58aec1d4efd2d933f4384c2aecae89e6dee9fc62a0beeed8c1fff132edc7521c40716394a61b065a68327ddc9938d1d3c", 0x3f}, {&(0x7f0000000380)="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", 0x116}, {&(0x7f0000000240)="4fc5f3f240c77aa6c8dc116c96e62fa5297be8949af33b53b372511aae8136c9778b70a9db", 0x25}], 0x3, &(0x7f00000002c0)="7804f0e2fe12e5e08bd07318f97963c4d16f9595a5bca9a92ffc267bc86da87b0bf8c9a81b293796f066f24ac1f874cfb75c9c7e05cfae24a8b82619c2c96996e77c8c46e7d4010000004000290dce", 0x4f, 0x81}, 0x40004) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x21, 0x4) r3 = mq_open(&(0x7f0000001140)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00\xf0\x8ew\xf4)S\xd6G\xe1\x1fl>\x7f\x14?V\x11\x88\n6\xb8d\xba\xb5\xcb{\xa5P\xce\x03\xfd\x00\xc3j\xa6\xb5\xe6h\xc9\xcf\xb5e\x82J\xf5\xca\x16\xbf\t\xce\xe9F\xf6\x95\xcd\x94\x93\n\x85\xe6X\x19\xf3\xff\xa0+\x94\xac\xce\x9d9I\xb8\x18\x12\xc0\t_\x19\n\x0f\xe0\x1eu\xc2J\xe3\xa9\xd8\x04k\xaa\x1fZ\x12\x1f\xee\x80\xac\xfd\xd3\x1b\xfbAS\xbcF\x89\xbb2\xe8>\x80\xe2\x0f\x95;yS\x908\xd0', 0x41, 0x0, 0x0) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x1, 0x0) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/net\x00') 6.337176967s ago: executing program 4 (id=1422): syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2000) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x600100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x51, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x800) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.336732033s ago: executing program 3 (id=1423): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r3 = dup(r0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0xb6e}, 0x8) r6 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000003c0)={0x3}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbd) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, &(0x7f00000001c0)=ANY=[@ANYBLOB="1110"], 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001010000ff04000c5a00000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="3e7a45e5c5288ed7f72c11419ae31eb87edf11115b5e5934afb4595d10f78cfb08af46f500", 0x25}, {&(0x7f0000000640)="2ca4d34158dbd42a4bdb3267b8c57d5534efb107bdfcb545ff9940b2e0563a580e7d0ca45c0b8d377dbb9ec265449b851a8425ba509404733328b5b95224f92d84bf1a779afa767a1c3e29687825919aa0e4ce5002aee6098b0b042c45ea89ca707fd35abef1baff9e1f61787242d29991c7936103cc10d7211433ac3b0b524582f368f26be8866cf720250b57c97d405a5e7369760ca09532dce32c43d5750db345e4472a930b3dd0be0fc54b2c82b527e23afa032e40c573", 0xb9}], 0x2}}], 0x1, 0x4040000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 5.618540347s ago: executing program 1 (id=1424): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4810) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000440), 0x0, 0x40015, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) 5.371003245s ago: executing program 1 (id=1425): r0 = socket$inet6(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) epoll_create1(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f96941bcb0df761d6023e7eecdf40c4a3423eb3d250066ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2404852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b010094bbed215eebc3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f035580a3906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7fa0309e6817c809268103a2584ab40a68e528329d97afc3613b325c1eb4a3ab2e156ad7444800", "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"}) r2 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, @mcast1, @mcast1, 0x6, 0x51e, 0x9, 0x100, 0x3c15, 0x4140040, r1}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f40800030006010000080003001100", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r7, 0x0, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffff, 0x0) sendmsg$kcm(r8, &(0x7f00000004c0)={&(0x7f0000000100)=@ax25={{0x3, @default, 0x4}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x80, &(0x7f0000000200)}, 0x40) 4.639170798s ago: executing program 2 (id=1428): syz_emit_ethernet(0x2d, &(0x7f0000000540)={@local, @random="5f957c25672d", @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x6}]}}, "cb8a11"}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000540)={0x2, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0xfffffffffffffffe, 0x62e98893, 0x9, 0xfffffbff, 0x5}}, {0xd, 0x1, 0x1, 0x0, @irqchip={0x8, 0x6}}]}) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x2, @loopback, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240)={r5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r6, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={r7, @in={{0x2, 0x4e20, @multicast2}}, 0x7ff, 0x4fb, 0x3, 0x9, 0x3, 0x7fffffff, 0xa}, &(0x7f0000000140)=0x9c) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000001c0)={r5, 0x101}, 0x8) 4.256921494s ago: executing program 1 (id=1432): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_usb_connect$midi(0x4, 0x40, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x499, 0x102a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x1, 0x6, 0x90, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x9, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xc, 0x7f}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x3, 0x5}], [{{0x9, 0x5, 0x5, 0x0, 0x0, 0x2, 0x3, 0x6, {0x7, 0x25, 0x1, 0x3, "06583d"}}}]}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x7, 0x4, 0xa, 0x40}, 0x119, &(0x7f0000000080)={0x5, 0xf, 0x119, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x1cd5, 0xf, 0x7, [0x7e00, 0xff0018]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x48, 0xc0, 0x8, 0xf078, 0x5}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0xde, 0xf00, 0xb, [0x1fe000f, 0xffc0f0, 0xff00, 0xcf, 0xc0, 0xa01e]}, @generic={0xce, 0x10, 0x2, "8a6bf03966cf4bc3bcd42af5b66a2dfd7f6732a8c370e46f45fe2c60ee234115b8674224c62c3610679d954f3a63772507c7aea99ce07f53077d64d0251e93b1a94d880189837bcb6e746716796286d00f9968c9af6b0a4ff4c050a153221fa64ea98a39d6c234af6651f12232ec509097a7b9110d5370aeac530e658bafa99e819505a6e7504fa24624ec55edfdc327ef60878bbce2189a9ef0456a8b7e3d59b13276e32a3828346745004740cf81184d6400658bf3b9460ca647c361a4d1aeb5bbeab9303f17f90523f7"}]}, 0xa, [{0x4, &(0x7f0000000200)=@string={0x4, 0x3, 'UP'}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x413}}, {0x36, &(0x7f0000000300)=@string={0x36, 0x3, "2086c4cd7e137d39aae7393e1edf235eb1dce3ba2da8a66b434745ab6dc0a8e45cb1bafaf4a21bf078339d988dd435f21491a1bf"}}, {0xa0, &(0x7f0000000400)=@string={0xa0, 0x3, "251df3b32a554821d97c89fb654329fb8ee5cd2bbeffa8de47555c799e30c42db4af87ac8c3cacbccf3b65cac5d3021c84998125d8cafd662a4fd57d494f28bbf4d40fff2e6b3bbf2502f0731297e3171f2d90065fee2878e399d35ea1b3e77ea5153c9462f6cc20d60dfbfee1d019117d67e6b981acbe173a2491cde727d466c35e158e4d87a076abf542403386e1512d8547eb73538b573829fa6f2df8"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x400a}}, {0xb7, &(0x7f0000000540)=@string={0xb7, 0x3, "d906f3b602e28725b6576bc0fbd286c5cab8e0c9e10d4db7cdde354b8a3e97acb9fdc406f4a1446e907fcc058361181fd3c878255094a67f040963d550acd837e5db2de07a9c6caaf50942d692f1e7cdd44e3a7d3fb683b4f9c28b6b2c4630d2d48570952cdf0908a1770cf28ecd08f34ebf85a39d170755da97c065c5ddb78c462f8a6290bdee5ea80d738497acb3672365d095a1470e9b56e9f188d21b893c4d9412e48f1ecac5695c68bb2757abb3e3f6062916"}}, {0xf7, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x449}}]}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xfa2, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x2}]}, &(0x7f0000000080)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0xa, 0x801, 0x84) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) listen(r5, 0xfffffffd) r7 = socket$inet(0xa, 0x801, 0x84) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) listen(r7, 0x1) r9 = socket$netlink(0x10, 0x3, 0x4) listen(r4, 0x8200002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="120150028d1c5610d112349690180102030109022f0001fb0080020904212200ff0137060524fc000105240008000d240f"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 4.199501117s ago: executing program 2 (id=1433): syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaace95510aa736fcea8f6f78b36802f38ade4bc91d130a25446b19928cc317c4e0bb9fa175b4ec20e76e4303ca1a501f12af1c6da5a93d352e30a2fa8352815a03a89b89302196a553e38743e5c898210446f3ef98beaeaace040056cc2ff0aac567274b000000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650c8f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000127bd7000fbdbdf30ddf12f484b219d25080000000c000180060005004e200000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e23, 0x4, 'nq\x00', 0x16, 0x5, 0xfffffffd}, {@rand_addr=0x64010100, 0x4e20, 0x0, 0x20000000, 0x12d5c, 0x12d5c}}, 0x44) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae504000905070020000508ce0905"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) madvise(0xffffffffffffffff, 0x0, 0x1) syz_usb_control_io(r2, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="400d02000000e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@overlay={0x5cc2, 0x6, 0x4, 0x0, 0x2, {}, {0x5, 0x2, 0x1, 0x9d, 0x8, 0x32, "42881f28"}, 0x5, 0x3, {}, 0x4}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) fcntl$setflags(r4, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3e) r7 = fanotify_init(0x200, 0x48801) fanotify_mark(r7, 0x1, 0x1001, 0xffffffffffffffff, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x2a, 0x0, 0x1, 0x3}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) 3.533821805s ago: executing program 0 (id=1436): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000640)="1898c0e85dda3a0097d5d196ec83b7b25f0172795c01", 0x16}, {&(0x7f00000003c0)="4beb846572140bea61a6ebbe05d3eb88c1f111981e572166f5b56bd033bb960a85d5e36aa461d2c627079e98a4a68a719d51aebebac4619440d68a371c99296e4d3aa3142d34ed1974e9f3ab67f4f387dd3dc2f2a26c22c6122a42737ac9c9bcf5d5334a8d4455991777a47649ec97052f75c1cea879c1f95e7b5a10db06850e63ef28977f3e215f180a300fff", 0x8d}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000480)="4fad8fdc444af7ec17a82f50b264d4c97c4fa90873734ef0609545ceb4ddf37494139cb27b782a84e008afaca11933425030a1c5098663e361e4269331aa4fb446abb45e381e4324deecad2dca94da7a86fca3a488f537e453b58ecdaf28bfbbbcebe154057207af3d6b6ba81360f551206d94e439b1c77b176205654c51813135b0f8e4c8946663bf53fd5b81791ef7ac76fdd07ad9435f38fda513f56cf0464e122a0eff976c5a5b77b053b5469b2de1", 0xb1}, {&(0x7f0000000700)="fb6cf61259c5154514707c0ba54eac8e06c00e07943b544c1ccf8dc46f5049333ac24557d50f48b352e54dbf3a0b129890751c2d463c11333b3edd39976ea6e795a4be0613216b1589b592210aa532acb3d73c3d688bdb51f9f6bedc108dfecccb0f19bc757bf061dbf16d5518ff3394701b2da6ac2535106187492b5299f4dc32672a1946e0a52563a6f7a41e7ecc54d8cc5fdd9666dd6e3e9d11a96c526761077bc36205a6a63b0912187d87b815e712b9a482963bce6687527efad7ba8af2f7cce6148341b4422a501ac624a49c47d9452aef22386fbf78c8c6f87524f0d1a8d9c01532c4d227a7c8b5", 0xeb}], 0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x4cb) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x40044160, 0x3) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x8012, r1, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 3.47680648s ago: executing program 0 (id=1437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc0000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000000fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000000001ff0200fffffffffffffffd0000000001fff1ffff0000000000000000000000006c01"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.400397187s ago: executing program 0 (id=1438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x87, @multicast2, 0x18, 0x3, 'ovf\x00', 0x3c, 0xf3, 0x7d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x2c, @remote, 0x4e20, 0x3, 'wlc\x00', 0x1, 0x8, 0x60}, {@loopback, 0x4e23, 0x1, 0x1c0000, 0x80012d5f, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x1, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038c317fab5677de4800000000000000000000000000000000000000000000000000000000000000000000c0aa258800000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022001800050b00000101000000000000000000000600ff0901a101855d0902150026ff007508951b8102c0"], 0x12f) close(r6) r7 = openat$cgroup_ro(r3, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x12) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000000300)={0x29, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000340)={r8, 0x7}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f00000003c0)={0xbb0, r5, 'id1\x00'}) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC=r5, @ANYBLOB="bf1a1daf6e61483f92bbc4f363d4421a5b335ba4ff51a06f828146ccfbe09ba7cc753d7e8abf7779e0abc8c3ef06ecdb63744adf6ef19e6b131f66ea5ba4aef056b11bbc74e8c4ce566273c64838fa", @ANYRESDEC=0x0]) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) dup(r10) fadvise64(r10, 0x100007, 0x7, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in, @in6=@private2}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0x8b) setsockopt$inet6_int(r9, 0x29, 0xce, &(0x7f0000000200)=0x40, 0x4) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.192996593s ago: executing program 4 (id=1439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) unshare(0xe060400) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I', 0x1}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000000240)="e7", 0x1}], 0x1}}], 0x3, 0x4050000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x13) ioctl$KVM_CAP_HYPERV_SEND_IPI(r9, 0x4068aea3, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.186334763s ago: executing program 3 (id=1440): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000f40)={0x0, &(0x7f0000000a80)=[@nested_load_code={0x12e, 0x4d, {0x2, "6764410fc72ce43e47d8c136660ff9a5bd000000440f38f601b8010000000f01d9c402d99772c60f01f80f01c80f01f8c4a2f9303f"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host64=0x2c04, 0x0, 0x1, 0x5}}, @in_dx={0x69, 0x20, {0xd9a2, 0x3}}, @nested_amd_clgi={0x17f, 0x10}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0x63b0}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x202d, 0x0, 0x2, 0x4}}, @nested_load_code={0x12e, 0x60, {0x3, "c4c2dd45c3360f30f3460f0137646564420fc733dd8ce42700000066baf80cb849702580ef66bafc0cecb914060000b800400000ba000000000f304d0fc76dabf3430f1eed0f01ca"}}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee0000, 0x3069}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xde3, 0x3}}, @set_irq_handler={0xc8, 0x20, {0x69}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0xeeee8000, 0x6edc}}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x15f, {0x2, 0x1ff, [@nested_amd_set_intercept={0x181, 0x30, {0x3, 0x7f, 0x3, 0x1}}, @nested_load_syzos={0x136, 0x20, {0x3, 0x86a}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @code={0xa, 0x4e, {"f2650f4a46eb660f6ed966bad00466b80e0066ef67470f01df67420f20e066ba430066ed66ba400066b882ba66ef36f4c7f83b1200000fc7b5e72d0000"}}, @nested_load_code={0x12e, 0x71, {0x3, "c4e3897cb90000000000420fc7760e6726420f7828b8010000000f01c166b8b5008ec0266640d331b95b0a00000f328023000f20c035000000200f22c0c7442400a1000000c7442402e7d00000c7442406000000000f011c24"}}, @nested_amd_vmload={0x182, 0x18, 0x2}]}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x43, 0x7, 0x4, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x1, 0x5, 0x1}}, @in_dx={0x69, 0x20, {0x5400, 0x4}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18}], 0x4ac}) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000f80)={{0xa000, 0x1000, 0xa, 0x9, 0x5, 0xd8, 0x3, 0x7, 0x0, 0x31, 0x7, 0xd}, {0x4, 0x4, 0x8, 0x0, 0x2, 0x3, 0x8, 0x6, 0x6, 0x9, 0x7, 0x9}, {0x4, 0x25000, 0x4, 0xf, 0x7, 0x22, 0x5, 0x2, 0x9, 0x5, 0x0, 0x40}, {0xeeee0000, 0x58000, 0x10, 0x0, 0x2, 0x3, 0xff, 0x6, 0x1, 0x7, 0xaa, 0x8}, {0x70000, 0x2000, 0xe, 0x81, 0x6, 0x10, 0x6, 0x0, 0x1, 0x0, 0xf4, 0x1}, {0x7000, 0x8080000, 0x4, 0x9, 0x80, 0xfd, 0x3, 0x2, 0x8d, 0x5, 0x4, 0x1}, {0x80a0000, 0x100000, 0x3, 0x5, 0x7, 0x73, 0x8, 0xe, 0xff, 0x2, 0x1, 0x3}, {0x60000, 0xffff1000, 0x4, 0x0, 0x9, 0xa, 0x6, 0x4, 0x3, 0x9, 0x25, 0x6}, {0xffffffff, 0x7ff}, {0x4, 0x8}, 0x20010018, 0x0, 0x3000, 0x20118, 0x5, 0x4100, 0xd000, [0xa, 0x9, 0x1, 0x80]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f00000000c0), 0x1004) unshare(0xc040400) syz_io_uring_setup(0x6ff, &(0x7f0000000140)={0x0, 0xce1d, 0x10826, 0x2, 0x9c}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x10, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30}}}}}]}}, 0x0) clock_gettime(0x0, &(0x7f0000001140)) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000600)={0x0, 0x30b5, 0x0, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x400, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000040)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r9, 0x40047438, &(0x7f0000000040)) r10 = dup(r7) syz_ublk_setup_queues(r10, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x10, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x0, 0x801f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd87e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) 2.957992172s ago: executing program 4 (id=1441): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0xf67b2dad34b0b56}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000417baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000db98000041000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.845120778s ago: executing program 4 (id=1442): syz_usb_connect(0x5, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f000000000009050300000000000009050cfeffff01060209050f000000000000090507c2"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x160, 0x1f8, 0x290, 0x328, 0xc8, 0x1f8, 0x1f8, 0x290, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x16080) r3 = socket$tipc(0x1e, 0x1, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0xa0c4}], 0x1, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000080)={0x1, 0xee, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffff7, 0x1fe, 0x6, 0x26, 0x2, 0x5}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4b70cf489f5cb3b}) syz_usb_connect(0x5, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x110, 0x26, 0xad, 0x12, 0x8, 0x413, 0x6a04, 0x272b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x87, 0x3, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xbc, 0x57, 0xf2, 0xfc}}]}}]}}, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f00000002c0)={0x0, "6bd55d02f91c6798dca7ed1063cd003a3d609bbeb6c7d7a5be0673544d6e13351ea068834932861895320367ec181d1b4d4a8089712ab9fbeea9117440b954f1", {0x10, 0x1ffe0000}}) 2.304215884s ago: executing program 0 (id=1443): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x7}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f000064f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x80) 2.018358334s ago: executing program 0 (id=1444): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x1, 0x20002) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f00000000c0)={0x8, 0x0, r1}) syz_usb_connect(0x5, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff01030207072405011ccbda109316b3"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 1.171844566s ago: executing program 1 (id=1445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0xabd) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) r5 = dup3(r4, r2, 0x80000) pwritev(r5, &(0x7f0000001880)=[{&(0x7f0000000180)="f1", 0x1}, {0x0}], 0x2, 0x6, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x8, 0x6000000, {{0x9, 0x4, 0x0, 0x29, 0x24, 0x67, 0x0, 0xfa, 0x29, 0x0, @multicast2, @local, {[@noop, @ssrr={0x89, 0xf, 0xd0, [@local, @rand_addr=0x64010101, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6gre0\x00', r6, 0x29, 0x58, 0x80, 0xf4, 0x4f, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x700, 0x9, 0x81}}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x8, 0xf4, {{0x1e, 0x4, 0x2, 0x3, 0x78, 0x64, 0x0, 0xb1, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@rr={0x7, 0xf, 0xae, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x33}]}, @end, @rr={0x7, 0x7, 0xf, [@dev={0xac, 0x14, 0x14, 0x3e}]}, @lsrr={0x83, 0xf, 0x95, [@multicast2, @broadcast, @multicast1]}, @timestamp_addr={0x44, 0x24, 0x3c, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x69}, {@broadcast, 0x7}, {@broadcast, 0x5}, {@local, 0x80000001}]}, @timestamp={0x44, 0x18, 0xf1, 0x0, 0xf, [0x4, 0x7, 0x1, 0x9, 0x2]}]}}}}}) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000000)={0x1, @pix={0x0, 0x0, 0x3132564e, 0x7, 0x9, 0xfffffffe, 0x2, 0xffffff81, 0x0, 0x0, 0x1, 0x4}}) inotify_init() mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x42142, 0x80) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') ioctl$int_in(r12, 0x5452, &(0x7f0000000040)=0x7) dup2(r12, r11) sendmsg$nl_route(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005200040b28bdf000ffdbdf251cff000100c5437dee048c1340fde5eb5fb7efc9663eea0319", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0xaa800a3006e18b18}, 0x8810) 1.021566253s ago: executing program 2 (id=1446): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4810) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000440), 0x0, 0x40015, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) 988.055381ms ago: executing program 1 (id=1447): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000080)=0x80000000) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x280000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x1, 0x68, "e3e76b9ca71d7b85729404f679e5361a893481242dadbc492deeb0906984e0a7c3b7a0ddea2eda5073604d6fe6bcf25b14d32515737b55f49f33e85961ddec0e21aecafd073481050666b974c1eb3ee9210f61c571558e4d6d51dedba818bc43a2b4cd428cf43dfb"}) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x20, 0xf, 0x2, "abf8"}, 0x0, 0x0, 0x0, 0x0}) lseek(r0, 0x86, 0x1) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01417130e99604bea87f807e0a07000000000000000026000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) userfaultfd(0x801) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x8c04}, 0x40c0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000041c0)={0x2020}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7}, './file0/../file0/file0\x00'}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) ioctl$VIDIOC_ENUMINPUT(r8, 0xc050561a, &(0x7f0000000180)={0x1, "c5c2a91e002b1b800000ffe73d5eff0010ffffffe70000ffe700000500", 0x1, 0x9, 0x1, 0xb700, 0xd569eba266d7551c, 0x8}) 946.966169ms ago: executing program 2 (id=1448): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc0000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000000fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020080ffffffffffffff0000000001fff1ffff0000000000000000000000006c01"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 797.299674ms ago: executing program 2 (id=1449): syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2000) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x600100, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x51, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x800) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 754.828153ms ago: executing program 3 (id=1450): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r3 = dup(r0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0xb6e}, 0x8) r6 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbd) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, &(0x7f00000001c0)=ANY=[@ANYBLOB="1110"], 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001010000ff04000c5a00000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r0, 0x0, 0xffff, 0x2) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="3e7a45e5c5288ed7f72c11419ae31eb87edf11115b5e5934afb4595d10f78cfb08af46f500", 0x25}, {&(0x7f0000000640)="2ca4d34158dbd42a4bdb3267b8c57d5534efb107bdfcb545ff9940b2e0563a580e7d0ca45c0b8d377dbb9ec265449b851a8425ba509404733328b5b95224f92d84bf1a779afa767a1c3e29687825919aa0e4ce5002aee6098b0b042c45ea89ca707fd35abef1baff9e1f61787242d29991c7936103cc10d7211433ac3b0b524582f368f26be8866cf720250b57c97d405a5e7369760ca09532dce32c43d5750db345e4472a930b3dd0be0fc54b2c82b527e23afa032e40c573", 0xb9}], 0x2}}], 0x1, 0x4040000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 666.534902ms ago: executing program 0 (id=1451): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x53}]}}]}, 0x44}}, 0x20004055) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001640)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRESOCT=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4084) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$rtc(&(0x7f0000000200), 0x6, 0x6001) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000440)) (async) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x117, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0x65}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0) (async) r3 = getpid() syz_pidfd_open(r3, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1a, 0x50, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x5, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x57, 0x7, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0xf, 0x3, {0x8, 0x25, 0x1, 0x81, 0x33, 0x6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x5, 0x3d, {0x8, 0x25, 0x1, 0x1, 0x33, 0x2, 0x1}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x2b, &(0x7f0000000000)=@string={0x2b, 0x3, "9dac25245fef4378d37b413019dba8c89b1117e64c3facf19a6f9de61bcb6949a5d5c4257f06eb5b01"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x430}}, {0x8d, &(0x7f0000000080)=@string={0x8d, 0x3, "abccf9467fbfbce974ff28f8083beab6c3bf387ccdc53db659353de93d71dc883123bc8156ab3dcec4990f45434f980eddd0fc2902780a882d85b0dce8b3817da6be628d211646f2ac668594b280bd395a65acf15c1f3c50f0230c3fae5d63aa673d1c163862d40ac242c4b0be3ed0c91e4bd02305916880ebaecd395065097cf0bdb5c507e7b7c3ee3872"}}, {0x83, &(0x7f0000000180)=@string={0x83, 0x3, "ba163139f02735590058a58766ef90a0e4d612a75ae3c022fa91d201be96b000551637cc1c1aab9bf3397be69dcae9befaf9cf4be40978513c450800f898e5a96b00000000908122f5653c25f6a9db697e63a52ec7b8d4aeb267a1992edf8523f82958b6b0b1482e27c04431efec309c06"}}, {0x27, &(0x7f0000000240)=@string={0x27, 0x3, "5a2b865b1af36251e0c07ae93f3f6829c60ded5f13c374f2ac0398507efaf435bdec14844b"}}, {0x21, &(0x7f0000000280)=@string={0x21, 0x3, "3c30ea69a7e3ee5d3cdcde46a16956f3c87827db05b9b1d85e15f5aa6e86d1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x861}}, {0xff12, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x300a}}]}) (async) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000001280)=0x1, 0x8, 0x7) 0s ago: executing program 2 (id=1452): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}, 0x1, 0x0, 0x0, 0xf67b2dad34b0b56}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800ffffffb07baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000db98000041000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): busy [ 347.592989][T10161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.595854][T10160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.605474][T10161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.623979][T10160] syzkaller0: left promiscuous mode [ 347.624002][T10160] syzkaller0: left allmulticast mode [ 347.634719][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 347.641107][T10162] netlink: 'syz.2.1102': attribute type 4 has an invalid length. [ 347.641577][T10161] netlink: 'syz.2.1102': attribute type 4 has an invalid length. [ 347.649117][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 347.665918][ T5672] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 347.666575][ T5672] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 347.703724][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.703779][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.740741][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.740787][ T9] usb 4-1: Product: syz [ 347.740817][ T9] usb 4-1: Manufacturer: syz [ 347.740837][ T9] usb 4-1: SerialNumber: syz [ 347.769634][ T5672] usb 1-1: USB disconnect, device number 105 [ 347.777840][ T5686] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.792654][ T5686] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 347.797514][ T25] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 347.818194][ T25] usb 5-1: device descriptor read/8, error -71 [ 347.927513][ T25] usb usb5-port1: unable to enumerate USB device [ 348.122760][ T9] usb 4-1: USB disconnect, device number 109 [ 348.175265][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.325293][T10170] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1103'. [ 348.432555][T10172] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1104'. [ 348.768817][T10178] Invalid argument reading file caps for ./file0 [ 349.008488][T10184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1108'. [ 349.253615][T10190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.269701][T10190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.762522][ T9] usb 2-1: USB disconnect, device number 94 [ 349.784304][ T9] cypress_m8 2-1:0.35: device disconnected [ 349.913077][T10196] fuse: Bad value for 'user_id' [ 349.913125][T10196] fuse: Bad value for 'user_id' [ 350.137097][T10201] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1113'. [ 350.154989][T10203] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1114'. [ 350.265975][T10208] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1115'. [ 350.832868][T10224] fuse: Bad value for 'rootmode' [ 350.937095][ T5693] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 351.087578][ T5693] usb 5-1: Using ep0 maxpacket: 8 [ 351.088409][ T5693] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 351.090411][ T5693] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.090434][ T5693] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.098504][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.098531][ T5693] usb 5-1: Product: syz [ 351.098545][ T5693] usb 5-1: Manufacturer: syz [ 351.098558][ T5693] usb 5-1: SerialNumber: syz [ 351.332063][T10235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.356248][ T5693] usb 5-1: 6:0: cannot get min/max values for control 8 (id 6) [ 351.364838][ T5693] usb 5-1: unit 4 not found! [ 351.426200][ T5693] usb 5-1: USB disconnect, device number 104 [ 351.461790][T10239] binder: 10229:10239 ioctl 80049367 200000000040 returned -22 [ 351.474728][T10239] overlayfs: missing 'lowerdir' [ 351.489630][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.009357][T10244] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1126'. [ 352.131608][T10246] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1127'. [ 352.187020][ T5672] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 352.253710][T10249] sctp: [Deprecated]: syz.4.1128 (pid 10249) Use of int in max_burst socket option deprecated. [ 352.253710][T10249] Use struct sctp_assoc_value instead [ 352.272903][T10249] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 352.343593][T10249] loop5: detected capacity change from 0 to 6 [ 352.352411][T10249] Dev loop5: unable to read RDB block 6 [ 352.363128][T10249] loop5: AHDI p1 p2 [ 352.367480][T10249] loop5: partition table partially beyond EOD, truncated [ 352.369564][ T5672] usb 4-1: not running at top speed; connect to a high speed hub [ 352.369598][ T5672] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0620, bcdDevice=3f.5b [ 352.371075][ T5672] usb 4-1: config 1 has an invalid interface number: 39 but max is 3 [ 352.371097][ T5672] usb 4-1: config 1 has an invalid interface number: 201 but max is 3 [ 352.371116][ T5672] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 352.371135][ T5672] usb 4-1: config 1 has an invalid interface number: 144 but max is 3 [ 352.371154][ T5672] usb 4-1: config 1 has an invalid interface number: 118 but max is 3 [ 352.371172][ T5672] usb 4-1: config 1 has no interface number 0 [ 352.371187][ T5672] usb 4-1: config 1 has no interface number 1 [ 352.371202][ T5672] usb 4-1: config 1 has no interface number 2 [ 352.371216][ T5672] usb 4-1: config 1 has no interface number 3 [ 352.371281][ T5672] usb 4-1: config 1 interface 39 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 352.371316][ T5672] usb 4-1: config 1 interface 201 altsetting 158 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 352.371339][ T5672] usb 4-1: config 1 interface 201 altsetting 158 endpoint 0x82 has invalid maxpacket 34500, setting to 64 [ 352.371363][ T5672] usb 4-1: config 1 interface 201 altsetting 158 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 352.371386][ T5672] usb 4-1: config 1 interface 201 altsetting 158 has a duplicate endpoint with address 0x3, skipping [ 352.371406][ T5672] usb 4-1: config 1 interface 201 altsetting 158 has a duplicate endpoint with address 0x5, skipping [ 352.371427][ T5672] usb 4-1: config 1 interface 201 altsetting 158 has a duplicate endpoint with address 0x7, skipping [ 352.371448][ T5672] usb 4-1: config 1 interface 201 altsetting 158 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 352.371470][ T5672] usb 4-1: config 1 interface 201 altsetting 158 has an invalid descriptor for endpoint zero, skipping [ 352.371489][ T5672] usb 4-1: config 1 interface 201 altsetting 158 has a duplicate endpoint with address 0x6, skipping [ 352.371509][ T5672] usb 4-1: config 1 interface 201 altsetting 158 has a duplicate endpoint with address 0x6, skipping [ 352.371529][ T5672] usb 4-1: config 1 interface 201 altsetting 158 has an invalid descriptor for endpoint zero, skipping [ 352.371547][ T5672] usb 4-1: config 1 interface 201 altsetting 158 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 352.371582][ T5672] usb 4-1: config 1 interface 144 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 352.371602][ T5672] usb 4-1: config 1 interface 144 altsetting 16 has a duplicate endpoint with address 0x6, skipping [ 352.371621][ T5672] usb 4-1: config 1 interface 144 altsetting 16 has a duplicate endpoint with address 0x7, skipping [ 352.371641][ T5672] usb 4-1: config 1 interface 144 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 352.371661][ T5672] usb 4-1: config 1 interface 144 altsetting 16 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 352.371685][ T5672] usb 4-1: config 1 interface 144 altsetting 16 has a duplicate endpoint with address 0xC, skipping [ 352.371705][ T5672] usb 4-1: config 1 interface 144 altsetting 16 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 352.371727][ T5672] usb 4-1: config 1 interface 144 altsetting 16 has a duplicate endpoint with address 0xC, skipping [ 352.371747][ T5672] usb 4-1: config 1 interface 144 altsetting 16 has a duplicate endpoint with address 0x1, skipping [ 352.371766][ T5672] usb 4-1: config 1 interface 144 altsetting 16 has a duplicate endpoint with address 0x9, skipping [ 352.371785][ T5672] usb 4-1: config 1 interface 144 altsetting 16 has a duplicate endpoint with address 0x7, skipping [ 352.371804][ T5672] usb 4-1: config 1 interface 144 altsetting 16 has a duplicate endpoint with address 0x5, skipping [ 352.371824][ T5672] usb 4-1: config 1 interface 144 altsetting 16 has a duplicate endpoint with address 0x9, skipping [ 352.371854][ T5672] usb 4-1: config 1 interface 118 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 352.371883][ T5672] usb 4-1: config 1 interface 118 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 352.371902][ T5672] usb 4-1: config 1 interface 201 has no altsetting 0 [ 352.371918][ T5672] usb 4-1: config 1 interface 144 has no altsetting 0 [ 352.371934][ T5672] usb 4-1: config 1 interface 118 has no altsetting 0 [ 352.374186][ T5672] usb 4-1: Dual-Role OTG device on HNP port [ 352.374464][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.374484][ T5672] usb 4-1: Product: п [ 352.374497][ T5672] usb 4-1: Manufacturer: Ⰹ [ 352.374510][ T5672] usb 4-1: SerialNumber: ᰁ [ 352.404788][T10250] bond0: Error: CAN devices cannot be enslaved [ 352.409298][ T4933] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23 [ 352.449643][ T5686] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 352.507555][T10249] loop5: p1 start 1702059890 is beyond EOD, truncated [ 352.657970][ T5686] usb 1-1: Using ep0 maxpacket: 16 [ 352.661968][ T5686] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= 1.0b [ 352.662009][ T5686] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 352.667784][ T5686] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 352.667823][ T5686] usb 1-1: can't read configurations, error -61 [ 352.798390][ T5686] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 352.838581][ T5672] qmi_wwan 4-1:1.39: bogus CDC Union: master=0, slave=1 [ 352.947318][ T5686] usb 1-1: Using ep0 maxpacket: 16 [ 352.948116][ T5686] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= 1.0b [ 352.948180][ T5686] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 352.951111][ T5686] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 352.951144][ T5686] usb 1-1: can't read configurations, error -61 [ 352.951538][ T5686] usb usb1-port1: attempt power cycle [ 353.084387][T10267] macsec1: entered promiscuous mode [ 353.090032][T10267] veth0_to_bond: entered promiscuous mode [ 353.096435][T10267] macsec1: entered allmulticast mode [ 353.104178][T10267] veth0_to_bond: entered allmulticast mode [ 353.253616][ T5672] qmi_wwan 4-1:1.39: probe with driver qmi_wwan failed with error -22 [ 353.289650][ T5672] qmi_wwan 4-1:1.144: probe with driver qmi_wwan failed with error -22 [ 353.308615][ T5686] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 353.318343][ T5672] usb 4-1: USB disconnect, device number 110 [ 353.338797][ T5686] usb 1-1: Using ep0 maxpacket: 16 [ 353.341226][ T5686] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= 1.0b [ 353.341263][ T5686] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 353.347064][ T5686] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 353.347099][ T5686] usb 1-1: can't read configurations, error -61 [ 353.467811][ T5686] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 353.499591][ T5686] usb 1-1: Using ep0 maxpacket: 16 [ 353.500252][ T5686] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= 1.0b [ 353.500289][ T5686] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 353.501724][ T5686] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 353.501756][ T5686] usb 1-1: can't read configurations, error -61 [ 353.502180][ T5686] usb usb1-port1: unable to enumerate USB device [ 353.843294][T10273] netlink: 'syz.2.1133': attribute type 1 has an invalid length. [ 353.882771][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 354.091604][T10284] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 354.187288][ T5672] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 354.269319][T10289] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1138'. [ 354.335733][T10292] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1139'. [ 354.349002][ T5672] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 354.354735][ T5672] usb 5-1: config index 0 descriptor too short (expected 2312, got 36) [ 354.354772][ T5672] usb 5-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 354.354789][ T5672] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 354.354825][ T5672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.371390][ T158] IPVS: starting estimator thread 0... [ 354.392823][ T5672] usb 5-1: config 0 descriptor?? [ 354.468663][T10296] IPVS: using max 35 ests per chain, 84000 per kthread [ 354.777603][ T5693] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 354.937186][ T5693] usb 1-1: Using ep0 maxpacket: 32 [ 354.946288][ T5693] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 354.958650][ T5693] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 354.967617][ T5693] usb 1-1: config 0 has no interface number 0 [ 354.973903][ T5693] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.973936][ T5693] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 354.973964][ T5693] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 354.973990][ T5693] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 354.974015][ T5693] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 354.974041][ T5693] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 354.974063][ T5693] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 354.974087][ T5693] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 107, changing to 10 [ 354.974114][ T5693] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25209, setting to 1024 [ 354.974140][ T5693] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.096803][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.096837][ T5693] usb 1-1: Product: syz [ 355.096935][ T5693] usb 1-1: Manufacturer: syz [ 355.096951][ T5693] usb 1-1: SerialNumber: syz [ 355.124160][ T5693] usb 1-1: config 0 descriptor?? [ 355.130800][T10304] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 355.140563][ T5693] usb 1-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 355.149017][ T5693] usb 1-1: couldn't find an output bulk endpoint. Bailing out. [ 355.342604][ T5693] usb 1-1: USB disconnect, device number 110 [ 355.824557][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1146'. [ 355.836074][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1146'. [ 355.950176][T10331] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1149'. [ 356.770578][T10330] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.778776][T10330] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 356.781316][T10330] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.781580][T10330] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.781821][T10330] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 356.914140][ T5672] usb 5-1: USB disconnect, device number 105 [ 357.022962][T10350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1154'. [ 357.023012][T10350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1154'. [ 357.047701][ T5731] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 357.080391][T10352] fuse: Bad value for 'user_id' [ 357.080441][T10352] fuse: Bad value for 'user_id' [ 357.080755][T10352] fuse: Bad value for 'user_id' [ 357.080768][T10352] fuse: Bad value for 'user_id' [ 357.090291][T10352] fuse: Bad value for 'user_id' [ 357.090311][T10352] fuse: Bad value for 'user_id' [ 357.090641][T10352] fuse: Bad value for 'user_id' [ 357.090652][T10352] fuse: Bad value for 'user_id' [ 357.091020][T10352] fuse: Bad value for 'user_id' [ 357.091033][T10352] fuse: Bad value for 'user_id' [ 357.092898][T10352] fuse: Bad value for 'user_id' [ 357.092915][T10352] fuse: Bad value for 'user_id' [ 357.095271][T10352] fuse: Bad value for 'user_id' [ 357.095283][T10352] fuse: Bad value for 'user_id' [ 357.095588][T10352] fuse: Bad value for 'user_id' [ 357.095599][T10352] fuse: Bad value for 'user_id' [ 357.095890][T10352] fuse: Bad value for 'user_id' [ 357.095900][T10352] fuse: Bad value for 'user_id' [ 357.096226][T10352] fuse: Bad value for 'user_id' [ 357.096236][T10352] fuse: Bad value for 'user_id' [ 357.100073][T10352] fuse: Bad value for 'user_id' [ 357.100089][T10352] fuse: Bad value for 'user_id' [ 357.100445][T10352] fuse: Bad value for 'user_id' [ 357.100456][T10352] fuse: Bad value for 'user_id' [ 357.100747][T10352] fuse: Bad value for 'user_id' [ 357.100759][T10352] fuse: Bad value for 'user_id' [ 357.101075][T10352] fuse: Bad value for 'user_id' [ 357.101087][T10352] fuse: Bad value for 'user_id' [ 357.101370][T10352] fuse: Bad value for 'user_id' [ 357.101381][T10352] fuse: Bad value for 'user_id' [ 357.105495][T10352] fuse: Bad value for 'user_id' [ 357.105512][T10352] fuse: Bad value for 'user_id' [ 357.105834][T10352] fuse: Bad value for 'user_id' [ 357.105845][T10352] fuse: Bad value for 'user_id' [ 357.106131][T10352] fuse: Bad value for 'user_id' [ 357.106142][T10352] fuse: Bad value for 'user_id' [ 357.106442][T10352] fuse: Bad value for 'user_id' [ 357.106453][T10352] fuse: Bad value for 'user_id' [ 357.106733][T10352] fuse: Bad value for 'user_id' [ 357.114190][T10352] fuse: Bad value for 'user_id' [ 357.114572][T10352] fuse: Bad value for 'user_id' [ 357.114586][T10352] fuse: Bad value for 'user_id' [ 357.114907][T10352] fuse: Bad value for 'user_id' [ 357.114930][T10352] fuse: Bad value for 'user_id' [ 357.115243][T10352] fuse: Bad value for 'user_id' [ 357.115257][T10352] fuse: Bad value for 'user_id' [ 357.115570][T10352] fuse: Bad value for 'user_id' [ 357.115583][T10352] fuse: Bad value for 'user_id' [ 357.117721][T10352] fuse: Bad value for 'user_id' [ 357.117733][T10352] fuse: Bad value for 'user_id' [ 357.118022][T10352] fuse: Bad value for 'user_id' [ 357.118033][T10352] fuse: Bad value for 'user_id' [ 357.118316][T10352] fuse: Bad value for 'user_id' [ 357.118327][T10352] fuse: Bad value for 'user_id' [ 357.118610][T10352] fuse: Bad value for 'user_id' [ 357.118621][T10352] fuse: Bad value for 'user_id' [ 357.118914][T10352] fuse: Bad value for 'user_id' [ 357.118932][T10352] fuse: Bad value for 'user_id' [ 357.121148][T10352] fuse: Bad value for 'user_id' [ 357.121161][T10352] fuse: Bad value for 'user_id' [ 357.121439][T10352] fuse: Bad value for 'user_id' [ 357.121448][T10352] fuse: Bad value for 'user_id' [ 357.121734][T10352] fuse: Bad value for 'user_id' [ 357.121745][T10352] fuse: Bad value for 'user_id' [ 357.199405][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 357.201134][ T5731] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 357.203717][ T5731] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 357.203742][ T5731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.208281][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.208307][ T5731] usb 4-1: Product: syz [ 357.208320][ T5731] usb 4-1: Manufacturer: syz [ 357.208333][ T5731] usb 4-1: SerialNumber: syz [ 357.233247][ T5731] usb 4-1: config 0 descriptor?? [ 357.250935][ T5731] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 357.329797][ T25] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 357.507556][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 357.533787][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 357.533850][ T25] usb 1-1: New USB device found, idVendor=1546, idProduct=1104, bcdDevice=b6.0d [ 357.545315][ T25] usb 1-1: config 3 has an invalid interface number: 71 but max is 0 [ 357.545402][ T25] usb 1-1: config 3 has no interface number 0 [ 357.545445][ T25] usb 1-1: config 3 interface 71 has no altsetting 0 [ 357.562796][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.562826][ T25] usb 1-1: Product: syz [ 357.562841][ T25] usb 1-1: Manufacturer: syz [ 357.562855][ T25] usb 1-1: SerialNumber: syz [ 357.641192][ T5731] gspca_sunplus: reg_r err -32 [ 357.775586][T10355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.778283][T10355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.779639][T10355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.780150][T10355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.781183][T10355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.781691][T10355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.782768][T10355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.783272][T10355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.881503][ T25] cdc_ether 1-1:3.71: invalid descriptor buffer length [ 357.881554][ T25] usb 1-1: No union descriptors [ 357.900758][ T25] usb 1-1: USB disconnect, device number 111 [ 357.907527][ T5672] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 358.067082][ T4933] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.076613][ T5672] usb 2-1: unable to get BOS descriptor or descriptor too short [ 358.085404][ T5672] usb 2-1: not running at top speed; connect to a high speed hub [ 358.085459][ T5672] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 358.106315][ T5672] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.106363][ T5672] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.110083][ T5672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.110109][ T5672] usb 2-1: Product: syz [ 358.110122][ T5672] usb 2-1: Manufacturer: syz [ 358.110134][ T5672] usb 2-1: SerialNumber: syz [ 358.145933][T10383] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1160'. [ 358.222961][T10385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.233341][T10385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.336700][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.337310][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.519533][ T5672] usb 2-1: USB disconnect, device number 95 [ 358.579188][ T5737] udevd[5737]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.607869][ T5731] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 358.687027][ T5686] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 358.787337][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 358.787497][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.787547][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 358.799916][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 358.847778][ T5686] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 358.851449][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.851476][ T5686] usb 5-1: Product: syz [ 358.851489][ T5686] usb 5-1: Manufacturer: syz [ 358.851501][ T5686] usb 5-1: SerialNumber: syz [ 359.071612][ T5686] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 359.071697][ T5686] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 359.071735][ T5686] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 359.120072][ T5686] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 359.164408][T10414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.177868][T10414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.214719][T10418] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1172'. [ 359.231644][ T25] usb 5-1: USB disconnect, device number 106 [ 359.370933][ T5672] usb 4-1: USB disconnect, device number 111 [ 359.393479][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1174'. [ 359.393573][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1174'. [ 359.428691][ T5686] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 359.471661][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1174'. [ 359.471736][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1174'. [ 359.570181][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1174'. [ 359.570259][T10420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1174'. [ 359.576994][ T5686] usb 1-1: device descriptor read/64, error -71 [ 359.817879][ T5672] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 359.821085][ T5686] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 359.989588][ T5686] usb 1-1: device descriptor read/64, error -71 [ 359.989723][ T5672] usb 4-1: Using ep0 maxpacket: 8 [ 359.991031][ T5672] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 359.992353][ T5672] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 359.992375][ T5672] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 359.992401][ T5672] usb 4-1: config 0 has no interface number 0 [ 359.992440][ T5672] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 359.992464][ T5672] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 359.992488][ T5672] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 359.994129][ T5672] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 359.994149][ T5672] usb 4-1: Product: syz [ 359.994163][ T5672] usb 4-1: Manufacturer: syz [ 360.029757][ T5672] usb 4-1: config 0 descriptor?? [ 360.031505][T10424] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 360.107935][ T5686] usb usb1-port1: attempt power cycle [ 360.457259][ T5686] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 360.479126][ T5686] usb 1-1: device descriptor read/8, error -71 [ 360.577075][ T25] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 360.655361][ T5672] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input34 [ 360.727258][ T25] usb 2-1: Invalid ep0 maxpacket: 32 [ 360.734204][ T5686] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 360.747689][ T5686] usb 1-1: device descriptor read/8, error -71 [ 360.857018][ T25] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 360.858268][ T5686] usb usb1-port1: unable to enumerate USB device [ 361.027175][ T25] usb 2-1: Invalid ep0 maxpacket: 32 [ 361.033231][ T25] usb usb2-port1: attempt power cycle [ 361.377077][ T25] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 361.399189][ T25] usb 2-1: Invalid ep0 maxpacket: 32 [ 361.537511][ T25] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 361.560002][ T25] usb 2-1: Invalid ep0 maxpacket: 32 [ 361.565659][T10467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.565985][ T25] usb usb2-port1: unable to enumerate USB device [ 361.570638][T10467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.419444][T10472] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 362.436504][T10472] syz.2.1184: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 362.487327][T10474] __nla_validate_parse: 1 callbacks suppressed [ 362.495163][T10474] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1185'. [ 362.511029][T10472] CPU: 0 UID: 0 PID: 10472 Comm: syz.2.1184 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.511058][T10472] Tainted: [L]=SOFTLOCKUP [ 362.511063][T10472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.511072][T10472] Call Trace: [ 362.511126][T10472] [ 362.511168][T10472] dump_stack_lvl+0xe8/0x150 [ 362.511310][T10472] warn_alloc+0x24d/0x270 [ 362.511355][T10472] ? kasan_save_track+0x4f/0x80 [ 362.511387][T10472] ? kasan_save_track+0x3e/0x80 [ 362.511400][T10472] ? __pfx_warn_alloc+0x10/0x10 [ 362.511416][T10472] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 362.511486][T10472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.511526][T10472] __vmalloc_node_range_noprof+0x127/0x1540 [ 362.511561][T10472] ? rcu_is_watching+0x16/0xb0 [ 362.511595][T10472] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 362.511611][T10472] ? __kmalloc_cache_noprof+0x321/0x600 [ 362.511630][T10472] ? __kmalloc_cache_noprof+0x14d/0x600 [ 362.511648][T10472] ? xskq_create+0x56/0x220 [ 362.511719][T10472] xskq_create+0x148/0x220 [ 362.511735][T10472] ? xsk_init_queue+0x8a/0xe0 [ 362.511752][T10472] xsk_init_queue+0x8a/0xe0 [ 362.511770][T10472] xsk_setsockopt+0x52a/0x960 [ 362.511795][T10472] ? __pfx_xsk_setsockopt+0x10/0x10 [ 362.511809][T10472] ? __pfx_aa_sk_perm+0x10/0x10 [ 362.511869][T10472] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 362.511897][T10472] ? __pfx_xsk_setsockopt+0x10/0x10 [ 362.511913][T10472] do_sock_setsockopt+0x17c/0x1b0 [ 362.511929][T10472] __x64_sys_setsockopt+0x13d/0x1b0 [ 362.511945][T10472] do_syscall_64+0x166/0x520 [ 362.511992][T10472] ? trace_irq_disable+0x3b/0x140 [ 362.512017][T10472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.512029][T10472] ? clear_bhb_loop+0x70/0xc0 [ 362.512044][T10472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.512056][T10472] RIP: 0033:0x7f34c5d9e159 [ 362.512086][T10472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.512101][T10472] RSP: 002b:00007f34c6c3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 362.512137][T10472] RAX: ffffffffffffffda RBX: 00007f34c6025fa0 RCX: 00007f34c5d9e159 [ 362.512147][T10472] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 362.512155][T10472] RBP: 00007f34c5e35024 R08: 0000000000000029 R09: 0000000000000000 [ 362.512163][T10472] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.512171][T10472] R13: 00007f34c6026038 R14: 00007f34c6025fa0 R15: 00007f34c614fa48 [ 362.512190][T10472] [ 362.513811][T10475] netlink: 'syz.2.1184': attribute type 15 has an invalid length. [ 362.528491][T10472] Mem-Info: [ 362.528509][T10472] active_anon:9472 inactive_anon:9 isolated_anon:0 [ 362.528509][T10472] active_file:431 inactive_file:56895 isolated_file:0 [ 362.528509][T10472] unevictable:0 dirty:299 writeback:0 [ 362.528509][T10472] slab_reclaimable:10985 slab_unreclaimable:101291 [ 362.528509][T10472] mapped:32312 shmem:1783 pagetables:1506 [ 362.528509][T10472] sec_pagetables:0 bounce:0 [ 362.528509][T10472] kernel_misc_reclaimable:0 [ 362.528509][T10472] free:1284276 free_pcp:15006 free_cma:0 [ 362.528636][T10472] Node 0 active_anon:37888kB inactive_anon:36kB active_file:1724kB inactive_file:227092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129056kB dirty:1176kB writeback:0kB shmem:7132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13500kB pagetables:5904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 362.533953][T10472] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192kB dirty:20kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 362.534010][T10472] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.534143][T10472] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 362.534181][T10472] Node 0 DMA32 free:1199688kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37688kB inactive_anon:36kB active_file:1724kB inactive_file:227092kB unevictable:0kB writepending:1176kB zspages:772kB present:3129332kB managed:2546736kB mlocked:0kB bounce:0kB free_pcp:42060kB local_pcp:21124kB free_cma:0kB [ 362.534238][T10472] lowmem_reserve[]: 0 0 0 0 0 [ 362.534337][T10472] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.534389][T10472] lowmem_reserve[]: 0 0 0 0 0 [ 362.534515][T10472] Node 1 Normal free:3922256kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:488kB unevictable:0kB writepending:20kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:17956kB local_pcp:0kB free_cma:0kB [ 362.534727][T10472] lowmem_reserve[]: 0 0 0 0 0 [ 362.534764][T10472] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 362.534954][T10472] Node 0 DMA32: 1942*4kB (UME) 1146*8kB (UME) 557*16kB (UME) 536*32kB (UME) 330*64kB (UME) 188*128kB (UME) 62*256kB (UM) 16*512kB (UM) 0*1024kB 3*2048kB (UE) 264*4096kB (UM) = 1199736kB [ 362.535288][T10472] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 362.535387][T10472] Node 1 Normal: 4*4kB (M) 8*8kB (UM) 10*16kB (UM) 11*32kB (UM) 10*64kB (UM) 5*128kB (UM) 4*256kB (UM) 7*512kB (UM) 2*1024kB (M) 1*2048kB (M) 955*4096kB (UM) = 3922256kB [ 362.535678][T10472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.535694][T10472] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 362.535708][T10472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 362.537720][T10475] bridge0: port 3(batadv0) entered blocking state [ 362.537890][T10475] bridge0: port 3(batadv0) entered disabled state [ 362.539334][T10475] batadv0: entered allmulticast mode [ 362.545043][T10472] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 362.545065][T10472] 59114 total pagecache pages [ 362.545073][T10472] 9 pages in swap cache [ 362.545079][T10472] Free swap = 124388kB [ 362.545087][T10472] Total swap = 124996kB [ 362.545175][T10472] 2097051 pages RAM [ 362.545182][T10472] 0 pages HighMem/MovableOnly [ 362.545190][T10472] 428751 pages reserved [ 362.545196][T10472] 0 pages cma reserved [ 362.559324][T10475] batadv0: entered promiscuous mode [ 362.614367][T10475] bridge0: port 3(batadv0) entered blocking state [ 362.614474][T10475] bridge0: port 3(batadv0) entered forwarding state [ 362.772957][ T990] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 362.772977][ T990] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 362.906922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 363.113322][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 363.113386][ T5686] usb 4-1: USB disconnect, device number 112 [ 363.344393][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.355249][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.463074][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 363.463124][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 363.463168][T10492] netlink: 'syz.1.1190': attribute type 19 has an invalid length. [ 363.463188][T10492] netlink: 'syz.1.1190': attribute type 20 has an invalid length. [ 363.659467][T10496] Invalid option length (1048563) for dns_resolver key [ 363.659794][ T5672] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 363.684014][T10496] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1191'. [ 363.695713][T10499] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1191'. [ 363.829421][ T5672] usb 5-1: Using ep0 maxpacket: 8 [ 363.835248][ T5672] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 363.837143][ T5672] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 363.837206][ T5672] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 363.837243][ T5672] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 363.837268][ T5672] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.837292][ T5672] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 363.837314][ T5672] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 363.837337][ T5672] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 363.837362][ T5672] usb 5-1: config 168 interface 0 has no altsetting 0 [ 363.841711][ T5672] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 363.841747][ T5672] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 363.841782][ T5672] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 363.841806][ T5672] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.841828][ T5672] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 363.841852][ T5672] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 363.841875][ T5672] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 363.841900][ T5672] usb 5-1: config 168 interface 0 has no altsetting 0 [ 363.843185][ T5672] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 363.843225][ T5672] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 363.843262][ T5672] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 363.843286][ T5672] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.843308][ T5672] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 363.843331][ T5672] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 363.843354][ T5672] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 363.843378][ T5672] usb 5-1: config 168 interface 0 has no altsetting 0 [ 363.851547][ T5672] usb 5-1: string descriptor 0 read error: -22 [ 363.851695][ T5672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.878004][ T5672] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 363.900343][ T5686] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 363.947103][ T5696] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 364.082289][ T5686] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.082965][ T5696] usb 4-1: device descriptor read/64, error -71 [ 364.088276][ T5686] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 364.092637][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.092663][ T5686] usb 2-1: Product: ⡺읖郹춺㦂ᡝ葢㰿䁹鲸ꕑ킯릝촨녧┮Ᲊ慆敇玒␊ꛭ숦▢ [ 364.092680][ T5686] usb 2-1: Manufacturer: ⌮矗ꆻỢ쬘直籽㗸缪Ⱶ㛐ᩉ倅폓㭦吿㰗䟃䮽 [ 364.092696][ T5686] usb 2-1: SerialNumber: 红ﶿບত⌃㵤᠋泉䛁码끪綎൹쾀剅䉙띴꧂䆜晐ฬ想甜蠘⎨䨞ꠄᡸ헾ḫ猩⿗吰귮ⴑ縨ꨖ኶ [ 364.140573][ T5672] usb 5-1: USB disconnect, device number 107 [ 364.294925][T10511] tc action pedit 'at' offset 5 out of bounds [ 364.294960][T10511] tc action pedit 'at' offset 5 out of bounds [ 364.295009][T10511] tc action pedit 'at' offset 5 out of bounds [ 364.295025][T10511] tc action pedit 'at' offset 5 out of bounds [ 364.295037][T10511] tc action pedit 'at' offset 5 out of bounds [ 364.295048][T10511] tc action pedit 'at' offset 5 out of bounds [ 364.295078][T10511] tc action pedit 'at' offset 5 out of bounds [ 364.295088][T10511] tc action pedit 'at' offset 5 out of bounds [ 364.295098][T10511] tc action pedit 'at' offset 5 out of bounds [ 364.295109][T10511] tc action pedit 'at' offset 5 out of bounds [ 364.295131][T10511] 0: reclassify loop, rule prio 0, protocol 800 [ 364.317362][ T5696] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 364.436361][T10517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.447246][ T5696] usb 4-1: device descriptor read/64, error -71 [ 364.454740][T10517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.518906][T10498] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 364.557878][ T5696] usb usb4-port1: attempt power cycle [ 364.727643][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.738356][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.749344][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.749919][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.897233][ T5696] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 364.918567][ T5696] usb 4-1: device descriptor read/8, error -71 [ 364.947567][ T5693] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 364.971149][ T5686] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 364.979194][ T5686] cdc_ncm 2-1:1.0: bind() failure [ 364.991215][ T5686] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 364.991280][ T5686] cdc_ncm 2-1:1.1: bind() failure [ 364.998864][ T5686] usb 2-1: USB disconnect, device number 100 [ 365.107953][ T5693] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 365.109321][ T5693] usb 5-1: config index 0 descriptor too short (expected 69, got 51) [ 365.109379][ T5693] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.109403][ T5693] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.111956][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.111977][ T5693] usb 5-1: Product: syz [ 365.111991][ T5693] usb 5-1: Manufacturer: syz [ 365.112004][ T5693] usb 5-1: SerialNumber: syz [ 365.121596][ T5693] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 365.146994][ T25] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 365.197491][ T5696] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 365.218258][ T5696] usb 4-1: device descriptor read/8, error -71 [ 365.297756][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 365.301995][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.302022][ T25] usb 1-1: Product: syz [ 365.302036][ T25] usb 1-1: Manufacturer: syz [ 365.302049][ T25] usb 1-1: SerialNumber: syz [ 365.305483][ T25] usb 1-1: config 0 descriptor?? [ 365.331660][ T5696] usb usb4-port1: unable to enumerate USB device [ 365.340030][ T5693] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -90 [ 365.379037][ T5693] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 365.410584][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.527961][ T25] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 365.596329][ T5696] usb 5-1: USB disconnect, device number 108 [ 365.816983][ T5686] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 365.967832][ T5686] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 365.983077][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.983123][ T5686] usb 2-1: Product: syz [ 365.983156][ T5686] usb 2-1: Manufacturer: syz [ 365.983169][ T5686] usb 2-1: SerialNumber: syz [ 366.201958][ T5686] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 366.215894][ T5686] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 366.250087][ T5686] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 366.250170][ T5686] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 366.250862][ T5686] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 366.274895][ T5686] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 366.451293][T10539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.451759][T10539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.973281][T10545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.983167][T10545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.998953][T10545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.008639][ T5731] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 367.012690][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.013107][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.016592][T10548] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 367.207143][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 367.213703][ T5731] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 367.225659][ T5731] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 367.225711][ T5731] usb 4-1: config 0 has no interface number 0 [ 367.225785][ T5731] usb 4-1: config 0 interface 12 has no altsetting 0 [ 367.255352][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.255417][ T5731] usb 4-1: Product: syz [ 367.255435][ T5731] usb 4-1: Manufacturer: syz [ 367.255448][ T5731] usb 4-1: SerialNumber: syz [ 367.288425][ T5731] usb 4-1: config 0 descriptor?? [ 367.355341][ T25] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 367.375971][ T25] usb 1-1: USB disconnect, device number 116 [ 367.587350][ T30] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 367.670988][T10558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1203'. [ 367.747085][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 367.747844][ T30] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 367.749527][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.754296][ T30] usb 5-1: config 0 descriptor?? [ 367.759442][ T30] gspca_main: sunplus-2.14.0 probing 041e:400b [ 368.592284][ T5686] usb 2-1: USB disconnect, device number 101 [ 368.771614][T10553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.781074][T10566] ip6gre1: entered allmulticast mode [ 368.783194][ T6808] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.351960][ T5731] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 369.352137][ T5731] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 369.352213][ T5731] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 369.352296][ T5731] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 369.587165][ T4933] Bluetooth: hci1: command 0x0c1a tx timeout [ 369.587314][T10543] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 369.664562][T10543] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 369.665434][T10543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.665670][T10543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.665888][T10543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.708420][ T5686] usb 4-1: USB disconnect, device number 117 [ 369.828485][T10573] netlink: 'syz.2.1211': attribute type 10 has an invalid length. [ 369.828877][T10573] veth0_vlan: entered allmulticast mode [ 369.837158][T10574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.837576][T10574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.868327][T10573] team0: Device veth0_vlan failed to register rx_handler [ 369.927833][ T25] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 369.996807][T10569] fuse: Bad value for 'fd' [ 370.087018][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 370.087965][ T25] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 370.091814][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.091866][ T25] usb 1-1: Product: syz [ 370.091879][ T25] usb 1-1: Manufacturer: syz [ 370.091892][ T25] usb 1-1: SerialNumber: syz [ 370.095730][ T25] usb 1-1: config 0 descriptor?? [ 370.101212][ T25] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 370.107555][ T30] gspca_sunplus: reg_w_riv err -110 [ 370.107694][ T30] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 370.318839][ T5686] usb 5-1: USB disconnect, device number 109 [ 370.511367][ T25] gspca_sonixj: reg_r err -32 [ 370.511539][ T25] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 370.556416][T10590] syzkaller1: entered promiscuous mode [ 370.556469][T10590] syzkaller1: entered allmulticast mode [ 371.316992][ T5686] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 371.410823][T10595] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1215'. [ 371.414918][T10595] tipc: Enabled bearer , priority 0 [ 371.421661][T10595] syzkaller0: mtu less than device minimum [ 371.430211][T10595] syzkaller0: left promiscuous mode [ 371.430232][T10595] syzkaller0: left allmulticast mode [ 371.479198][ T5686] usb 4-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=e9.15 [ 371.493017][ T5686] usb 4-1: config 11 has an invalid interface number: 104 but max is 0 [ 371.501723][ T5686] usb 4-1: config 11 has no interface number 0 [ 371.501816][ T5686] usb 4-1: config 11 interface 104 has no altsetting 0 [ 371.503773][T10597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.504947][T10597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.506421][T10597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.544846][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.553371][ T5686] usb 4-1: Product: syz [ 371.553425][ T5686] usb 4-1: Manufacturer: syz [ 371.553446][ T5686] usb 4-1: SerialNumber: syz [ 371.667118][ T5614] Bluetooth: hci3: command 0x0c1a tx timeout [ 371.667186][ T5614] Bluetooth: hci2: command 0x0c1a tx timeout [ 371.667214][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 371.667286][ T4933] Bluetooth: hci4: command 0x0c1a tx timeout [ 371.812481][ T5686] rndis_host 4-1:11.104: invalid descriptor buffer length [ 371.820178][ T5686] rndis_host 4-1:11.104: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 371.829998][T10597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.831197][T10597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.849529][ T5686] cdc_acm 4-1:11.104: invalid descriptor buffer length [ 371.859063][ T5686] usb 4-1: USB disconnect, device number 118 [ 371.919622][ T5696] usb 1-1: USB disconnect, device number 117 [ 372.024395][T10606] netlink: 'syz.0.1218': attribute type 7 has an invalid length. [ 372.024442][T10606] netlink: 'syz.0.1218': attribute type 5 has an invalid length. [ 372.024481][T10606] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1218'. [ 372.024938][T10607] netlink: 'syz.0.1218': attribute type 7 has an invalid length. [ 372.024955][T10607] netlink: 'syz.0.1218': attribute type 5 has an invalid length. [ 372.024965][T10607] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1218'. [ 372.619826][T10616] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 372.695331][T10624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.704746][T10624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.716651][T10623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.739148][T10623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.947128][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.067197][ T5686] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 373.217069][ T5686] usb 4-1: Using ep0 maxpacket: 32 [ 373.218039][ T5686] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 373.219016][ T5686] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 373.219037][ T5686] usb 4-1: config 0 has no interface number 0 [ 373.219075][ T5686] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.219100][ T5686] usb 4-1: config 0 interface 85 has no altsetting 0 [ 373.221162][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.221182][ T5686] usb 4-1: Product: syz [ 373.221195][ T5686] usb 4-1: Manufacturer: syz [ 373.221209][ T5686] usb 4-1: SerialNumber: syz [ 373.250506][ T5686] usb 4-1: config 0 descriptor?? [ 373.593045][T10638] macvtap1: entered allmulticast mode [ 373.601085][T10638] dummy0: entered allmulticast mode [ 373.608940][T10638] dummy0: entered promiscuous mode [ 373.651324][T10638] dummy0: left allmulticast mode [ 373.749857][ T25] dummy0: left promiscuous mode [ 373.921413][ T5686] appletouch 4-1:0.85: Geyser mode initialized. [ 373.956623][ T5686] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input35 [ 374.138975][ T5686] usb 4-1: USB disconnect, device number 119 [ 374.171775][T10654] loop5: detected capacity change from 0 to 7 [ 374.181798][T10654] Dev loop5: unable to read RDB block 7 [ 374.199173][T10654] loop5: AHDI p1 p2 p3 [ 374.199250][T10654] loop5: partition table partially beyond EOD, truncated [ 374.199461][T10654] loop5: p2 start 16777216 is beyond EOD, truncated [ 374.204615][ T5686] appletouch 4-1:0.85: input: appletouch disconnected [ 374.598683][ T5672] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 374.691399][T10665] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1231'. [ 374.757063][ T5672] usb 2-1: Using ep0 maxpacket: 16 [ 374.763174][ T5672] usb 2-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 374.775693][ T5672] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 374.775746][ T5672] usb 2-1: config 0 has no interface number 0 [ 374.775806][ T5672] usb 2-1: config 0 interface 66 has no altsetting 0 [ 374.806270][T10666] input: syz0 as /devices/virtual/input/input36 [ 374.817063][ T5672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.817111][ T5672] usb 2-1: Product: syz [ 374.817174][ T5672] usb 2-1: Manufacturer: syz [ 374.817193][ T5672] usb 2-1: SerialNumber: syz [ 374.846651][ T5672] usb 2-1: config 0 descriptor?? [ 375.207094][ T30] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 375.357080][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 375.364140][ T30] usb 4-1: unable to get BOS descriptor or descriptor too short [ 375.364246][ T30] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 375.365666][ T30] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 375.365690][ T30] usb 4-1: config 1 has no interface number 0 [ 375.365717][ T30] usb 4-1: config 1 interface 151 has no altsetting 0 [ 375.375181][ T30] usb 4-1: string descriptor 0 read error: -22 [ 375.375341][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.442765][ T30] gspca_main: pac7311-2.14.0 probing 093a:260e [ 375.741473][ T5672] usb 2-1: selecting invalid altsetting 3 [ 375.741512][ T5672] comedi comedi5: could not set alternate setting 3 in high speed [ 375.741553][ T5672] usbduxsigma 2-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 375.813070][ T5672] usbduxsigma 2-1:0.66: probe with driver usbduxsigma failed with error -22 [ 375.842234][ T5672] usb 2-1: USB disconnect, device number 102 [ 375.922754][T10679] sctp: [Deprecated]: syz.4.1237 (pid 10679) Use of int in maxseg socket option. [ 375.922754][T10679] Use struct sctp_assoc_value instead [ 375.928682][T10671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1234'. [ 375.950212][ T30] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 375.950339][ T30] pac7311 4-1:1.151: probe with driver pac7311 failed with error -71 [ 375.959554][ T30] usb 4-1: USB disconnect, device number 120 [ 376.183140][T10689] x_tables: duplicate underflow at hook 3 [ 376.193726][T10690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.204926][T10690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.419686][T10694] bond0: entered promiscuous mode [ 376.421396][T10694] batadv0: entered promiscuous mode [ 376.424631][T10694] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 376.424657][T10694] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 376.428007][T10694] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 376.430804][T10694] bond0: left promiscuous mode [ 376.451642][T10694] batadv0: left promiscuous mode [ 376.806285][T10713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1246'. [ 376.850058][T10712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.289403][T10726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1249'. [ 377.858699][T10739] tipc: Enabling of bearer rejected, failed to enable media [ 378.504588][T10755] ip6erspan1: entered allmulticast mode [ 378.748766][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 379.039724][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.039806][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.256965][ T5672] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 379.313633][T10773] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1261'. [ 379.417860][ T5672] usb 2-1: Using ep0 maxpacket: 32 [ 379.428849][ T5672] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.432816][ T5672] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.432885][ T5672] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 379.432910][ T5672] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 379.432942][ T5672] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.432966][ T5672] usb 2-1: config 1 interface 1 has no altsetting 0 [ 379.438482][ T5672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.438510][ T5672] usb 2-1: Product: syz [ 379.438525][ T5672] usb 2-1: Manufacturer: syz [ 379.438540][ T5672] usb 2-1: SerialNumber: syz [ 379.466644][ T5672] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 379.466998][ T5672] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 379.538361][ T5696] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 379.647833][T10780] input: syz1 as /devices/virtual/input/input37 [ 379.714292][ T5696] usb 1-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 379.717328][ T5696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.717357][ T5696] usb 1-1: config 0 has no interfaces? [ 379.717413][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.755390][ T5696] usb 1-1: config 0 descriptor?? [ 379.875624][T10762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.876188][T10762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.958424][ T1220] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 380.107017][ T1220] usb 4-1: Using ep0 maxpacket: 16 [ 380.112707][ T5672] usb 2-1: USB disconnect, device number 103 [ 380.119675][ T1220] usb 4-1: unable to get BOS descriptor or descriptor too short [ 380.119735][ T1220] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 380.142516][ T1220] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 380.142580][ T1220] usb 4-1: config 127 has no interface number 0 [ 380.142617][ T1220] usb 4-1: config 127 interface 124 has no altsetting 0 [ 380.182423][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.195717][ T1220] usb 4-1: Product: syz [ 380.195794][ T1220] usb 4-1: Manufacturer: syz [ 380.195814][ T1220] usb 4-1: SerialNumber: syz [ 380.352422][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.566994][ T5696] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 380.719339][ T5696] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 380.732067][ T5696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.732148][ T5696] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.757058][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 380.767669][ T5696] usb 5-1: SerialNumber: syz [ 381.005476][ T5696] usb 5-1: 0:2 : does not exist [ 381.067015][ T5731] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 381.086420][ T5696] usb 5-1: USB disconnect, device number 110 [ 381.097183][ T1220] usb 4-1: reset high-speed USB device number 121 using dummy_hcd [ 381.151250][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.216973][ T5731] usb 2-1: Using ep0 maxpacket: 8 [ 381.219266][ T5731] usb 2-1: unable to get BOS descriptor or descriptor too short [ 381.219314][ T5731] usb 2-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=a2.54 [ 381.222966][ T5731] usb 2-1: config 0 has an invalid interface number: 108 but max is 0 [ 381.222992][ T5731] usb 2-1: config 0 has no interface number 0 [ 381.223041][ T5731] usb 2-1: config 0 interface 108 has no altsetting 0 [ 381.225060][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.225082][ T5731] usb 2-1: Product: syz [ 381.225096][ T5731] usb 2-1: Manufacturer: syz [ 381.225109][ T5731] usb 2-1: SerialNumber: syz [ 381.256648][ T5731] usb 2-1: config 0 descriptor?? [ 381.296441][ T1220] usb 4-1: device firmware changed [ 381.316435][ T1220] usb 4-1: USB disconnect, device number 121 [ 381.468928][ T5731] asix 2-1:0.108: probe with driver asix failed with error -22 [ 381.473440][ T5731] usb 2-1: USB disconnect, device number 104 [ 381.484793][ T1220] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 381.587079][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 381.636939][ T1220] usb 4-1: Using ep0 maxpacket: 16 [ 381.650908][ T1220] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 381.662388][ T1220] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 381.672548][ T1220] usb 4-1: config 127 has no interface number 0 [ 381.672608][ T1220] usb 4-1: config 127 interface 124 has no altsetting 0 [ 381.691212][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.691256][ T1220] usb 4-1: Product: syz [ 381.691299][ T1220] usb 4-1: Manufacturer: syz [ 381.691312][ T1220] usb 4-1: SerialNumber: syz [ 382.097153][T10775] netlink: 'syz.3.1263': attribute type 10 has an invalid length. [ 382.191531][T10775] team0: Port device dummy0 added [ 382.250353][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1263'. [ 382.300009][ T5696] usb 1-1: USB disconnect, device number 118 [ 382.717051][ T5696] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 382.874098][ T5696] usb 1-1: unable to get BOS descriptor or descriptor too short [ 382.874185][ T5696] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 382.875300][ T5696] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 382.884705][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.884732][ T5696] usb 1-1: Product: syz [ 382.884747][ T5696] usb 1-1: Manufacturer: syz [ 382.884761][ T5696] usb 1-1: SerialNumber: syz [ 383.091978][ T1220] usb 4-1: USB disconnect, device number 122 [ 383.159793][ T5696] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 383.163529][ T5696] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 383.167216][ T5686] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 383.276999][ T5696] usb 1-1: USB disconnect, device number 119 [ 383.317743][ T5686] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 383.331792][ T5686] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 383.331827][ T5686] usb 5-1: config 0 has no interface number 0 [ 383.331892][ T5686] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 383.351536][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 383.351570][ T5686] usb 5-1: Manufacturer: syz [ 383.351585][ T5686] usb 5-1: SerialNumber: syz [ 383.364377][ T5686] usb 5-1: config 0 descriptor?? [ 383.426054][ T5737] udevd[5737]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.576579][ T25] usb 5-1: USB disconnect, device number 111 [ 384.047403][ T25] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 384.141139][T10855] binder_alloc: 10853: binder_alloc_buf, no vma [ 384.219385][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 384.227084][ T25] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 384.239132][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.254869][T10860] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1281'. [ 384.281536][ T25] usb 1-1: config 0 descriptor?? [ 384.729081][T10870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.742238][T10870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.902467][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 384.902671][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 384.930292][ T25] usb 1-1: USB disconnect, device number 120 [ 385.288336][ T5731] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 385.450861][ T5731] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 385.463592][ T5731] usb 4-1: config 0 interface 0 has no altsetting 0 [ 385.463654][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.488211][ T5731] usb 4-1: config 0 descriptor?? [ 385.762320][T10879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.766284][T10879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.804118][T10888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.815304][T10888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.828050][T10888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1288'. [ 385.844920][T10888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1288'. [ 385.860110][T10888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.872013][T10888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.986387][T10879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.992645][T10879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.020697][ T5731] hid_parser_main: 34 callbacks suppressed [ 386.027844][ T5731] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x1 [ 386.035280][ T5731] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x5 [ 386.035318][ T5731] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x6 [ 386.035345][ T5731] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 386.035370][ T5731] hid-led 0003:0FC5:B080.0015: unknown main item tag 0x0 [ 386.035395][ T5731] hid-led 0003:0FC5:B080.0015: unbalanced collection at end of report description [ 386.036369][ T5731] hid-led 0003:0FC5:B080.0015: probe with driver hid-led failed with error -22 [ 386.102807][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 386.112730][T10894] openvswitch: netlink: Message has 4 unknown bytes. [ 386.168171][ T1220] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 386.318039][ T1220] usb 5-1: Using ep0 maxpacket: 32 [ 386.320800][ T1220] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 386.324413][ T1220] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 386.324439][ T1220] usb 5-1: config 0 has no interface number 0 [ 386.324479][ T1220] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 386.324505][ T1220] usb 5-1: config 0 interface 85 has no altsetting 0 [ 386.332202][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.332230][ T1220] usb 5-1: Product: syz [ 386.332244][ T1220] usb 5-1: Manufacturer: syz [ 386.332258][ T1220] usb 5-1: SerialNumber: syz [ 386.351045][T10879] netlink: 'syz.3.1286': attribute type 30 has an invalid length. [ 386.353492][ T1220] usb 5-1: config 0 descriptor?? [ 386.638913][ T25] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 386.791262][ T1220] appletouch 5-1:0.85: Geyser mode initialized. [ 386.799894][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 386.806028][ T25] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 386.818423][ T25] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 386.818472][ T25] usb 1-1: config 0 has no interface number 0 [ 386.833614][ T1220] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input38 [ 386.854893][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.864164][ T25] usb 1-1: Product: syz [ 386.864219][ T25] usb 1-1: Manufacturer: syz [ 386.864239][ T25] usb 1-1: SerialNumber: syz [ 386.888301][ T25] usb 1-1: config 0 descriptor?? [ 386.899509][ T25] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 387.031628][T10892] lo: Caught tx_queue_len zero misconfig [ 387.041028][T10892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.052535][T10892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.107624][T10908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.108166][T10908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.243847][ T25] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 387.272680][ T25] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 387.355767][ T5686] usb 5-1: USB disconnect, device number 112 [ 387.355936][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 387.451652][ T5686] appletouch 5-1:0.85: input: appletouch disconnected [ 387.630341][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 387.631096][ T1220] usb 1-1: USB disconnect, device number 121 [ 387.650040][ T1220] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 387.660588][ T1220] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 387.663188][ T1220] quatech2 1-1:0.51: device disconnected [ 387.706997][ T30] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 387.857795][ T30] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.868783][ T30] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.868858][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.868891][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 387.868919][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.868964][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.926459][ T30] usb 2-1: config 0 descriptor?? [ 388.025853][T10915] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1299'. [ 388.123343][ T1220] usb 4-1: USB disconnect, device number 123 [ 388.419661][ T30] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 388.477521][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1304'. [ 388.487143][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 389.026546][T10943] netlink: 396 bytes leftover after parsing attributes in process `syz.3.1308'. [ 389.074909][T10945] fuse: Unknown parameter '000000000000000000040x0000000000000006' [ 389.351950][T10950] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1311'. [ 389.362244][ T30] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 389.517409][ T1220] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 389.527146][ T30] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 389.538944][ T30] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 389.539017][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.539067][ T30] usb 5-1: config 0 has no interface number 0 [ 389.539117][ T30] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255 [ 389.539175][ T30] usb 5-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.596269][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.596345][ T30] usb 5-1: Product: syz [ 389.596377][ T30] usb 5-1: Manufacturer: syz [ 389.596396][ T30] usb 5-1: SerialNumber: syz [ 389.625352][ T30] usb 5-1: config 0 descriptor?? [ 389.638644][T10945] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 389.648647][ T30] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 389.650632][ T30] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 389.667649][ T1220] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 389.669712][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 389.669743][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.669779][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.675051][ T1220] usb 4-1: config 0 descriptor?? [ 389.717734][ T30] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 390.147005][ T5731] usb 2-1: reset high-speed USB device number 105 using dummy_hcd [ 390.163760][T10959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.277070][ T5731] usb 2-1: device descriptor read/64, error -32 [ 390.495328][ T5686] usb 5-1: USB disconnect, device number 113 [ 390.525646][ T5686] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 390.532083][ T5686] cyberjack 5-1:0.69: device disconnected [ 390.543066][ T5731] usb 2-1: reset high-speed USB device number 105 using dummy_hcd [ 390.687740][ T5731] usb 2-1: device descriptor read/64, error -32 [ 390.947106][ T5731] usb 2-1: reset high-speed USB device number 105 using dummy_hcd [ 390.977937][ T5731] usb 2-1: device descriptor read/8, error -32 [ 391.243081][T10973] syzkaller0: entered promiscuous mode [ 391.243140][T10973] syzkaller0: entered allmulticast mode [ 391.272578][T10975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1318'. [ 391.899164][ T25] usb 2-1: USB disconnect, device number 105 [ 392.016977][ T5693] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 392.168370][ T5693] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 392.180873][ T5693] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.191731][ T5693] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 392.202969][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 392.211474][ T5693] usb 1-1: SerialNumber: syz [ 392.317323][ T1220] usbhid 4-1:0.0: can't add hid device: -71 [ 392.317458][ T1220] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 392.321068][ T1220] usb 4-1: USB disconnect, device number 124 [ 392.451364][ T5693] usb 1-1: 0:2 : does not exist [ 392.503552][ T5693] usb 1-1: USB disconnect, device number 122 [ 392.546393][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.727094][ T1220] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 392.742114][T11010] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1323'. [ 392.861743][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 392.861805][ T31] audit: type=1326 audit(1788460788.736:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1326" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c5d9e159 code=0x7ffc0000 [ 392.862410][ T31] audit: type=1326 audit(1788460788.736:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1326" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c5d9e159 code=0x7ffc0000 [ 392.862988][ T31] audit: type=1326 audit(1788460788.736:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1326" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f34c5d9e159 code=0x7ffc0000 [ 392.863441][ T31] audit: type=1326 audit(1788460788.736:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1326" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c5d9e159 code=0x7ffc0000 [ 392.863635][ T31] audit: type=1326 audit(1788460788.736:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1326" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c5d9e159 code=0x7ffc0000 [ 392.879774][ T1220] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 392.880873][ T1220] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.880899][ T1220] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 392.880936][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.896435][ T1220] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 392.925308][ T31] audit: type=1326 audit(1788460788.796:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1326" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c5d9e159 code=0x7ffc0000 [ 392.925556][ T31] audit: type=1326 audit(1788460788.796:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1326" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f34c5d9dec2 code=0x7ffc0000 [ 392.925878][ T31] audit: type=1326 audit(1788460788.796:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1326" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f34c5d9df57 code=0x7ffc0000 [ 392.930019][ T31] audit: type=1326 audit(1788460788.806:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1326" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f34c5d5ae51 code=0x7ffc0000 [ 392.931732][ T31] audit: type=1326 audit(1788460788.806:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.2.1326" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f34c5d9ef49 code=0x7ffc0000 [ 393.013252][ T5693] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 393.014109][T11015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.017533][T11015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.182990][ T5693] usb 5-1: device descriptor read/64, error -71 [ 393.198943][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 393.208127][T11017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'. [ 393.208181][T11017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1327'. [ 393.208203][T11017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'. [ 393.309494][T11020] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1328'. [ 393.427023][ T5693] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 393.462711][T11024] loop2: detected capacity change from 0 to 7 [ 393.471297][T11024] Dev loop2: unable to read RDB block 7 [ 393.477445][T11024] loop2: unable to read partition table [ 393.483629][T11024] loop2: partition table beyond EOD, truncated [ 393.491655][T11024] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 393.493250][T11024] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.493350][T11024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.493360][T11024] IPv6: NLM_F_CREATE should be set when creating new route [ 393.493405][T11024] IPv6: NLM_F_CREATE should be set when creating new route [ 393.493430][T11024] IPv6: NLM_F_CREATE should be set when creating new route [ 393.501369][T11024] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1330'. [ 393.513198][T11024] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 393.617349][ T5693] usb 5-1: device descriptor read/64, error -71 [ 393.727269][ T5693] usb usb5-port1: attempt power cycle [ 393.957988][ T1220] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 394.067533][ T5693] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 394.102857][ T5693] usb 5-1: device descriptor read/8, error -71 [ 394.107463][ T1220] usb 1-1: Using ep0 maxpacket: 32 [ 394.108258][ T1220] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 394.111226][ T1220] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 394.115649][ T1220] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 394.115674][ T1220] usb 1-1: Product: syz [ 394.115689][ T1220] usb 1-1: Manufacturer: syz [ 394.115703][ T1220] usb 1-1: SerialNumber: syz [ 394.119762][ T1220] usb 1-1: config 0 descriptor?? [ 394.121294][T11030] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 394.123492][ T1220] hub 1-1:0.0: bad descriptor, ignoring hub [ 394.123516][ T1220] hub 1-1:0.0: probe with driver hub failed with error -5 [ 394.337088][ T5693] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 394.357571][ T5693] usb 5-1: device descriptor read/8, error -71 [ 394.390018][T11033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.401350][T11034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.411303][T11033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.413619][T11034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.468833][ T5693] usb usb5-port1: unable to enumerate USB device [ 394.655858][T11039] 9p: p9: multiple sources not supported [ 394.717562][T11044] netlink: 'syz.2.1332': attribute type 18 has an invalid length. [ 394.725925][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 394.749578][T11044] netlink: 'syz.2.1332': attribute type 18 has an invalid length. [ 394.757184][T10822] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.757909][ T158] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.757950][ T158] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.757983][ T158] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.794514][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 394.827671][ T1220] usb 1-1: USB disconnect, device number 123 [ 395.371908][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 395.417191][T11058] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1336'. [ 395.962393][ T5693] usb 4-1: USB disconnect, device number 125 [ 395.979448][ T5693] idmouse 4-1:1.0: disconnected [ 396.118218][ T1220] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 396.261787][ T1220] usb 5-1: device descriptor read/64, error -71 [ 396.498333][ T1220] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 396.554442][T11079] 8021q: adding VLAN 0 to HW filter on device .` [ 396.572061][T11079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.628593][ T1220] usb 5-1: device descriptor read/64, error -71 [ 396.737497][ T1220] usb usb5-port1: attempt power cycle [ 396.797163][ T5672] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 396.835228][T10822] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 396.858409][T10822] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.860270][ T6808] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.860311][ T6808] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.860342][ T6808] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 396.891464][T11086] Cannot find map_set index 135 as target [ 396.933765][ T5672] usb 2-1: device descriptor read/64, error -71 [ 397.077272][ T1220] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 397.121220][ T1220] usb 5-1: device descriptor read/8, error -71 [ 397.183787][ T5672] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 397.307479][ T5672] usb 2-1: device descriptor read/64, error -71 [ 397.357029][ T1220] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 397.380241][ T1220] usb 5-1: device descriptor read/8, error -71 [ 397.417226][ T5672] usb usb2-port1: attempt power cycle [ 397.488722][ T1220] usb usb5-port1: unable to enumerate USB device [ 397.756958][ T5672] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 397.778757][ T5672] usb 2-1: device descriptor read/8, error -71 [ 398.017274][ T5731] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 398.017303][ T5672] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 398.039330][ T5672] usb 2-1: device descriptor read/8, error -71 [ 398.148728][ T5672] usb usb2-port1: unable to enumerate USB device [ 398.167126][ T5731] usb 4-1: device descriptor read/64, error -71 [ 398.417126][ T5731] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 398.557161][ T5731] usb 4-1: device descriptor read/64, error -71 [ 398.679248][ T5731] usb usb4-port1: attempt power cycle [ 398.864655][T11110] __nla_validate_parse: 5 callbacks suppressed [ 398.864707][T11110] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1351'. [ 399.017003][ T5731] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 399.029673][T11114] IPVS: stopping master sync thread 8222 ... [ 399.048101][ T5731] usb 4-1: device descriptor read/8, error -71 [ 399.111552][T11116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.113906][T11116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.119790][T11116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.121415][T11116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.287065][ T5731] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 399.307626][ T5731] usb 4-1: device descriptor read/8, error -71 [ 399.417360][ T5731] usb usb4-port1: unable to enumerate USB device [ 399.442188][T11126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1355'. [ 399.507383][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.890956][T11148] fuse: fd is not a fuse device [ 399.891267][T11148] fuse: fd is not a fuse device [ 399.891519][T11148] fuse: fd is not a fuse device [ 399.891789][T11148] fuse: fd is not a fuse device [ 399.892058][T11148] fuse: fd is not a fuse device [ 399.892338][T11148] fuse: fd is not a fuse device [ 399.892597][T11148] fuse: fd is not a fuse device [ 399.892840][T11148] fuse: fd is not a fuse device [ 399.893085][T11148] fuse: fd is not a fuse device [ 399.893328][T11148] fuse: fd is not a fuse device [ 399.893581][T11148] fuse: fd is not a fuse device [ 399.893836][T11148] fuse: fd is not a fuse device [ 399.894092][T11148] fuse: fd is not a fuse device [ 399.894335][T11148] fuse: fd is not a fuse device [ 399.894592][T11148] fuse: fd is not a fuse device [ 399.894832][T11148] fuse: fd is not a fuse device [ 399.895074][T11148] fuse: fd is not a fuse device [ 399.895315][T11148] fuse: fd is not a fuse device [ 399.895557][T11148] fuse: fd is not a fuse device [ 399.896091][T11148] fuse: fd is not a fuse device [ 399.896342][T11148] fuse: fd is not a fuse device [ 399.896644][T11148] fuse: fd is not a fuse device [ 399.897138][T11148] fuse: fd is not a fuse device [ 399.897387][T11148] fuse: fd is not a fuse device [ 399.897641][T11148] fuse: fd is not a fuse device [ 399.897883][T11148] fuse: fd is not a fuse device [ 399.903067][T11148] fuse: fd is not a fuse device [ 399.951421][ T5672] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 400.083944][T11159] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1359'. [ 400.151067][ T5672] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 400.165887][ T5672] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 400.165941][ T5672] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 400.191421][ T5672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.199898][ T5672] usb 2-1: Product: syz [ 400.199922][ T5672] usb 2-1: Manufacturer: syz [ 400.199937][ T5672] usb 2-1: SerialNumber: syz [ 400.233172][ T5672] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 400.252487][ T5672] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 400.261355][ T5672] input input40: usb_submit_urb failed [ 400.273263][ T5672] input: failed to attach handler kbd to device input40, error: -5 [ 400.291196][ T4968] input input40: usb_submit_urb failed [ 400.298769][ T5672] scsi host1: usb-storage 2-1:1.0 [ 400.299389][T11167] xt_l2tp: v2 doesn't support IP mode [ 400.310724][T11167] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 400.312020][T11161] bond2: option updelay: invalid value (18446744073256566793) [ 400.312046][T11161] bond2: option updelay: allowed values 0 - 2147483647 [ 400.335334][ T4968] input input40: usb_submit_urb failed [ 400.362913][T11161] bond2 (unregistering): Released all slaves [ 400.366638][T11170] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1360'. [ 400.366659][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'. [ 400.425726][ T5731] usb 2-1: USB disconnect, device number 110 [ 400.439758][ T5618] input input40: usb_submit_urb failed [ 400.461508][ T4968] input input40: usb_submit_urb failed [ 400.467779][ T4968] input input40: usb_submit_urb failed [ 400.497922][T11167] Cannot find del_set index 0 as target [ 400.509880][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1360'. [ 400.614805][T11173] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1362'. [ 400.717143][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 400.795750][T11176] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1363'. [ 400.937530][ T5731] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 400.995094][T11180] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1365'. [ 400.995908][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'. [ 401.087770][ T5731] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 401.098152][ T5731] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 401.098175][ T5731] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 401.102658][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.102688][ T5731] usb 2-1: Manufacturer: ࠄ [ 401.102703][ T5731] usb 2-1: SerialNumber: syz [ 401.119167][ T5731] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 401.144102][ T5731] input: ࠄ as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41 [ 401.144199][ T5731] input input41: usb_submit_urb failed [ 401.158069][ T5731] input: failed to attach handler kbd to device input41, error: -5 [ 401.167953][ T4968] input input41: usb_submit_urb failed [ 401.168921][ T5731] scsi host1: usb-storage 2-1:1.0 [ 401.174568][ T4968] input input41: usb_submit_urb failed [ 401.263183][T11189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.263634][T11189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.288459][ T5618] input input41: usb_submit_urb failed [ 401.306063][ T4968] input input41: usb_submit_urb failed [ 401.314771][ T4968] input input41: usb_submit_urb failed [ 401.322659][T11143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.335055][T11143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.335659][ T1220] usb 2-1: USB disconnect, device number 111 [ 401.498229][ T5672] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 401.656943][ T5672] usb 5-1: Using ep0 maxpacket: 32 [ 401.657911][ T5672] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 401.663317][ T5672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.663346][ T5672] usb 5-1: Product: syz [ 401.663362][ T5672] usb 5-1: Manufacturer: syz [ 401.663375][ T5672] usb 5-1: SerialNumber: syz [ 401.668182][ T5672] usb 5-1: config 0 descriptor?? [ 401.674600][ T5672] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 401.674727][ T5672] dvb-usb: bulk message failed: -22 (4/0) [ 401.674743][ T5672] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 401.674868][ T5672] dvb-usb: bulk message failed: -22 (5/0) [ 401.674881][ T5672] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 401.683177][ T5672] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.684137][ T5672] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 401.684232][ T5672] usb 5-1: media controller created [ 401.726721][ T5672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.788792][ T1220] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 401.791603][ T5672] usb 5-1: selecting invalid altsetting 3 [ 401.791624][ T5672] ttusb2: set interface to alts=3 failed [ 401.872101][ T5672] DVB: Unable to find symbol tda10086_attach() [ 401.872208][ T5672] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 401.873078][ T5672] dvb-usb: bulk message failed: -22 (4/0) [ 401.873096][ T5672] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 401.873216][ T5672] dvb-usb: bulk message failed: -22 (5/0) [ 401.873228][ T5672] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 401.873293][ T5672] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 401.930026][T11196] binder: BINDER_SET_CONTEXT_MGR already set [ 401.930080][T11196] binder: 11195:11196 ioctl 4018620d 200000004a80 returned -16 [ 401.958129][ T1220] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 401.969201][ T1220] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 401.969252][ T1220] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 401.981589][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.981626][ T1220] usb 2-1: Manufacturer: ࠄ [ 401.981641][ T1220] usb 2-1: SerialNumber: syz [ 401.995755][ T1220] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 402.041729][ T1220] input: ࠄ as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42 [ 402.041839][ T1220] input input42: usb_submit_urb failed [ 402.056063][ T1220] input: failed to attach handler kbd to device input42, error: -5 [ 402.058774][ T4968] input input42: usb_submit_urb failed [ 402.064730][ T4968] input input42: usb_submit_urb failed [ 402.070987][ T1220] scsi host1: usb-storage 2-1:1.0 [ 402.119252][ T5618] input input42: usb_submit_urb failed [ 402.129207][ T4968] input input42: usb_submit_urb failed [ 402.190838][ T25] usb 2-1: USB disconnect, device number 112 [ 403.734541][T11233] loop4: detected capacity change from 0 to 7 [ 403.750595][ T5672] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 403.762843][T11233] Dev loop4: unable to read RDB block 7 [ 403.769272][T11233] loop4: unable to read partition table [ 403.776798][T11233] loop4: partition table beyond EOD, truncated [ 403.783361][T11233] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 403.796540][T11236] netlink: 'syz.2.1377': attribute type 23 has an invalid length. [ 403.826047][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.837891][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.854648][ T4983] Dev loop4: unable to read RDB block 7 [ 403.854970][ T4983] loop4: unable to read partition table [ 403.855257][ T4983] loop4: partition table beyond EOD, truncated [ 403.897543][ T5672] usb 2-1: device descriptor read/64, error -71 [ 404.008043][ T1220] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 404.147804][ T5672] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 404.177027][ T1220] usb 4-1: Using ep0 maxpacket: 8 [ 404.177849][ T1220] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 404.179078][ T1220] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.179100][ T1220] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 404.182019][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.182055][ T1220] usb 4-1: Product: syz [ 404.182069][ T1220] usb 4-1: Manufacturer: syz [ 404.182083][ T1220] usb 4-1: SerialNumber: syz [ 404.287597][ T5672] usb 2-1: device descriptor read/64, error -71 [ 404.357124][ T5686] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 404.376503][ T5731] usb 5-1: USB disconnect, device number 122 [ 404.397772][ T5672] usb usb2-port1: attempt power cycle [ 404.453732][ T5731] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 404.518026][ T5686] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 404.530046][ T5686] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 404.539375][ T5686] usb 1-1: config 1 has no interface number 0 [ 404.539431][ T5686] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 404.539492][ T5686] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 404.539516][ T5686] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 404.582572][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.591721][ T5686] usb 1-1: Product: syz [ 404.591747][ T5686] usb 1-1: Manufacturer: syz [ 404.591764][ T5686] usb 1-1: SerialNumber: syz [ 404.613121][T11238] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 404.613307][T11238] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 404.635969][ T5686] usb 1-1: Expected 3 endpoints, found: 2 [ 404.737258][ T5672] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 404.757674][ T5672] usb 2-1: device descriptor read/8, error -71 [ 404.809438][ T1220] usb 4-1: USB disconnect, device number 4 [ 404.856606][ T6491] udevd[6491]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.938352][ T5731] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 405.017479][ T5672] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 405.047743][ T5672] usb 2-1: device descriptor read/8, error -71 [ 405.087948][ T5731] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 405.089696][ T5731] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.089752][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.099121][ T5731] usb 5-1: probing VID:PID(0424:012C) [ 405.101499][ T5731] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 405.112910][ T5731] vub300 5-1:1.0: probe with driver vub300 failed with error -22 [ 405.157260][ T5672] usb usb2-port1: unable to enumerate USB device [ 405.304643][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.316703][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.320387][ T5731] usb 5-1: USB disconnect, device number 123 [ 405.392188][T11250] __nla_validate_parse: 2 callbacks suppressed [ 405.392231][T11250] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1382'. [ 405.538232][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.538742][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.543288][T11254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.543702][T11254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.544186][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.544599][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.686982][ T5672] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 405.697094][T11258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.711732][T11258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.720946][T11258] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1384'. [ 405.817051][ T5672] usb 4-1: device descriptor read/64, error -71 [ 406.057005][ T5672] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 406.100881][T11260] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1385'. [ 406.102701][T11260] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1385'. [ 406.102852][T11260] team0: entered allmulticast mode [ 406.102871][T11260] team_slave_0: entered allmulticast mode [ 406.102887][T11260] team_slave_1: entered allmulticast mode [ 406.102907][T11260] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 406.196948][ T5672] usb 4-1: device descriptor read/64, error -71 [ 406.317447][ T5672] usb usb4-port1: attempt power cycle [ 406.656996][ T5672] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 406.677861][ T5672] usb 4-1: device descriptor read/8, error -71 [ 406.815691][T11266] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1387'. [ 406.891454][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 406.891497][T11268] netlink: 'syz.4.1388': attribute type 1 has an invalid length. [ 406.917265][ T5672] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 406.944288][ T5672] usb 4-1: device descriptor read/8, error -71 [ 406.959494][ T9] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 407.062828][ T5672] usb usb4-port1: unable to enumerate USB device [ 407.113564][ T30] usb 1-1: USB disconnect, device number 124 [ 407.136178][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 407.136258][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 407.138405][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 407.141064][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.141089][ T9] usb 2-1: Product: syz [ 407.141103][ T9] usb 2-1: Manufacturer: syz [ 407.141117][ T9] usb 2-1: SerialNumber: syz [ 407.369712][T11279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1392'. [ 407.770455][T11290] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1394'. [ 407.794877][T11290] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 408.407502][ T5672] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 408.561759][ T5672] usb 1-1: unable to get BOS descriptor or descriptor too short [ 408.562659][ T5672] usb 1-1: not running at top speed; connect to a high speed hub [ 408.562693][ T5672] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 408.572108][ T5672] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 408.572137][ T5672] usb 1-1: config 0 has no interface number 0 [ 408.572205][ T5672] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 408.572231][ T5672] usb 1-1: config 0 interface 88 has no altsetting 0 [ 408.590227][ T5672] usb 1-1: language id specifier not provided by device, defaulting to English [ 408.610008][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 408.610039][ T5672] usb 1-1: Product: syz [ 408.610053][ T5672] usb 1-1: SerialNumber: Љ [ 408.648363][ T5672] usb 1-1: config 0 descriptor?? [ 408.664001][T11287] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 408.783929][T11297] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1395'. [ 408.914520][T11287] vlan2: entered promiscuous mode [ 408.919899][T11287] hsr0: entered promiscuous mode [ 408.925523][T11287] vlan2: entered allmulticast mode [ 408.931438][T11287] hsr0: entered allmulticast mode [ 408.931461][T11287] hsr_slave_0: entered allmulticast mode [ 408.931481][T11287] hsr_slave_1: entered allmulticast mode [ 409.081306][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 409.085049][ T9] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 409.085340][ T9] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 409.086444][ T9] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 409.087256][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 409.107572][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 409.108554][T11287] hsr_slave_0: left promiscuous mode [ 409.142333][T11293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.145888][T11293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.200902][T11287] hsr_slave_1: left promiscuous mode [ 409.217060][ T30] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 409.258364][ T9] usb 2-1: USB disconnect, device number 117 [ 409.358137][ T30] usb 4-1: device descriptor read/64, error -71 [ 409.391086][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.535837][ T5672] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input43 [ 409.569904][ T5672] usb 1-1: USB disconnect, device number 125 [ 409.596991][ T30] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 409.705256][ T5737] udevd[5737]: Error opening device "/dev/input/event4": No such file or directory [ 409.718111][ T5737] udevd[5737]: Unable to EVIOCGABS device "/dev/input/event4" [ 409.718279][ T5737] udevd[5737]: Unable to EVIOCGABS device "/dev/input/event4" [ 409.748551][ T30] usb 4-1: device descriptor read/64, error -71 [ 409.800504][T11306] syzkaller1: entered promiscuous mode [ 409.800548][T11306] syzkaller1: entered allmulticast mode [ 409.868343][ T30] usb usb4-port1: attempt power cycle [ 410.207067][ T30] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 410.228528][ T30] usb 4-1: device descriptor read/8, error -71 [ 410.487736][ T30] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 410.510592][ T30] usb 4-1: device descriptor read/8, error -71 [ 410.527705][ T5672] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 410.630151][ T30] usb usb4-port1: unable to enumerate USB device [ 410.688883][ T5672] usb 1-1: not running at top speed; connect to a high speed hub [ 410.688949][ T5672] usb 1-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 410.709781][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.709816][ T5672] usb 1-1: Product: 䀁廱恉뮶춦룇䝠拲큇䧩嶌淮똬街쨨冾쬆쎵敊甎⩿覆銑塚특᪄샂蔋奓嵎✪ [ 410.709864][ T5672] usb 1-1: Manufacturer: Ы [ 410.709878][ T5672] usb 1-1: SerialNumber: 鰃鑡﫸ꅵ㼡蛸≚纭ₘ╸搳鿭㈗㤊駤軽㠫ଯ䆃㪏겄诙튭䅑ᬗ궸ï⁙斳ᾀ흚英瀨綺孠⁛䍏⨡쾋뱤ܡ⩤빃岧兖፲粆潄쀓놕凖ꊍ♄ [ 410.867666][ T5686] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 410.884497][T11329] program syz.1.1407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.971332][ T5672] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 410.975509][ T5672] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 410.998662][ T5686] usb 5-1: device descriptor read/64, error -71 [ 411.000633][ T5672] usb 1-1: USB disconnect, device number 126 [ 411.237086][ T5686] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 411.393360][ T5686] usb 5-1: device descriptor read/64, error -71 [ 411.498041][ T5686] usb usb5-port1: attempt power cycle [ 411.647334][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 411.777183][ T5672] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 411.781608][ T9] usb 2-1: device descriptor read/64, error -71 [ 411.837026][ T5686] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 411.857771][ T5686] usb 5-1: device descriptor read/8, error -71 [ 411.928163][ T5672] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 411.929574][ T5672] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.932348][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.932372][ T5672] usb 1-1: Product: syz [ 411.932386][ T5672] usb 1-1: Manufacturer: syz [ 411.932399][ T5672] usb 1-1: SerialNumber: syz [ 411.942545][ T5672] usb-storage 1-1:1.0: USB Mass Storage device detected [ 411.972194][ T5672] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 411.991024][ T5672] scsi host1: usb-storage 1-1:1.0 [ 412.017064][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 412.097203][ T5686] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 412.117777][ T5686] usb 5-1: device descriptor read/8, error -71 [ 412.147197][ T9] usb 2-1: device descriptor read/64, error -71 [ 412.227571][ T5686] usb usb5-port1: unable to enumerate USB device [ 412.257483][ T9] usb usb2-port1: attempt power cycle [ 412.378148][ T5696] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 412.527847][ T5696] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 412.529327][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.532465][ T5696] usb 4-1: config 0 descriptor?? [ 412.536138][ T5696] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 412.597564][ T9] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 412.617833][ T9] usb 2-1: device descriptor read/8, error -71 [ 412.857029][ T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 412.877651][ T9] usb 2-1: device descriptor read/8, error -71 [ 412.987453][ T9] usb usb2-port1: unable to enumerate USB device [ 413.353472][T11361] Cannot find set identified by id 0 to match [ 413.362027][T11361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.368906][T11361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.104090][T11369] ip_tables: iptables: counters copy to user failed while replacing table [ 414.270950][ T5696] gspca_stv06xx: I2C: Read error writing address: -71 [ 414.275361][ T5696] usb 4-1: USB disconnect, device number 13 [ 414.691125][ T5672] usb 1-1: USB disconnect, device number 127 [ 415.070894][T11391] __nla_validate_parse: 2 callbacks suppressed [ 415.070951][T11391] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1423'. [ 415.162301][ T31] kauditd_printk_skb: 142 callbacks suppressed [ 415.162356][ T31] audit: type=1326 audit(1788460811.036:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11375 comm="syz.1.1420" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c7139e159 code=0x0 [ 415.267155][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 415.397030][ T30] usb 5-1: device descriptor read/64, error -71 [ 415.653424][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 415.798725][ T30] usb 5-1: device descriptor read/64, error -71 [ 415.909150][ T30] usb usb5-port1: attempt power cycle [ 416.247263][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 416.279802][ T30] usb 5-1: device descriptor read/8, error -71 [ 416.400725][T11402] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 416.416934][T11402] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 416.526999][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 416.557793][ T30] usb 5-1: device descriptor read/8, error -71 [ 416.667422][ T30] usb usb5-port1: unable to enumerate USB device [ 416.707889][ T50] IPVS: starting estimator thread 0... [ 416.798202][T11413] IPVS: using max 51 ests per chain, 122400 per kthread [ 416.980825][T11422] nftables ruleset with unbound chain [ 417.134795][T11429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.147334][T11429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.268378][ T9] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 417.419005][ T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 417.420673][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.420721][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 417.420746][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 417.420769][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 417.420790][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 417.423743][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 417.423766][ T9] usb 2-1: Product: syz [ 417.423779][ T9] usb 2-1: Manufacturer: syz [ 417.423793][ T9] usb 2-1: SerialNumber: syz [ 417.426739][ T9] usb 2-1: config 0 descriptor?? [ 417.643712][ T9] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 417.644101][ T9] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 417.665900][T11427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.669544][T11427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.751245][T11437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.751747][T11437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.825410][T11439] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1437'. [ 417.913689][T11441] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:24 [ 417.913982][T11441] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 417.914128][T11441] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20000 [ 418.388867][ T5731] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 418.547119][ T5731] usb 4-1: Using ep0 maxpacket: 16 [ 418.553268][ T5731] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 418.554832][ T5731] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 418.557418][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.557442][ T5731] usb 4-1: Product: syz [ 418.557456][ T5731] usb 4-1: Manufacturer: syz [ 418.557470][ T5731] usb 4-1: SerialNumber: syz [ 418.564983][ T5731] r8152-cfgselector 4-1: Unknown version 0x0000 [ 418.565010][ T5731] r8152-cfgselector 4-1: config 0 descriptor?? [ 418.666943][ T5672] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 418.770801][T11446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.771396][T11446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.817022][ T5672] usb 5-1: Using ep0 maxpacket: 8 [ 418.822126][ T5672] usb 5-1: unable to get BOS descriptor or descriptor too short [ 418.822178][ T5672] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 418.823375][ T5672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 418.823403][ T5672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 418.823451][ T5672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 418.823472][ T5672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 418.823496][ T5672] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 418.823518][ T5672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 418.823538][ T5672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 418.823557][ T5672] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 418.831554][ T5672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.831588][ T5672] usb 5-1: Product: syz [ 418.831602][ T5672] usb 5-1: Manufacturer: syz [ 418.831616][ T5672] usb 5-1: SerialNumber: syz [ 418.841689][ T5672] usb 5-1: config 0 descriptor?? [ 418.843239][T11450] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 418.857759][ T5672] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 419.054275][T11450] x_tables: duplicate underflow at hook 2 [ 419.130416][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.136698][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.242879][ T5672] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 419.577049][ T5672] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 419.730859][ T5672] usb 1-1: unable to get BOS descriptor or descriptor too short [ 419.730967][ T5672] usb 1-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 419.752812][ T5672] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 419.752866][ T5672] usb 1-1: config 63 has an invalid descriptor of length 98, skipping remainder of the config [ 419.752936][ T5672] usb 1-1: config 63 has no interface number 0 [ 419.752972][ T5672] usb 1-1: config 63 interface 66 has no altsetting 0 [ 419.779989][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.780017][ T5672] usb 1-1: Product: syz [ 419.780031][ T5672] usb 1-1: Manufacturer: syz [ 419.780044][ T5672] usb 1-1: SerialNumber: syz [ 420.020267][ T5672] uvcvideo 1-1:63.66: probe with driver uvcvideo failed with error -22 [ 420.025014][ T5672] usb 1-1: USB disconnect, device number 2 [ 420.090568][ T9] usb 2-1: USB disconnect, device number 122 [ 420.233046][T11458] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1445'. [ 420.389828][T11466] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1448'. [ 420.479472][ T5731] r8152-cfgselector 4-1: Unknown version 0x0000 [ 420.481477][ T5731] r8152-cfgselector 4-1: No union descriptors [ 420.508600][ T5731] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 420.587528][ T30] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 420.614784][T11469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1450'. [ 420.642407][T11471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.642906][T11471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.657012][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 420.657036][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1451'. [ 420.698130][ T1157] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.710192][ T1157] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.719921][ T1157] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.729096][ T1157] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.759270][ T30] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 420.770031][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.781047][ T30] usb 2-1: config 0 descriptor?? [ 420.907165][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 420.989307][ T30] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 421.059518][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 421.059586][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 421.063265][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.063291][ T9] usb 1-1: Product: 첫䛹뽿エ㬈뛪뿃簸엍똽㕙焽補⌱膼ꭖ츽駄䔏佃ຘ택⧼砂蠊蔭돨綁뺦赢ᘡ暬钅育㦽敚὜值⏰㼌嶮ꩣ㵧ᘜ戸૔䋂냄㺾짐䬞⏐鄅聨껫㧍敐簉뷰억쎷㣮 [ 421.063314][ T9] usb 1-1: Manufacturer: а [ 421.063328][ T9] usb 1-1: SerialNumber: ᚺ㤱⟰夵堀螥ꂐ훤꜒⋀釺ǒ难°ᙕ찷᨜鮫㧳쪝뻩狀䯏৤典䔼飸ꧥk [ 421.213331][ T30] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 421.220382][ T30] [drm] Initialized udl on minor 1 [ 421.270751][ T32] INFO: task kworker/1:7:5714 blocked for more than 143 seconds. [ 421.270834][ T32] Tainted: G L syzkaller #0 [ 421.270848][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.270858][ T32] task:kworker/1:7 state:D stack:20624 ** replaying previous printk message ** [ 421.270858][ T32] task:kworker/1:7 state:D stack:20624 pid:5714 tgid:5714 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 421.270911][ T32] Workqueue: usb_hub_wq hub_event [ 421.271061][ T32] Call Trace: [ 421.271069][ T32] [ 421.271082][ T32] __schedule+0x17db/0x58f0 [ 421.271204][ T32] ? __pfx___schedule+0x10/0x10 [ 421.271240][ T32] ? schedule+0x90/0x2b0 [ 421.271267][ T32] schedule+0x164/0x2b0 [ 421.271294][ T32] schedule_timeout+0xc0/0x2c0 [ 421.271356][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 421.271380][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 421.271429][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.271511][ T32] ? wait_for_completion+0x272/0x5e0 [ 421.271538][ T32] wait_for_completion+0x2ca/0x5e0 [ 421.271582][ T32] ? __pfx_wait_for_completion+0x10/0x10 [ 421.271613][ T32] ? kobject_put+0x50f/0x550 [ 421.271773][ T32] i2c_del_adapter+0x292/0x440 [ 421.271900][ T32] ? __pfx_i2c_del_adapter+0x10/0x10 [ 421.271931][ T32] ? dvb_usbv2_exit+0x94d/0xb80 [ 421.272005][ T32] dvb_usbv2_probe+0x4bb/0x3950 [ 421.272076][ T32] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 421.272097][ T32] ? __pm_runtime_set_status+0x994/0xc80 [ 421.272198][ T32] usb_probe_interface+0x788/0xe50 [ 421.272250][ T32] ? __pfx_usb_probe_interface+0x10/0x10 [ 421.272276][ T32] ? sysfs_do_create_link_sd+0xe0/0x110 [ 421.277114][ T32] ? driver_sysfs_add+0x1fe/0x210 [ 421.277218][ T32] ? __pfx_usb_probe_interface+0x10/0x10 [ 421.277238][ T32] really_probe+0x254/0xae0 [ 421.277263][ T32] __driver_probe_device+0x1e8/0x360 [ 421.277316][ T32] driver_probe_device+0x4f/0x240 [ 421.277340][ T32] __device_attach_driver+0x270/0x410 [ 421.277364][ T32] bus_for_each_drv+0x258/0x2f0 [ 421.277388][ T32] ? __pfx___device_attach_driver+0x10/0x10 [ 421.277408][ T32] ? __pfx_bus_for_each_drv+0x10/0x10 [ 421.277435][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 421.277465][ T32] __device_attach+0x2c4/0x450 [ 421.277486][ T32] ? __pfx___device_attach+0x10/0x10 [ 421.277503][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 421.277532][ T32] ? _raw_spin_unlock+0x28/0x50 [ 421.277558][ T32] device_initial_probe+0xa1/0xd0 [ 421.277579][ T32] bus_probe_device+0x12a/0x220 [ 421.277607][ T32] device_add+0x7d7/0xb80 [ 421.277658][ T32] usb_set_configuration+0x1ad8/0x2180 [ 421.277704][ T32] usb_generic_driver_probe+0x8d/0x150 [ 421.277772][ T32] usb_probe_device+0x1c3/0x3b0 [ 421.277796][ T32] ? __pfx_usb_probe_device+0x10/0x10 [ 421.277815][ T32] really_probe+0x254/0xae0 [ 421.277838][ T32] __driver_probe_device+0x1e8/0x360 [ 421.277861][ T32] driver_probe_device+0x4f/0x240 [ 421.277883][ T32] __device_attach_driver+0x270/0x410 [ 421.277907][ T32] bus_for_each_drv+0x258/0x2f0 [ 421.277931][ T32] ? __pfx___device_attach_driver+0x10/0x10 [ 421.277951][ T32] ? __pfx_bus_for_each_drv+0x10/0x10 [ 421.277985][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 421.278014][ T32] __device_attach+0x2c4/0x450 [ 421.278035][ T32] ? __pfx___device_attach+0x10/0x10 [ 421.278054][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 421.278081][ T32] ? _raw_spin_unlock+0x28/0x50 [ 421.278108][ T32] device_initial_probe+0xa1/0xd0 [ 421.278128][ T32] bus_probe_device+0x12a/0x220 [ 421.278155][ T32] device_add+0x7d7/0xb80 [ 421.278183][ T32] usb_new_device+0x9aa/0x1690 [ 421.278241][ T32] ? __pfx_usb_new_device+0x10/0x10 [ 421.278270][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.278297][ T32] hub_event+0x28e8/0x4d30 [ 421.278363][ T32] ? __pfx_hub_event+0x10/0x10 [ 421.278391][ T32] ? rcu_is_watching+0x16/0xb0 [ 421.278414][ T32] ? process_scheduled_works+0x97a/0x1630 [ 421.278452][ T32] process_scheduled_works+0xc3d/0x1630 [ 421.278504][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 421.278531][ T32] ? assign_work+0x3cf/0x5d0 [ 421.278560][ T32] worker_thread+0xa47/0xfb0 [ 421.278618][ T32] kthread+0x38b/0x480 [ 421.278638][ T32] ? __pfx_worker_thread+0x10/0x10 [ 421.278660][ T32] ? __pfx_kthread+0x10/0x10 [ 421.278680][ T32] ret_from_fork+0x514/0xb70 [ 421.278717][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 421.278748][ T32] ? __switch_to+0xc89/0x1420 [ 421.278778][ T32] ? __pfx_kthread+0x10/0x10 [ 421.280535][ T32] ret_from_fork_asm+0x1a/0x30 [ 421.280584][ T32] [ 421.280630][ T32] [ 421.280630][ T32] Showing all locks held in the system: [ 421.280688][ T32] locks held by kworker/0:0/9: 6, on CPU#0: [ 421.280744][ T32] #0: ffff888022ee1540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 421.280807][ T32] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 421.280856][ T32] #2: ffff88802961e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 421.280901][ T32] #3: ffff88807c6021d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 421.280943][ T32] #4: ffff8880344ab1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 421.280994][ T32] #5: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 421.282231][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 421.282277][ T32] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 421.282327][ T32] #1: ffffffff9ad31098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 421.282448][ T32] locks held by kworker/1:1/30: 12, on CPU#1: [ 421.282462][ T32] #0: ffff888022ee1540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 421.282515][ T32] #1: ffffc90000a57c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 421.282567][ T32] #2: ffff8880296fc1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 421.282613][ T32] #3: ffff88807c9991d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 421.282658][ T32] #4: ffff888030e961a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 421.282702][ T32] #5: ffff888055984260 (&dev->clientlist_mutex){+.+.}-{4:4}, at: drm_client_register+0x4b/0x200 [ 421.282807][ T32] #6: ffff8880774ca270 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_initial_config+0x29/0x40 [ 421.282887][ T32] #7: ffff8880774ca090 (&client->modeset_mutex){+.+.}-{4:4}, at: drm_client_modeset_probe+0x42f/0x60c0 [ 421.282938][ T32] #8: ffff8880559843f8 (&dev->mode_config.mutex){+.+.}-{4:4}, at: drm_client_modeset_probe+0x44a/0x60c0 [ 421.282996][ T32] #9: ffffc90000a566f0 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_helper_probe_single_connector_modes+0x144/0x1880 [ 421.283083][ T32] #10: ffffc90000a56718 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_helper_probe_single_connector_modes+0x144/0x1880 [ 421.283136][ T32] #11: ffffffff8f6e40d8 (drm_unplug_srcu){.+.+}-{0:0}, at: drm_dev_enter+0x49/0x150 [ 421.286023][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 421.286042][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 421.286155][ T32] locks held by getty/5374: 2, on CPU#1: [ 421.286169][ T32] #0: ffff888035d7c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 421.286269][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 421.286316][ T32] locks held by udevd/5618: 4, on CPU#0: [ 421.286329][ T32] #0: ffff88802ba171b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 421.286393][ T32] #1: ffff88806a46a080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 421.286447][ T32] #2: ffff88807d829d28 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 421.286500][ T32] #3: ffff88807c6021d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 421.286556][ T32] locks held by syz-executor/5629: 4, last CPU#1: [ 421.286570][ T32] #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 421.287523][ T32] #1: ffff8880354ac378 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 421.287577][ T32] #2: ffff8880311169b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 421.287631][ T32] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 421.287689][ T32] locks held by kworker/1:7/5714: 5, on CPU#1: [ 421.288054][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 421.288209][ T32] #0: ffff888022ee1540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 421.288261][ T32] #1: ffffc900048f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 421.288523][ T9] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 421.288593][ T9] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 421.288907][ T32] #2: ffff88802975a1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 421.288965][ T32] #3: ffff88802cf901d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 421.289017][ T32] #4: ffff88805752c1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 421.289060][ T32] locks held by udevd/6489: 4, on CPU#0: [ 421.289074][ T32] #0: ffff88802a159098 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 421.289118][ T32] #1: ffff888025ca7080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 421.289170][ T32] #2: ffff88807a748c38 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 421.289220][ T32] #3: ffff88802cf901d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 421.294241][ T32] [ 421.294252][ T32] ============================================= [ 421.294252][ T32] [ 421.294262][ T32] NMI backtrace for cpu 0 [ 421.294282][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 421.294308][ T32] Tainted: [L]=SOFTLOCKUP [ 421.294315][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.294326][ T32] Call Trace: [ 421.294334][ T32] [ 421.294342][ T32] dump_stack_lvl+0xe8/0x150 [ 421.294373][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 421.294451][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 421.294491][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 421.294518][ T32] sys_info+0x135/0x170 [ 421.294538][ T32] watchdog+0xfd7/0x1030 [ 421.294573][ T32] ? watchdog+0x1c7/0x1030 [ 421.294597][ T32] kthread+0x38b/0x480 [ 421.294617][ T32] ? __pfx_watchdog+0x10/0x10 [ 421.294635][ T32] ? __pfx_kthread+0x10/0x10 [ 421.294656][ T32] ret_from_fork+0x514/0xb70 [ 421.294678][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 421.294707][ T32] ? __switch_to+0xc89/0x1420 [ 421.294735][ T32] ? __pfx_kthread+0x10/0x10 [ 421.294756][ T32] ret_from_fork_asm+0x1a/0x30 [ 421.294805][ T32] [ 421.294862][ T32] Sending NMI from CPU 0 to CPUs 1: [ 421.294894][ C1] NMI backtrace for cpu 1 [ 421.294911][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.294936][ C1] Tainted: [L]=SOFTLOCKUP [ 421.294943][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.294954][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 421.295016][ C1] Code: b2 55 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 cc 7b c5 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d e9 c7 df 74 06 cc 44 89 f9 80 e1 07 38 c1 [ 421.295033][ C1] RSP: 0018:ffffc90000157900 EFLAGS: 00000002 [ 421.295052][ C1] RAX: 0000000000000038 RBX: 0000000000000038 RCX: 0000000000000000 [ 421.295065][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000020 [ 421.295078][ C1] RBP: 00000000000003f8 R08: 0000000000000003 R09: 0000000000000004 [ 421.295090][ C1] R10: dffffc0000000000 R11: ffffffff85720850 R12: dffffc0000000000 [ 421.295104][ C1] R13: 0000000000000038 R14: ffffffff9ad310c0 R15: 0000000000000000 [ 421.295117][ C1] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 421.295133][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.295147][ C1] CR2: 00007f34c6b556c8 CR3: 000000007a5e0000 CR4: 00000000003526f0 [ 421.295166][ C1] Call Trace: [ 421.295174][ C1] [ 421.295184][ C1] __serial8250_console_fifo_write+0x1e6/0x3e0 [ 421.295210][ C1] serial8250_console_write+0xaa1/0x1200 [ 421.295237][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 421.295268][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 421.295293][ C1] ? __schedule+0x17f1/0x58f0 [ 421.295324][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 421.295351][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 421.295374][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 421.295400][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 421.295425][ C1] nbcon_kthread_func+0x679/0x880 [ 421.295447][ C1] ? nbcon_kthread_func+0x163/0x880 [ 421.295464][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 421.295494][ C1] ? __kthread_parkme+0x71/0x1f0 [ 421.295520][ C1] ? __kthread_parkme+0x199/0x1f0 [ 421.295547][ C1] kthread+0x38b/0x480 [ 421.295565][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 421.295582][ C1] ? __pfx_kthread+0x10/0x10 [ 421.295600][ C1] ret_from_fork+0x514/0xb70 [ 421.295619][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 421.295645][ C1] ? __switch_to+0xc89/0x1420 [ 421.295670][ C1] ? __pfx_kthread+0x10/0x10 [ 421.295688][ C1] ret_from_fork_asm+0x1a/0x30 [ 421.295721][ C1] [ 421.299377][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 422.620727][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 422.631816][ T32] Tainted: [L]=SOFTLOCKUP [ 422.636360][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.647066][ T32] Call Trace: [ 422.650387][ T32] [ 422.653439][ T32] vpanic+0x56d/0xa60 [ 422.657618][ T32] ? __pfx___schedule+0x10/0x10 [ 422.662671][ T32] ? __pfx_vpanic+0x10/0x10 [ 422.667330][ T32] panic+0xc5/0xd0 [ 422.671151][ T32] ? __pfx_panic+0x10/0x10 [ 422.675599][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 422.681076][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 422.686459][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 422.693105][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 422.699562][ T32] watchdog+0x1030/0x1030 [ 422.703939][ T32] ? watchdog+0x1c7/0x1030 [ 422.708412][ T32] kthread+0x38b/0x480 [ 422.712558][ T32] ? __pfx_watchdog+0x10/0x10 [ 422.717255][ T32] ? __pfx_kthread+0x10/0x10 [ 422.722059][ T32] ret_from_fork+0x514/0xb70 [ 422.726663][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 422.731792][ T32] ? __switch_to+0xc89/0x1420 [ 422.736598][ T32] ? __pfx_kthread+0x10/0x10 [ 422.741833][ T32] ret_from_fork_asm+0x1a/0x30 [ 422.746716][ T32] [ 422.750091][ T32] Kernel Offset: disabled [ 422.754418][ T32] Rebooting in 86400 seconds..