last executing test programs: 7.949116621s ago: executing program 0 (id=1863): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000200)) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) link(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs/../file0\x00', &(0x7f0000000240)='./file1\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/xfrm_stat\x00') lseek(r5, 0x2000, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x119003, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) io_uring_setup(0x2519, &(0x7f0000009a80)={0x0, 0xf150, 0x800, 0xffffffff, 0x15c}) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x2) close_range(r6, 0xffffffffffffffff, 0x0) 6.831708131s ago: executing program 4 (id=1867): fsopen(&(0x7f0000000300)='iso9660\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0xfff, 0x0, 0x400003}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) clock_getres(0x3, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r5, 0xffff8000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8190, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500080001000000060002404e20000008000500", @ANYRES16=r7], 0x4c}}, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, 0x0) r8 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000340)={0x2000}, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x34000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000080)=""/163, &(0x7f0000000140)=0xa3) 6.39050159s ago: executing program 1 (id=1868): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010000108000000000000000000000021", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) 5.9673698s ago: executing program 1 (id=1869): openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001fdffffff020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 5.735396963s ago: executing program 0 (id=1870): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 5.583020956s ago: executing program 1 (id=1871): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000fdffffffffffffffdd02040040000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff00000000000000000000000000fc02000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff0000000000000000000000000700000000000000000000000000000000000001000000003c0000000200000000000000000000000000ffffac1414bb0100000001"], 0x23c}}, 0x8000000) 5.418238507s ago: executing program 0 (id=1873): socket$nl_generic(0x10, 0x3, 0x10) r0 = mq_open(0x0, 0x40, 0x0, 0x0) mq_notify(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x5bc, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x590, 0x2, [@TCA_U32_SEL={0x364, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x4, 0x0, 0x6, 0x8}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x5c4, 0xa, 0x6, 0xc}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x3, 0xd, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x6}, {0x7fff, 0x0, 0x3, 0x101}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x21, 0x600000, 0xffff, 0x54}, {0xff, 0x81, 0xd4, 0x6}, {0x3, 0x2, 0x3fa4f833, 0x46a}, {0x1, 0x6, 0xff, 0x3ff}, {0x5, 0x9, 0x1, 0x3}, {0x8, 0x100, 0x7, 0x3}, {0x7, 0x9819, 0x6, 0x6}, {0x3, 0xc, 0x5, 0x6}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x0, 0x1, 0x4, 0x9}, {0xfffffffb, 0xd, 0x7, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x4, 0xffff, 0x6, 0x2}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x5, 0x400}, {0x10, 0x0, 0x6, 0x3}, {0xb, 0x5, 0x5, 0x5}, {0x0, 0x9, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0x7fffffff, 0x51, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0xdc, 0x1ff, 0x101, 0x5}, {0x0, 0x7f, 0x60d4, 0x3}, {0x6, 0x8, 0xc, 0x8}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x214, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x4009, 0x7, 0x40, 0x7d}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x9, 0x10, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x6, 0x0, 0x8, 0x7}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x7, 0x7ff, 0x5, 0xc7}, {0x6, 0x8, 0x2, 0x1}, {0x7, 0x2, 0x5, 0x2}, {0xaa4, 0x406, 0x2, 0x127c}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x10, 0xb, 0x2, 0x9}, {0x3, 0x7, 0x200, 0x1}, {0x7, 0x2, 0x7, 0x7}, {0x5, 0x7fff, 0x7, 0x438}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0xfffffffc, 0x9, 0x40, 0x7}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x5bc}}, 0x24040084) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c40)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000200e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') 5.307247797s ago: executing program 3 (id=1874): syz_emit_ethernet(0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc000000000000000000000000000000ff020000000000000000000000000001242088a80000000300000800210086dd080088be86dd"], 0x0) 5.207434446s ago: executing program 1 (id=1875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x1fffffe, 0x0, 0x0, 0x8000000000000004, 0x80000000, 0xfffdfffffffffffb, 0x6, 0x0, 0x1000000000003, 0xfffffffd, 0x1}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffa}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xdb}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000180)={0xf2b, {0x32, 0x7fffffff, 0x9, 0xe5, 0x7d4}}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x9, 0x2, 0x6, @vifc_lcl_addr=@multicast1, @empty}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000080), &(0x7f0000000140)=0x10) 5.086189356s ago: executing program 3 (id=1876): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x3, @loopback, 0x7}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000000c0)="9c", 0x1}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="3000000000000000290000000700000023b49328617692f515bd712a7e0b4b501d46b6e23887e354d87f934600000000880000000000000088000000ff030020624fab9007524b7e385fe3e5a2b994cb66098188db237efcc3a6df759f2d63cf3549c8200fb2fd961aa62c7875d14dbb81d83cecb97785311b1b8ec960b5578b1bd458d6b9ae1a7ab5740ef29a20f033b4dbe93e44339788c924b1ba182ec5660c3f5e3f443c13767ffaea9ffd7cd3c98df9b8db0f654400880000000000000029000000050000005899876ca464444c23bc0d7ae28c19f558897abcefca08ea67858e543894cac2a3b0c4936961af4e0156facc66f05039f66495d36ca65275769f142b75349f9c9dce6331c3f5213856b4c94911e9f457009725f64f757eb0401a5714c1e2a7c24828a27327ad7be34cf729858e3a7845297054350000000068"], 0x1a8}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000018c0)="c6", 0x1}], 0x1}}], 0x2, 0x8041) 5.005431669s ago: executing program 3 (id=1877): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003a00350200000000fcdbdf250a00000004000000"], 0x18}}, 0x8000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006110540000000000a6080000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x14, 0x32, 0x300, 0x70bd2d, 0x25dfdbfb, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x48400}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x1a2, 0x1000, 0x6}, &(0x7f0000000040), &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000001000e0000001000000000000000000000000e00000010000000000000000000000000000000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/101], 0xb8}}, 0x0) 4.91555425s ago: executing program 3 (id=1878): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x103381) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x1, 0x1, 0x1d}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) r5 = fsmount(r3, 0x0, 0x0) fchdir(r5) r6 = socket$inet6(0xa, 0x2, 0x4) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000040)=0x2, 0x4) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="f0070dcd84aa1537a103ff8ed178a50000020000008181"]) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00') move_mount(r9, &(0x7f0000000880)='./mnt\x00', r9, 0x0, 0x177) 4.698557714s ago: executing program 4 (id=1879): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010000108000000000000000000000041", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) 4.338191903s ago: executing program 1 (id=1880): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x20, 0x0, @mcast1, @private0, 0x700, 0x20, 0xfffffffc}}) gettid() socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f0000000300)=ANY=[@ANYRES16], 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x10, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000021c0)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x98, 0x2, [@TCA_FW_ACT={0x94, 0x4, [@m_pedit={0x90, 0x1, 0x0, 0x0, {{0xa}, {0x64, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x60, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xffffffb4}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x81}, 0x800) r9 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000000)={0x10, 0x1, 0x1, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x37303250}) 3.984748583s ago: executing program 4 (id=1881): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x80000001, 0x8000) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x81, 0x8100) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0x3) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x4, 0x20000) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000140)={0x8d, 0x9, 0x101, "db6ba26851c362b084681c536f7d0672c7b3a6fc9452ef758dd85b94c3c3de4b06a434476ead7c805f3b41cf68223958626301134ce11332833720e87dd0945fba7436f53a27d6c5959cd7155cd8664456f57a48a0ebcaa1af4e8fb0d10b974d915b3c9212c59b30b9a1d4a9148e678d5867dceea1a626ba75d507143fa5b208c0515643e2c037cf8c4a873676"}) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000200)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x6ff, 0x100000001, 0x80}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x13c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x1a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "673e0f2ed58a5f82e7c116486e56c18fd3711befee2c7f94"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d46d6095fa8c6367c7f5fb152e82a5fa62b5825696790a01"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20080000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, 0x0, 0x1, 0x100, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x9]}, @CTA_PROTOINFO={0x3c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x38, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffccb}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xa5d0}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1400000}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x33}]}}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x428}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4) setxattr$trusted_overlay_nlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)={'L+', 0x7}, 0x16, 0x1) r5 = syz_open_dev$evdev(&(0x7f00000006c0), 0x7fffffff, 0x4ba040) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000780)={0x0, 0x6e, &(0x7f0000000700)="bbc70c39b3f612d3a85d84253d623cdaea2741365d468353e4a8e49b7278bb35980970da1fd5e53b7289fe38b8525b93213722e5da369d38aa2b058468d5e6277d4959abbcd211067e46fe4a6cea451ad136c039edba0723949eb53c5ff54d1621ae6a8323cff529632baf8640a7"}) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) flistxattr(r5, &(0x7f00000007c0)=""/212, 0xd4) r6 = msgget(0x2, 0x20) msgrcv(r6, &(0x7f00000008c0)={0x0, ""/207}, 0xd7, 0x3, 0x2000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000009c0)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000a40)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000a80)={0x48, 0xa, r7, 0x0, r8}) msgctl$IPC_INFO(r6, 0x3, &(0x7f0000000b00)=""/72) clock_gettime(0x0, &(0x7f0000001200)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000011c0)=[{{&(0x7f0000000b80)=@can={0x1d, 0x0}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000c00)=""/193, 0xc1}, {&(0x7f0000000d00)=""/99, 0x63}, {&(0x7f0000000d80)=""/117, 0x75}, {&(0x7f0000000e00)=""/149, 0x95}, {0x0}, {&(0x7f0000000ec0)=""/56, 0x38}, {&(0x7f0000000f00)=""/220, 0xdc}, {&(0x7f0000001000)=""/177, 0xb1}], 0x8, &(0x7f0000001140)=""/66, 0x42}, 0x6}], 0x1, 0x1, &(0x7f0000001240)={r9, r10+10000000}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000012c0)=@generic={&(0x7f0000001280)='./file0\x00', 0x0, 0x8}, 0x18) r12 = socket$isdn(0x22, 0x3, 0x2) sendmmsg(r12, &(0x7f0000007480)=[{{&(0x7f0000001300)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @multicast1}, 0x1, 0x81, 0x3}}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001380)="5589b7991c912552bdbf77786269827ff9e9b88ef525276cf7acd75c50c751c3f8ec986c557c251d3106afa810d097b3c95fa4041a17ce52a8c650f655d69f7c9d42c7ab8d07386be0c0fb258a2f8386e8e1ba96b1435424b05e9c106533359aa95eb786cfda9c35feeef9d84ef527480171f7f30a3713779d69aa52bfb0a9f285f14d582ca7fab6a5d8c2eb45979af63b463d87a41bb4dedf902915c63cb58c82c005c7fe6295ff3a5366918b401738031bf1f053ceb282344a21ce5203958a17679a5edf60a85daed0e307ab558ccf792227e07db7cdb435d696ddbbce73b08e8ff4f1ab8bb1ccd08f974c2afac58b9eea710ff654b29cff407fea74dd2b6bce086df56e3078616f772e38df71c3112301458aaa230f6c51082b62be7c3bb93f32d6729618b9c622340ccda967e9ff2d7b1068617ee050ccb84757009248d529f5847db385c8f535df9a31afe0b2bc58d63e49be13a86e640ecc6b55b27f8f55bc12896c2ecea33cdf624f435bb2bcb556e4a485c75cf769346cd4af0fa39933c6c2c6d2b41485d2a1d432779ac6c1b881f7c44cd211a8fe5d7f87a5b5af6d64a455d381e370f400eb2bb1040b8388de1c7d660275dc47bab9f00afbd330b422d1ae1ef6dc8941be882968e38827334eb62654209d9e0b330446462841cd489a345a3d2159f101658a2d151f789f386a648533967e1cdaaae6c015450d56b7bb65f9c61511a27d0db4e9c148024bce6299ac3634573d5538ed061509e7dead850d6c2ab000d4c0c6cb871feb48c99350ea5a0e3eba04adebf7a3d1fa2a94f951678c29a7747fe81764d09261343f6b68e8c67c4beaefbaba98d7e47777a908450f6f5bdbe466662ddc862fd4d73179780d4b08af949bc650133bb317951eaba94ec23a21aae58efe19dd7da446c36cf9d8cadddda107bd4b23982908161664037f2d85cb853ef168f9820ab7293c984f1f3a0617d50720529cfc90e539a62de796a24d409eaada36b4913e00221c312619c4b8560a5426ab68dbe8188c7bac259b0e53fb1a5444e3f6f08bdec237088fd8bbff58d538d0918ea0f351d50422f86f2b84962b7d572e11774c565c465ad2ad564d94c894d7c82e823cc4de8d6235fdf78b97dcb4eb251bf4b16a96b757cfaceeeae27eb409965ca843ed5ff8582244db069af086d53c8244cdccbfb533e4c376837e5a117f29964e44708c9f0d74d6de35adc44c5f32e9d0b7553b88cd098b9a197eea51b76e593e45ab0f9171ac4e80e121695abdfa5ce1e51a00954b26b9b624b802fbb2464670de0fed1cec617e557e62a5963d9de5554809bbd36e3a42c9eb9874f4a2003564d7bd37b8915562a9a735e57944ffb5eb40eb97f65b84cb3b28159d96140fa388404da3bc50f8e8df976d6a8f26c87f9b5283de4e332e1c605b250dc252a1637d96418e309bade4ac3de3c9c938bcbc40a4ffd55de23e76d62ef9737338101e1c72208611682b81cc4c2a1e095260f29766c4eb11db185c51182935e8e7f06c621cf338df518c2ae90f43d47f1a94c471c8bb8d9763bca8787184b6ca31bbfd9789db22777198de8a8c9521d71f3313579747bb5a02a7210c128ceb1a844c38feda9e34e80dda76b64a1a53ab1782f679298d75a3e15b075dbf9c251745b59d2edb10affae7b3b3e35e9938ea131617d8d1124f5885d528fba169526051d575cacdbfb3c3197ea99ea4d0feda227e876439afeeb0319fa06a583cd0abc9583b6902d50942a0a947065dd3fa2b952dec202d87100fb628c3c5bd387428da4a60a9a369994252b35ba12be063ff2b4c236e34bf7d277fbae7eac313eae91cd4b84c25dea5024478e1c317cda44daaeca25c1c953cb83781f03922577e44b5bb3cdaaff34098377727af4d327d79cbdee1f740df2a416e2a472942e57ca511a834b7c29dbfaf8fd3e82d0e9d020ef843324aede6217d4a1eef2c1f5429f99f4eb64f1b75d41e90ff9faca4ef41d740a041ea6970558cb8bac86098c9cf5c42732b39678885cec526360df7af23fb54c8f96bfa9bc6e3dfaa2a3762b8abb714a9655b485db25dcd5cb35da965b6b2923aa62c20084880cca518c31d8f21b5487bbdcc1048415f5d801f828bc2978ea626392083036a55695a5f6bbe5fcfac72db9dca301aa4fd71357e422863ceb2c5c0a0a8b35f3d087d947c473aa0d506ff61b1fb2b6b780e7ce1638f1fa88c2fe9d2c0f938bcd5018610b40ad8b463b95d4e75e2aabf528cb1206187a78de6a50c35568f5e8d4174c654d782d45af5d01a2f5b7738cf10c5ee53d6850c0baeb461cde8d9b797fba2ee05a9162781113a1f175fa56a74f789a8cbeb3c563d5e7c5991e51d140787af37ec50b7d6d9d729c8ac025edda150a718e2a4d8a46c49e9f106e5f3f4f41fe98b6e9ea892ae7955b7525f82461d12377bbd35b6cc848fcaeb2701fca204b8b404ee69c6ea947f3afecb3980ca54f1565b425b63de703a38383ff4e65985ec22bb64ddde1eb1d9dc434454153033fe51091d3dbe04f74ae3c289b46fdd7f732ad29a301fac7ac320883a8b6d686722568727332017387af78586c5eaab1a1ca9ad1c4bbccbf0545687243bc3ce41ff75abcd1611ddd2e0f9e64a6ea26abbcf09b575e61ebf1cb5c0ef6ddefaf8f8d0942722f60363385a201c3e9d9037b5f68f80d63e9998f7f4cb891a1a0eb75c9a3f1bcfc9c0e3cccfbc27c1737b3ba72c2f0b98050d93d4811338956c941054a0bf265e9c9eea5453a307a9a3433d07e2bed1600ce6bd20115a9225bea791b4a4afbc749bac4694bd7298ea9c4d69689a5c566bea540bf57d2f18a1761d71772249b3a49b0db62c6bbfdb3fb6a2f120e1aa1024a3f32daecd7cac63785b6fdf53b148f272d58e42ac2da43caf4eb1f616ddfc3354a076b0af5e8c27e5fccc8fdd418686f8d985622c565b2e66ab76b0e8effba0eb50af39eec3734253d633ec7a7929cc9ed67e627efa7cc145bec7399768cf0b39d570ad7f52d584159fbd0fb8413e33b70f818ece7b819016925936004d28a36a30a3383f5a82cd3ac9fcafc37270e3665e422527dd9d4a1352ca8c5e2150cfd9a17547852d0a9ca41e3b8d33dd506d1fac9a797a8e488e25cb2252c86713fee170f8df246ed26320db134ecdd112a8e519f26bd573287bfe753f8c5692b4658ac32e57cfdc89f78f07c161f2422841a740916971d6c1fdbe8a25f9265a35045b72e78d55336cde9d934341c7f98cb4fc47607697be8391576d508fc8df1fe69a04840897637f04bff66cc42e929b31ea2024067a9a858e2488018544e22fef4de26e059d2b2194af3100680643325603c9c1ea7126026829ac5b1f0e35de07abbd88583fc13ed1d676f2c58aa0850dc93eccba9042db89f3f21e303a8bdb6f52648a45ae56b50cfd7ff97c8c87755cc482691d30c5e048b8e5e31959718fbca0314e977cae02d80ee294ca0109ef66e0b77455416c77783f0ed90b97e952378cdfc8503a6afc27891ec3f2e6ef8a0a0144a9530041ad70f4589109dd4da750427e11e6375e8e4289b6d2dacc71617d266e8ffe13f69dfd73cbaeed90fddb2d4f3a15137da96c2e92cfdfc6b84db8d2a246c63a305cdd0f21db9b2600995a999ab96772d02ae44139e921f43e8553bb93e098417a2f4d1c51285f062185fd8585f515a135933bfbac95ff24cef786cbfd030ed9c5786bd737a052e2121767d54a30788e671e8a7ac4998bafd1572750dd39ff3486e4feee1f876d08a287d4d9ad3fee7b191d69c186c082fc72c011d348d8c6b79b09841cb8732fe16b882760ac74bc57e1a307341eebd15d93833e2e931e94cc91f96f4897d51b2c32d114283c5164f3a717f08c17fc1e924cd51c0a460e6e97cbbbfa12b9e354c3400f93f53aa47de9ad830ee739f008557c4e310dae84a438c4d4a9a295544230fb1c413a1f9bb6142b1d92411caf59e2cbe16afbdae9b38fa1c53891f9b422a82dcc4b99439b26eaa903c0feeb352969f812413fb38d253de5f8a6e2b779767886f3ebde7ec238671d0427dd231389514949c6a4c6175e8778f791fa86d18f257e04fce23de491640d3156096b7ae11adb9fcb631caba7104deaafe2e81428548ff13ec2556142969805e9bde48b4b9b9a3eb8befad24568169eac8e498845c6dea2b05eb6b6dd63e2bd9e334eb9db36249edf2b2a6e5e2d7de30b31e07a0be093718beaeb1b77d48ed0ca46be8a9ba6cdb8dedd66090cf53583a1e47e362d581e28456f6ed0531ded81c8f791b25fe14bb56c5778a3c2adae8ecbc7cd1d0962c60c0bd13ffd1c21e7c7adb7842a1e443aeb8322f193f1f881a396d150f6baf0cb1d18f7dba239eefa9eedc2b0bca70998b8d64cdeecef272b5773b4567c3e07b79f6284bec4735c9c743b2f98895342e9e871114c0dc14b5eba029ba8d1001a4f257615dedc2adb31e52623ca6597477336d69f28031fc1c0ea4078e407a1e1b33538661c841d773a312ce8cb090967d9e2acd2a2eda2bcc6e6223be643926c2097c33eb410737bfc529a582448ac14bd646dad62c590a2dc4d95d5d4a09bed4e8b732a5ca2fcc64c085ecfca6c2adc38bac26824eb50fdb98dbeeacd2b923e2da1928c1d558525129f4427a401329f192ffc8d473587ef26729e806bc194cb69731618cb34fba351b6c2e9b39f7a9de5053a9ef0d4caad1a560f458d9f5651154e14c0735687980f712faece6e8907c6e7285e05493a05a9f4b1a7a50480e8192bad10f15cd69caa3a3fada45ed2bb55e8ad110963fd38314516d084dbba4f5f2b2290ad0322ec69f0fb1e4a01b3cbfbba2050ff926bcca16a771fd7ed0ec513bed0193b4eeec8c580e82cad0e7099f4f575ebf341c20370e014e36142818f5ac4c02b95db55c0c1eec3454e6f95dcb6e73b8a551297ec728d4c2029b36e2a18ba46ab91f3299ed333560050b5ba768c19ef90d503b24ab0fbea46e4f3c1b9ce777c17c96682e903a24ba37619c72c7ce5608d5e62be9bc4be2d8eafeac71141ca8eb24425986aacc5a6ec3946f8b869489f40872a6278875ce7a364be800e0e71ef26ba68a9587ee59ccdcf2845230af42c7ac9804bbd1cb055aee4fbc6a72f0b57962f5866278771eb435a05e5cc9e858325b4b309842a75020ccaaec099c760baed0e2584e400defd9afba220f43ae24d14249ffba390ffc24b1504f27ee914b1fbf33980666a8f2c27dc7ef6a67de90baf062a751a1f39343fa9ec152739567934b0679e5e77ac10ac6db5846b77ccd60d385627b47ac4896c164e8ae4012cfd1a667feec9d198b01786c1fbe261ef596fafb1b5ea8814ac3b07f2976eacc5800c15f37bed7bdde3b650ed5a9a9b7a4a1f056c2348cf25dd31e70886e8c44024149dd2ddbaed5e1651d65bfe8575af77f077d5c775b7419a7a8dd5344644dd72fce283f0ae81e52cb20f8e9bb8c8d1d913110b6562e63dcf6af9616673c59c8049d04fa65e5d60d8faaf179be0d72b999ecbb6478d9a25f25704eed14e40b49e4e59af565b3bed5eb5ac444ba69e01ffabc1d8d39f3b0f248a3a51f336434ea3c06bac370b15bfad90ba9e0bb8661173b6452d3e2a5a1b36d22b5d6610d12afafc0bdcc61f545fe6d99e7ba76b10e6688297ada0cfa38d7d94882704e3969a5c84105b4390a476e2d36eca1a869e217dfcacd24b903348b8880494860ea1310895bd9d797a6a71405949788b8b6422b1744ed7f6eccd8fc145f8d27cb55f5ca5dffb5b2ce436936a2ba17ce43ccfffca", 0x1000}, {&(0x7f0000002380)="be50473a7e40054586173fbc5a09e4a1739ba80e42eb30484cc160346d480095cda1a96c2c10a5d047693045e8a37a93f4680531e0", 0x35}, {&(0x7f00000023c0)="8ee2582629dfab8eea6a1d8aee88e57628dcaa65dedec36421f45240122c9dfda63b97dff52579bb28ddb72290c3742c525a178e27ba136a315184d7ddf4b28075fe2a70c96d41b76a53bb6b6e928c81453bc4bda8a20eab55c59c465e90d8112a04965450aeaf1561f195576bb0885e146fcccad377a71c91a0aea0287837a81c3fc6e3af81230cffd39067c2f8d86049049a4f1d71362d38b61f60709507fb3a03f8ace10fbf33b799b39fb0e9465fa0c5e2dd5662dcec356e98de3c2efa7d", 0xc0}, {&(0x7f0000002480)}], 0x4, &(0x7f0000002500)=[{0xf8, 0x109, 0xf, "69cd1a30f916fe90e8f85105010027e707992b09ba998bfbb0544a49ddc8b6f886e140823b7b82497e8d237dfdff6be3e47a65ee0f9ddcc48ee262c74e0aa952237d3bc7b18948d8c834dcc5e3e4fb9e8b225656b38bdad836edbb9f01d244eb180adcd8a9696aa9c3e4d59f5110e51b2bf1a239c579cd178e5442d65619f33b9babb999bce716c7b494651daa27611c675d5c73595638efeb8f9d637ea95f6ab934a3a95e06709cdff40c17f5d305b370cc76954f7bbcccb0d22b63ca2bde5f8e6aa41b2e5a1814923ef87c96e419af150e06629f755892d155329bf36d0b0c2ef3a9ecec86"}, {0xf0, 0xb, 0xa, "fc1572c555ff61d58fddb97a3a79b2b41e8b936e4c95b2fe07e7cac60245a631d9a180569a870ec8190f2ee9a73413f66df0ae94c269531a1b38558e59326850d83fd21c507ab4ca3f8a5960493c811358f90e044333467852edf762fc70d990134774e10b69fb3b5be62c3bf7262782e778d8ece74d93a41f8552dc6d770a1316f0f47a70997a156114941cccb9e2d2496f9ac697e4fc4c61c48a6527a7513352a31c4b94d3040c82453c1fd87a4b8b30fdbb3b6025e4f74aae5a1c6587e428bf6fb78144482e1d4198868a0081cc40a48dc6dde3402909cf"}, {0x1010, 0x10f, 0xe0, "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"}, {0xf0, 0x110, 0x2, "5220421289811f63ff2f3ab59a4b91a3b28f1d5655f493bc40e47a91d5b29bd8b64bc9e7797292f0b97398e41a0039f85eb044ab31c0e29d4c7a766d827ea2f83bf99a2f4774d6288c6dec6f47aa671a0f11a40a61f64393ba42ec2a1a9150239ad5db76c1f670436ab8fb00c45a3739a81c0f5fe63262b157c80f255712a7fd6582cb83d20c7690fc5ff0d95e886a0509934a391ee2894df72ff2b9486d46e5066f49820ac92d5ccbd734a5b5cd8bcebf9ef0db7462a1c65673bab9f863d36254e9cd5dc6439357591e83fd6cdb3dd52a595ab87d0d3fc0f2b8056a"}, {0xc8, 0x111, 0x7, "c675639c2ae78ad07a4c1fa2181aa052118a2fdd966634c6daae1b37867b71053f3c3ed2dc642c632bfc114f58ce13e3078ba4e4eab6bc0be9f1a0b0a422710e5ea623cd6c419885020e5b09ea21e3242d61b75e9f57a32f20a6c9a59b3386bfa938bb1bea3762fac5c75b17ccaa416e09dc01c07e2222824ae47c323110f1c66cf7c4f9bfa9051f26e7fc60f1b93f5fc1869334d21512ffc58e639f6250e3763760968c87cc9c92d8fcaed87df9ab6b2a36c00370575251"}, {0x98, 0x112, 0x7f, "642c1c0f5cdff7c1bf3a5b357b0fb8386f9184d5a49235f7e4d365d9a0c68ae34ad25163ea4d8b83fcac9c052fc3d8d277f561be1f1f31ffae199113891838684ab566d0c86d45e49f316e062572c621be0be970d08025a2e9923b2bdb57bf5f5441b39ce0f783a56ca2b0d3066406f60793c8cca574f47e7ce72b59a4d4e89996f9cc4503ac22"}, {0x28, 0x1, 0x7, "54a3255f391bf7135f698912193ce31297ab00982c8d"}], 0x1470}}, {{&(0x7f0000003980)=@can={0x1d, r11}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003a00)="3b76186db326fd749a8887", 0xb}, {&(0x7f0000003a40)="addb3e8b945ba1f7dc33c5486a2bd1507bf92b19ec154cf8243ea84b9411c61483db0cf9094b3e8a14f54808c56e8293b6a3ac73b802b96b1608985a4ec90538725f68b17ebd6c33f6b4d3378130cc79e5c7b33934ebbc0e4caf4457cb05c78bf88e9a08a1e5f9614fcf5607ceb812952b22c9abd57ecbc429b37b38cdfc1b6081472b", 0x83}, {&(0x7f0000003b00)="adb6cfdd8e66aafa9c62f14afbc773d9743f901f157d5df4dcf131cb7a184ca587ff", 0x22}, {&(0x7f0000003b40)="0233e5442a5f8389f3746e05a2d0ce4f37faf46b19968dee040ef529b4df8416f34103f65919fd0520a0251e717fdc3312b4b17a1441f7d349475d85aeb46413c408733f99cc5b182da9052674e86740", 0x50}], 0x4}}, {{&(0x7f0000003c00)=@nl=@unspec, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003c80)="2456a5c6ad19bcfa95642ba67a4880231a5eb052e61ee72c8f593307da9983bc1c36f3c1c9dadbd153bbffcf9fc5435c0410", 0x32}, {&(0x7f0000003cc0)="c1f24a33785e957722ce963b4d9ee84839a94c1436fdfc6c1e12b79de4542f57a58c76e1f2520c1a9ac84b", 0x2b}, {&(0x7f0000003d00)="72ec11953b423c2821841567a433bdf50f274d50b339e349562f9221fd2785c3b8789f4efa72b437dd08ab573ea27e8cae909dc8c1df75ab1a29b98c4b497d06748803e8e33695a27c15", 0x4a}], 0x3, &(0x7f0000003dc0)=[{0x18, 0x104, 0xc, "32fb7f"}, {0x1010, 0x110, 0xffffffff, "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"}, {0x20, 0x84, 0x3, "c9107e2c620e1e3dd6"}], 0x1048}}, {{&(0x7f0000004e40)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004ec0)="f72370b270a57a6a5e603ea57e75936125a60eb01b8fdfc3df4084d105edc0141b15f5f3507e7256d04b75455a05bde78ce16a9ec8e6868bbda58055eaf4d7c1dfda3746af0a8434034bb69414b920688d77708bf8b6bc3bfb2b8612ef81f3db2f39ced0ee6b98ee53f7a5febd5e3a298cdbe955d0182c2cdd1177fc1cd43b63ae8519505b1e19e3981925b3387269948e5a938eecb7cbb17e9cd5ae8c3ffc6328fa848d3aaf78f5a9a0beebc85307c98840c8bf2d613faf54372272f551681a8da036541b2ad499bf5a6e43", 0xcc}], 0x1, &(0x7f0000005000)=[{0x1010, 0x113, 0x8d, "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"}, {0x1010, 0x111, 0xff, "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"}, {0x18, 0x102, 0x9, '\r'}, {0xe0, 0x10a, 0x1, "a3767d47265294fa6b97f1c4d17ef307321fd43927f61980136085503d7d6afd4509f90ac694ded6d640bcc0a7b4c2d70f13d90b50298f0bb6b303af79d4c2c36bb8f58b9df94075a778dbc314c46995bbe7700fbcb0d86c7b39c9a7eca9f0eebad183538115078edf83b1d33f711860d6e27b6c0089d4412c7e1e2f398a5d34816d4df58b249993419321160a2b5cf1ca4390cefe64d3bcff61968184a7243d40f2bddc5f23b6462b726313cc41e538b8ead8c0f3d47243e5e2c55366922110d3aeaefecde206e1c990137eac87d6a8"}], 0x2118}}, {{0x0, 0x0, &(0x7f0000007240)=[{&(0x7f0000007140)="cfed4ff910b9bad902f931a2de0e2b4a1a9bda4629f007fd025b1c702494182d90477d3fbff837c4985c06e2191c58276f12d6ac0f5c1ab9a9ec33adc5fde24a55368bce5c9b607ef27363e48e621b7d4bcd8ed20ef1b38f05d3ed96163605c9ccc37ea0c807f3a1c23bb9e0b52f621540ea9b334ec077c9a7648b25ee4f6241142fe4ee446f2b90a9feec3aa04ce2828b7000b1e09a41ba9a6d1de7a244f55b4326dbd467ef245cbb1299cde5d0bc7e7dcfbf5b769ff9a1e5ef6fb671b90cee5984d0aad8bb26e0f4d56d4f0910f90609d4aab4f6b7456aa832d7783f3816ec489d14150d6e24799300e716f16480", 0xef}], 0x1, &(0x7f0000007280)=[{0xd0, 0x116, 0x6, "ff792c8ebf9fc32be4a9a8c7e8265559cdebf8764a07abe7dc9cd10456f409645b4b7342f3c83b6a7a946cf0a0b09230e17fa5c847020c44c508c9bb980d907b4eb6480f0957e8903105e68022df2dcdf03d8f6c5ca9a870d897f213f910845d3a1a9336ce261c282705e4f839b618b1790414c74fc1ff0c723e3468de63f50915b73c04e2ea21b578a7fa669a4ada086d15a1f63c7fc7d6b315ee1e97db1ec174c742fb039fd185021d17acb7df7616f268d9d4321a679794"}, {0x110, 0x110, 0x4, "4c893483c20af073bc6451a864410eb34c6301fcac6ded808f76afbcdd5ec6c1d173850e745be261365963035bccc04e1d7a2720c6e94ddf3dda69e26283f1ee548edb832d8c2c48bc853a9bc7af8a9dc5220032e542efd504b8b369e527cb4fcb33496941696143f64296e6c741ba6e2a891e3b9f7d46d65129589a6af0d554180b2de4d1972b9beacc6cbc3e7a1b984ff1d3e8fc0fde8cbd28119f5bf8002c5f59aca2b92a9270f50c2bb2626b6664aed2a96c46182f02e65355273c469131a50fcc01be04aa03ccc4e5450f256edeab17b89630119361a353cdf89f064f5ff72dc74e24711494e092fac0ad238f458dc99171df77b5ad1d7f"}], 0x1e0}}], 0x5, 0x4000800) msgrcv(r6, &(0x7f00000075c0)={0x0, ""/164}, 0xac, 0x0, 0x2800) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000007840)={&(0x7f0000007680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007800)={&(0x7f00000076c0)={0x10c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x9}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x9, 0x3}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x5}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x54}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x5}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x9}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x10}]}}, @CTA_PROTOINFO={0x58, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x54, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8001}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x727}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 3.271576975s ago: executing program 0 (id=1882): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8993, &(0x7f0000000480)={'vlan0\x00', @ifru_names='veth1_to_bond\x00'}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000002c0), 0x0, 0x40040d9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="120100005dbafc40fd0b0c01162d1c020301090224000100000000090400000221efb0000905020200000000ff0905820200"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.079357781s ago: executing program 4 (id=1884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000440)=""/37, 0x25}, {&(0x7f0000000480)=""/25, 0x19}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000740)=""/86, 0x56}, {&(0x7f00000007c0)=""/122, 0x7a}, {&(0x7f0000000840)=""/252, 0xfc}, {&(0x7f0000000940)=""/82, 0x52}, {&(0x7f00000009c0)=""/141, 0x8d}], 0x9, &(0x7f00000005c0)=""/19, 0x13}, 0x3}, {{&(0x7f0000000b40)=@tipc, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000bc0)=""/117, 0x75}, {&(0x7f0000000c40)=""/70, 0x46}, {&(0x7f0000000cc0)=""/30, 0x1e}, {&(0x7f0000000d00)=""/92, 0x5c}, {&(0x7f0000000d80)=""/166, 0xa6}, {&(0x7f0000000e40)=""/197, 0xc5}], 0x6, &(0x7f0000000fc0)=""/207, 0xcf}, 0x6}, {{&(0x7f0000002100)=@nfc, 0x80, &(0x7f0000002300)=[{&(0x7f0000002440)=""/17, 0x11}, {&(0x7f0000002180)=""/154, 0x9a}, {&(0x7f0000002240)=""/175, 0xaf}], 0x3, &(0x7f0000002340)=""/56, 0x38}, 0x8}], 0x3, 0x2, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="230000001000212f000e0e672e5100", @ANYRES32=0x0, @ANYBLOB="312000000000000018001680140001801000060002000000050000000000000008001b0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(r3, 0x0, 0x607a9e0a432a4785) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000001000, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CLR_FD(r8, 0x4c01) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x109081, 0x0) syz_kvm_setup_cpu$x86(r3, r10, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000004c0)="66b8bb85c23c0f23c80f21f866350c00e0000f23f866b9800000c00f326635000400000f3071fdbaf80c66b858c9a28966ef66b9800000c00f326635004000000f30b80e00ef0f211c66b8000000000f23c80f21f866350400c0000f23f8f30f38f626180066b90c0900000f323e3e26660f380bb69ffeba4200ec", 0x7b}], 0x1, 0xca01119e4ee3c74a, 0x0, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001100)=""/4096, 0x1000}, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) 2.930167632s ago: executing program 3 (id=1887): syz_emit_ethernet(0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc000000000000000000000000000000ff020000000000000000000000000001242088a800000003000008003c0086dd080088be86dd"], 0x0) 2.861725937s ago: executing program 2 (id=1888): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003a00350200000000fcdbdf250a00000004000000"], 0x18}}, 0x8000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006110540000000000a6080000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x14, 0x32, 0x300, 0x70bd2d, 0x25dfdbfb, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x48400}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x1a2, 0x1000, 0x6}, &(0x7f0000000040), &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000001000e0000001000000000000000000000000e00000010000000000000000000000000000000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/101], 0xb8}}, 0x0) 2.738730273s ago: executing program 2 (id=1889): sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x8000) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000200)=0x6, 0x4) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) mknod$loop(&(0x7f0000000040)='./bus\x00', 0x208c, 0x1) (async) mknod$loop(&(0x7f0000000200)='./bus\x00', 0x208c, 0x0) 2.69441197s ago: executing program 3 (id=1890): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x4f4, 0x4, 0x1}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x5, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x401}, &(0x7f00000003c0)=0x8) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0xffffffffffffff8c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r6 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r6, 0x409, 0x7) writev(r6, &(0x7f00000017c0)=[{&(0x7f0000000000)="d119", 0x2}], 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000001c0)={'bond0\x00', 0x1000}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x88, r8, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x70, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) 2.198204437s ago: executing program 2 (id=1891): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="2a64ecec6e2a5648924bd1dea5f3ca6c41aa7b7c722e3472b11c24eda0d6da18b547c91b0361f685902631e946704110a82f07ab25405af7afc9c16de95658bbef008605f832e5c978f85b3b039c330dcd082a430a1913cf502cd8728a3fd7bc6377cfd2ea99f4a0429a3a39", 0x6c}, {&(0x7f00000003c0)="6670aa452c4b2ea1bcbee27266e2552c324d537a56f4d1d5f2f3254777f6", 0x1e}, {&(0x7f00000004c0)="f710250cd9bf480a32a71d45a28a2f075f3f7f1c4026e674fe81aaba296737df1a52b0746bcf0fcbc921dedeb02dfa296f72e80d357b41fdd1d186de95830d8fdecff3cf94578a9571757a0e93e4f53691508c8aa6def18a11a21989ee524dc5ae0219a5b10d50c0df931f60e33d0e457f0855d3cdf7b9cb916c50d9f33e45b8d513788e1f74da2495b269c4929d27a3f3c8f35839013c0768f844ef187a", 0x9e}, {&(0x7f0000000580)="568e36c15482689d31a5ded1daa20290796e2107dd48", 0x16}], 0x4, 0x0, 0x0, 0x4}}, {{&(0x7f0000000600)=@abs={0x4ce058f74a944794, 0x0, 0x4e24}, 0x6e, &(0x7f0000002480)=[{&(0x7f0000002200)="102464a3dd9a010ea671d522aba3431404ca99324cee6dd747d35c10290cb310843d8f9998e9738aea235945185179485d644eae81dfa4b3f68ee6889bad0bb71bd96e4545ef71880f4b51613f8375f32639a77c785c5308e79c989b71769fccc2760aa40fa5f14fc11303f08ff6aa7bf22ea61aa47a750ef348b38d184de5eae9a1d6bcaaaafc7daa48f454947650db60e8a7e4e4974cc99e149b8a28df15e7922eefc80ac8d4f2e140adff085c29bd4577e9709cf6e04bb26ed5b438b99c8fce4a15e5", 0xc4}, {&(0x7f0000002300)="0075c3cc457f1aa39f0f462360d963e83e59c144863a1cffc1379d6f06f19b002a1c88652d57001e1d9cc5e145420f665e84290c21341a6318f7fc82a2b53245617d7ed513e26c45c8408d9693d7504c1e339412acfdc3598add20cefb29d17e9408301acc523ab5e3182f63d0f48f983d4b580caf9ed34179cf625d80934a589d0f319182bca87b14e15ee38759153f9d6182d69139fce6edc2f8234070199eee4321c018bad8e74912eec13846cc64d3c1", 0xb2}, {&(0x7f00000023c0)="1cc244fdf6492377f0966d9a556b3f7428b644f60ff67b9605b5dca39bf0eb7e849bd5905a7d28cecb5896cd73593e03c208fa68980799bed7d692f5d0bff1dbf932cb9ba652ad64b199c7b1d1910458c1c8986b829dde6c70", 0x59}, {&(0x7f0000002440)="7a8456b13bb5acf32b9aec025263748b58e3b097d400cb02dadc4e7d57b17b93497d6ca33b9d8026", 0x28}], 0x4, &(0x7f00000024c0)=[@cred={{0x1c}}], 0x20, 0x200000d0}}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x20000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000101, 0x0, 0xd, 0x0, 0x200, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa32, 0x1, 0x0, 0xfffffffc, 0x789], 0x2, 0x400}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0xfffffffffffffff8) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) r5 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) io_uring_enter(r5, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) r7 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r7, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f7110"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_open_dev$sg(&(0x7f0000000200), 0x9, 0x80000) 2.044677153s ago: executing program 1 (id=1892): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x24, 0x4, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0038821a4b6f957ab10f980000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000001090400eb010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x1, &(0x7f0000000080)={0x13, "ddc1f7b51030c4a4c54bf28fac0200000000000000bc117b5452b3b94bce47509d"}}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x26, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185a000004000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000b7080000000000007b8af8ff00000000b7080000fbffffff7b8af0ff00000000bfa1000000000000fa000000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300009c82680b02f5e5c6e7c693f1e9acaead2928db10b6aab2ede3513f8ba071706ec9", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) futex(&(0x7f0000000140)=0x1, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x2) name_to_handle_at(r8, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x1100) socket(0x10, 0x803, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.85452203s ago: executing program 4 (id=1893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2009, 0x0, 0x6, 0xffffffffffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, 0x0) memfd_create(0x0, 0x3) socket$kcm(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800c010}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.68102313s ago: executing program 2 (id=1894): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) (async) r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') close_range(r1, 0xffffffffffffffff, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x140b, 0x110, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x20}}, 0x800) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e", 0x6, 0xfffffffffffffffb) keyctl$update(0x2, r2, &(0x7f0000000000)="11868a0fceae284c00000001000000", 0xf) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000009c0)={"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"}) (async) r5 = fanotify_init(0x4, 0x40000) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) (async) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000240)={0x3, &(0x7f0000000200)=[{0x4, 0x39, 0x80, 0x3}, {0x3, 0x2, 0xdc, 0x400}, {0x9, 0x80, 0x7, 0xc}]}, 0x10) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_GET_TSC_KHZ_vm(r7, 0xaea3) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000082000040"]) (async) r9 = memfd_create(&(0x7f0000000540)='-B\xd5NI\xc5j\x9appp\xf0\n\x84\xae\n\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1\x03\x00\x00\x00\xe3LS\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh\x9c\xea\xc9\x01c\x10d\xee\xa9\x1a\xcaR\xcf\xbcs\x86\xdf\xb9\xb9\x12\x8b\x04\xa3\xbd\xf2C\x93\xb8\x9a\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xd0\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04(\xcc\xce\x8b\x19\xea\xef\x17d\xc7d\xc5\xfa\b<\xe3?ip\x9dX4U\xd70\xfdM1\x17\xe1G\x81\xd1\x84\v{\x16\xcc7\xd8fP\x12\x0e\xe07)[;\xa4\xc1\x05S\xf9~\x8e7\xa8sKkR\x16\aA\x9a\xf4\x1a\x01\xe5vm\x18&\x8f.\x87\a\xde\xd7M\xda\xa1\xa2b\x0f)\xd0\xf1\x02;\x01\xd5\x94gD\x87\xd3E\xcf!\xf8K\xa4\xee\xb7rS\x8e\xbc`;\xb8\x8er\xe1\xb2\x8b\xb9wN\x87\xad\xd1W\xa7\xe7\xff_&\bv\xb46\xf6\x89\t\x1d\x8b@\xd63\x1d\x80\\\xef\xd0g`\xc6\xaem\n', 0x6) (async) ppoll(&(0x7f0000000080)=[{r5, 0x200}], 0x1, 0x0, 0x0, 0x0) r10 = dup(r9) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r6, &(0x7f0000000280)) (async) sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) fanotify_mark(r5, 0x1, 0x4800105c, r10, 0x0) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.342990594s ago: executing program 2 (id=1895): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x4, 0x6, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x2, 0x201, 0xc1, 0x43f, 0xa6c06db4, 0x9, 0x4}}], 0x50, 0x20000000}, 0x20000045) 1.172861452s ago: executing program 2 (id=1896): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 550.839979ms ago: executing program 4 (id=1897): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x26, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f00000000c0)) socket(0x10, 0x803, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x3, 0xceeed7dd4dff4de4, 0xc, 0x0, 0xde}, 0xc) 130.200445ms ago: executing program 0 (id=1898): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058ff0b, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20c}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='.\x02\x00', 0x4) landlock_restrict_self(r6, 0x0) renameat2(r7, &(0x7f00000000c0)='.\x02\x00', r7, &(0x7f0000000000)='./file0\x00', 0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xa0000001}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x48, 0x4, 0xa, 0x300, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20040800) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x69) gettid() 0s ago: executing program 0 (id=1899): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003a00350200000000fcdbdf250a00000004000000"], 0x18}}, 0x8000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006110540000000000a6080000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x14, 0x32, 0x300, 0x70bd2d, 0x25dfdbfb, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x48400}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x1a2, 0x1000, 0x6}, &(0x7f0000000040), &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000001000e0000001000000000000000000000000e00000010000000000000000000000000000000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/101], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): usb 5-1: selecting invalid altsetting 0 [ 425.424006][ T1213] usb 5-1: selecting invalid altsetting 0 [ 425.478846][ T5915] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 425.487003][ T1213] usb 5-1: USB disconnect, device number 65 [ 425.645075][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 425.653386][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 425.675823][ T5915] usb 1-1: USB disconnect, device number 58 [ 425.696193][ T5919] usb 2-1: USB disconnect, device number 72 [ 425.937317][ T8854] udevd[8854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.138/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 426.255103][ T5919] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 426.319838][T11154] vlan0: entered promiscuous mode [ 426.427762][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.445104][T10763] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 426.463104][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.483785][ T5919] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 426.493543][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 426.513321][ T5919] usb 2-1: SerialNumber: syz [ 426.628849][T10763] usb 5-1: Using ep0 maxpacket: 16 [ 426.644172][T10763] usb 5-1: config 0 has an invalid interface number: 183 but max is 0 [ 426.655450][T10763] usb 5-1: config 0 has no interface number 0 [ 426.661876][T10763] usb 5-1: config 0 interface 183 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 426.707616][T10763] usb 5-1: config 0 interface 183 has no altsetting 0 [ 426.760689][T10763] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 426.773701][ T5892] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 426.815170][ T5915] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 426.840562][T10763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.851399][ T5892] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 426.859596][T10763] usb 5-1: Product: syz [ 426.863827][ T5892] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 426.871334][T10763] usb 5-1: Manufacturer: syz [ 426.876976][T10763] usb 5-1: SerialNumber: syz [ 426.881695][ T5892] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 426.892196][ T5892] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 426.901279][T10763] usb 5-1: config 0 descriptor?? [ 426.910877][ T5892] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 426.920007][ T5892] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 426.928244][ T5892] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 426.940398][ T5892] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 426.951723][ T5892] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 426.984563][ T5892] hid-generic 0003:0004:0000.0014: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 426.994191][ T5915] usb 1-1: device descriptor read/64, error -71 [ 427.035098][ T855] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 427.103651][ T5919] usb 2-1: 0:2 : does not exist [ 427.230428][T10763] ssu100 5-1:0.183: Quatech SSU-100 USB to Serial Driver converter detected [ 427.239390][ T5915] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 427.263459][T10763] ssu100 5-1:0.183: probe with driver ssu100 failed with error -71 [ 427.292780][T11165] fido_id[11165]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 427.307175][ T855] usb 4-1: Using ep0 maxpacket: 8 [ 427.316774][T10763] usb 5-1: USB disconnect, device number 66 [ 427.370040][ T5919] usb 2-1: USB disconnect, device number 73 [ 427.389261][ T855] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.389662][ T5915] usb 1-1: device descriptor read/64, error -71 [ 427.400034][ T855] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 427.414843][ T855] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 427.433816][ T855] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 427.445846][ T855] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 427.455817][ T855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.479955][ T855] hub 4-1:1.0: bad descriptor, ignoring hub [ 427.490509][ T855] hub 4-1:1.0: probe with driver hub failed with error -5 [ 427.501760][ T855] cdc_wdm 4-1:1.0: skipping garbage [ 427.507093][ T855] cdc_wdm 4-1:1.0: skipping garbage [ 427.512059][ T6065] udevd[6065]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.514447][ T855] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 427.534568][ T855] cdc_wdm 4-1:1.0: Unknown control protocol [ 427.557318][ T5915] usb usb1-port1: attempt power cycle [ 427.757252][T11169] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1358'. [ 427.895057][ T5915] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 427.970218][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.995680][ T5915] usb 1-1: device descriptor read/8, error -71 [ 428.004619][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.012673][ T855] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 428.093118][T11176] team0: Device gtp0 is of different type [ 428.305052][ T5915] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 428.347550][ T5915] usb 1-1: device descriptor read/8, error -71 [ 428.365721][ T855] usb 3-1: Using ep0 maxpacket: 32 [ 428.385886][ T855] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 428.440482][ T855] usb 3-1: config 0 has no interface number 0 [ 428.457121][ T5915] usb usb1-port1: unable to enumerate USB device [ 428.507424][ T855] usb 3-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 428.629287][ T855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.765146][ T855] usb 3-1: Product: syz [ 428.777717][ T855] usb 3-1: Manufacturer: syz [ 428.798185][ T855] usb 3-1: SerialNumber: syz [ 428.819532][ T855] usb 3-1: config 0 descriptor?? [ 429.030966][ T5919] usb 4-1: USB disconnect, device number 55 [ 429.278814][T11169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.304458][T11169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.127163][T11194] netlink: 'syz.4.1362': attribute type 1 has an invalid length. [ 430.265130][ T5930] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 430.321376][T11194] bond3: entered promiscuous mode [ 430.329126][T11194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 430.455057][ T5930] usb 1-1: device descriptor read/64, error -71 [ 430.568583][ T855] cp210x 3-1:0.79: cp210x converter detected [ 430.592603][ T855] cp210x 3-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 430.614500][ T855] cp210x 3-1:0.79: querying part number failed [ 430.671095][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1363'. [ 430.671556][ T855] usb 3-1: cp210x converter now attached to ttyUSB0 [ 430.792603][T11204] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1366'. [ 430.814084][ T5930] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 430.935541][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 430.935554][ T30] audit: type=1400 audit(1762619884.134:1573): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11198 comm="syz.1.1363" [ 431.034725][ T855] usb 3-1: USB disconnect, device number 63 [ 431.061998][ T855] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 431.173088][ T855] cp210x 3-1:0.79: device disconnected [ 431.185493][ T5930] usb 1-1: device descriptor read/64, error -71 [ 431.318998][ T5930] usb usb1-port1: attempt power cycle [ 431.837070][ T5915] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 431.905057][ T5930] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 431.948700][ T5930] usb 1-1: device descriptor read/8, error -71 [ 432.068483][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.119267][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.171680][ T5915] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 432.215168][ T5930] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 432.267078][ T5930] usb 1-1: device descriptor read/8, error -71 [ 432.292277][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.310273][ T5915] usb 4-1: config 0 descriptor?? [ 432.466222][ T5930] usb usb1-port1: unable to enumerate USB device [ 432.687950][T11231] netdevsim netdevsim2: Direct firmware load for . [ 432.687950][T11231] failed with error -2 [ 432.707353][ T5915] usbhid 4-1:0.0: can't add hid device: -32 [ 432.736935][T11231] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 432.736935][T11231] [ 432.755257][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 432.902947][ T5915] usb 4-1: USB disconnect, device number 56 [ 433.676081][T11247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1377'. [ 434.335071][ T5919] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 434.501012][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 434.515465][ T5919] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 434.526816][ T5919] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 434.538647][ T5919] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.548880][ T5919] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.564788][ T5919] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.577285][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.705109][ T5915] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 434.795438][ T5919] usb 4-1: GET_CAPABILITIES returned 0 [ 434.805814][ T5919] usbtmc 4-1:16.0: can't read capabilities [ 434.875009][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 434.882228][ T5915] usb 3-1: no configurations [ 434.890414][ T5915] usb 3-1: can't read configurations, error -22 [ 434.978948][T11268] vlan2: entered promiscuous mode [ 435.011012][T10763] usb 4-1: USB disconnect, device number 57 [ 435.035089][ T5915] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 435.225573][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 435.254034][ T5915] usb 3-1: no configurations [ 435.259839][T11275] bond4: option lacp_active: invalid value (8) [ 435.268509][T11275] bond4 (unregistering): Released all slaves [ 435.269019][ T5915] usb 3-1: can't read configurations, error -22 [ 435.320183][ T5915] usb usb3-port1: attempt power cycle [ 435.612831][T11286] kvm: user requested TSC rate below hardware speed [ 435.729779][ T5915] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 435.767032][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 435.773646][ T5915] usb 3-1: no configurations [ 435.780030][ T5915] usb 3-1: can't read configurations, error -22 [ 435.915187][ T5915] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 436.109789][T11291] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1391'. [ 436.144676][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 436.152589][ T5915] usb 3-1: no configurations [ 436.157531][ T5915] usb 3-1: can't read configurations, error -22 [ 436.174457][ T5915] usb usb3-port1: unable to enumerate USB device [ 436.406238][T10763] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 436.594718][T10763] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.614857][T10763] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 436.639150][T10763] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.652739][T10763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.669910][T10763] usb 5-1: Product: syz [ 436.679271][T10763] usb 5-1: Manufacturer: syz [ 436.691442][T10763] usb 5-1: SerialNumber: syz [ 436.752493][T10763] cdc_mbim 5-1:1.0: skipping garbage [ 436.953422][T11293] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 436.985033][ T5930] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 437.144543][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.173121][ T5930] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 437.215882][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.234217][ T5930] usb 1-1: config 0 descriptor?? [ 437.644320][T11293] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 437.652300][T10763] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 437.669969][T10763] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 437.695442][ T5930] nintendo 0003:057E:200E.0015: unbalanced delimiter at end of report description [ 437.730881][ T5930] nintendo 0003:057E:200E.0015: HID parse failed [ 437.763455][ T5930] nintendo 0003:057E:200E.0015: probe - fail = -22 [ 437.774579][ T5930] nintendo 0003:057E:200E.0015: probe with driver nintendo failed with error -22 [ 437.803034][T10763] wwan wwan0: port wwan0mbim0 attached [ 437.839071][ T5930] usb 1-1: USB disconnect, device number 67 [ 437.924044][T10763] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 6e:04:28:cc:87:c9 [ 439.585124][T10763] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 439.735905][T10763] usb 1-1: device descriptor read/64, error -71 [ 439.843261][T11345] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1402'. [ 439.929748][ T5919] usb 5-1: USB disconnect, device number 67 [ 439.938874][ T5919] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 440.011604][T10763] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 440.035550][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.042028][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.189255][ T5919] wwan wwan0: port wwan0mbim0 disconnected [ 440.215589][T10763] usb 1-1: device descriptor read/64, error -71 [ 440.325528][T10763] usb usb1-port1: attempt power cycle [ 440.761054][T10763] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 440.768729][ T5919] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 440.795028][ T5830] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 440.803241][T10763] usb 1-1: device descriptor read/8, error -71 [ 440.945572][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 440.961803][ T5919] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 440.995625][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.011623][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.022733][ T5919] usb 5-1: Product: syz [ 441.022753][ T5919] usb 5-1: Manufacturer: syz [ 441.085099][T10763] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 441.134236][ T5919] usb 5-1: SerialNumber: syz [ 441.154857][T10763] usb 1-1: device descriptor read/8, error -71 [ 441.170092][ T5919] usb 5-1: config 0 descriptor?? [ 441.195199][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.296528][T10763] usb usb1-port1: unable to enumerate USB device [ 441.411828][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 441.507993][ T5830] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 441.566073][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.582334][ T5919] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 441.591848][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 441.603691][ T5830] usb 2-1: config 0 descriptor?? [ 441.673773][ T5919] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 441.736157][ T5919] usb 5-1: media controller created [ 441.778899][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.865796][T11352] dtv5100: wlen = 0, aborting. [ 442.153592][T11383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.162797][T11383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.501380][ T5919] zl10353_read_register: readreg error (reg=127, ret==0) [ 442.552110][ T5919] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 442.613048][ T5919] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 442.617929][T11390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.660441][T11390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.840498][ T30] audit: type=1326 audit(1762619896.064:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11395 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 442.915003][T10763] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 443.006873][ T30] audit: type=1326 audit(1762619896.064:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11395 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 443.071636][T11399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.085587][T11399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.109919][T11390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.123652][T11390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.156605][T10763] usb 1-1: Using ep0 maxpacket: 8 [ 443.169723][ T30] audit: type=1326 audit(1762619896.064:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11395 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 443.244709][T10763] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.278873][T10763] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 443.309216][T10763] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 443.323231][ T30] audit: type=1326 audit(1762619896.064:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11395 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 443.372115][T10763] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 443.393533][T10763] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 443.402901][ T30] audit: type=1326 audit(1762619896.064:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11395 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 443.448306][T10763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.514620][T10763] hub 1-1:1.0: bad descriptor, ignoring hub [ 443.537768][ T30] audit: type=1326 audit(1762619896.064:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11395 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 443.575117][ T30] audit: type=1326 audit(1762619896.064:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11395 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 443.589169][T10763] hub 1-1:1.0: probe with driver hub failed with error -5 [ 443.604651][ T30] audit: type=1326 audit(1762619896.064:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11395 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 443.630456][ T30] audit: type=1326 audit(1762619896.064:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11395 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 443.685399][ T30] audit: type=1326 audit(1762619896.094:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11395 comm="syz.3.1414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 443.686053][T10763] cdc_wdm 1-1:1.0: skipping garbage [ 443.787510][ T5830] usbhid 2-1:0.0: can't add hid device: -71 [ 443.793478][ T5830] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 443.859056][ T5830] usb 2-1: USB disconnect, device number 74 [ 443.860666][T10763] cdc_wdm 1-1:1.0: skipping garbage [ 443.873234][T10763] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 443.924997][T10763] cdc_wdm 1-1:1.0: Unknown control protocol [ 443.934745][T11393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.971672][T11393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.026949][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 444.215398][T10763] usb 1-1: USB disconnect, device number 72 [ 444.512925][T11420] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1419'. [ 446.258170][T11453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.327094][T11453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.255059][ T5830] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 449.302158][ T855] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 449.421035][ T5830] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 449.431714][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.442959][ T5830] usb 2-1: config 0 has no interfaces? [ 449.464201][ T5830] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 449.481838][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.547899][ T855] usb 4-1: config 0 has no interfaces? [ 449.743249][ T855] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 449.808713][ T5830] usb 2-1: config 0 descriptor?? [ 449.823453][ T855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.018227][ T855] usb 4-1: Product: syz [ 450.143852][ T855] usb 4-1: Manufacturer: syz [ 450.151494][ T855] usb 4-1: SerialNumber: syz [ 450.169909][ T855] usb 4-1: config 0 descriptor?? [ 451.055706][T11540] syzkaller1: entered promiscuous mode [ 451.075182][T11540] syzkaller1: entered allmulticast mode [ 451.354771][ T5919] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 451.535049][ T5919] usb 3-1: device descriptor read/64, error -71 [ 451.799525][ T5919] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 451.945068][ T5919] usb 3-1: device descriptor read/64, error -71 [ 452.091762][ T5919] usb usb3-port1: attempt power cycle [ 452.235369][ T5915] usb 2-1: USB disconnect, device number 76 [ 452.421361][T10763] usb 4-1: USB disconnect, device number 58 [ 452.446232][ T5919] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 452.525109][ T5915] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 452.533644][ T5919] usb 3-1: device descriptor read/8, error -71 [ 452.705059][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 452.767343][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.856341][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 452.917336][ T5919] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 453.011577][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 453.061813][ T5915] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 453.114973][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.200186][ T5915] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 453.209582][ T5915] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 453.217999][ T5919] usb 3-1: device not accepting address 71, error -71 [ 453.228236][ T5915] usb 2-1: Manufacturer: syz [ 453.252857][T11566] x_tables: duplicate underflow at hook 3 [ 453.388185][ T5919] usb usb3-port1: unable to enumerate USB device [ 453.395695][ T5915] usb 2-1: config 0 descriptor?? [ 453.780839][ T5915] rc_core: IR keymap rc-hauppauge not found [ 453.789557][ T5915] Registered IR keymap rc-empty [ 453.811939][T11557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.820877][T11557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.835048][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 454.155923][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 454.205047][ T5919] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 454.213777][ T5915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 454.231298][ T5915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input55 [ 454.258073][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 454.312124][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 454.335544][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 454.365197][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 454.406368][ T5919] usb 4-1: device descriptor read/64, error -71 [ 454.412716][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 454.464481][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 454.515093][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 454.569762][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 454.616089][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 454.632432][T11589] sctp: [Deprecated]: syz.4.1451 (pid 11589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.632432][T11589] Use struct sctp_sack_info instead [ 454.675092][ T5919] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 454.683732][ T5915] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 454.746812][ T5915] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 454.761562][ T5915] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 454.826387][ T5919] usb 4-1: device descriptor read/64, error -71 [ 454.939680][ T5919] usb usb4-port1: attempt power cycle [ 455.068425][T11596] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 455.075279][T11596] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 455.086035][T11596] vhci_hcd vhci_hcd.0: Device attached [ 455.344703][ T5919] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 455.393218][ T5919] usb 4-1: device descriptor read/8, error -71 [ 455.414863][ T5892] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 456.008048][ T5919] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 456.248520][ T1213] usb 2-1: USB disconnect, device number 77 [ 456.260540][ T5919] usb 4-1: device descriptor read/8, error -71 [ 456.295010][T11597] vhci_hcd: connection reset by peer [ 456.370016][ T6137] vhci_hcd: stop threads [ 456.385337][ T5919] usb usb4-port1: unable to enumerate USB device [ 456.448728][ T6137] vhci_hcd: release socket [ 456.469445][ T6137] vhci_hcd: disconnect device [ 456.787229][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 458.103033][T11633] bond4: option arp_interval: invalid value (18446744073709551611) [ 458.255108][T11633] bond4: option arp_interval: allowed values 0 - 2147483647 [ 458.279590][T11635] xt_NFQUEUE: number of total queues is 0 [ 458.287396][T11633] bond4 (unregistering): Released all slaves [ 458.618398][T11640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.652689][T11640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.669696][T11640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.693406][T11640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.912942][T11649] team0: Device gtp0 is of different type [ 459.337911][T11650] team0: Device gtp0 is of different type [ 459.789518][T11656] sctp: [Deprecated]: syz.2.1467 (pid 11656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.789518][T11656] Use struct sctp_sack_info instead [ 459.860822][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 460.187565][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1471'. [ 460.459754][T11677] loop4: detected capacity change from 0 to 1 [ 460.472010][T11677] Dev loop4: unable to read RDB block 1 [ 460.493018][T11678] netlink: 'syz.2.1472': attribute type 1 has an invalid length. [ 460.505590][T11677] loop4: unable to read partition table [ 460.519188][T11677] loop4: partition table beyond EOD, truncated [ 460.549222][T11677] loop_reread_partitions: partition scan of loop4 (被x^> ) failed (rc=-5) [ 460.565235][ T5892] vhci_hcd: vhci_device speed not set [ 460.584453][ T5201] Dev loop4: unable to read RDB block 1 [ 460.611153][ T5201] loop4: unable to read partition table [ 460.637142][T11678] bond2: entered promiscuous mode [ 460.643887][T11678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.654256][ T5201] loop4: partition table beyond EOD, truncated [ 460.694829][T11683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.702052][T11683] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 460.712176][T11683] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 460.728087][T11683] bond2: (slave gre1): making interface the new active one [ 460.735379][T11683] gre1: entered promiscuous mode [ 460.747561][T11683] bond2: (slave gre1): Enslaving as an active interface with an up link [ 460.855534][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 460.866603][ T43] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 461.025023][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 461.034277][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.050740][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.128993][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 461.210476][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 461.234879][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.259855][ T43] usb 2-1: config 0 descriptor?? [ 461.730125][T11682] bond6: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 461.792937][T11682] bond6 (unregistering): Released all slaves [ 461.794346][ T43] hid_parser_main: 8 callbacks suppressed [ 461.794371][ T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 461.829692][ T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 461.848705][ T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 461.848738][ T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x2 [ 461.848763][ T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 461.934293][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.948821][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.956915][ T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 461.966937][ T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 461.981313][ T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 462.005118][ T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x1 [ 462.013797][ T43] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 462.059743][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0016/input/input56 [ 462.192188][ T43] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 462.339291][ T43] usb 2-1: USB disconnect, device number 78 [ 462.437065][T11706] fido_id[11706]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 462.501174][T11710] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 463.075792][T11722] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1484'. [ 463.685282][ T1213] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 463.875982][ T1213] usb 3-1: Using ep0 maxpacket: 32 [ 463.896220][ T1213] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 463.905148][ T1213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.917827][ T1213] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 463.930151][ T1213] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 463.963363][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.972324][ T1213] usb 3-1: Product: syz [ 463.976927][ T1213] usb 3-1: Manufacturer: syz [ 463.982271][ T1213] usb 3-1: SerialNumber: syz [ 463.997658][ T1213] usb 3-1: config 0 descriptor?? [ 464.211318][ T5892] usb 3-1: USB disconnect, device number 72 [ 464.495698][ T855] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 464.665108][ T855] usb 2-1: Using ep0 maxpacket: 8 [ 464.672190][ T855] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.684131][ T43] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 464.693206][ T855] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 464.704137][ T855] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 464.716110][ T855] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 464.742270][ T855] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 464.761713][ T855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.792651][ T855] hub 2-1:1.0: bad descriptor, ignoring hub [ 464.825548][ T855] hub 2-1:1.0: probe with driver hub failed with error -5 [ 464.852092][ T855] cdc_wdm 2-1:1.0: skipping garbage [ 464.865116][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 464.874501][ T855] cdc_wdm 2-1:1.0: skipping garbage [ 464.882388][ T43] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 464.899291][ T43] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 464.921847][ T43] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 464.935752][ T855] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 464.941670][ T855] cdc_wdm 2-1:1.0: Unknown control protocol [ 464.989660][ T43] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 465.033862][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 465.046099][ T43] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 465.065506][ T43] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 465.090862][ T43] usb 1-1: Product: syz [ 465.097226][ T43] usb 1-1: Manufacturer: syz [ 465.103276][ T43] usb 1-1: SerialNumber: syz [ 465.111288][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 465.137559][ T43] usb 1-1: config 0 descriptor?? [ 465.156724][ T43] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 465.178399][ T43] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 465.269666][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.278625][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.432184][ T855] usb 1-1: USB disconnect, device number 73 [ 465.455292][ T1213] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 465.465373][ T43] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 465.595115][ T1213] usb 3-1: device descriptor read/64, error -71 [ 465.615597][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 465.622563][ T43] usb 4-1: config 0 has an invalid interface number: 149 but max is 0 [ 465.630898][ T43] usb 4-1: config 0 has no interface number 0 [ 465.637094][ T43] usb 4-1: config 0 interface 149 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 465.648924][ T43] usb 4-1: config 0 interface 149 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 465.661541][ T43] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 465.670665][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.678798][ T43] usb 4-1: Product: syz [ 465.682962][ T43] usb 4-1: Manufacturer: syz [ 465.687605][ T43] usb 4-1: SerialNumber: syz [ 465.694135][ T43] usb 4-1: config 0 descriptor?? [ 465.835226][ T1213] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 465.906866][ T43] usb 4-1: USB disconnect, device number 63 [ 465.975043][ T1213] usb 3-1: device descriptor read/64, error -71 [ 466.085427][ T1213] usb usb3-port1: attempt power cycle [ 466.146616][ T5892] usb 2-1: USB disconnect, device number 79 [ 466.147257][T11743] cdc_wdm 2-1:1.0: Error autopm - -16 [ 466.158840][ T855] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 466.435062][ T1213] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 466.477778][ T1213] usb 3-1: device descriptor read/8, error -71 [ 466.536226][T11792] xt_CT: You must specify a L4 protocol and not use inversions on it [ 466.616847][T11796] bond4: option arp_interval: invalid value (18446744073709551611) [ 466.632922][T11796] bond4: option arp_interval: allowed values 0 - 2147483647 [ 466.643193][T11796] bond4 (unregistering): Released all slaves [ 466.656014][T11799] xt_NFQUEUE: number of total queues is 0 [ 466.682887][T11798] IPv6: sit1: Disabled Multicast RS [ 466.699370][T11798] sit1: entered allmulticast mode [ 466.735872][ T1213] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 466.766348][ T1213] usb 3-1: device descriptor read/8, error -71 [ 466.859695][T11808] netlink: 'syz.0.1507': attribute type 1 has an invalid length. [ 466.905087][ T1213] usb usb3-port1: unable to enumerate USB device [ 466.961273][T11808] bond4: entered promiscuous mode [ 466.969145][T11812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.979340][T11808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.041038][T11812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.075084][ T43] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 467.205943][ T43] usb 4-1: device descriptor read/64, error -71 [ 467.495047][ T43] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 467.645040][ T43] usb 4-1: device descriptor read/64, error -71 [ 467.885314][ T43] usb usb4-port1: attempt power cycle [ 468.118806][T11833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.127661][T11833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.545115][ T43] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 468.575806][ T43] usb 4-1: device descriptor read/8, error -71 [ 468.721914][T11840] SET target dimension over the limit! [ 468.855083][ T43] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 468.900280][ T43] usb 4-1: device descriptor read/8, error -71 [ 468.956118][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1517'. [ 469.015794][ T43] usb usb4-port1: unable to enumerate USB device [ 469.347657][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 469.347680][ T30] audit: type=1326 audit(1762619922.564:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11850 comm="syz.1.1518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f858298f6c9 code=0x0 [ 469.776492][T11856] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[11856] [ 469.843258][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 469.924882][T11862] bond1: option arp_interval: invalid value (18446744073709551611) [ 469.933401][T11862] bond1: option arp_interval: allowed values 0 - 2147483647 [ 469.948987][T11862] bond1 (unregistering): Released all slaves [ 469.986561][T11865] xt_NFQUEUE: number of total queues is 0 [ 470.145179][ T5892] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 470.295150][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 470.324786][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.380423][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 470.400184][ T5892] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 470.411540][ T5892] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 470.423465][ T5892] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 470.435512][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.461767][ T5892] hub 2-1:1.0: bad descriptor, ignoring hub [ 470.487546][ T5892] hub 2-1:1.0: probe with driver hub failed with error -5 [ 470.512646][ T5892] cdc_wdm 2-1:1.0: skipping garbage [ 470.537014][ T5892] cdc_wdm 2-1:1.0: skipping garbage [ 470.568005][ T5892] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 470.584885][ T5892] cdc_wdm 2-1:1.0: Unknown control protocol [ 470.605061][ T5915] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 470.765032][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 470.779808][ T5915] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 470.788752][ T5915] usb 4-1: config 179 has no interface number 0 [ 470.798737][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 470.810126][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 470.822335][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 470.846254][ T5915] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 470.870610][ T5915] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 470.894127][ T5915] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 470.917475][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.928551][T11853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.940747][T11853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.981855][T11874] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 471.228816][ T5915] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input59 [ 471.238112][T11894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.278901][T11892] team0: Device gtp0 is of different type [ 471.306968][T11894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.516864][ T43] usb 4-1: USB disconnect, device number 68 [ 471.516929][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 471.531361][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 471.885393][ T855] usb 2-1: USB disconnect, device number 80 [ 472.158860][T11911] netlink: 'syz.0.1530': attribute type 1 has an invalid length. [ 472.351119][T11911] bond5: entered promiscuous mode [ 472.416818][T11911] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.981346][T11933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.055902][T11933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.126071][T11934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.139178][T11934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.177065][T11937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.207400][T11934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.243477][T11934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.617923][T11942] team0: Device gtp0 is of different type [ 474.731159][T11952] team0: Device gtp0 is of different type [ 475.305327][ T5892] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 475.505114][ T5919] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 475.545019][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 475.556508][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.567236][ T5892] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.583680][ T5892] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.602367][ T5892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 475.716403][ T5919] usb 3-1: no configurations [ 475.721023][ T5919] usb 3-1: can't read configurations, error -22 [ 475.728027][ T5892] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 475.737227][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.784129][ T5892] usb 1-1: config 0 descriptor?? [ 475.855704][ T5919] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 476.038017][ T5919] usb 3-1: no configurations [ 476.046255][ T5919] usb 3-1: can't read configurations, error -22 [ 476.066446][ T5919] usb usb3-port1: attempt power cycle [ 476.229361][ T5892] hid_parser_main: 1 callbacks suppressed [ 476.229383][ T5892] kye 0003:0458:0153.0017: unknown main item tag 0x0 [ 476.254667][ T5892] kye 0003:0458:0153.0017: unknown main item tag 0x0 [ 476.346413][ T5892] kye 0003:0458:0153.0017: unknown main item tag 0x0 [ 476.368287][ T5892] kye 0003:0458:0153.0017: unknown main item tag 0x0 [ 476.388721][T11973] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1549'. [ 476.448118][ T5919] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 476.468116][ T5892] kye 0003:0458:0153.0017: unknown main item tag 0x0 [ 476.522607][ T5892] kye 0003:0458:0153.0017: unknown main item tag 0x0 [ 476.530790][ T5919] usb 3-1: no configurations [ 476.638332][ T5919] usb 3-1: can't read configurations, error -22 [ 476.663797][ T5892] kye 0003:0458:0153.0017: unknown main item tag 0x0 [ 476.672010][ T5892] kye 0003:0458:0153.0017: unknown main item tag 0x0 [ 476.684052][ T5892] kye 0003:0458:0153.0017: unknown main item tag 0x0 [ 476.750278][ T5892] kye 0003:0458:0153.0017: unknown main item tag 0x0 [ 476.780739][ T5930] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 476.805031][ T5919] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 476.819158][ T5892] kye 0003:0458:0153.0017: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.0-1/input0 [ 476.833329][ T5919] usb 3-1: no configurations [ 476.838207][ T5919] usb 3-1: can't read configurations, error -22 [ 476.859448][ T5919] usb usb3-port1: unable to enumerate USB device [ 476.963354][ T5892] usb 1-1: USB disconnect, device number 74 [ 477.107351][ T5930] usb 2-1: config 0 has no interfaces? [ 477.112923][ T5930] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 477.202006][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.238389][T11979] fido_id[11979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 477.280654][ T5930] usb 2-1: config 0 descriptor?? [ 479.613637][T12002] team0: Device gtp0 is of different type [ 480.074341][ T855] usb 2-1: USB disconnect, device number 81 [ 480.533337][ T30] audit: type=1326 audit(1762619933.754:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.1.1558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f858298f6c9 code=0x0 [ 480.615147][ T30] audit: type=1326 audit(1762619933.754:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.1.1558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f858298f6c9 code=0x0 [ 480.802467][T12027] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1559'. [ 480.885075][ T5919] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 481.169320][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 481.278421][ T5892] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 481.507408][ T5919] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 481.555714][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.587369][ T5919] usb 2-1: config 0 descriptor?? [ 481.593135][T12018] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 481.635101][ T5892] usb 3-1: device descriptor read/64, error -71 [ 481.804713][ T855] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 481.860196][ T5919] usbhid 2-1:0.0: can't add hid device: -71 [ 481.879983][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 481.909287][ T5892] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 481.951182][ T5919] usb 2-1: USB disconnect, device number 82 [ 481.995190][ T855] usb 1-1: Using ep0 maxpacket: 32 [ 482.018509][ T855] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 482.061727][ T855] usb 1-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 482.087972][ T855] usb 1-1: config 0 has no interface number 0 [ 482.111248][ T5892] usb 3-1: device descriptor read/64, error -71 [ 482.226110][ T5892] usb usb3-port1: attempt power cycle [ 482.238332][ T855] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 16 [ 482.262344][ T855] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.345210][ T855] usb 1-1: config 0 interface 196 has no altsetting 0 [ 482.484230][ T855] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 482.493735][ T855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 482.607890][ T855] usb 1-1: SerialNumber: syz [ 482.619762][ T855] usb 1-1: config 0 descriptor?? [ 482.645068][ T5892] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 482.655895][T12035] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 482.677682][ T5892] usb 3-1: device descriptor read/8, error -71 [ 483.145402][ T5892] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 483.178520][ T5892] usb 3-1: device descriptor read/8, error -71 [ 483.298969][ T5892] usb usb3-port1: unable to enumerate USB device [ 483.417945][ T5919] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 483.504816][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'. [ 483.701137][ T5919] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 483.716448][ T5919] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 483.745136][ T5919] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 483.779630][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.103214][T12062] can: request_module (can-proto-3) failed. [ 484.110542][T12063] can: request_module (can-proto-3) failed. [ 484.151023][ T5930] usb 4-1: USB disconnect, device number 69 [ 484.165595][ T43] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 484.315063][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 484.323899][ T43] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 484.343776][ T43] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.664640][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1570'. [ 484.717718][ T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 484.753466][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.792911][ T43] usbtmc 2-1:16.0: bulk endpoints not found [ 484.985331][ T855] gspca_main: spca501-2.14.0 probing 0000:0000 [ 484.991946][ T855] gspca_spca501: reg write: error -71 [ 485.002558][ T855] spca501 1-1:0.196: Reg write failed for 0x02,0x0f,0x05 [ 485.022029][ T855] spca501 1-1:0.196: probe with driver spca501 failed with error -22 [ 485.050094][ T855] usb 1-1: USB disconnect, device number 75 [ 485.432629][T12085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.459111][T12085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.471864][T12081] bond6: option arp_interval: invalid value (18446744073709551611) [ 485.523481][T12081] bond6: option arp_interval: allowed values 0 - 2147483647 [ 485.540817][T12081] bond6 (unregistering): Released all slaves [ 485.682962][T12093] fuse: Bad value for 'fd' [ 485.762680][T12097] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1575'. [ 487.004384][ T5919] usb 2-1: USB disconnect, device number 83 [ 487.177114][T12113] sctp: [Deprecated]: syz.1.1581 (pid 12113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.177114][T12113] Use struct sctp_sack_info instead [ 487.702154][T12124] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 487.708698][T12124] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 487.777005][T12124] vhci_hcd vhci_hcd.0: Device attached [ 488.015056][ T855] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 488.124599][T12126] vhci_hcd: connection reset by peer [ 488.146673][ T13] vhci_hcd: stop threads [ 488.180497][ T13] vhci_hcd: release socket [ 488.196784][ T13] vhci_hcd: disconnect device [ 488.205848][T12143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.429159][T12142] team0: Device gtp0 is of different type [ 490.309574][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1590'. [ 490.509117][T12169] loop3: detected capacity change from 0 to 7 [ 490.526092][T12169] Dev loop3: unable to read RDB block 7 [ 490.584599][T12169] loop3: unable to read partition table [ 490.590701][T12169] loop3: partition table beyond EOD, truncated [ 490.597257][T12169] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 490.630837][T12167] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1592'. [ 491.815079][ T43] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 491.986299][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 491.995614][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.038343][ T43] usb 3-1: config 0 descriptor?? [ 492.102352][ T43] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 492.189252][T12195] fuse: Bad value for 'fd' [ 492.656008][T12204] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1603'. [ 492.841464][ T43] gspca_stv06xx: I2C: Read error writing address: -71 [ 492.907063][ T43] usb 3-1: USB disconnect, device number 85 [ 493.005086][ T5919] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 493.155081][ T855] vhci_hcd: vhci_device speed not set [ 493.216070][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 493.304788][ T5919] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 493.325206][ T5919] usb 4-1: can't read configurations, error -61 [ 493.492081][ T5919] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 493.781233][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 493.963818][ T5919] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 494.003388][ T5919] usb 4-1: can't read configurations, error -61 [ 494.076716][ T5919] usb usb4-port1: attempt power cycle [ 494.465314][ T5919] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 494.516800][T12230] loop3: detected capacity change from 0 to 7 [ 494.524165][T12230] Dev loop3: unable to read RDB block 7 [ 494.529871][T12230] loop3: unable to read partition table [ 494.535720][T12230] loop3: partition table beyond EOD, truncated [ 494.615691][T12230] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 494.628803][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 494.699717][ T5919] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 494.735189][ T5919] usb 4-1: can't read configurations, error -61 [ 494.935369][ T5919] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 494.972636][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 494.980304][ T5919] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 494.987939][ T5919] usb 4-1: can't read configurations, error -61 [ 494.994733][ T5919] usb usb4-port1: unable to enumerate USB device [ 495.605258][ T855] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 495.659334][T12242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'. [ 495.778663][ T855] usb 2-1: config 0 has no interfaces? [ 495.787050][ T855] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 495.811637][ T855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.835239][ T855] usb 2-1: Product: syz [ 495.839436][ T855] usb 2-1: Manufacturer: syz [ 495.866040][ T855] usb 2-1: SerialNumber: syz [ 495.911674][T12249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.923874][ T855] usb 2-1: config 0 descriptor?? [ 495.955738][T12249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.132943][T12259] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 497.976885][T12281] syz_tun: entered allmulticast mode [ 498.116287][ T5930] usb 2-1: USB disconnect, device number 84 [ 498.478780][T12289] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1623'. [ 498.579011][T12294] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1622'. [ 498.966976][ T30] audit: type=1326 audit(1762619951.844:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858298f6c9 code=0x7ffc0000 [ 499.202200][ T30] audit: type=1326 audit(1762619951.844:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858298f6c9 code=0x7ffc0000 [ 499.268734][T12297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.315080][T12297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.322991][ T30] audit: type=1326 audit(1762619951.854:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f858298f6c9 code=0x7ffc0000 [ 499.365956][ T30] audit: type=1326 audit(1762619951.854:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858298f6c9 code=0x7ffc0000 [ 499.520891][ T30] audit: type=1326 audit(1762619951.854:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12283 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f858298f6c9 code=0x7ffc0000 [ 499.856685][T12303] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1625'. [ 500.125048][T10763] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 500.297870][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 500.454309][T10763] usb 3-1: Using ep0 maxpacket: 32 [ 500.515000][T10763] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 500.564611][T10763] usb 3-1: config 0 has no interface number 0 [ 500.662836][T10763] usb 3-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 501.069730][T10763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.085003][T10763] usb 3-1: Product: syz [ 501.103085][T10763] usb 3-1: Manufacturer: syz [ 501.107924][T10763] usb 3-1: SerialNumber: syz [ 501.224141][T10763] usb 3-1: config 0 descriptor?? [ 501.446111][T12302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.460383][T12302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.471883][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.478893][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.505792][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1637'. [ 502.645000][ T5915] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 502.815077][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 502.821928][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 502.837772][ T5915] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 502.849189][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.862970][ T5915] usb 2-1: Product: syz [ 502.870046][ T5915] usb 2-1: Manufacturer: syz [ 502.878770][ T5915] usb 2-1: SerialNumber: syz [ 502.901084][ T5915] usb 2-1: config 0 descriptor?? [ 502.961609][ T5915] hub 2-1:0.0: bad descriptor, ignoring hub [ 502.995011][ T5915] hub 2-1:0.0: probe with driver hub failed with error -5 [ 503.025911][T12353] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1640'. [ 503.077768][ T5915] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.892457][T10763] cp210x 3-1:0.79: cp210x converter detected [ 503.919932][T10763] cp210x 3-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 503.960917][T10763] cp210x 3-1:0.79: querying part number failed [ 503.986499][T10763] usb 3-1: cp210x converter now attached to ttyUSB0 [ 504.200872][T10763] usb 3-1: USB disconnect, device number 86 [ 504.228005][T10763] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 504.257276][T10763] cp210x 3-1:0.79: device disconnected [ 504.556975][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1644'. [ 504.605738][T12370] syzkaller0: entered promiscuous mode [ 504.611377][T12370] syzkaller0: entered allmulticast mode [ 504.758376][T12376] netlink: 'syz.3.1646': attribute type 4 has an invalid length. [ 504.942964][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 505.197917][T12394] team0: Device gtp0 is of different type [ 505.325131][ T5915] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 505.464014][ T43] usb 2-1: USB disconnect, device number 85 [ 505.615535][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 505.634632][ T5915] usb 4-1: config 1 interface 0 has no altsetting 0 [ 505.744576][ T5915] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.40 [ 505.765642][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 505.822452][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.865398][ T5915] usb 4-1: Manufacturer: ᰁ [ 505.867840][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 505.870026][ T5915] usb 4-1: SerialNumber: syz [ 506.561437][T12413] bond6: option xmit_hash_policy: invalid value (14) [ 506.599274][T12413] bond6 (unregistering): Released all slaves [ 506.731219][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 506.787837][T12415] netlink: 'syz.0.1656': attribute type 25 has an invalid length. [ 506.870647][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 506.915343][ T2915] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.915474][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'. [ 506.929894][ T2915] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.961397][ T2915] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.981704][ T2915] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.035468][T12415] netlink: 'syz.0.1656': attribute type 25 has an invalid length. [ 507.085047][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 507.291530][T12424] netlink: 'syz.1.1659': attribute type 5 has an invalid length. [ 507.305694][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.319093][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.480681][T12434] FAULT_INJECTION: forcing a failure. [ 507.480681][T12434] name failslab, interval 1, probability 0, space 0, times 0 [ 507.493690][T12434] CPU: 1 UID: 0 PID: 12434 Comm: syz.2.1663 Not tainted syzkaller #0 PREEMPT(full) [ 507.493715][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.493727][T12434] Call Trace: [ 507.493735][T12434] [ 507.493743][T12434] dump_stack_lvl+0x189/0x250 [ 507.493771][T12434] ? __pfx____ratelimit+0x10/0x10 [ 507.493805][T12434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.493828][T12434] ? __pfx__printk+0x10/0x10 [ 507.493848][T12434] ? __pfx___might_resched+0x10/0x10 [ 507.493869][T12434] ? fs_reclaim_acquire+0x7d/0x100 [ 507.493896][T12434] should_fail_ex+0x414/0x560 [ 507.493924][T12434] should_failslab+0xa8/0x100 [ 507.493943][T12434] __kmalloc_noprof+0xcb/0x7f0 [ 507.493965][T12434] ? trace_fib_table_lookup+0x85/0x200 [ 507.493984][T12434] ? fib_create_info+0x172d/0x3210 [ 507.494009][T12434] fib_create_info+0x172d/0x3210 [ 507.494053][T12434] fib_table_insert+0xc6/0x1b50 [ 507.494089][T12434] ? bpf_lsm_capable+0x9/0x20 [ 507.494110][T12434] ? security_capable+0x7e/0x2e0 [ 507.494140][T12434] ip_rt_ioctl+0x46e/0x1070 [ 507.494170][T12434] ? __pfx_ip_rt_ioctl+0x10/0x10 [ 507.494194][T12434] ? __might_fault+0xb0/0x130 [ 507.494241][T12434] inet_ioctl+0x42c/0x4c0 [ 507.494260][T12434] ? __pfx_inet_ioctl+0x10/0x10 [ 507.494275][T12434] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.494315][T12434] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 507.494344][T12434] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 507.494374][T12434] sock_do_ioctl+0xdc/0x300 [ 507.494398][T12434] ? __pfx_sock_do_ioctl+0x10/0x10 [ 507.494434][T12434] sock_ioctl+0x576/0x790 [ 507.494456][T12434] ? __pfx_sock_ioctl+0x10/0x10 [ 507.494479][T12434] ? __fget_files+0x3a0/0x420 [ 507.494495][T12434] ? __fget_files+0x2a/0x420 [ 507.494516][T12434] ? bpf_lsm_file_ioctl+0x9/0x20 [ 507.494536][T12434] ? __pfx_sock_ioctl+0x10/0x10 [ 507.494556][T12434] __se_sys_ioctl+0xfc/0x170 [ 507.494581][T12434] do_syscall_64+0xfa/0xfa0 [ 507.494603][T12434] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.494625][T12434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.494642][T12434] ? clear_bhb_loop+0x60/0xb0 [ 507.494663][T12434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.494681][T12434] RIP: 0033:0x7fb9a7b8f6c9 [ 507.494698][T12434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.494713][T12434] RSP: 002b:00007fb9a8a29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.494733][T12434] RAX: ffffffffffffffda RBX: 00007fb9a7de5fa0 RCX: 00007fb9a7b8f6c9 [ 507.494747][T12434] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 507.494759][T12434] RBP: 00007fb9a8a29090 R08: 0000000000000000 R09: 0000000000000000 [ 507.494770][T12434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.494781][T12434] R13: 00007fb9a7de6038 R14: 00007fb9a7de5fa0 R15: 00007fb9a7f0fa28 [ 507.494820][T12434] [ 508.009830][T12450] misc userio: No port type given on /dev/userio [ 508.052629][ T5915] usbhid 4-1:1.0: can't add hid device: -71 [ 508.061197][ T5915] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 508.087387][ T5915] usb 4-1: USB disconnect, device number 74 [ 508.255330][ T5930] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 508.339674][T12466] FAULT_INJECTION: forcing a failure. [ 508.339674][T12466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.353164][T12466] CPU: 0 UID: 0 PID: 12466 Comm: syz.3.1676 Not tainted syzkaller #0 PREEMPT(full) [ 508.353189][T12466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 508.353200][T12466] Call Trace: [ 508.353208][T12466] [ 508.353216][T12466] dump_stack_lvl+0x189/0x250 [ 508.353242][T12466] ? __pfx____ratelimit+0x10/0x10 [ 508.353265][T12466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.353287][T12466] ? __pfx__printk+0x10/0x10 [ 508.353317][T12466] should_fail_ex+0x414/0x560 [ 508.353346][T12466] _copy_to_user+0x31/0xb0 [ 508.353369][T12466] simple_read_from_buffer+0xe1/0x170 [ 508.353399][T12466] proc_fail_nth_read+0x1b3/0x220 [ 508.353423][T12466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.353447][T12466] ? rw_verify_area+0x2a6/0x4d0 [ 508.353469][T12466] ? __lock_acquire+0xab9/0xd20 [ 508.353485][T12466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.353507][T12466] vfs_read+0x200/0xa30 [ 508.353528][T12466] ? fdget_pos+0x247/0x320 [ 508.353549][T12466] ? __pfx___mutex_lock+0x10/0x10 [ 508.353572][T12466] ? __pfx_vfs_read+0x10/0x10 [ 508.353595][T12466] ? __fget_files+0x2a/0x420 [ 508.353616][T12466] ? __fget_files+0x3a0/0x420 [ 508.353632][T12466] ? __fget_files+0x2a/0x420 [ 508.353657][T12466] ksys_read+0x145/0x250 [ 508.353677][T12466] ? __fget_files+0x2a/0x420 [ 508.353694][T12466] ? __pfx_ksys_read+0x10/0x10 [ 508.353719][T12466] ? do_syscall_64+0xbe/0xfa0 [ 508.353745][T12466] do_syscall_64+0xfa/0xfa0 [ 508.353766][T12466] ? lockdep_hardirqs_on+0x9c/0x150 [ 508.353788][T12466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.353805][T12466] ? clear_bhb_loop+0x60/0xb0 [ 508.353825][T12466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.353841][T12466] RIP: 0033:0x7fd74c98e0dc [ 508.353858][T12466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 508.353873][T12466] RSP: 002b:00007fd74d8e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 508.353893][T12466] RAX: ffffffffffffffda RBX: 00007fd74cbe5fa0 RCX: 00007fd74c98e0dc [ 508.353906][T12466] RDX: 000000000000000f RSI: 00007fd74d8e80a0 RDI: 0000000000000004 [ 508.353918][T12466] RBP: 00007fd74d8e8090 R08: 0000000000000000 R09: 0000000000000000 [ 508.353929][T12466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.353946][T12466] R13: 00007fd74cbe6038 R14: 00007fd74cbe5fa0 R15: 00007fd74cd0fa28 [ 508.353977][T12466] [ 508.426854][ T5930] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 508.610444][ T5930] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 508.626601][ T5930] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 508.639538][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0 [ 508.646287][ T5930] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice=40.00 [ 508.655415][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.666213][ T5930] usb 1-1: config 0 descriptor?? [ 508.671868][T12451] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 508.738080][ T855] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 508.915101][ T855] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 508.935124][ T855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1112, setting to 1024 [ 508.955099][ T855] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 508.966428][ T855] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.988001][ T855] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.014322][ T855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.017571][T12481] __nla_validate_parse: 2 callbacks suppressed [ 509.017587][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1669'. [ 509.037780][ T855] usb 3-1: Product: syz [ 509.037803][ T855] usb 3-1: Manufacturer: syz [ 509.037817][ T855] usb 3-1: SerialNumber: syz [ 509.062063][T12465] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 509.074706][T12465] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 509.241264][T12481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 509.412994][ T855] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 509.426869][ T855] usb 3-1: USB disconnect, device number 87 [ 510.538018][T12497] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 510.571788][T12497] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 510.634694][T12497] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 510.641186][T12497] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 510.656483][T12497] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 510.663423][T12497] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 510.678098][T12497] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 510.684479][T12497] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 510.696979][T12497] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 510.703388][T12497] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 510.945816][T12510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.954689][T12510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.995077][ T5892] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 511.002834][ T5915] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 511.034183][ T5930] usbhid 1-1:0.0: can't add hid device: -71 [ 511.096759][ T5930] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 511.115431][T12510] dtv5100: wlen = 0, aborting. [ 511.139225][ T5930] usb 1-1: USB disconnect, device number 76 [ 511.160476][ T5892] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 511.193576][ T5892] usb 4-1: can't read configurations, error -22 [ 511.262885][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 511.304744][ T5915] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 511.325152][ T5892] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 511.339674][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 54240, setting to 1024 [ 511.383880][ T5915] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 511.432683][ T5915] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.472190][ T5915] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 511.509919][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.525048][ T5930] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 511.546291][ T5892] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 511.566484][ T5892] usb 4-1: can't read configurations, error -22 [ 511.572827][ T5915] usb 3-1: Product: syz [ 511.585466][ T5915] usb 3-1: Manufacturer: syz [ 511.594161][ T5892] usb usb4-port1: attempt power cycle [ 511.612624][ T5915] usb 3-1: SerialNumber: syz [ 511.765324][T12499] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 511.800505][T12499] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 511.809722][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.820410][ T5930] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 511.863943][ T5930] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 511.893524][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.932230][ T5930] usb 1-1: config 0 descriptor?? [ 511.941479][ T5930] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 511.975218][ T5930] dvb-usb: bulk message failed: -22 (3/0) [ 511.995110][ T5930] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 512.011010][ T5930] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 512.027152][ T5930] usb 1-1: media controller created [ 512.057554][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.096147][ T5892] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 512.110207][ T5930] dvb-usb: bulk message failed: -22 (6/0) [ 512.133371][ T5930] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 512.160441][ T5892] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 512.172719][ T5930] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input65 [ 512.175333][ T5892] usb 4-1: can't read configurations, error -22 [ 512.228450][ T5930] dvb-usb: schedule remote query interval to 150 msecs. [ 512.237406][T12516] dtv5100: wlen = 0, aborting. [ 512.244433][ T5930] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 512.268992][T12512] No such timeout policy "syz1" [ 512.415084][ T5892] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 512.423192][ T855] dvb-usb: bulk message failed: -22 (1/0) [ 512.436455][ T855] dvb-usb: error while querying for an remote control event. [ 512.438818][ T5892] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 512.452803][ T855] usb 1-1: USB disconnect, device number 77 [ 512.457967][ T5892] usb 4-1: can't read configurations, error -22 [ 512.482913][ T5892] usb usb4-port1: unable to enumerate USB device [ 512.491609][ T855] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 512.500124][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 512.655123][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 512.735361][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 512.741438][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 512.747587][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 513.011913][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'. [ 513.225481][ T5915] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 513.259758][ T5915] usbtest 3-1:1.0: Linux user mode ISO test driver [ 513.271967][ T5915] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 513.360470][ T5915] usb 3-1: USB disconnect, device number 88 [ 514.017894][ T5930] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 514.352919][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 514.360833][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.371926][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.400855][ T5930] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 514.438508][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.451346][ T5930] usb 4-1: config 0 descriptor?? [ 514.460333][ T5930] usbhid 4-1:0.0: can't add hid device: -22 [ 514.468065][ T5930] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 514.525755][T12554] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 514.585403][T12525] Bluetooth: hci0: command 0x0406 tx timeout [ 514.737194][T12525] Bluetooth: hci1: command 0x0406 tx timeout [ 514.815556][T12525] Bluetooth: hci2: command 0x0406 tx timeout [ 514.821675][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 514.827780][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 515.639202][T12575] vlan2: entered promiscuous mode [ 515.646994][ T30] audit: type=1326 audit(1762619968.874:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.4.1705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87c978f6c9 code=0x0 [ 515.965338][ T5919] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 516.211973][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 516.291871][ T5919] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 516.303915][ T5919] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 516.318624][ T5919] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 516.325180][ T5830] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 516.375780][ T5919] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 516.385460][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.516708][T12593] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 516.548515][ T5830] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 516.574051][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.628389][T12579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.639464][T12579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.859346][T12579] netlink: 'syz.1.1704': attribute type 5 has an invalid length. [ 516.877534][ T5915] usb 4-1: USB disconnect, device number 79 [ 517.432211][ T5830] usb 1-1: Cannot read MAC address [ 517.438012][ T5830] MOSCHIP usb-ethernet driver 1-1:4.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 517.885302][ T5830] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 518.047289][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 518.056173][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.069888][ T5830] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 518.143927][T12618] tipc: Started in network mode [ 518.173489][ T5830] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 518.201616][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.221477][T12618] tipc: Node identity 4eef6224345b, cluster identity 4711 [ 518.241193][ T5830] usb 3-1: Product: ఌ [ 518.266957][ T5830] usb 3-1: config 0 descriptor?? [ 518.282310][T12618] tipc: Enabled bearer , priority 0 [ 518.782388][ T5919] usb 2-1: string descriptor 0 read error: -71 [ 518.811316][ T5830] usb 3-1: USB disconnect, device number 89 [ 518.852966][ T5919] usb 2-1: USB disconnect, device number 86 [ 519.167711][T12631] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 519.232053][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1720'. [ 519.241751][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1720'. [ 519.275442][ T5919] tipc: Node number set to 2058641956 [ 519.375972][T12640] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 519.496411][ T5915] usb 1-1: USB disconnect, device number 78 [ 519.606541][T12620] tipc: Disabling bearer [ 519.687518][T12646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.696712][T12646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.125007][ T5830] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 520.130219][T12656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 520.275041][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 520.282914][ T5830] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 520.292897][ T5830] usb 3-1: config 0 has no interface number 0 [ 520.382660][ T5830] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 520.421667][T12656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1727'. [ 520.430863][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 520.505470][ T5830] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 520.533948][ T5830] usb 3-1: config 0 interface 126 has no altsetting 0 [ 520.555280][ T5830] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 520.565342][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.573469][ T5830] usb 3-1: Product: syz [ 520.738843][ T5830] usb 3-1: Manufacturer: syz [ 520.743473][ T5830] usb 3-1: SerialNumber: syz [ 520.820336][ T5830] usb 3-1: config 0 descriptor?? [ 520.838215][T12654] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 520.847183][T12654] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 521.155974][T12670] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1732'. [ 521.275464][T12675] vlan2: entered promiscuous mode [ 521.304832][ T5830] ir_usb 3-1:0.126: IR Dongle converter detected [ 521.520459][ T5830] usb 3-1: IRDA class descriptor not found, device not bound [ 521.626566][T12689] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 521.713287][ T855] usb 3-1: USB disconnect, device number 90 [ 522.620626][T12706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1743'. [ 522.632652][T12709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.641636][T12709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.761541][T12712] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1744'. [ 522.950489][T12716] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1745'. [ 523.238054][T12720] team0: Device gtp0 is of different type [ 523.694469][T12698] syz.0.1738 (12698): drop_caches: 2 [ 523.944282][T12725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.990634][T12724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.143201][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.171866][T12724] xt_NFQUEUE: number of queues (65535) out of range (got 65541) [ 524.185062][ T5915] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 524.225099][T12724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.387352][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 524.414790][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.440574][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.456749][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 524.467375][ T5915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 524.477952][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.506501][ T5915] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 524.515952][ T5915] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 524.574623][ T5915] usb 1-1: Manufacturer: syz [ 524.610108][ T5915] usb 1-1: config 0 descriptor?? [ 525.235657][T12727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.254518][T12727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.295639][T12740] netlink: 'syz.2.1752': attribute type 1 has an invalid length. [ 525.421762][T12750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1755'. [ 525.556362][ T5915] rc_core: IR keymap rc-hauppauge not found [ 525.562396][ T5915] Registered IR keymap rc-empty [ 525.570444][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 525.627239][T12740] bond3: entered promiscuous mode [ 525.648196][T12740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 525.985635][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.167838][ T5915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 526.187608][ T5915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input67 [ 526.204674][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.225278][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.245168][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.277935][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.305192][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.327847][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.362309][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.483513][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.505107][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.525208][ T5915] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 526.561298][ T5915] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 526.583663][ T5915] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 527.146664][ T5830] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 527.292268][T12782] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 527.374763][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 527.383124][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 527.394690][ T5830] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 527.430545][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.472877][ T5830] usb 4-1: config 0 descriptor?? [ 527.601203][ T24] usb 1-1: USB disconnect, device number 79 [ 527.701667][ T5830] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 527.867349][T12788] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1764'. [ 528.386008][ T5919] usb 4-1: USB disconnect, device number 80 [ 528.555302][T12801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.563968][T12801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.750890][T12804] fuse: Unknown parameter 'group_r' [ 528.763306][T12804] loop2: detected capacity change from 0 to 7 [ 528.781892][T12804] Dev loop2: unable to read RDB block 7 [ 528.782962][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.795997][ T5830] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 528.834032][T12804] loop2: unable to read partition table [ 528.844594][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.871180][T12804] loop2: partition table beyond EOD, truncated [ 528.912372][T12804] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 529.084101][ T5201] Dev loop2: unable to read RDB block 7 [ 529.089957][ T5201] loop2: unable to read partition table [ 529.096257][ T5201] loop2: partition table beyond EOD, truncated [ 529.301180][ T5201] Dev loop2: unable to read RDB block 7 [ 529.306982][ T5201] loop2: unable to read partition table [ 529.313448][ T5201] loop2: partition table beyond EOD, truncated [ 531.125531][T12852] xt_NFQUEUE: number of total queues is 0 [ 531.187554][T12850] bond4: option arp_interval: invalid value (18446744073709551611) [ 531.226128][T12850] bond4: option arp_interval: allowed values 0 - 2147483647 [ 531.256778][T12850] bond4 (unregistering): Released all slaves [ 531.385064][ T5830] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 531.435015][ T5919] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 531.565761][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 531.576062][ T5830] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 531.593168][ T5830] usb 2-1: config 0 has no interface number 0 [ 531.605956][ T5830] usb 2-1: config 0 interface 184 has no altsetting 0 [ 531.672647][ T5919] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 531.684942][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.685084][ T5830] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 531.705969][ T5919] usb 4-1: config 0 descriptor?? [ 531.740569][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.755883][ T5830] usb 2-1: Product: syz [ 531.775926][ T5830] usb 2-1: Manufacturer: syz [ 531.805890][ T5830] usb 2-1: SerialNumber: syz [ 531.807500][ T5919] cp210x 4-1:0.0: cp210x converter detected [ 531.831518][T12860] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1783'. [ 531.867609][ T5830] usb 2-1: config 0 descriptor?? [ 531.884709][ T5830] smsc75xx v1.0.0 [ 532.076022][T12854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.086315][T12854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.112870][T12854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.123039][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.123451][T12854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.151949][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.211067][T12856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.226986][T12856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.235799][ T5919] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 532.308933][ T5830] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 532.326549][ T5919] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 532.336007][ T5830] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 532.486482][ T5919] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 532.536424][ T5919] usb 4-1: cp210x converter now attached to ttyUSB0 [ 532.607383][ T5830] usb 2-1: USB disconnect, device number 87 [ 532.625175][ T5919] usb 4-1: USB disconnect, device number 81 [ 532.653185][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 532.734445][ T5919] cp210x 4-1:0.0: device disconnected [ 532.864808][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.929490][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.871980][ T30] audit: type=1326 audit(1762619987.084:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12901 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 534.003857][ T30] audit: type=1326 audit(1762619987.084:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12901 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 534.107075][ T30] audit: type=1326 audit(1762619987.084:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12901 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 534.230884][ T30] audit: type=1326 audit(1762619987.094:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12901 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 534.325062][ T30] audit: type=1326 audit(1762619987.094:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12901 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 534.415899][T12904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1793'. [ 534.455244][ T30] audit: type=1326 audit(1762619987.094:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12901 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 534.462604][T12904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1793'. [ 534.556263][ T30] audit: type=1326 audit(1762619987.094:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12901 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 534.647727][T12904] sit1: entered allmulticast mode [ 534.652858][ T30] audit: type=1326 audit(1762619987.094:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12901 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 534.666713][T12914] loop2: detected capacity change from 0 to 7 [ 534.711966][ T30] audit: type=1326 audit(1762619987.094:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12901 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 534.761778][ T5841] Dev loop2: unable to read RDB block 7 [ 534.767847][ T5841] loop2: unable to read partition table [ 534.773707][ T5841] loop2: partition table beyond EOD, truncated [ 534.795878][ T30] audit: type=1326 audit(1762619987.094:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12901 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74c98f6c9 code=0x7ffc0000 [ 534.856437][T12914] Dev loop2: unable to read RDB block 7 [ 534.885089][T12914] loop2: unable to read partition table [ 534.965230][T12914] loop2: partition table beyond EOD, truncated [ 534.990592][T12914] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 535.036437][ T5201] Dev loop2: unable to read RDB block 7 [ 535.042077][ T5201] loop2: unable to read partition table [ 535.054174][ T5201] loop2: partition table beyond EOD, truncated [ 535.369074][ T5919] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 535.551768][ T5919] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 535.577740][T12939] FAULT_INJECTION: forcing a failure. [ 535.577740][T12939] name failslab, interval 1, probability 0, space 0, times 0 [ 535.591210][ T5919] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 535.593985][T12939] CPU: 1 UID: 0 PID: 12939 Comm: syz.1.1803 Not tainted syzkaller #0 PREEMPT(full) [ 535.594008][T12939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.594019][T12939] Call Trace: [ 535.594026][T12939] [ 535.594034][T12939] dump_stack_lvl+0x189/0x250 [ 535.594060][T12939] ? __pfx____ratelimit+0x10/0x10 [ 535.594082][T12939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.594104][T12939] ? __pfx__printk+0x10/0x10 [ 535.594126][T12939] ? __pfx___might_resched+0x10/0x10 [ 535.594144][T12939] ? fs_reclaim_acquire+0x7d/0x100 [ 535.594172][T12939] should_fail_ex+0x414/0x560 [ 535.594202][T12939] should_failslab+0xa8/0x100 [ 535.594221][T12939] __kmalloc_cache_noprof+0x6f/0x6f0 [ 535.594242][T12939] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 535.594272][T12939] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 535.594303][T12939] tcp_sendmsg_locked+0x4cc9/0x5540 [ 535.594330][T12939] ? tcp_sendmsg_locked+0x311/0x5540 [ 535.594388][T12939] ? __lock_acquire+0xab9/0xd20 [ 535.594417][T12939] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 535.594437][T12939] ? __local_bh_enable_ip+0x12d/0x1c0 [ 535.594460][T12939] ? __local_bh_enable_ip+0x12d/0x1c0 [ 535.594490][T12939] tcp_sendmsg+0x2f/0x50 [ 535.594513][T12939] __sock_sendmsg+0x19c/0x270 [ 535.594538][T12939] __sys_sendto+0x3bd/0x520 [ 535.594557][T12939] ? __pfx___sys_sendto+0x10/0x10 [ 535.594571][T12939] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 535.594607][T12939] ? __fget_files+0x3a0/0x420 [ 535.594634][T12939] ? ksys_write+0x22a/0x250 [ 535.594659][T12939] ? __pfx_ksys_write+0x10/0x10 [ 535.594685][T12939] __x64_sys_sendto+0xde/0x100 [ 535.594705][T12939] do_syscall_64+0xfa/0xfa0 [ 535.594727][T12939] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.594747][T12939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.594765][T12939] ? clear_bhb_loop+0x60/0xb0 [ 535.594785][T12939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.594802][T12939] RIP: 0033:0x7f858298f6c9 [ 535.594817][T12939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.594832][T12939] RSP: 002b:00007f858387b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 535.594850][T12939] RAX: ffffffffffffffda RBX: 00007f8582be5fa0 RCX: 00007f858298f6c9 [ 535.594863][T12939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 535.594873][T12939] RBP: 00007f858387b090 R08: 0000200000e68000 R09: 0000000000000010 [ 535.594885][T12939] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 535.594900][T12939] R13: 00007f8582be6038 R14: 00007f8582be5fa0 R15: 00007f8582d0fa28 [ 535.594929][T12939] [ 536.181671][ T5919] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 536.286563][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.306626][T12931] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 536.314053][T12931] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 536.323859][ T5919] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.381950][ T24] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 536.531167][ T5915] usb 1-1: USB disconnect, device number 80 [ 536.656053][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 536.665245][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 536.673941][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.685324][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 536.704407][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 536.745169][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.800033][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 536.824313][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.061758][ T24] usb 3-1: usb_control_msg returned -32 [ 537.070878][ T24] usbtmc 3-1:16.0: can't read capabilities [ 537.902730][T12969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1813'. [ 537.912786][T12969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1813'. [ 537.946482][T12969] sit1: entered allmulticast mode [ 537.997586][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1815'. [ 538.160569][T12980] FAULT_INJECTION: forcing a failure. [ 538.160569][T12980] name failslab, interval 1, probability 0, space 0, times 0 [ 538.297792][T12980] CPU: 0 UID: 0 PID: 12980 Comm: syz.0.1816 Not tainted syzkaller #0 PREEMPT(full) [ 538.297816][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 538.297827][T12980] Call Trace: [ 538.297835][T12980] [ 538.297842][T12980] dump_stack_lvl+0x189/0x250 [ 538.297868][T12980] ? __pfx____ratelimit+0x10/0x10 [ 538.297887][T12980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.297913][T12980] ? __pfx__printk+0x10/0x10 [ 538.297930][T12980] ? rcu_is_watching+0x15/0xb0 [ 538.297948][T12980] ? trace_fib_table_lookup+0x85/0x200 [ 538.297973][T12980] should_fail_ex+0x414/0x560 [ 538.298002][T12980] should_failslab+0xa8/0x100 [ 538.298021][T12980] kmem_cache_alloc_noprof+0x74/0x6e0 [ 538.298042][T12980] ? __pfx_find_exception+0x10/0x10 [ 538.298063][T12980] ? dst_alloc+0x105/0x170 [ 538.298082][T12980] ? fib_lookup+0x76/0x440 [ 538.298104][T12980] dst_alloc+0x105/0x170 [ 538.298128][T12980] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 538.298160][T12980] ? ip_route_output_key_hash+0xc1/0x280 [ 538.298184][T12980] ip_route_output_key_hash+0x174/0x280 [ 538.298209][T12980] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 538.298235][T12980] ? stack_trace_save+0x9c/0xe0 [ 538.298256][T12980] ? __pfx_stack_trace_save+0x10/0x10 [ 538.298284][T12980] ip_route_output_flow+0x2a/0x150 [ 538.298302][T12980] ? security_sk_classify_flow+0x70/0x180 [ 538.298325][T12980] tcp_v4_connect+0x818/0x1a90 [ 538.298340][T12980] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 538.298364][T12980] ? tcp_sendmsg_locked+0x525e/0x5540 [ 538.298402][T12980] ? __pfx_tcp_v4_connect+0x10/0x10 [ 538.298431][T12980] __inet_stream_connect+0x2ae/0xe70 [ 538.298468][T12980] ? __pfx___inet_stream_connect+0x10/0x10 [ 538.298495][T12980] ? __kasan_kmalloc+0x93/0xb0 [ 538.298521][T12980] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 538.298552][T12980] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 538.298584][T12980] tcp_sendmsg_locked+0x4cc9/0x5540 [ 538.298613][T12980] ? tcp_sendmsg_locked+0x311/0x5540 [ 538.298666][T12980] ? __lock_acquire+0xab9/0xd20 [ 538.298697][T12980] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 538.298719][T12980] ? __local_bh_enable_ip+0x12d/0x1c0 [ 538.298741][T12980] ? __local_bh_enable_ip+0x12d/0x1c0 [ 538.298780][T12980] tcp_sendmsg+0x2f/0x50 [ 538.298804][T12980] __sock_sendmsg+0x19c/0x270 [ 538.298830][T12980] __sys_sendto+0x3bd/0x520 [ 538.298850][T12980] ? __pfx___sys_sendto+0x10/0x10 [ 538.298865][T12980] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 538.298901][T12980] ? __fget_files+0x3a0/0x420 [ 538.298929][T12980] ? ksys_write+0x22a/0x250 [ 538.298956][T12980] ? __pfx_ksys_write+0x10/0x10 [ 538.298983][T12980] __x64_sys_sendto+0xde/0x100 [ 538.299003][T12980] do_syscall_64+0xfa/0xfa0 [ 538.299025][T12980] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.299047][T12980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.299065][T12980] ? clear_bhb_loop+0x60/0xb0 [ 538.299086][T12980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.299103][T12980] RIP: 0033:0x7fa4afd8f6c9 [ 538.299119][T12980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.299134][T12980] RSP: 002b:00007fa4adff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 538.299154][T12980] RAX: ffffffffffffffda RBX: 00007fa4affe5fa0 RCX: 00007fa4afd8f6c9 [ 538.299167][T12980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 538.299177][T12980] RBP: 00007fa4adff6090 R08: 0000200000e68000 R09: 0000000000000010 [ 538.299187][T12980] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 538.299198][T12980] R13: 00007fa4affe6038 R14: 00007fa4affe5fa0 R15: 00007fa4b010fa28 [ 538.299230][T12980] [ 538.805067][ T5830] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 538.861276][T12990] dns_resolver: Unsupported server list version (0) [ 538.924268][T12992] team0: Device gtp0 is of different type [ 539.015395][T12993] team0: Device gtp0 is of different type [ 539.037486][ T5830] usb 4-1: device descriptor read/64, error -71 [ 539.261140][T10763] usb 3-1: USB disconnect, device number 92 [ 539.285282][ T5830] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 539.425183][ T5830] usb 4-1: device descriptor read/64, error -71 [ 539.612878][T12999] netlink: 'syz.2.1822': attribute type 1 has an invalid length. [ 539.663399][ T5830] usb usb4-port1: attempt power cycle [ 539.737300][T12999] bond4: entered promiscuous mode [ 539.800728][T12999] 8021q: adding VLAN 0 to HW filter on device bond4 [ 540.005569][ T5830] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 540.026194][ T5830] usb 4-1: device descriptor read/8, error -71 [ 540.205595][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 540.265068][ T5830] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 540.286449][ T5830] usb 4-1: device descriptor read/8, error -71 [ 540.366776][ T24] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 540.445157][ T5830] usb usb4-port1: unable to enumerate USB device [ 540.455900][ T24] usb 2-1: config 0 has no interface number 0 [ 540.463878][ T24] usb 2-1: config 0 interface 101 has no altsetting 0 [ 540.474471][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 540.498261][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.531060][ T24] usb 2-1: config 0 descriptor?? [ 540.599242][ T24] cp210x 2-1:0.101: cp210x converter detected [ 540.733121][T13010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.746946][T13010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.956173][ T24] cp210x 2-1:0.101: failed to get vendor val 0x000e size 3: -32 [ 540.965027][ T5919] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 541.125049][ T5919] usb 1-1: device descriptor read/64, error -71 [ 541.172510][ T24] cp210x 2-1:0.101: GPIO initialisation failed: -19 [ 541.214793][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 541.367975][ T5919] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 541.401279][T13003] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 541.415536][ T5892] usb 2-1: USB disconnect, device number 88 [ 541.443236][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 541.467404][ T5892] cp210x 2-1:0.101: device disconnected [ 541.535257][ T5919] usb 1-1: device descriptor read/64, error -71 [ 541.645448][ T5919] usb usb1-port1: attempt power cycle [ 541.902467][T13032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.935800][T13032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.054443][ T5919] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 542.109950][ T5919] usb 1-1: device descriptor read/8, error -71 [ 542.149033][T13039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.163559][T13039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.365190][ T5919] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 542.387115][ T5919] usb 1-1: device descriptor read/8, error -71 [ 542.496978][ T5919] usb usb1-port1: unable to enumerate USB device [ 542.913576][T13058] bridge_slave_0: left allmulticast mode [ 542.925283][T13058] bridge_slave_0: left promiscuous mode [ 542.931051][T13058] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.971109][T13059] fuse: Unknown parameter 'default_permissionsN' [ 543.256357][T13058] bridge_slave_1: left allmulticast mode [ 543.262124][T13058] bridge_slave_1: left promiscuous mode [ 543.272794][T13058] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.374762][T13058] bond0: (slave bond_slave_0): Releasing backup interface [ 543.396792][T13058] bond0: (slave bond_slave_1): Releasing backup interface [ 543.427239][T13058] team0: Port device team_slave_0 removed [ 543.558674][T13058] team0: Port device team_slave_1 removed [ 543.567112][T13058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.574720][T13058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.584480][T13058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.592394][T13058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.601548][T13058] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 545.058956][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 545.227771][ T24] usb 2-1: device descriptor read/64, error -71 [ 545.243476][T13096] binder: 13095:13096 ioctl c0096616 200000000080 returned -22 [ 545.403900][T13111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.415885][T13111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.440174][T13111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.464209][T13111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.475375][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 545.609125][T13120] loop3: detected capacity change from 0 to 7 [ 545.618102][T13120] Dev loop3: unable to read RDB block 7 [ 545.623817][T13120] loop3: unable to read partition table [ 545.630450][T13120] loop3: partition table beyond EOD, truncated [ 545.631108][ T24] usb 2-1: device descriptor read/64, error -71 [ 545.637105][T13120] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 545.745911][ T24] usb usb2-port1: attempt power cycle [ 545.945087][ T5930] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 546.041538][T13126] loop9: detected capacity change from 0 to 7 [ 546.051463][T13126] Dev loop9: unable to read RDB block 7 [ 546.057822][T13126] loop9: unable to read partition table [ 546.063627][T13126] loop9: partition table beyond EOD, truncated [ 546.070268][T13126] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 546.095300][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 546.102915][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 546.116545][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.127649][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 546.138992][ T24] usb 2-1: device descriptor read/8, error -71 [ 546.146379][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 546.158352][ T5930] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 546.168365][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.183086][ T5930] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 546.193912][ T5930] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 546.202538][ T5930] usb 3-1: Manufacturer: syz [ 546.212197][ T5930] usb 3-1: config 0 descriptor?? [ 546.219884][T13129] syzkaller0: entered promiscuous mode [ 546.225172][ T5919] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 546.228592][T13129] syzkaller0: entered allmulticast mode [ 546.240305][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 546.240318][ T30] audit: type=1326 audit(1762619999.464:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13127 comm="syz.4.1862" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87c978f6c9 code=0x0 [ 546.385375][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 546.393108][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.403876][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 546.415450][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 546.415495][ T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 546.431212][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 546.449456][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.462960][ T24] usb 2-1: device descriptor read/8, error -71 [ 546.465207][ T5919] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 546.478504][ T5919] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 546.487453][ T5919] usb 4-1: Manufacturer: syz [ 546.497803][ T5919] usb 4-1: config 0 descriptor?? [ 546.555016][ T5930] rc_core: IR keymap rc-hauppauge not found [ 546.560969][ T5930] Registered IR keymap rc-empty [ 546.581145][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 546.589242][ T24] usb usb2-port1: unable to enumerate USB device [ 546.625104][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 546.647596][T13122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.666036][T13122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.675041][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 546.720777][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input71 [ 546.755211][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 546.826902][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 546.845129][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 546.899104][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 546.905058][ T5919] rc_core: IR keymap rc-hauppauge not found [ 546.912840][ T5919] Registered IR keymap rc-empty [ 546.925459][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 546.936125][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 546.956161][T13124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.966664][T13124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.985205][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.005258][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 547.010082][ T5919] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 547.033249][ T5919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input72 [ 547.050392][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.065783][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 547.096755][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.163726][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.175269][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 547.199520][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 547.211700][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.225362][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 547.235477][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.260699][ T5930] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 547.345716][ T5930] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 547.371491][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.399311][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.435149][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.566077][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.676733][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 547.738640][ T5919] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 547.784686][ T5919] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 548.613557][T13170] loop3: detected capacity change from 0 to 7 [ 548.622068][T13170] Dev loop3: unable to read RDB block 7 [ 548.629651][T13170] loop3: unable to read partition table [ 548.637395][T13170] loop3: partition table beyond EOD, truncated [ 548.645438][T13170] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 548.808816][ T5930] usb 3-1: USB disconnect, device number 93 [ 548.982389][T13177] team0: Device gtp0 is of different type [ 549.040396][ T5919] usb 4-1: USB disconnect, device number 86 [ 549.058054][T13179] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 551.461927][T13224] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1884'. [ 551.499813][T13224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.514286][T13227] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 551.523469][ T5919] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 551.582309][T13224] loop5: detected capacity change from 0 to 7 [ 551.608599][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 551.617776][ C0] buffer_io_error: 11 callbacks suppressed [ 551.617793][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.653308][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 551.662540][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.670659][T13224] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 551.681609][T13224] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.700016][T13224] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 551.718080][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 551.728115][ T5919] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 551.742864][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 551.753701][ T5919] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 551.763477][T13224] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.763682][T13224] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 551.780850][T13224] Buffer I/O error on dev loop5, logical block 0, async page read [ 551.784681][ T5919] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 551.803160][ T5919] usb 1-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 551.812710][ T5919] usb 1-1: Product: syz [ 551.818284][ T5919] usb 1-1: Manufacturer: syz [ 551.822961][ T5919] usb 1-1: SerialNumber: syz [ 551.870659][T13232] bond0: left promiscuous mode [ 551.875588][T13232] gre1: left promiscuous mode [ 551.900834][T13232] netlink: 'syz.3.1890': attribute type 1 has an invalid length. [ 551.919516][ T5919] usb 1-1: config 0 descriptor?? [ 551.926548][ T5919] kvaser_usb 1-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 551.934086][ T5919] kvaser_usb 1-1:0.0: error -EMSGSIZE: Failed to initialize card [ 551.955225][ T5919] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90 [ 551.974812][T13224] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.010541][T13224] Buffer I/O error on dev loop5, logical block 0, async page read [ 552.040949][T13224] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.052979][T13224] Buffer I/O error on dev loop5, logical block 0, async page read [ 552.066423][T13232] bond1: entered promiscuous mode [ 552.072011][T13232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.089883][T13224] ldm_validate_partition_table(): Disk read failed. [ 552.110707][T13224] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.123020][T13224] Buffer I/O error on dev loop5, logical block 0, async page read [ 552.196843][T13224] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.212574][T13224] Buffer I/O error on dev loop5, logical block 0, async page read [ 552.221782][T13224] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 552.258782][T13224] Buffer I/O error on dev loop5, logical block 0, async page read [ 552.267210][T13224] Dev loop5: unable to read RDB block 0 [ 552.374126][T13224] loop5: unable to read partition table [ 552.381305][T13224] loop5: partition table beyond EOD, truncated [ 552.389950][T13224] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 552.825063][ T5830] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 553.255763][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 553.360427][ T5830] usb 2-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.423947][ T5830] usb 2-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.460998][ T5830] usb 2-1: config 0 interface 0 has no altsetting 0 [ 553.474222][ T5830] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 553.575739][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.616102][ T5830] usb 2-1: config 0 descriptor?? [ 554.046501][ T5830] hid_parser_main: 1235 callbacks suppressed [ 554.046523][ T5830] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 554.101627][ T5830] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 554.150821][ T24] usb 1-1: USB disconnect, device number 85 [ 554.315246][T13247] ------------[ cut here ]------------ [ 554.320761][T13247] usb 5-1: BOGUS control dir, pipe 80004480 doesn't match bRequestType c0 [ 554.347422][T13247] WARNING: CPU: 0 PID: 13247 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 554.357347][T13247] Modules linked in: [ 554.361668][T13247] CPU: 0 UID: 0 PID: 13247 Comm: syz.1.1892 Not tainted syzkaller #0 PREEMPT(full) [ 554.371104][T13247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 554.381184][T13247] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 554.386856][T13247] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 40 14 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 64 11 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 554.406480][T13247] RSP: 0018:ffffc9000b9d7540 EFLAGS: 00010246 [ 554.412548][T13247] RAX: 46248eada484da00 RBX: ffff888145b4bf00 RCX: 0000000000080000 [ 554.420532][T13247] RDX: ffffc9000fdd4000 RSI: 000000000000593a RDI: 000000000000593b [ 554.428530][T13247] RBP: 1ffff1100b7f1854 R08: 0000000000000003 R09: 0000000000000004 [ 554.436542][T13247] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffff888024072100 [ 554.444497][T13247] R13: ffff88805bf8c2a0 R14: 0000000080004480 R15: ffff88807cc9e0c0 [ 554.452496][T13247] FS: 00007f85838396c0(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 554.461539][T13247] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.468126][T13247] CR2: 00007fa4b0b156c0 CR3: 0000000055b76000 CR4: 00000000003526f0 [ 554.476115][T13247] Call Trace: [ 554.479378][T13247] [ 554.482311][T13247] usb_start_wait_urb+0x114/0x4c0 [ 554.487395][T13247] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 554.492965][T13247] usb_control_msg+0x232/0x3e0 [ 554.497761][T13247] dtv5100_i2c_msg+0x250/0x330 [ 554.502521][T13247] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 554.507409][T13247] __i2c_transfer+0x874/0x2170 [ 554.512179][T13247] ? __pfx___i2c_transfer+0x10/0x10 [ 554.517383][T13247] ? __kasan_save_free_info+0x46/0x50 [ 554.522745][T13247] __i2c_smbus_xfer+0xfb0/0x1e50 [ 554.527691][T13247] ? __lock_acquire+0xab9/0xd20 [ 554.532533][T13247] ? do_raw_spin_lock+0x121/0x290 [ 554.537578][T13247] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 554.542934][T13247] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 554.548847][T13247] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 554.554926][T13247] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 554.561253][T13247] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 554.566885][T13247] i2c_smbus_xfer+0x275/0x3c0 [ 554.571551][T13247] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 554.576901][T13247] ? __lock_acquire+0xab9/0xd20 [ 554.581741][T13247] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 554.586790][T13247] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 554.592325][T13247] i2cdev_ioctl+0x5d3/0x7f0 [ 554.596832][T13247] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 554.601837][T13247] ? __fget_files+0x2a/0x420 [ 554.606460][T13247] ? bpf_lsm_file_ioctl+0x9/0x20 [ 554.611395][T13247] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 554.616452][T13247] __se_sys_ioctl+0xfc/0x170 [ 554.621034][T13247] do_syscall_64+0xfa/0xfa0 [ 554.625545][T13247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.631596][T13247] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 554.637236][T13247] ? clear_bhb_loop+0x60/0xb0 [ 554.641894][T13247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.647787][T13247] RIP: 0033:0x7f858298f6c9 [ 554.652183][T13247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.671871][T13247] RSP: 002b:00007f8583839038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.680309][T13247] RAX: ffffffffffffffda RBX: 00007f8582be6180 RCX: 00007f858298f6c9 [ 554.688293][T13247] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000008 [ 554.696276][T13247] RBP: 00007f8582a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 554.704227][T13247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.712219][T13247] R13: 00007f8582be6218 R14: 00007f8582be6180 R15: 00007f8582d0fa28 [ 554.720206][T13247] [ 554.723217][T13247] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 554.730474][T13247] CPU: 0 UID: 0 PID: 13247 Comm: syz.1.1892 Not tainted syzkaller #0 PREEMPT(full) [ 554.739821][T13247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 554.749859][T13247] Call Trace: [ 554.753119][T13247] [ 554.756036][T13247] dump_stack_lvl+0x99/0x250 [ 554.760606][T13247] ? __asan_memcpy+0x40/0x70 [ 554.765175][T13247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.770355][T13247] ? __pfx__printk+0x10/0x10 [ 554.774937][T13247] vpanic+0x237/0x6d0 [ 554.778917][T13247] ? __pfx_vpanic+0x10/0x10 [ 554.783405][T13247] panic+0xb9/0xc0 [ 554.787111][T13247] ? __pfx_panic+0x10/0x10 [ 554.791523][T13247] __warn+0x31b/0x4b0 [ 554.795483][T13247] ? usb_submit_urb+0x114d/0x18b0 [ 554.800493][T13247] ? usb_submit_urb+0x114d/0x18b0 [ 554.805504][T13247] report_bug+0x2be/0x4f0 [ 554.809827][T13247] ? usb_submit_urb+0x114d/0x18b0 [ 554.814839][T13247] ? usb_submit_urb+0x114d/0x18b0 [ 554.819852][T13247] ? usb_submit_urb+0x114f/0x18b0 [ 554.824895][T13247] handle_bug+0x84/0x160 [ 554.829137][T13247] exc_invalid_op+0x1a/0x50 [ 554.833621][T13247] asm_exc_invalid_op+0x1a/0x20 [ 554.838450][T13247] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 554.844091][T13247] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 40 14 11 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 64 11 90 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 554.863685][T13247] RSP: 0018:ffffc9000b9d7540 EFLAGS: 00010246 [ 554.869746][T13247] RAX: 46248eada484da00 RBX: ffff888145b4bf00 RCX: 0000000000080000 [ 554.877704][T13247] RDX: ffffc9000fdd4000 RSI: 000000000000593a RDI: 000000000000593b [ 554.885655][T13247] RBP: 1ffff1100b7f1854 R08: 0000000000000003 R09: 0000000000000004 [ 554.893604][T13247] R10: dffffc0000000000 R11: fffffbfff1bba680 R12: ffff888024072100 [ 554.901556][T13247] R13: ffff88805bf8c2a0 R14: 0000000080004480 R15: ffff88807cc9e0c0 [ 554.909530][T13247] usb_start_wait_urb+0x114/0x4c0 [ 554.914548][T13247] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 554.920098][T13247] usb_control_msg+0x232/0x3e0 [ 554.924850][T13247] dtv5100_i2c_msg+0x250/0x330 [ 554.929600][T13247] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 554.934438][T13247] __i2c_transfer+0x874/0x2170 [ 554.939190][T13247] ? __pfx___i2c_transfer+0x10/0x10 [ 554.944369][T13247] ? __kasan_save_free_info+0x46/0x50 [ 554.949724][T13247] __i2c_smbus_xfer+0xfb0/0x1e50 [ 554.954640][T13247] ? __lock_acquire+0xab9/0xd20 [ 554.959473][T13247] ? do_raw_spin_lock+0x121/0x290 [ 554.964478][T13247] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 554.969833][T13247] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 554.975712][T13247] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 554.981585][T13247] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 554.987896][T13247] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 554.993251][T13247] i2c_smbus_xfer+0x275/0x3c0 [ 554.997916][T13247] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 555.003096][T13247] ? __lock_acquire+0xab9/0xd20 [ 555.007932][T13247] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 555.012943][T13247] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 555.018476][T13247] i2cdev_ioctl+0x5d3/0x7f0 [ 555.022958][T13247] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 555.027964][T13247] ? __fget_files+0x2a/0x420 [ 555.032536][T13247] ? bpf_lsm_file_ioctl+0x9/0x20 [ 555.037458][T13247] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 555.042469][T13247] __se_sys_ioctl+0xfc/0x170 [ 555.047043][T13247] do_syscall_64+0xfa/0xfa0 [ 555.051528][T13247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.057571][T13247] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 555.063214][T13247] ? clear_bhb_loop+0x60/0xb0 [ 555.067873][T13247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.073745][T13247] RIP: 0033:0x7f858298f6c9 [ 555.078140][T13247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.097726][T13247] RSP: 002b:00007f8583839038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.106121][T13247] RAX: ffffffffffffffda RBX: 00007f8582be6180 RCX: 00007f858298f6c9 [ 555.114072][T13247] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000008 [ 555.122027][T13247] RBP: 00007f8582a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 555.129979][T13247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.137932][T13247] R13: 00007f8582be6218 R14: 00007f8582be6180 R15: 00007f8582d0fa28 [ 555.145895][T13247] [ 555.149171][T13247] Kernel Offset: disabled [ 555.153478][T13247] Rebooting in 86400 seconds..