last executing test programs: 11.424447905s ago: executing program 4 (id=2165): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x69, 0x4, 0x7d, 0x8, 0xabf, 0x3370, 0x30e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb5, 0xbc, 0x65}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r0]) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 10.198227043s ago: executing program 1 (id=2173): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217f72060ad506e01594489b23547a302dc63be2de7fe27d703618b229b146b84a9afe22840dcb1f65f369ebbeeed90fe023a"], 0x0) (async) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217f72060ad506e01594489b23547a302dc63be2de7fe27d703618b229b146b84a9afe22840dcb1f65f369ebbeeed90fe023a"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 8.580598677s ago: executing program 4 (id=2178): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x21dfdbfc, {0x0, 0x0, 0x0, r1, 0x40810, 0x7}, [@IFLA_IFALIAS={0x14, 0x14, 'ip6gretap0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000000, 0x800}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0xfffffffffffffffd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r3}, 0x1000, 0x6, 0x298}) syz_emit_ethernet(0x88, &(0x7f0000000600)={@random="856b934629fa", @local, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x4e, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x896f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x9, 0x7fff]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x2, 0x4, 0x3]}, {0xa888}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x9}}}}}}}}}, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0x0, 0x0, 0x19}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$setsig(0x4203, r8, 0x1, &(0x7f0000000040)={0x40, 0xfffffff9, 0x5}) 8.522663433s ago: executing program 1 (id=2180): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket(0x2, 0x80805, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101100) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x4, 0x0, 0xfffffff7ffffeffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x3fc3a000) r4 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="61f245cafab21e55697298a0ae35e18d14dd4b6592fa14c0489b858840d12654fb8ddbd1563e581b6a29f56e6127a48c40b95af04e135572e6084e5706e88f02b4440c32e93c31603beb0bc2616de2e7f2a3936b7862df4bc4178710a61eb2e0e7b4ac16cde4477d10653b0d6afde80c950848626b7296ec902f7dc875cbb34a73638a2a48eec75667340826ad84022664c0039de213dc5054b5ecc2ea3c385fe8cdeb814e4eb6262fb39fb637c13a6c1b401f1eafc7a09d49980e60e5caca3520ffeeaf9b20a67d680c7ade66ff7398725ab5bfeed67b48888284c03f6c5331b33f5bd12b10f2c9f8a82549939fbf23caba0dfe1cd962f5e97d9a7dbfed7b25dfcd025cafb3c3b34bde13e2cf3684db786b56929bd381fa5e178b268005224cf7d79103524ec32d22509292501062fd2a907f9eb1a564bcb58da00933f9fb49af10ce55617b9edfad6ca5f9060623e0d6fb73aa68c9b5190dc671968ecbf752962f6e3f0ef6b3ff918603cd511ec00dc67ba004c6469380f5c5390226ccd5ebb934a63c103e4fb6b69c42a6e8e8aa434fd0c787de018fc1e25189ba81be91c80d5e3c9d021baa3cb3abaf755b79e41a8604392c68a018e1750ab6d54608969f3c9273b1a08c3b8d7d9b6f03f4bd3a6c64790617d72a891556cba509f21f992c59db9f78853421fb9ec4ddb2fe782f5da26c038626f26d1e4fda289cea520d44630b041e18ea2ecf56852c25f1ddf3bbaed2c17ba898575431134ee7c27fbf8548dfd63364b8beae267085bfa964786745134ae2b64c4a263f885c198952e795c17e04f0d9e4360de13ae3f2481e6d234bb5c54e03d5e0cb27e5b610ea2c0d85d21bc66e5c861f1e8ba66620cb6f590b2fe294013923b7fc9b170f449e7873bb9aa14cf7421e61feaaeb349a2acb5816a51325f45065b035be05f4498e77eb5e875c03b0c41061caadee14eb2764a5846ba0cab400e1676f533abc56930e5acccf331b0611af1e2947b11820d32e142ca885f4df233678ccbcfa63e5cfa708adcfefa34f059f81f14a5ef2538ef446feec5c78828c618576b18b86c7ee37d8182a8dee51d5dd199cd2ee915f5e25be2885822ab3e5b988786764e611f0bb1214bb9d825c9c4e15c061acf2b4e7361831e0fe9fc409e0004631ab31c42bfd962ba7a0e475f3a91643ce65d2efb94976b14fcf7d21c93bd9208b7bb7a3dfc4444cf14d127401c6892ba93ac786476e0885f028ae6141de817d3517cce625eebb50e2c1e5e64ffc50da4d2eaa605501769e4c1a40fd9da7da178b4bf468942514082773698770ef455ea263fefa4fb258c15afb076c7979296f901e84a2b71eb63cb3d9dfd9abb3e1f8f657070d75541c20476f37e14ca43014ef80b33eeca91ace604ec2051d73ec2f69ffa14bcd79ea577e9676825094606343d31874111fbc535d28fa7a9e379d38226001e241d3515e1d63ba56f1eebe8ea788c4d768f4c4fbbaf834ca3f21460613d768dacf2a27778dc2b4598726646b8c06b6e4d38162720c807724f92bdc9f0b0f5d303d5a5a3998aa270a6760c7651df601bc42c78dd9bd53ee960cf80a30a6b7a1a880d37ff31fb2c9bb0c591bba3ef8228a0506f45065c65b131aff8da8eebbd6754b9e5601632da39c329a229062a94833b23c97371d510a19e2d3b5bc516e3d3c8601495fbeecc16c5c50ba6c435974e8275d372add206964f29997b515f63f50121029e61f47db19fc63b07d0f059ca686e80fb6c294667affaea2daff241bdd0945bfbfe28643136bcea9aa345d482fc3b9d872b482463b92b25f0e5157be3fd8b7a328f327ddfa5c05a6f172deb795f19b9f2091386acb060f170540bfa898057c206d81afd85701b8ee030076bc3782d7d8f6673111baf80818aeca7e5944d91a7f4fce840303867ea18d2b92d74c67157284c787fcfde780fc9a53ae5560e101ef125ce707d34f957072958dc9916492e73a90a10f660a221a7c6730ac0ac01e37d54f058b64f41a46be5320800172e2c9fda248a2964548ddf1f53599027c29ede6079a72d454bcf4403808111d00cb4e3aadd060c333e57c64a70bdfbb572fe228538c82ab427416cdcce1dd643ece610ca7042e2a164d3dfdabb966f1a8fc875cd002920321dac62e25f38cb0031e4de6324b0db402b12c4b0e335898e21b7b326ebbeec0b4bc21ef2dd6f9755e8ff35602d30189ae3efe9c487aec2ce90dbbe790c919b77036240786f3fe9441204b81bc43b5f5cbede75702a1c28ab16d2f578dddb3624f596b5b82e2f26b63966ddc78c8ffa13a23b6c4ee2c741820b9738fe881ddeeeba60fa4221885be55a6fdaa0b90b246f5959b844afd6898bc8c0a75fc45fb968d6e8ea6831d15808b23904355c62a8590d1ba51cdb051bd5ccc1b62a8ca520af60daefae7f7f1dcc90a02ab3af5307fcd5fed9af7d9b192f080be6ded768c6d1d4ea0ba5cc996e5c24b8048eeaea09cabcf1c0488a357280395cfc5394ba160c439dda0a7f4ed182d3f33a4addb1c74d7d797179c633013b24c7e0cd2f4b86904bd1d70a4821c7ff619455953d820e1594c7136e66c260c868776129eddedfdec5ebb0da2e5207215f9c47d7bf74319661311232ca1d108da00df2d07ff5720c474981cb54bd185448ae0e3d9d3194614ae67bdb24122cb2207be610456c35ba6e11429a3a6c266b4bfd905c7534de4fe03ac5063cbb08b3a75137e59e3e8b3fee3989bfb0735ea6f948371a60efff49ea51d5825dd61ef9a0b735fc859c9b003325fe6e3a5fdb8d2cf51e2e9a4c73a8af3a702a83d57d3ddb81d5e9342c97f143ed28228c16a1625d8ba4f0ffddc968f37cb07ea09d35703f920cf4e7a1394b7f18e6f2508a4c90acc92710ddce1e7a9a22ad2d540f669411b263b3e20b07131cc17cf20ae8030de00862bdc33b7eb4f8122c47c833e73aed84199e5d584625570193e18c3d165dae7941d17cc07034a2a5c67c708d6c96f9c5595800dfb65f42c413716b952d42727e7117915b359d1f1c0a64f0ee4b4a0bfbc4e9fc794cd02369e9594acb7805a155ec03505df719aa47e5da38fd3ab736fa76acee10abd1b220b32436260f2ab86f7d0c20fd9b3a1e63b9b3dbd91e7579fec104f5a714f4d0a00a03a1848c58508e8ec27c7fa04d3baf64e1258bd1d72465f3a64c793b3e09a97ca1a2efbac7adb6228ef4588be15afc21c80905a26a22f4db7940b9369051dde4e24008a5f7b943d769578ffa46572435c2076c60096252f3b3b5fe6d8f4579d11c9c71cbf7444c661306fa07dd01e670fa8d24071b09d6e74a268a0d43aef3b7f8e126900bf2e21304785712f327275a2e16febd4faaaacce68b92dcc3c27ca035bb4210408a34103719c82d33c8b43dd9a46cc0420a533b906317fb817ef6164286b8ddacee6191027bfa9ed19746c8401bab93d08d028fd9e2203cccf56b22042c402e8a438ed226112fa71d02c4537d4156a3af28ab4ffcf19309d283902f1e70f42d6713782c5e468a086fdb5c8b3e15de36acc4469ec42ea23a1e5e8e399f4d4be71dd4b4c268db2ab91b68ceafb95cbba36228e59bc0cd7f987a2ad4bbd23b67acabb26a0f4c694ff320f2275042c85ef256aeef306cf5e2803d6c55827011e2f98d0e80819e0039a71cc9c59464f209afa7891a359a3f9efb4bba2a18fd013e8664a6bec7e717ffe2f0c06f7268862696cfae0fe6fab5b1a2921c0e29aaa8638f6a18d1cbaaa4aa0d76f66fa9f44511e631f2fde8024210eb39f545a648c1b77ab04a7d110edbd1dce3939b4dee867df3cb3107fffe5ab22fe5e32b38447d32094259cee40c9a5254df72cbd7a29188d7285facd6e2f5c78ee9d11645cf026e99162da9c2d148373018fe8e052ffccc4e3952e86228d7835a3bc9b4a5c6099dd3e802b059ef2225cbe4664458729c78032e184b61a089870c6b3c2bf2e5df6bd65bc195e1ccbe58b9a6dde49897ab59dd269a737f04e37e34d3d10c3b01c744a742d52da1bceca63fcbecc136a80bf3ca1df2f226de073b67a0b646674744acd14d5dab9929f2cb804637ebf211f2b3a8b959723808904e9044deb551b2613c1e501385693e7abff809b641c02107187cf1bd1c9571a9023942f0c78c467611193a7e6900eefc49fded206630336cd8d2849731b73798d9258be75b843f051679e6bd541c78457db5470d3d494f333a81b3ed26b57f9f7726275c12f192f4b1d9615c7fe3e0bb22fb47ae1effea3bd2a0a379593a25f933c8af1f14d08bd8ca692c9af3eaee136664e1829204c171ad6e50fa928a3c1f5ee2c14f984884c2cb0256acfa6172d030940f3f9f99443c730b0f070192d36fb83b3d470cf3098bd8b0f09eb6d1b58efbde00305c3a50e00df17b9963f1c06f26b48e4a166073f3f3119ed2b56af1f8c056c07f65ffc3f2e81efa22f97c66998b35bb2af3ce2d89af5f5b1368ce9148937f826c3ef81a116382bd3f53e26f210aed545f38c1e21400957b824eaa95bb401ef308852c7e5015b89244a403308de785a81739634161e33d79435f18cf378bd9f5eb59b40a55abe627f6944ec239f80fc15526e7f1b2c2949a85b8c15a299cee1c86f61746a4eae3dc5f347225f1965cf09d4457b1a1b692fb108a681607d6276c4a6cf35709dc95aa249ae245a0435c481cbae672037aefc82fee9f249e643e658d173aea1d99e361f383dd674a5f2a6525755eaba2d59928a8d9e2eb1aafd129cb4c2cefd5da0213d900efa938e937a7c4e62243eeb3f5f43be35323f63b0b1ac2a298fcfbf71129da3465e488f52b82ec725bdf2fd943e09004c62abf5332139fb38b797756c5e9de926da21f8d77408ea740cf5ec8a657eae110df0550c6ca2585e0cdd5de1e986da91ca1d112f0d5397fdc612b2163164dedddf60c1e3dcd94195b65f50a9c86fb7b67b91dc7c0b8ab3d1c254663fc09ad5fd2c97221f1c6032557ff0a2fc441b71b3a6a6c52efded4133c8d57ce15523550237e7fef838d66cd77c48a743b2a2cc7c1f0ef3d520eb7ce9c086d73c352fe311337b3558a6985660a19ac852edceed56e3e9bb49b8a788eaa3f9be70b3fd1e764888a35a6c874256f9a8e53790281e30fdc1ed35ef03e9bd805ba3ef6ad07c3eef31fadcaba39c9b793e15d04f096c62f6282e8fc4aa31b275bc7fe5dce144ba736151d046b1285b698422ae84ae222e835e2ea80791082cd1742385764a0b047fcadfd8da7acc8f820dd50444fbbecb18ff5c9df10e08609d4b0f76ce14dc8ab056227e3604b3933df593a1b961fba44678131c958b15246e5054465bfffba1cb05c8d4a3ce7a3473d88c9213b5d8fcef3c46f8650fec5077bffaf9b469051b0e5aa7b55f863f0919ca310505a063890b1560597aac6ca1ed9a7c7ed8e894597098cc9333d687bd8e1b4539bb9f74d034d2fc316ef806d67bcec412fb485a03f87cb89d122809fc55f1a7fb35a74440d661ee736340cdbe70141214e899cf9f907a2463f995d21e2d1d25fe92b47ea198f467bf5e775104bbb0ed11534ef25eabdd6b14e8961ee0534f5ab504151f1b2f1853f7229e07131696deb538114d51df2d5c4145bb53d7292e1544c3075806980d5d595528dcf1ce6d4d35470331f00a7bb00e4a1b38982f5dbd2114715a3bd23fa9dbadfe2970853a89d1abb9ae5d4f3bab355691c3ccbbe4bcb2e44425d6c2c3dc3ddd8d43872a6063f111c1c7e6ed4449b39bbd6df92ed4a0e4808ffad0391f89b509f683061bcbe06369e47d43e9", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000000)={r5, 0x1000, &(0x7f0000002a80)=""/4096}) syz_io_uring_setup(0x5787, &(0x7f00000002c0)={0x0, 0x918d, 0x40, 0x1, 0x20b}, &(0x7f0000000240), &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000003c0)={0x1, r6, 0xa18, 0x7, 0x6, 0x0, 0x3, 0x5, 0x2}) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x2) getpgid(0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 7.999661231s ago: executing program 4 (id=2181): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c1b39a08e604250000020102030109101200010508e0220904a20600694b014d5333751eb14ad71e8a337284c60934e3d8ba6754e224d3677ebee0c96e18d2cf1aab3464d98240150c09d3cedf6dc256e870108236d338db0f000000daa447ac24299a4fdf0c075e2ba72e0700559b4bcce274cc24cf99d9259bc74d24688d71154de13a736f3c5b98b0ce37aa4854f481591f449bc086ff553e03eb36d2c6427306003ba7358d0efb8ae8ae1754eca03202b49ef6273bc9dcf202feb679dfcd43b1d064d89c834e9818611af8f9b8c5be9c8efcc973c3398acd3185458b6cdca12602dcf147000192f0000000000000", @ANYRES64=r0], 0x0) 7.040457974s ago: executing program 1 (id=2184): lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x287, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0xff9e}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, &(0x7f0000000140)=0x62) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0xc, 0x8, 0x100, 0x80000001, 0x5, 0x5, 0xfffffff9, 0x80000000}) mbind(&(0x7f00000c7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x4, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 6.460495239s ago: executing program 3 (id=2186): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0403d11, 0x0) recvmmsg$unix(r2, &(0x7f0000001e00), 0x0, 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) sendto$unix(r6, 0x0, 0x0, 0x40000, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000003c40)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="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", 0xfa0}, {0x0}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) cachestat(r6, 0x0, 0x0, 0x0) 5.574361792s ago: executing program 1 (id=2189): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x60, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = io_uring_setup(0x3ead, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 5.460231638s ago: executing program 0 (id=2191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB="73000000000000008904"]) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) 5.35633531s ago: executing program 3 (id=2192): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x82000714) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f0000000080)={&(0x7f00000aa000/0x1000)=nil, &(0x7f000050a000/0x1000)=nil, 0x1000}) getsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, &(0x7f0000000040)) inotify_rm_watch(r1, r2) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.29481502s ago: executing program 3 (id=2193): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001500)="b2843bf5a0f2981a448217f331836905cad380ff346023fbde8a15180d7784c8d349ff6277ffbce0b61a583c9806045666c12b3a1ea5b86f76844345f7705634334322e89bb9408c272009cdfd5b73f02d2bbfb059784e9d7e93b4646ef2c71a9d5f45e97bdb8c5a14e6ae88cf57ca25a9313dad08ada7a41adb897230ece2ec402636e7ff63ed7d66e797f7fa449aa57632a359edee5361ba4c6026d64599feff31600f5e834301ea8e6f60dcfb53ad14f4160b0f1ae543be33c2039c7fb754d34931107509932649d37ce1fb101e0658632dca9b7ff067ecf0e973d02e83e9422b8cefbf7401f657c05151b0325896c4c7e3beb90f58e8fb000a537c03a3e2") sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x9a3440) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x200, 0x4, &(0x7f0000000200)=[r5, r5, r5, 0x0], &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x0, 0x2}) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0x110, r3, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) r9 = syz_open_dev$video(&(0x7f00000000c0), 0x2, 0x210003) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000001400)={0xe9ec60ab69de899d, @win={{0x7, 0xdd, 0x401, 0x3}, 0x2, 0x2, &(0x7f0000000180)={{0x1060, 0xffff, 0x5, 0x10001}, &(0x7f0000000140)={{0xfffffff9, 0x9, 0x3ff, 0x6}}}, 0x3, &(0x7f0000000400)="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", 0x7}}) 4.911936258s ago: executing program 4 (id=2194): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x300, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004700)=@newtfilter={0x2190, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x6, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x215c, 0x2, [@TCA_BPF_ACT={0x1df4, 0x1, [@m_police={0x1df0, 0x1a, 0x0, 0x0, {{0xb}, {0x1d9c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x43}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x2, 0x0, 0x6, 0xd, 0x10000, 0x4, 0xc7, 0x39, 0x0, 0x8, 0x3, 0x4, 0x0, 0x6, 0xe91, 0x3, 0x5, 0x1, 0x2, 0x1a, 0x3, 0xfffffc00, 0x5, 0x5, 0x456, 0x1000, 0x7, 0x2, 0x23, 0x800000, 0x400, 0x2, 0xfffffff8, 0x8, 0x40c01785, 0x37, 0x7, 0x6, 0x1, 0x2, 0x1, 0x0, 0xf886, 0x44, 0x85, 0x73, 0x5, 0x4, 0xfffffffb, 0x5, 0x5, 0x2, 0xb5c, 0x7, 0x24b1, 0xe8, 0xe, 0xfffffff7, 0x31e, 0x2, 0x0, 0x944, 0x6, 0x152, 0xffffff68, 0x40, 0x4000000, 0xfff, 0x6, 0x7, 0xfffffffb, 0x2, 0x6, 0x10001, 0x80000001, 0xe, 0x8, 0x8, 0xffffffff, 0x1, 0x2, 0x0, 0x7, 0xfffffff9, 0x8f, 0xc1, 0x20c, 0x7, 0x3, 0xfff, 0x7fff, 0x8b, 0x5, 0x2, 0x7, 0x6, 0x9, 0x5, 0x7ff, 0x9, 0x5, 0x8, 0x3, 0x2, 0xd45d, 0x7ff, 0x2f, 0x8001, 0x1ff, 0x7, 0x6, 0x20, 0x1, 0xfffffeff, 0x7a255ec9, 0x5, 0x6, 0xd, 0x4e30, 0xfffffff9, 0x8000, 0x6, 0xb, 0x2, 0xe, 0x100, 0x2, 0x800, 0xa6, 0x9, 0x4f, 0xf88b, 0x5, 0x5, 0x3, 0x76, 0x5, 0x7, 0x4, 0x9, 0x5, 0x4, 0x5, 0x4, 0x0, 0xfffff057, 0x8001, 0x9, 0x4d, 0xffffffff, 0x7, 0x1, 0x0, 0x2, 0x7, 0x8, 0x8, 0xb8, 0x7ff, 0xf52, 0x8, 0x1, 0x7a, 0x4, 0x2, 0x17, 0x6, 0xbff0, 0x7ff, 0x80000001, 0x10, 0x7, 0x4, 0x8, 0x1, 0x0, 0x8, 0x761, 0x2, 0x3, 0x0, 0x0, 0x0, 0x9, 0x9, 0x6c, 0x8001, 0x8a38, 0x5, 0x2, 0x5, 0x10001, 0xfffffffb, 0x2, 0x1b, 0xffffffff, 0x8, 0xd1be, 0x9, 0x6, 0x7, 0x4, 0x9, 0xbd, 0x3, 0x7, 0x6, 0x87c, 0x101, 0x3, 0x9, 0x3, 0x8, 0xfffffeff, 0x4, 0x2, 0x0, 0x10000, 0x3, 0x4, 0x8, 0x3, 0x0, 0x2, 0x54, 0xe1dcc81, 0x7, 0x2, 0x2, 0x4, 0x8, 0xbaf, 0x8, 0x80000001, 0x1, 0x8, 0x401, 0x4, 0x4, 0x6, 0x0, 0x300, 0x8, 0x81, 0x8, 0x80, 0x7, 0x401, 0x401, 0xe, 0x53, 0x3, 0xf0a2, 0x9, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xbb, 0x1, 0x9, 0x7, 0x3, 0x2, 0x10, 0x2, 0x161, 0x9, 0x2, 0xf870, 0x7fffffff, 0xfff, 0xffffff09, 0x3d55, 0xeb1, 0x3ff, 0x8001, 0x4, 0x10001, 0x6, 0x8, 0x3481, 0x1ff, 0x3b, 0x5, 0x3, 0x10000, 0x19, 0x0, 0x7fffffff, 0x4, 0x2, 0x1000, 0x7, 0x8, 0xe0d, 0x55, 0x2, 0xfffff3de, 0x4, 0x9, 0x3d, 0x4, 0x32dc, 0xc06, 0x0, 0x9, 0x9, 0x7c1, 0x10, 0x2, 0x2, 0xeba, 0x9, 0x0, 0x4, 0x2, 0x1, 0x1, 0x1000, 0x8, 0x8, 0x2, 0x3, 0x1, 0x808000, 0x7, 0x8, 0x6, 0x5, 0xd51, 0x5bc, 0x9b59, 0x90000, 0xf4ac, 0x1, 0xe, 0x9, 0x7, 0x1, 0x8, 0x96f, 0x8, 0x4, 0x9, 0x9, 0xfffffff7, 0x7fffffff, 0x2, 0xcc7f, 0x5, 0x3, 0x68, 0x1, 0x6, 0x4, 0x3, 0x800, 0x0, 0x6, 0x9, 0xce7d, 0xa9c, 0x5, 0x40, 0x1, 0x6, 0xc57, 0xffffffff, 0x7fffffff, 0x2ea6, 0x401, 0x80a1, 0x6, 0x2, 0x100, 0x80, 0x2, 0x40, 0x8, 0x7ff, 0x10001, 0x2, 0x600, 0x6, 0x0, 0x7, 0x0, 0x684c, 0xffff0000, 0x4, 0x1000, 0x8, 0x7, 0x0, 0x4ee, 0xfffffff7, 0x200, 0x9, 0x1, 0x3, 0x9, 0x9, 0xffff, 0x3, 0x7, 0x6, 0x5, 0x100, 0x8, 0x10000, 0xffffffff, 0x1, 0x3, 0x5, 0x7, 0x7ff, 0xffffff7f, 0x1, 0x3, 0x7, 0xffff, 0x4, 0x6, 0x4, 0x42, 0x4, 0x3, 0x8b, 0x800, 0xa69, 0xace, 0x3, 0xffffffff, 0x8, 0x3, 0x4, 0x5, 0x100, 0x3, 0x1, 0x1, 0x5, 0x1, 0x3, 0x1, 0x7f, 0x7, 0x5, 0x1, 0x4, 0x6, 0x3, 0x1, 0x10000, 0x10, 0x1121, 0x1, 0x6, 0x81, 0x2, 0xab, 0x8, 0xe6e9, 0x2, 0x7, 0x1, 0x4, 0x4b6, 0x5, 0x9, 0x6a, 0x0, 0x33b8, 0x100, 0x3ff, 0xffffffff, 0x9, 0x3, 0xffffffff, 0x1, 0x8000, 0x551, 0x3, 0xc, 0x1, 0x1, 0x0, 0x5d2a, 0x6, 0x3, 0x0, 0x4, 0x4, 0x2, 0x3, 0x40, 0x5, 0x400, 0x7, 0x4c8d, 0x800, 0x7, 0x9, 0x400, 0x2, 0x7, 0xffffffff, 0x8, 0x9, 0x7fff, 0xfffffffc, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x5, 0x2, 0x2, 0xff, 0x800, 0x7fff, 0x0, 0xffffffff, 0xb9, 0x22ac, 0x7, 0x0, 0x9, 0xffffffff, 0xffff5262, 0x1, 0x6, 0xc4c, 0x5, 0x2, 0x6, 0xe, 0x4, 0x9, 0x10, 0xffffffff, 0x101, 0x2, 0x4, 0x4, 0x8, 0x7, 0xa8a, 0x2, 0x9b, 0xfffffe01, 0x4, 0x81, 0xfffffffd, 0x1d2, 0x20, 0xc0, 0xfffffffe, 0x97, 0x10000, 0x0, 0x1, 0x1, 0x7, 0x6, 0x24d3, 0x2, 0x3, 0x2, 0x80, 0xcd5, 0x800, 0x6c26, 0xd13, 0x7, 0x3, 0xfd0f, 0x5, 0xa1, 0x63, 0x6, 0x9, 0x4, 0x7, 0xffffffff, 0x3, 0x14000000, 0xcae9, 0x75, 0x7, 0x4, 0x6b52, 0xe, 0xf3d, 0x7ff, 0x8, 0x8, 0xffff1a86, 0x49d9, 0x4, 0x54, 0x1, 0x7, 0x80000000, 0x6, 0xfffffff7, 0x101, 0xb370, 0x0, 0x2, 0x4, 0x2, 0x7a7cf672, 0x1000, 0x400, 0x7, 0x3, 0x2, 0x4, 0x2, 0x6b56, 0x4000000, 0x8, 0x101, 0xffffffff, 0x7, 0x8, 0x5, 0x8, 0x6, 0x1, 0x2, 0x4, 0xd, 0xffffffff, 0xff, 0x6, 0xffff27ed, 0x35, 0x4, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0xffffffc1, 0xedeb, 0x0, 0xa, 0xac2b, 0x5, 0x0, 0x2, 0x100, 0x9, 0x80000000, 0x9, 0x4, 0x200, 0x5, 0x80000001, 0xdac5, 0x0, 0x7ff, 0x6, 0x3, 0x7f, 0x27c53b48, 0x4c29, 0x400, 0x8, 0x7, 0xfffffff9, 0x6, 0x0, 0x7, 0x3cc8, 0x200, 0x80000000, 0x2, 0x0, 0x800, 0x1d0, 0x7, 0x80, 0x101, 0x1ff, 0x8, 0x2, 0x3, 0x8, 0x7, 0x47e, 0x10001, 0xa, 0x2, 0x8fa0, 0x2f, 0x2, 0x9a4c, 0xffff979f, 0x1, 0x2, 0x9, 0x3, 0x148, 0x7, 0x8, 0x4, 0x5, 0x200, 0x80, 0x4, 0x3, 0xa, 0x10, 0xffffff00, 0x3, 0x5, 0x400, 0xf, 0x7, 0x80000001, 0x4, 0x401, 0x7d2e, 0x4, 0x8001, 0x5, 0xfffff88a, 0x5, 0x9, 0x4, 0x2, 0x7, 0x2, 0x4, 0x4, 0x0, 0x80000000, 0x1e, 0x7f, 0x80, 0x8001, 0x0, 0x2, 0x8, 0x3, 0xa, 0x6, 0x8, 0x1, 0x8, 0x4, 0xa3, 0xe82, 0x5, 0x7, 0x1, 0x5, 0x9, 0xe, 0x7fff, 0x9, 0xffffc339, 0x1, 0x2, 0x80]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7, 0x6, 0x3, 0x101, 0x9, 0x58, 0x7, 0x2, 0x7, 0x42, 0x7, 0x10001, 0x7, 0x0, 0x8, 0x5, 0x8, 0xfffffffd, 0x5, 0x0, 0x82cd, 0x7, 0xe, 0xffffffff, 0x0, 0x80000001, 0xfffffff9, 0x9, 0x3ff, 0x4, 0x8265, 0x4, 0x40, 0x7d5, 0x400, 0x3, 0x6, 0x1, 0x7ff, 0x48, 0x10000, 0x8, 0xd, 0x3, 0x70e, 0x5, 0x3, 0x2, 0x7, 0x81, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x1, 0x6, 0x7, 0x5, 0x800, 0x4, 0x0, 0x2, 0x9, 0xc8, 0x53, 0x9, 0x75, 0x8, 0x3, 0x7fffffff, 0x8, 0x6, 0xffff, 0x1, 0xba, 0xffffffef, 0x0, 0xf1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x6, 0x4, 0x8, 0x0, 0x9, 0x80, 0xfffffff4, 0x9, 0xff, 0x1, 0x2, 0x0, 0x6, 0x6, 0x5, 0x4ed, 0x80000001, 0x340f, 0x7ff, 0xb3, 0x61, 0xfffffff8, 0x4, 0x2, 0x8, 0x9, 0x3, 0x2101, 0x4, 0x0, 0x3e, 0x6a9, 0x0, 0x3ff, 0x1, 0x3, 0x0, 0x7, 0xa, 0x0, 0x8, 0x731a, 0x5, 0x6, 0x5, 0x8, 0x4, 0x177856b1, 0x7, 0x1, 0x401, 0x3, 0x5, 0x4, 0x3b, 0x3, 0xd, 0x2, 0x9, 0x7, 0x8, 0x80000001, 0x9, 0x4, 0x100, 0x9, 0x2, 0x354, 0xfffffffd, 0x5, 0x5, 0xfff, 0x401, 0xfffff3cd, 0x1, 0x7, 0x7, 0x80, 0x6, 0x4, 0x0, 0x2, 0x1, 0x6, 0xfe, 0x0, 0x4a, 0x9, 0xf, 0xc, 0x8, 0x7fff, 0x8, 0x0, 0x4, 0x0, 0x1, 0x7fffffff, 0xff, 0x9, 0x9, 0x4, 0xb278, 0x9, 0x1000, 0x0, 0x9, 0x9, 0x1, 0x101, 0x1, 0x6, 0x2, 0xc53b, 0x4, 0x8, 0x1, 0x7, 0x6, 0x7ff, 0x6, 0x4, 0x4, 0x1, 0x81, 0x4, 0x101, 0x5, 0x1, 0x81, 0x80000001, 0x7, 0x4, 0x55, 0x0, 0xce, 0x7, 0x78, 0x3, 0x3, 0xda50, 0x9, 0x1ff, 0x580, 0x1, 0x6, 0x5, 0x8, 0x979, 0x9, 0x4, 0x0, 0x4, 0x4, 0x8, 0x7fffffff, 0xf1, 0x1, 0x8, 0x1, 0xe, 0xfffff8af, 0x80, 0x1ff, 0x7, 0x8, 0x8001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x9, 0xed, 0x9, 0x2, 0x4, 0xfff, 0x4, 0x0, 0x9, 0x9, 0x7, 0x4, 0x9, 0x9, 0x8, 0x1, 0x1, 0x7, 0xbc4d, 0x0, 0x80, 0x3, 0x4, 0x0, 0x4, 0x1, 0x1f, 0x6, 0x624, 0x3a8b, 0x2, 0xc, 0xe, 0x1800, 0x10b, 0x3, 0x4, 0x59, 0x1, 0x7, 0x63a1b14f, 0x6, 0x3, 0x9, 0xe, 0x401, 0xffffffff, 0xffff, 0x2, 0x0, 0x4, 0x1, 0xff, 0x8000, 0x8, 0x5, 0xfff, 0x60, 0x4, 0x81, 0xffffffff, 0x8, 0x2, 0x9, 0x5, 0x9, 0x2, 0x0, 0x14b, 0x2, 0xd, 0x20000, 0x4, 0x1, 0x1, 0x7, 0x7, 0x1, 0x2, 0x98, 0x0, 0x9, 0x3, 0x2, 0xffb3, 0x100, 0x10000, 0x1, 0x1, 0xfffffff8, 0x14d, 0x4, 0x5, 0x128, 0x6, 0x400, 0x8, 0xa, 0x6, 0x9, 0x8, 0x5, 0xb87e, 0xa, 0x1, 0x80000000, 0xfa9, 0x4, 0xfffffff9, 0x10000, 0x9, 0x4, 0x2, 0x5, 0x0, 0x4, 0xbacf, 0x7fff, 0x1000, 0x1000, 0x3a5, 0xd5, 0x9, 0x8, 0x6, 0x4, 0x0, 0x8, 0xfffffffc, 0xa0c1, 0x6, 0x65, 0x2, 0x3, 0x4cb, 0xfff, 0x100, 0x8, 0x6, 0x7, 0x4, 0x6, 0x400, 0x0, 0x2, 0x8000, 0x101, 0x100, 0x8, 0x2, 0xffff, 0x80000000, 0x4, 0x81, 0x3, 0x8000, 0x7, 0xdb, 0x3ff, 0x7, 0x4, 0x0, 0x80000000, 0x5, 0x1, 0x7, 0xf7, 0x7, 0x7, 0x1, 0x6, 0x4, 0x2, 0x7, 0x8, 0x5, 0x5, 0x6, 0x80, 0xffff, 0x5, 0x693, 0x7f, 0xfffffffc, 0x3, 0x2, 0x8, 0x5, 0x4, 0x0, 0x1, 0x1, 0x79082b85, 0x8, 0xffffffff, 0x1, 0xe, 0x429c8225, 0x8001, 0x101, 0x100, 0x588, 0x9, 0x1000, 0xfffffffe, 0x0, 0x7ff, 0x7, 0xffff, 0x0, 0x2953, 0x7, 0x2000, 0xffffff18, 0x3, 0x5, 0x774, 0x7, 0x7ff, 0xfffffc01, 0x6, 0x8, 0x7, 0x2, 0x8, 0xfffffff8, 0x9, 0x6f0, 0x42dc, 0x9, 0x5, 0x3, 0x5, 0x1, 0xffffff01, 0x5, 0x5, 0xed2, 0x5, 0x1, 0x5, 0x7, 0x895b, 0x5, 0x34a, 0xddc, 0x6, 0x1, 0x7, 0x7e, 0x401, 0x13, 0x5, 0x4, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x2, 0x80000001, 0xff, {0x80, 0x1, 0xfc, 0x5000, 0xffff, 0x6a6d}, {0x8, 0x2, 0x7, 0x7a5, 0x359, 0xc38a}, 0x0, 0x7, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xa60}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff4, 0xffffffffffffffff, 0xb, 0x5, 0x7, {0x6, 0x2, 0x0, 0x8, 0x7, 0x2}, {0xf, 0x2, 0xff00, 0x2, 0xc, 0x4}, 0x7, 0x0, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x5, 0x8, 0x940, 0x6, 0x5, 0x8, 0x6, 0xffc, 0x8, 0x8, 0x60, 0x8, 0x8, 0x190, 0x8, 0x5, 0x400, 0x4, 0x101, 0xffff, 0x90, 0x7, 0x4, 0x10, 0x5, 0x4, 0x6, 0xfffffff0, 0x82, 0x100, 0x2, 0x9, 0x8, 0xe2, 0x8000000, 0x3, 0x4, 0x7fffffff, 0x8, 0x7, 0x10000, 0xd35, 0x8, 0x3ff, 0x0, 0xcf, 0x3, 0x4, 0xffffff34, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0xe, 0x5, 0x1ecddd6a, 0xfffffff8, 0x9, 0x7, 0x80, 0x6, 0x3, 0x8, 0x7, 0x1, 0x5, 0xfffffff7, 0xfffffffe, 0x1, 0x7, 0xfffffff9, 0x6, 0x9, 0xca, 0x0, 0xf41, 0x9, 0x9, 0xc5, 0xa904, 0x8, 0xe8f, 0x7ff, 0x1, 0x9, 0x5, 0x6, 0x7fffffff, 0xffffffff, 0x40, 0x800, 0xfffffffe, 0x3, 0xcbd, 0xfffffffc, 0x7, 0xa990, 0x5, 0x6, 0x0, 0x2, 0x0, 0x78ca, 0x8000, 0xba, 0x8f16, 0x43c, 0xfffff6d6, 0x2, 0x5, 0x3, 0xfffffbff, 0x9, 0xd, 0x5, 0x9, 0x80000000, 0x6, 0x6, 0x2, 0x6, 0x4, 0xca, 0x9, 0x4, 0x10, 0x40, 0x5, 0x8, 0x0, 0x4, 0x1, 0x8, 0x0, 0x8000, 0x3, 0x5, 0x1be, 0x1, 0x6, 0xe3da, 0x401, 0x10, 0x4, 0x0, 0x3, 0x5, 0x400, 0xffffff80, 0xdf, 0xfff, 0x7fff, 0x4, 0x3, 0x7, 0x7ff, 0x7, 0x4, 0x2, 0xe, 0xfffffff9, 0x40, 0x14827d5, 0x101, 0x5, 0x7, 0xe1a3, 0x3, 0x8, 0x1, 0x1, 0x4, 0x4, 0x2c2, 0xffffffff, 0x990, 0xec, 0x400, 0x9, 0xa, 0x1000, 0x0, 0x8, 0x5, 0x3, 0x7, 0x2, 0x0, 0x5, 0x2, 0x4, 0xfffffffa, 0x6, 0xfffffffc, 0x6, 0xe3c8, 0x4, 0x1f06, 0x3, 0x2, 0xfffffffa, 0x2, 0x4, 0x10001, 0x0, 0x3, 0x2, 0x8, 0x80000000, 0x4, 0x7, 0x8, 0x1, 0x43d4a2d3, 0x2, 0x8, 0x80, 0x3, 0x5, 0x81, 0x401, 0xd1, 0x1ff, 0xfffffffd, 0x3, 0x101, 0x10001, 0x800, 0x7, 0x8cc, 0x1, 0x9, 0x5, 0x4, 0x4, 0x7, 0x0, 0xfffffffa, 0x4, 0x2, 0x101, 0x3, 0x4, 0x7fff, 0x1de, 0x401, 0xdf, 0xffffea59, 0xfffffff9, 0x4, 0x10001, 0x0, 0x3]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x800, 0x1000, 0x4, 0xfffffffd, 0x3, 0x3, 0x10, 0x400000, 0x360, 0x5fce7fac, 0x32, 0x1, 0x9, 0x3, 0x0, 0x1ff, 0x10000, 0x6, 0x9, 0xff, 0x8, 0x10, 0x0, 0xc42, 0x8, 0x7, 0x8, 0xf, 0x2, 0x9, 0x30000000, 0x3, 0x4692, 0xe, 0x45, 0xb, 0x4, 0x3, 0x10, 0x7, 0x80, 0x314735f7, 0x9, 0x71b4, 0x9, 0x8, 0x80, 0xffa, 0x80000000, 0x8, 0x2, 0x9, 0x698c, 0xaff, 0x9, 0x3, 0x0, 0x3, 0x6, 0x6, 0xed, 0x3, 0x5ef, 0x3, 0x9, 0xffff, 0xe, 0x6, 0xcd, 0x17317b2b, 0x5, 0x7, 0x4, 0x5, 0x7, 0x4, 0x4, 0x7, 0x9, 0x10000, 0x0, 0x490c, 0x8, 0x1, 0x6, 0x7, 0x3f800, 0x0, 0x4, 0x7, 0x12, 0xec1, 0x3, 0x5, 0x40, 0x5d, 0x7fffffff, 0x0, 0x9, 0x4, 0x6, 0x6, 0x3, 0x2, 0x1, 0x758a0000, 0x10001, 0x6, 0x0, 0x0, 0x7, 0x2, 0x0, 0x7fffffff, 0x1, 0x4, 0xfffffff9, 0xfff, 0xe, 0xf, 0x8000, 0x6, 0x8, 0x7, 0x9, 0x2, 0x1, 0x4, 0x6, 0x2a5, 0x1, 0xb0, 0x5, 0x9, 0x3582f3d1, 0x80, 0x1, 0x84b, 0x39, 0x7f, 0x5, 0x8, 0x4, 0x5, 0x12000000, 0xffff0000, 0x7, 0x1000, 0x8, 0x5, 0xce5, 0x3, 0x0, 0x1, 0x8000, 0xf, 0x6e5, 0x47f3, 0x4, 0xce93, 0x4, 0x1, 0x2, 0x4, 0x3, 0x6, 0x5, 0x8, 0x1000, 0x3, 0x8, 0x7, 0x8, 0x40, 0x1, 0x2, 0x9, 0x8000, 0xfffffff8, 0x9, 0xffffffff, 0x2ed7e86a, 0x7, 0x5, 0x7, 0x5, 0x40, 0x2, 0x7, 0x4, 0x9, 0x4, 0x40, 0x0, 0x3de, 0x6, 0x1, 0x8, 0x5, 0x8, 0xd, 0x5, 0xd9d, 0x4, 0x80000000, 0x2, 0x4, 0x80000001, 0x7fff, 0x40, 0x9a, 0x144, 0x2, 0xfffffffb, 0x12, 0x10000, 0x9, 0xe, 0x1, 0x6, 0x100, 0x1, 0x3, 0x80, 0x4, 0x3, 0x9, 0xffffffff, 0x1dc, 0x6, 0xffff, 0x9, 0x2e, 0x0, 0x1, 0x26, 0xfffffbff, 0x2, 0x1000, 0x9, 0x3, 0x3, 0xfe, 0x4, 0xb0, 0x4, 0x527d, 0xd7340000, 0x10, 0x7c90, 0x6, 0xf5, 0x7fffffff, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0x4, 0x6dd80, 0xbfc7, 0x9, {0x3, 0x2, 0xf5af, 0x2e, 0x5, 0x800}, {0x9, 0x0, 0x2, 0xfd34, 0x3, 0xe6}, 0x7fff, 0x0, 0x3e10}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0xfffffffe, 0x200, 0x80000000, {0xb, 0x0, 0x6, 0xfff, 0xfff, 0x2}, {0x1, 0x2, 0x9, 0x0, 0xff32, 0x1}, 0x80000000, 0x6, 0x6}}]]}, {0x2c, 0x6, "c1ea9a851b0198fcf374a993f0e63572bc4224031a256eff1c0c96172b55c3f313537699d458f28f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_ACT={0x364, 0x1, [@m_ife={0x15c, 0xc, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x20000000, 0xff, 0x10}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x1, 0x1, 0x4, 0xb}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0xd1, 0x6, "6f3a63570d19f14a659b51edecc1924578bc0b6860ec9e7c0c9e42bdbadced1871e9d240a87bab7085e2ba08d37cc5f6a1dfeda6cfcbedcf20f35be4f75e817789cdc375bba961a509b834edb5ce94930905aa6a6b85b5c92602aee898fef27e7c82e66ba33aa4441dd5504432efa3f1c6d65fb080fe1fd3ef9309da6d8c344353ca881d13b13c9880b8d67b73e1f94a8d6c30bf1e7fddc1597f382ccba57abf94ea08786df653f1f73506ed4be7d05475165b400ee8117e015329e4ae9b80b2fac510e1089085f297106fa766"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x128, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7ff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0xd2, 0x6, "63e5ac0180310f5afa3996c3dbed58386aa2b14b911188f98ac2d3a1c4fe0e1e25e5ed4601224ace071b27e72c19c5e169280e1eccba1d634ac35fc9ae81962f0003fc3aa112a483a49f794dd872aac60476860f9446d59bd71e9bb96e776755a3dd7d536632dbc201c473a5a62be8b210d6c040cc6b8149c98bcb8df97c17a9a05df13bf2ed453d05948fcd2ab26e05b98ef7f42e6b529c52d366a5984723410a21b5355b1313ae553cc24603934050739ada32bea76769f330bf5e78018369ada9c4bcd1c5fcbfe698b37d1c98"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xdc, 0x15, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xfffffffc, 0x5, 0x3, 0x3}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x5, 0x0, 0x2f80, 0x9}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x952, 0x8, 0x4, 0x0, 0x7fff}, 0xe52}}]}, {0x57, 0x6, "896e3d0cfb5fa988e8bfebe8a4e803735c3da41e672e92bd2ce40610c6679fdc10c0e820096f77bca2bbf00d192c989d693ab6e7b15984161508dfa8ea1d0baae11979416ece77527554dbf0d507d575ef12a9"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x2190}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) madvise(&(0x7f0000267000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/2, 0x2}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000000400)=""/137, 0x89}], 0x0, 0x4}, 0x20) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_NMI(r9, 0xae9a) 4.200236984s ago: executing program 2 (id=2197): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000002c0)={0x8000, 0x1, {0x0, 0x0, 0x2, 0x0, 0x36}, 0x2}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2a, &(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB, @ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208001e0000000401a80008000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = semget(0x1, 0x4, 0x42) semctl$GETVAL(r8, 0x2, 0xc, &(0x7f0000000380)=""/221) shutdown(r6, 0x2) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000480)={r5, 0x1, 0x6, @local}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x11, 0x6, @local}, 0x10) 4.133222425s ago: executing program 3 (id=2198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000300000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001020000000004010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe800000000000000000000000000000000000006969"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 3.486122814s ago: executing program 3 (id=2199): lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x287, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0xff9e}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, &(0x7f0000000140)=0x62) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0xc, 0x8, 0x100, 0x80000001, 0x5, 0x5, 0xfffffff9, 0x80000000}) mbind(&(0x7f00000c7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x4, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3.084362165s ago: executing program 2 (id=2200): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000000c00038004000100046e9300180001801400020076657468315f746f5f687372"], 0x38}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.705938933s ago: executing program 4 (id=2201): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x59240, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$poke(0x4, 0x0, &(0x7f00000000c0), 0x7ff) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flistxattr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000280)=0x8, 0x4) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x81, 0x80000001, &(0x7f0000000180)=0x7}) sendmmsg$inet(r4, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0) sendfile(r4, r3, 0x0, 0x20000023893) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r7, 0x6}, 0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x8, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x4, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0x9, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x67, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x7, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) socket$inet_smc(0x2b, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.69172183s ago: executing program 1 (id=2202): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0403d11, 0x0) recvmmsg$unix(r2, &(0x7f0000001e00), 0x0, 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) sendto$unix(r6, 0x0, 0x0, 0x40000, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000003c40)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="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", 0xfa0}, {0x0}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) cachestat(r6, 0x0, 0x0, 0x0) 2.29636615s ago: executing program 0 (id=2203): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, 0x0) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x82000714) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f0000000080)={&(0x7f00000aa000/0x1000)=nil, &(0x7f000050a000/0x1000)=nil, 0x1000}) getsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, 0x0, &(0x7f0000000040)) inotify_rm_watch(r1, r2) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.202987222s ago: executing program 0 (id=2204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001020000000004010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 2.094666163s ago: executing program 0 (id=2205): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) r7 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x1) unshare(0x42000000) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x53aad4dcc29324f7, &(0x7f0000000200)=0x20, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$isdn(0x22, 0x3, 0x4) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000780)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x0, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x5, 0x1, 0x157, 0x26553de0, 0x4, 0x7810, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x9, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x6, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x10001, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c000000000000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 2.051291069s ago: executing program 3 (id=2206): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x3, 0xb5}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socket(0x2, 0x80805, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101100) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x4, 0x0, 0xfffffff7ffffeffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x3fc3a000) r4 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="61f245cafab21e55697298a0ae35e18d14dd4b6592fa14c0489b858840d12654fb8ddbd1563e581b6a29f56e6127a48c40b95af04e135572e6084e5706e88f02b4440c32e93c31603beb0bc2616de2e7f2a3936b7862df4bc4178710a61eb2e0e7b4ac16cde4477d10653b0d6afde80c950848626b7296ec902f7dc875cbb34a73638a2a48eec75667340826ad84022664c0039de213dc5054b5ecc2ea3c385fe8cdeb814e4eb6262fb39fb637c13a6c1b401f1eafc7a09d49980e60e5caca3520ffeeaf9b20a67d680c7ade66ff7398725ab5bfeed67b48888284c03f6c5331b33f5bd12b10f2c9f8a82549939fbf23caba0dfe1cd962f5e97d9a7dbfed7b25dfcd025cafb3c3b34bde13e2cf3684db786b56929bd381fa5e178b268005224cf7d79103524ec32d22509292501062fd2a907f9eb1a564bcb58da00933f9fb49af10ce55617b9edfad6ca5f9060623e0d6fb73aa68c9b5190dc671968ecbf752962f6e3f0ef6b3ff918603cd511ec00dc67ba004c6469380f5c5390226ccd5ebb934a63c103e4fb6b69c42a6e8e8aa434fd0c787de018fc1e25189ba81be91c80d5e3c9d021baa3cb3abaf755b79e41a8604392c68a018e1750ab6d54608969f3c9273b1a08c3b8d7d9b6f03f4bd3a6c64790617d72a891556cba509f21f992c59db9f78853421fb9ec4ddb2fe782f5da26c038626f26d1e4fda289cea520d44630b041e18ea2ecf56852c25f1ddf3bbaed2c17ba898575431134ee7c27fbf8548dfd63364b8beae267085bfa964786745134ae2b64c4a263f885c198952e795c17e04f0d9e4360de13ae3f2481e6d234bb5c54e03d5e0cb27e5b610ea2c0d85d21bc66e5c861f1e8ba66620cb6f590b2fe294013923b7fc9b170f449e7873bb9aa14cf7421e61feaaeb349a2acb5816a51325f45065b035be05f4498e77eb5e875c03b0c41061caadee14eb2764a5846ba0cab400e1676f533abc56930e5acccf331b0611af1e2947b11820d32e142ca885f4df233678ccbcfa63e5cfa708adcfefa34f059f81f14a5ef2538ef446feec5c78828c618576b18b86c7ee37d8182a8dee51d5dd199cd2ee915f5e25be2885822ab3e5b988786764e611f0bb1214bb9d825c9c4e15c061acf2b4e7361831e0fe9fc409e0004631ab31c42bfd962ba7a0e475f3a91643ce65d2efb94976b14fcf7d21c93bd9208b7bb7a3dfc4444cf14d127401c6892ba93ac786476e0885f028ae6141de817d3517cce625eebb50e2c1e5e64ffc50da4d2eaa605501769e4c1a40fd9da7da178b4bf468942514082773698770ef455ea263fefa4fb258c15afb076c7979296f901e84a2b71eb63cb3d9dfd9abb3e1f8f657070d75541c20476f37e14ca43014ef80b33eeca91ace604ec2051d73ec2f69ffa14bcd79ea577e9676825094606343d31874111fbc535d28fa7a9e379d38226001e241d3515e1d63ba56f1eebe8ea788c4d768f4c4fbbaf834ca3f21460613d768dacf2a27778dc2b4598726646b8c06b6e4d38162720c807724f92bdc9f0b0f5d303d5a5a3998aa270a6760c7651df601bc42c78dd9bd53ee960cf80a30a6b7a1a880d37ff31fb2c9bb0c591bba3ef8228a0506f45065c65b131aff8da8eebbd6754b9e5601632da39c329a229062a94833b23c97371d510a19e2d3b5bc516e3d3c8601495fbeecc16c5c50ba6c435974e8275d372add206964f29997b515f63f50121029e61f47db19fc63b07d0f059ca686e80fb6c294667affaea2daff241bdd0945bfbfe28643136bcea9aa345d482fc3b9d872b482463b92b25f0e5157be3fd8b7a328f327ddfa5c05a6f172deb795f19b9f2091386acb060f170540bfa898057c206d81afd85701b8ee030076bc3782d7d8f6673111baf80818aeca7e5944d91a7f4fce840303867ea18d2b92d74c67157284c787fcfde780fc9a53ae5560e101ef125ce707d34f957072958dc9916492e73a90a10f660a221a7c6730ac0ac01e37d54f058b64f41a46be5320800172e2c9fda248a2964548ddf1f53599027c29ede6079a72d454bcf4403808111d00cb4e3aadd060c333e57c64a70bdfbb572fe228538c82ab427416cdcce1dd643ece610ca7042e2a164d3dfdabb966f1a8fc875cd002920321dac62e25f38cb0031e4de6324b0db402b12c4b0e335898e21b7b326ebbeec0b4bc21ef2dd6f9755e8ff35602d30189ae3efe9c487aec2ce90dbbe790c919b77036240786f3fe9441204b81bc43b5f5cbede75702a1c28ab16d2f578dddb3624f596b5b82e2f26b63966ddc78c8ffa13a23b6c4ee2c741820b9738fe881ddeeeba60fa4221885be55a6fdaa0b90b246f5959b844afd6898bc8c0a75fc45fb968d6e8ea6831d15808b23904355c62a8590d1ba51cdb051bd5ccc1b62a8ca520af60daefae7f7f1dcc90a02ab3af5307fcd5fed9af7d9b192f080be6ded768c6d1d4ea0ba5cc996e5c24b8048eeaea09cabcf1c0488a357280395cfc5394ba160c439dda0a7f4ed182d3f33a4addb1c74d7d797179c633013b24c7e0cd2f4b86904bd1d70a4821c7ff619455953d820e1594c7136e66c260c868776129eddedfdec5ebb0da2e5207215f9c47d7bf74319661311232ca1d108da00df2d07ff5720c474981cb54bd185448ae0e3d9d3194614ae67bdb24122cb2207be610456c35ba6e11429a3a6c266b4bfd905c7534de4fe03ac5063cbb08b3a75137e59e3e8b3fee3989bfb0735ea6f948371a60efff49ea51d5825dd61ef9a0b735fc859c9b003325fe6e3a5fdb8d2cf51e2e9a4c73a8af3a702a83d57d3ddb81d5e9342c97f143ed28228c16a1625d8ba4f0ffddc968f37cb07ea09d35703f920cf4e7a1394b7f18e6f2508a4c90acc92710ddce1e7a9a22ad2d540f669411b263b3e20b07131cc17cf20ae8030de00862bdc33b7eb4f8122c47c833e73aed84199e5d584625570193e18c3d165dae7941d17cc07034a2a5c67c708d6c96f9c5595800dfb65f42c413716b952d42727e7117915b359d1f1c0a64f0ee4b4a0bfbc4e9fc794cd02369e9594acb7805a155ec03505df719aa47e5da38fd3ab736fa76acee10abd1b220b32436260f2ab86f7d0c20fd9b3a1e63b9b3dbd91e7579fec104f5a714f4d0a00a03a1848c58508e8ec27c7fa04d3baf64e1258bd1d72465f3a64c793b3e09a97ca1a2efbac7adb6228ef4588be15afc21c80905a26a22f4db7940b9369051dde4e24008a5f7b943d769578ffa46572435c2076c60096252f3b3b5fe6d8f4579d11c9c71cbf7444c661306fa07dd01e670fa8d24071b09d6e74a268a0d43aef3b7f8e126900bf2e21304785712f327275a2e16febd4faaaacce68b92dcc3c27ca035bb4210408a34103719c82d33c8b43dd9a46cc0420a533b906317fb817ef6164286b8ddacee6191027bfa9ed19746c8401bab93d08d028fd9e2203cccf56b22042c402e8a438ed226112fa71d02c4537d4156a3af28ab4ffcf19309d283902f1e70f42d6713782c5e468a086fdb5c8b3e15de36acc4469ec42ea23a1e5e8e399f4d4be71dd4b4c268db2ab91b68ceafb95cbba36228e59bc0cd7f987a2ad4bbd23b67acabb26a0f4c694ff320f2275042c85ef256aeef306cf5e2803d6c55827011e2f98d0e80819e0039a71cc9c59464f209afa7891a359a3f9efb4bba2a18fd013e8664a6bec7e717ffe2f0c06f7268862696cfae0fe6fab5b1a2921c0e29aaa8638f6a18d1cbaaa4aa0d76f66fa9f44511e631f2fde8024210eb39f545a648c1b77ab04a7d110edbd1dce3939b4dee867df3cb3107fffe5ab22fe5e32b38447d32094259cee40c9a5254df72cbd7a29188d7285facd6e2f5c78ee9d11645cf026e99162da9c2d148373018fe8e052ffccc4e3952e86228d7835a3bc9b4a5c6099dd3e802b059ef2225cbe4664458729c78032e184b61a089870c6b3c2bf2e5df6bd65bc195e1ccbe58b9a6dde49897ab59dd269a737f04e37e34d3d10c3b01c744a742d52da1bceca63fcbecc136a80bf3ca1df2f226de073b67a0b646674744acd14d5dab9929f2cb804637ebf211f2b3a8b959723808904e9044deb551b2613c1e501385693e7abff809b641c02107187cf1bd1c9571a9023942f0c78c467611193a7e6900eefc49fded206630336cd8d2849731b73798d9258be75b843f051679e6bd541c78457db5470d3d494f333a81b3ed26b57f9f7726275c12f192f4b1d9615c7fe3e0bb22fb47ae1effea3bd2a0a379593a25f933c8af1f14d08bd8ca692c9af3eaee136664e1829204c171ad6e50fa928a3c1f5ee2c14f984884c2cb0256acfa6172d030940f3f9f99443c730b0f070192d36fb83b3d470cf3098bd8b0f09eb6d1b58efbde00305c3a50e00df17b9963f1c06f26b48e4a166073f3f3119ed2b56af1f8c056c07f65ffc3f2e81efa22f97c66998b35bb2af3ce2d89af5f5b1368ce9148937f826c3ef81a116382bd3f53e26f210aed545f38c1e21400957b824eaa95bb401ef308852c7e5015b89244a403308de785a81739634161e33d79435f18cf378bd9f5eb59b40a55abe627f6944ec239f80fc15526e7f1b2c2949a85b8c15a299cee1c86f61746a4eae3dc5f347225f1965cf09d4457b1a1b692fb108a681607d6276c4a6cf35709dc95aa249ae245a0435c481cbae672037aefc82fee9f249e643e658d173aea1d99e361f383dd674a5f2a6525755eaba2d59928a8d9e2eb1aafd129cb4c2cefd5da0213d900efa938e937a7c4e62243eeb3f5f43be35323f63b0b1ac2a298fcfbf71129da3465e488f52b82ec725bdf2fd943e09004c62abf5332139fb38b797756c5e9de926da21f8d77408ea740cf5ec8a657eae110df0550c6ca2585e0cdd5de1e986da91ca1d112f0d5397fdc612b2163164dedddf60c1e3dcd94195b65f50a9c86fb7b67b91dc7c0b8ab3d1c254663fc09ad5fd2c97221f1c6032557ff0a2fc441b71b3a6a6c52efded4133c8d57ce15523550237e7fef838d66cd77c48a743b2a2cc7c1f0ef3d520eb7ce9c086d73c352fe311337b3558a6985660a19ac852edceed56e3e9bb49b8a788eaa3f9be70b3fd1e764888a35a6c874256f9a8e53790281e30fdc1ed35ef03e9bd805ba3ef6ad07c3eef31fadcaba39c9b793e15d04f096c62f6282e8fc4aa31b275bc7fe5dce144ba736151d046b1285b698422ae84ae222e835e2ea80791082cd1742385764a0b047fcadfd8da7acc8f820dd50444fbbecb18ff5c9df10e08609d4b0f76ce14dc8ab056227e3604b3933df593a1b961fba44678131c958b15246e5054465bfffba1cb05c8d4a3ce7a3473d88c9213b5d8fcef3c46f8650fec5077bffaf9b469051b0e5aa7b55f863f0919ca310505a063890b1560597aac6ca1ed9a7c7ed8e894597098cc9333d687bd8e1b4539bb9f74d034d2fc316ef806d67bcec412fb485a03f87cb89d122809fc55f1a7fb35a74440d661ee736340cdbe70141214e899cf9f907a2463f995d21e2d1d25fe92b47ea198f467bf5e775104bbb0ed11534ef25eabdd6b14e8961ee0534f5ab504151f1b2f1853f7229e07131696deb538114d51df2d5c4145bb53d7292e1544c3075806980d5d595528dcf1ce6d4d35470331f00a7bb00e4a1b38982f5dbd2114715a3bd23fa9dbadfe2970853a89d1abb9ae5d4f3bab355691c3ccbbe4bcb2e44425d6c2c3dc3ddd8d43872a6063f111c1c7e6ed4449b39bbd6df92ed4a0e4808ffad0391f89b509f683061bcbe06369e47d43e9", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000000)={r5, 0x1000, &(0x7f0000002a80)=""/4096}) syz_io_uring_setup(0x5787, &(0x7f00000002c0)={0x0, 0x918d, 0x40, 0x1, 0x20b}, &(0x7f0000000240), &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000003c0)={0x1, r6, 0xa18, 0x7, 0x6, 0x0, 0x3, 0x5, 0x2}) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x2) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 1.792438954s ago: executing program 4 (id=2207): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) close(r4) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) write$UHID_INPUT(r1, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 649.461267ms ago: executing program 2 (id=2208): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000000000018081800000000000000d400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x64, &(0x7f000000cf3d)=""/195}, 0x23) 393.185498ms ago: executing program 2 (id=2209): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000400000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001020000000004010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe800000000000000000000000000000000000006969"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 268.741796ms ago: executing program 2 (id=2210): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@fragment={0x1, 0x0, 0x3, 0x1, 0x0, 0x2, 0x65}], {0x4e21, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x7, 0x100, @val=0x80}}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x24, 0x9, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 232.193432ms ago: executing program 0 (id=2211): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x20}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x5, 0x0, 0x8, 0xfffffff8}, 0x10) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x10003}}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7}, 0x9c) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) 105.987121ms ago: executing program 2 (id=2212): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYBLOB="266d8e6b6ac7911149fc5a52e200ee5d3e68df399aa3554f32fe45191dea46dc5b211968fe5f46e92c2b02a53fce139180e8e41a9197f0e37b56c90478e62ba46030cc8870f1a84031ba1d64b43bbc13ef4100bc425534157e41f6d3b5cf8c7eb4cba213c771a29de5ddea56143edb33", @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) r0 = socket(0x10, 0x803, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938b, 0x200, 0x0, 0xc0}, &(0x7f0000000080), &(0x7f00000001c0)) (async) r3 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938b, 0x200, 0x0, 0xc0}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x705, 0x41e3, 0x0, 0x0, 0x5d) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r6, 0x0, 0xeffd) (async) read$qrtrtun(r6, 0x0, 0xeffd) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xf, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x4) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x7a, r9}) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x7a, r9}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast2, 0x4}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 56.896156ms ago: executing program 0 (id=2213): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) close(r4) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) write$UHID_INPUT(r1, &(0x7f0000000000)={0x7, {"a2e3ad21ed0d52f91b5d330987f70e06d038e7ff7fc6e5539b0d47078b089b3907356d090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e470dea05918b41243513f000800000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14d9fdb8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a19000000000000006f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44400009a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc01008cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c16c02ed4b5d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6b14effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6815d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3c115c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc248850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4649820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948998cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2fd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff8f0104000000000000df72279fdb0d2b9e936e5a983c12fded79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d3700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa6e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3fec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) 0s ago: executing program 1 (id=2214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): [ T7786] usb 3-1: Using ep0 maxpacket: 16 [ 425.614076][ T7786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.631187][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 425.640616][ T7786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.651430][ T7786] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 425.680202][ T7786] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 425.703186][T11868] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 425.714617][ T7786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.723459][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 425.735167][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 425.737052][ T5954] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 425.758410][ T7786] usb 3-1: config 0 descriptor?? [ 425.771179][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 425.780488][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 425.896979][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 425.903499][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 425.922129][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.934512][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 425.945350][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 425.958837][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 425.977766][ T5954] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 425.989093][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.000065][ T5954] usb 2-1: config 0 descriptor?? [ 426.020506][ T51] Bluetooth: hci5: urb ffff88814d860f00 submission failed (90) [ 426.413633][ T7784] usb 2-1: USB disconnect, device number 78 [ 428.056418][T11883] bond5: entered promiscuous mode [ 428.066729][T11883] 8021q: adding VLAN 0 to HW filter on device bond5 [ 428.106870][T11884] 8021q: adding VLAN 0 to HW filter on device bond6 [ 428.119111][T11884] bond6: entered promiscuous mode [ 428.129023][T11884] bond5: (slave bond6): Enslaving as an active interface with an up link [ 428.912025][ T7786] usbhid 3-1:0.0: can't add hid device: -71 [ 428.939578][ T7786] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 428.964880][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1621'. [ 429.000415][ T7786] usb 3-1: USB disconnect, device number 80 [ 429.062870][T11899] bond5 (unregistering): Released all slaves [ 429.269169][ T5954] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 429.387026][ T7786] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 429.547304][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 429.558058][ T5954] usb 4-1: config 5 has an invalid interface number: 161 but max is 3 [ 429.566600][ T5954] usb 4-1: config 5 has an invalid interface number: 221 but max is 3 [ 429.608004][ T5954] usb 4-1: config 5 has an invalid interface number: 119 but max is 3 [ 429.634014][ T5954] usb 4-1: config 5 has an invalid interface number: 138 but max is 3 [ 429.647513][ T5954] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 429.656338][ T5954] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 429.670746][ T5954] usb 4-1: config 5 has no interface number 0 [ 429.674666][ T7786] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 429.677258][ T5954] usb 4-1: config 5 has no interface number 1 [ 429.707163][ T7786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.726427][ T7786] usb 3-1: Product: syz [ 429.732506][ T5954] usb 4-1: config 5 has no interface number 2 [ 429.739178][ T7786] usb 3-1: Manufacturer: syz [ 429.745011][ T7786] usb 3-1: SerialNumber: syz [ 429.771615][ T5954] usb 4-1: config 5 has no interface number 3 [ 429.774023][ T7786] usb 3-1: config 0 descriptor?? [ 429.794682][ T7786] ch341 3-1:0.0: ch341-uart converter detected [ 429.906287][ T5954] usb 4-1: config 5 interface 161 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 429.907165][ T7784] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 429.921231][ T5954] usb 4-1: config 5 interface 161 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 429.957097][ T5954] usb 4-1: config 5 interface 161 altsetting 6 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 429.977281][ T5954] usb 4-1: config 5 interface 221 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 1024 [ 429.994027][ T5954] usb 4-1: config 5 interface 221 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 430.016984][ T5954] usb 4-1: config 5 interface 119 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 430.028408][ T5954] usb 4-1: config 5 interface 119 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 430.040091][ T5954] usb 4-1: config 5 interface 119 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 430.106601][ T5954] usb 4-1: config 5 interface 119 altsetting 255 endpoint 0xB has invalid wMaxPacketSize 0 [ 430.157200][ T5954] usb 4-1: config 5 interface 119 altsetting 255 has a duplicate endpoint with address 0xD, skipping [ 430.168325][ T5954] usb 4-1: config 5 interface 119 altsetting 255 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 430.179911][ T5954] usb 4-1: config 5 interface 119 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 430.181502][ T7784] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 430.191070][ T5954] usb 4-1: config 5 interface 119 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 430.191103][ T5954] usb 4-1: config 5 interface 119 altsetting 255 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 430.191148][ T5954] usb 4-1: config 5 interface 138 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 430.191175][ T5954] usb 4-1: config 5 interface 138 altsetting 3 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 430.191203][ T5954] usb 4-1: config 5 interface 138 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 430.191227][ T5954] usb 4-1: config 5 interface 138 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 430.191249][ T5954] usb 4-1: config 5 interface 138 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 430.191271][ T5954] usb 4-1: config 5 interface 138 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 430.191293][ T5954] usb 4-1: config 5 interface 138 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 430.191314][ T5954] usb 4-1: config 5 interface 138 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 430.191336][ T5954] usb 4-1: config 5 interface 138 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 430.333644][ T7784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.350174][ T7784] usb 2-1: Product: syz [ 430.354503][ T7784] usb 2-1: Manufacturer: syz [ 430.360710][ T7784] usb 2-1: SerialNumber: syz [ 430.368639][T11897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.372008][ T7784] r8152-cfgselector 2-1: Unknown version 0x0000 [ 430.399846][ T7784] r8152-cfgselector 2-1: config 0 descriptor?? [ 430.400072][T11897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.522480][ T7786] usb 3-1: failed to send control message: -71 [ 430.539983][ T7786] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 430.628749][ T7786] usb 3-1: USB disconnect, device number 81 [ 430.640686][T11906] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 430.709938][ T5954] usb 4-1: config 5 interface 138 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 430.719658][ T7786] ch341 3-1:0.0: device disconnected [ 430.773623][ T5954] usb 4-1: config 5 interface 138 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 430.820183][ T5954] usb 4-1: config 5 interface 138 altsetting 3 has 13 endpoint descriptors, different from the interface descriptor's value: 14 [ 430.848732][ T5954] usb 4-1: config 5 interface 161 has no altsetting 0 [ 430.860975][ T5954] usb 4-1: config 5 interface 221 has no altsetting 0 [ 430.869031][ T5954] usb 4-1: config 5 interface 119 has no altsetting 0 [ 430.875920][ T5954] usb 4-1: config 5 interface 138 has no altsetting 0 [ 430.890384][ T5954] usb 4-1: New USB device found, idVendor=182d, idProduct=096b, bcdDevice=ce.35 [ 430.899850][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.907994][ T5954] usb 4-1: Manufacturer: ﳿ [ 430.912698][ T5954] usb 4-1: SerialNumber: syz [ 430.932494][ T7786] r8152-cfgselector 2-1: USB disconnect, device number 79 [ 430.940044][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 430.960032][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'. [ 431.236241][ T5954] usb 4-1: Found UVC 0.00 device (182d:096b) [ 431.246692][T11926] pim6reg: entered allmulticast mode [ 431.264906][ T5954] usb 4-1: No valid video chain found. [ 431.273556][T11925] loop7: detected capacity change from 0 to 7 [ 431.284567][ T5954] usb 4-1: USB disconnect, device number 78 [ 431.610154][T11925] Dev loop7: unable to read RDB block 7 [ 431.615831][T11925] loop7: unable to read partition table [ 431.624607][T11925] loop7: partition table beyond EOD, truncated [ 431.639144][T11925] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 432.692308][ T5955] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 432.873374][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.883657][ T5955] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 432.916520][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.956612][ T5955] usb 4-1: config 0 descriptor?? [ 433.391949][ T5955] hid (null): report_id 0 is invalid [ 433.404286][ T5955] logitech-djreceiver 0003:046D:C71F.0011: report_id 0 is invalid [ 433.421069][ T5955] logitech-djreceiver 0003:046D:C71F.0011: item 0 1 1 8 parsing failed [ 433.627899][ T5955] logitech-djreceiver 0003:046D:C71F.0011: logi_dj_probe: parse failed [ 433.637255][ T5955] logitech-djreceiver 0003:046D:C71F.0011: probe with driver logitech-djreceiver failed with error -22 [ 433.694631][ T5955] usb 4-1: USB disconnect, device number 79 [ 434.220360][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 434.247258][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 434.517301][T11961] GUP no longer grows the stack in syz.3.1640 (11961): 200000005000-200000008000 (200000004000) [ 434.602211][T11961] CPU: 0 UID: 0 PID: 11961 Comm: syz.3.1640 Not tainted syzkaller #0 PREEMPT(full) [ 434.602255][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.602270][T11961] Call Trace: [ 434.602278][T11961] [ 434.602287][T11961] dump_stack_lvl+0x189/0x250 [ 434.602320][T11961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.602357][T11961] ? __pfx__printk+0x10/0x10 [ 434.602384][T11961] ? find_vma+0xe7/0x160 [ 434.602418][T11961] fixup_user_fault+0x661/0x720 [ 434.602445][T11961] fault_in_user_writeable+0x72/0xe0 [ 434.602470][T11961] futex_lock_pi+0x773/0xa90 [ 434.602502][T11961] ? __pfx_futex_lock_pi+0x10/0x10 [ 434.602530][T11961] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 434.602568][T11961] ? futex_private_hash_put+0x4b/0x280 [ 434.602592][T11961] ? __pfx_futex_wake_mark+0x10/0x10 [ 434.602624][T11961] ? __pfx_futex_wake+0x10/0x10 [ 434.602654][T11961] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 434.602687][T11961] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 434.602719][T11961] do_futex+0x292/0x420 [ 434.602744][T11961] ? lock_release+0x4b/0x3e0 [ 434.602775][T11961] ? __pfx_do_futex+0x10/0x10 [ 434.602800][T11961] ? ppp_ioctl+0x145a/0x19a0 [ 434.602823][T11961] __se_sys_futex+0x36f/0x400 [ 434.602851][T11961] ? __pfx___se_sys_futex+0x10/0x10 [ 434.602877][T11961] ? rcu_is_watching+0x15/0xb0 [ 434.602901][T11961] ? __x64_sys_futex+0x21/0xf0 [ 434.602927][T11961] do_syscall_64+0xfa/0x3b0 [ 434.602958][T11961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.602978][T11961] ? clear_bhb_loop+0x60/0xb0 [ 434.603001][T11961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.603021][T11961] RIP: 0033:0x7ff4f798ebe9 [ 434.603050][T11961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.603068][T11961] RSP: 002b:00007ff4f87f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 434.603091][T11961] RAX: ffffffffffffffda RBX: 00007ff4f7bb5fa0 RCX: 00007ff4f798ebe9 [ 434.603107][T11961] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 434.603121][T11961] RBP: 00007ff4f7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 434.603135][T11961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.603147][T11961] R13: 00007ff4f7bb6038 R14: 00007ff4f7bb5fa0 R15: 00007ff4f7cdfa28 [ 434.603170][T11961] [ 434.838122][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.378129][T11978] netlink: 'syz.4.1641': attribute type 13 has an invalid length. [ 435.457091][ T7780] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 435.573912][ T30] audit: type=1326 audit(1755808113.431:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f798ebe9 code=0x7ffc0000 [ 435.633309][ T30] audit: type=1326 audit(1755808113.431:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f798ebe9 code=0x7ffc0000 [ 435.696858][ T7780] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 435.710188][ T7780] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.733247][T11978] tipc: Resetting bearer [ 435.753592][ T30] audit: type=1326 audit(1755808113.431:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7ff4f798ebe9 code=0x7ffc0000 [ 435.780361][ T7780] usb 3-1: config 0 has no interface number 0 [ 435.803170][T11978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.820811][ T7780] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 435.852581][ T7780] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 435.870466][ T30] audit: type=1326 audit(1755808113.431:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f798ebe9 code=0x7ffc0000 [ 435.917069][ T7780] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 436.011464][ T7780] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 436.024960][ T30] audit: type=1326 audit(1755808113.431:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4f798ebe9 code=0x7ffc0000 [ 436.089087][ T30] audit: type=1326 audit(1755808113.431:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f798ebe9 code=0x7ffc0000 [ 436.090500][ T7780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.254725][ T7780] usb 3-1: config 0 descriptor?? [ 436.261152][ T30] audit: type=1326 audit(1755808113.431:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4f798d550 code=0x7ffc0000 [ 436.284304][T11974] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 436.393942][ T7780] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 436.442751][ T30] audit: type=1326 audit(1755808113.431:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f798ebe9 code=0x7ffc0000 [ 436.482351][ T30] audit: type=1326 audit(1755808113.431:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4f798d550 code=0x7ffc0000 [ 436.564132][T11968] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1643'. [ 436.597498][ T30] audit: type=1326 audit(1755808113.431:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11981 comm="syz.3.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f798ebe9 code=0x7ffc0000 [ 436.957015][ T5955] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 437.303715][ T5955] usb 2-1: too many configurations: 239, using maximum allowed: 8 [ 437.328848][ T5955] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 437.339509][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.349065][ T5955] usb 2-1: Product: syz [ 437.353428][ T5955] usb 2-1: Manufacturer: syz [ 437.360502][ T5955] usb 2-1: SerialNumber: syz [ 437.400746][ T5955] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 437.421677][ T7791] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 437.507263][ T36] usb 3-1: Failed to submit usb control message: -110 [ 437.521771][ T36] usb 3-1: unable to send the bmi data to the device: -110 [ 437.540051][ T36] usb 3-1: unable to get target info from device [ 437.586489][ T36] usb 3-1: could not get target info (-110) [ 437.631801][ T36] usb 3-1: could not probe fw (-110) [ 437.868993][ T5955] usb 2-1: USB disconnect, device number 80 [ 437.930905][ T7780] usb 3-1: USB disconnect, device number 82 [ 438.125566][T12017] kvm: pic: non byte write [ 438.357015][ T7780] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 438.457097][ T7791] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 438.478786][ T7791] ath9k_htc: Failed to initialize the device [ 438.487587][ T7786] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 438.507227][ T7780] usb 3-1: Using ep0 maxpacket: 32 [ 438.515019][ T7780] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 438.533786][ T7780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 438.603840][ T5955] usb 2-1: ath9k_htc: USB layer deinitialized [ 438.663436][ T7786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.689431][ T7786] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.741369][ T7780] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 438.893741][ T7780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.948322][ T7786] usb 4-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 438.960583][ T7780] usb 3-1: Product: syz [ 438.964880][ T7780] usb 3-1: Manufacturer: syz [ 438.976636][ T7780] usb 3-1: SerialNumber: syz [ 438.986425][ T7786] usb 4-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 439.018404][ T7780] usb 3-1: config 0 descriptor?? [ 439.031219][T12040] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1663'. [ 439.039166][ T7780] usb 3-1: no audio or video endpoints found [ 439.057091][ T7786] usb 4-1: config 1 interface 1 has no altsetting 0 [ 439.126246][ T7786] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.138793][ T7786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.185830][ T7786] usb 4-1: Product: syz [ 439.194916][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1666'. [ 439.200277][ T7786] usb 4-1: Manufacturer: syz [ 439.216810][ T7786] usb 4-1: SerialNumber: syz [ 439.245951][ T7786] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 439.477008][ T7791] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 439.518787][ T5955] usb 4-1: USB disconnect, device number 80 [ 439.526505][ T9] usb 3-1: USB disconnect, device number 83 [ 439.671950][ T7791] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.702054][ T7791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 36, changing to 9 [ 439.717767][ T7791] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.776246][ T7791] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.795582][ T7791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.831619][ T7791] usb 2-1: config 0 descriptor?? [ 440.277447][ T7791] hid_parser_main: 4 callbacks suppressed [ 440.277464][ T7791] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x4 [ 440.293098][ T7791] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x7 [ 440.305333][ T7791] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 440.313930][ T7791] plantronics 0003:047F:FFFF.0012: item fetching failed at offset 6/15 [ 440.323969][ T7791] plantronics 0003:047F:FFFF.0012: parse failed [ 440.333162][ T7791] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 440.343349][T12073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1672'. [ 440.484557][ T7791] usb 2-1: USB disconnect, device number 81 [ 440.916249][T12099] netlink: 'syz.0.1679': attribute type 21 has an invalid length. [ 440.940266][T12099] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1679'. [ 440.967447][T12099] netlink: 'syz.0.1679': attribute type 4 has an invalid length. [ 440.997339][T12099] netlink: 'syz.0.1679': attribute type 3 has an invalid length. [ 441.006843][T12099] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1679'. [ 441.237081][ T7786] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 441.364585][ T5951] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 441.389029][ T7786] usb 5-1: device descriptor read/64, error -71 [ 441.467159][ T7780] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 441.540909][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.540945][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.540970][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.541007][ T5951] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.541030][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.542797][ T5951] usb 4-1: config 0 descriptor?? [ 441.678405][ T7786] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 441.716618][ T7780] usb 2-1: Using ep0 maxpacket: 8 [ 441.724525][ T7780] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 441.735244][ T7780] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 441.748247][ T7780] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 441.758406][ T7780] usb 2-1: config 127 has no interface number 0 [ 441.764861][ T7780] usb 2-1: config 127 interface 171 has no altsetting 0 [ 441.777560][ T7780] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 441.786851][ T7780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.796567][ T7780] usb 2-1: Product: syz [ 441.801422][ T7780] usb 2-1: Manufacturer: syz [ 441.806139][ T7780] usb 2-1: SerialNumber: syz [ 441.817289][ T7786] usb 5-1: device descriptor read/64, error -71 [ 441.947292][ T7786] usb usb5-port1: attempt power cycle [ 442.047222][ T7791] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 442.094945][ T5951] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 442.210275][ T7791] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 442.222111][ T7791] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.237835][ T7791] usb 3-1: config 0 interface 0 has no altsetting 0 [ 442.250473][ T7791] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 442.259800][ T7791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.271402][ T7791] usb 3-1: config 0 descriptor?? [ 442.277377][T12131] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 442.309068][ T7786] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 442.337877][ T7786] usb 5-1: device descriptor read/8, error -71 [ 442.587033][ T7786] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 442.617764][ T7786] usb 5-1: device descriptor read/8, error -71 [ 442.689536][ T7791] cypress 0003:04B4:0001.0014: item fetching failed at offset 0/3 [ 442.699772][ T7791] cypress 0003:04B4:0001.0014: parse failed [ 442.712991][ T7791] cypress 0003:04B4:0001.0014: probe with driver cypress failed with error -22 [ 442.727342][ T7786] usb usb5-port1: unable to enumerate USB device [ 442.891143][ T7791] usb 3-1: USB disconnect, device number 84 [ 443.969746][ T5951] usb 4-1: USB disconnect, device number 81 [ 444.135158][T12150] netlink: 'syz.0.1691': attribute type 21 has an invalid length. [ 444.145714][T12150] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1691'. [ 444.326694][T12150] netlink: 'syz.0.1691': attribute type 4 has an invalid length. [ 444.335317][T12150] netlink: 'syz.0.1691': attribute type 3 has an invalid length. [ 444.345021][T12150] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1691'. [ 444.411537][T12159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.792704][ T7780] usb 2-1: USB disconnect, device number 82 [ 445.161745][T12172] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 445.182437][T12172] team0: Port device batadv1 added [ 445.940423][T12177] loop6: detected capacity change from 0 to 1 [ 445.947929][T12177] Dev loop6: unable to read RDB block 1 [ 445.953554][T12177] loop6: unable to read partition table [ 445.959805][T12177] loop6: partition table beyond EOD, truncated [ 445.987147][T12177] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 446.037110][ T7791] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 446.207173][ T7791] usb 2-1: Using ep0 maxpacket: 16 [ 446.216709][ T7791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.227846][ T7791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.246970][ T7791] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 446.533056][ T7791] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 446.549574][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.556082][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.574225][ T7791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.589786][ T7791] usb 2-1: config 0 descriptor?? [ 448.237510][T12208] netlink: 'syz.3.1704': attribute type 21 has an invalid length. [ 448.246264][T12208] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1704'. [ 448.256571][T12208] netlink: 'syz.3.1704': attribute type 4 has an invalid length. [ 448.264696][T12208] netlink: 'syz.3.1704': attribute type 3 has an invalid length. [ 448.274975][T12208] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1704'. [ 448.967287][ T7780] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 449.187269][ T7780] usb 3-1: device descriptor read/64, error -71 [ 449.194512][ T7791] usbhid 2-1:0.0: can't add hid device: -71 [ 449.203736][ T7791] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 449.224284][ T7791] usb 2-1: USB disconnect, device number 83 [ 449.342175][T12228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1710'. [ 449.426995][ T7780] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 449.627078][ T7780] usb 3-1: device descriptor read/64, error -71 [ 449.787140][ T7780] usb usb3-port1: attempt power cycle [ 449.860186][T12239] netlink: 'syz.0.1712': attribute type 1 has an invalid length. [ 449.992976][ T7784] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 450.131058][ T7780] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 450.157622][ T7780] usb 3-1: device descriptor read/8, error -71 [ 450.170188][ T7784] usb 2-1: config 0 has no interfaces? [ 450.178881][ T7784] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 450.188701][ T7784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.341167][ T7784] usb 2-1: Product: syz [ 450.349687][ T7784] usb 2-1: Manufacturer: syz [ 450.365699][ T7784] usb 2-1: SerialNumber: syz [ 450.381234][ T7784] usb 2-1: config 0 descriptor?? [ 450.396997][ T7780] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 450.437446][ T7780] usb 3-1: device descriptor read/8, error -71 [ 450.547360][ T7780] usb usb3-port1: unable to enumerate USB device [ 450.937197][T12269] netlink: 'syz.3.1719': attribute type 1 has an invalid length. [ 451.025690][T12269] bond6: entered promiscuous mode [ 451.031449][T12269] 8021q: adding VLAN 0 to HW filter on device bond6 [ 451.130665][T12272] 8021q: adding VLAN 0 to HW filter on device bond7 [ 451.140666][T12272] bond7: entered promiscuous mode [ 451.149526][T12272] bond6: (slave bond7): Enslaving as an active interface with an up link [ 451.945321][T12284] loop2: detected capacity change from 0 to 7 [ 451.955684][ T5871] Dev loop2: unable to read RDB block 7 [ 451.962375][ T5871] loop2: unable to read partition table [ 451.971284][ T5871] loop2: partition table beyond EOD, truncated [ 452.011628][T12284] Dev loop2: unable to read RDB block 7 [ 452.029196][T12284] loop2: unable to read partition table [ 452.035612][T12284] loop2: partition table beyond EOD, truncated [ 452.050130][T12284] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 452.354337][ T7780] usb 2-1: USB disconnect, device number 84 [ 452.367339][ T5955] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 452.537110][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 452.552572][ T5955] usb 3-1: config 253 has no interfaces? [ 452.560137][ T5955] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0062, bcdDevice=fa.f7 [ 452.571148][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.593652][ T5955] usb 3-1: Product: syz [ 452.602774][ T5955] usb 3-1: Manufacturer: syz [ 452.607819][ T5955] usb 3-1: SerialNumber: syz [ 452.747037][ T7780] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 452.798406][T12298] futex_wake_op: syz.3.1726 tries to shift op by 32; fix this program [ 452.908980][ T7780] usb 2-1: Using ep0 maxpacket: 8 [ 452.917024][ T7780] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 452.926525][ T7780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.937362][ T7780] usb 2-1: Product: syz [ 452.941632][ T7780] usb 2-1: Manufacturer: syz [ 452.946231][ T7780] usb 2-1: SerialNumber: syz [ 453.001255][ T7780] usb 2-1: config 0 descriptor?? [ 453.043201][ T7780] gspca_main: se401-2.14.0 probing 047d:5003 [ 453.597038][ T7780] usb 2-1: reset high-speed USB device number 85 using dummy_hcd [ 453.898624][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1731'. [ 454.065064][ T7780] gspca_se401: read req failed req 0x06 error -71 [ 454.078012][ T7780] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 454.096250][ T7780] usb 2-1: USB disconnect, device number 85 [ 454.507371][T12318] netlink: 'syz.0.1734': attribute type 1 has an invalid length. [ 454.594683][T12318] bond14: entered promiscuous mode [ 454.616386][T12318] 8021q: adding VLAN 0 to HW filter on device bond14 [ 454.690228][T12323] 8021q: adding VLAN 0 to HW filter on device bond15 [ 454.704315][T12323] bond15: entered promiscuous mode [ 454.710686][T12323] bond14: (slave bond15): Enslaving as an active interface with an up link [ 454.887686][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 455.047133][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 455.054972][ T9] usb 2-1: config 6 has an invalid interface number: 113 but max is 0 [ 455.077007][ T5955] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 455.089825][ T9] usb 2-1: config 6 has no interface number 0 [ 455.107020][ T9] usb 2-1: config 6 interface 113 has no altsetting 0 [ 455.172576][ T7791] usb 3-1: USB disconnect, device number 89 [ 455.198185][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 455.211729][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.249138][ T9] usb 2-1: Product: syz [ 455.253437][ T9] usb 2-1: Manufacturer: syz [ 455.268220][ T9] usb 2-1: SerialNumber: syz [ 455.277181][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 455.351544][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 455.379083][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 455.401343][ T5955] usb 4-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 455.410846][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.444224][ T5955] usb 4-1: Product: syz [ 455.453188][ T5955] usb 4-1: Manufacturer: syz [ 455.463315][ T5955] usb 4-1: SerialNumber: syz [ 455.475779][ T5955] usb 4-1: config 0 descriptor?? [ 455.492624][ T9] usb-storage 2-1:6.113: USB Mass Storage device detected [ 455.565975][ T9] usb-storage 2-1:6.113: Quirks match for vid 03f0 pid 070c: 8000 [ 455.587027][ T7791] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 455.620421][ T9] usb 2-1: USB disconnect, device number 86 [ 455.682913][T12331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1739'. [ 455.738882][ T7791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 455.750056][ T7791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.761606][ T7791] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 455.770798][ T7791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.781886][ T5955] usb 4-1: USB disconnect, device number 82 [ 455.798857][ T7791] usb 3-1: config 0 descriptor?? [ 456.385074][ T7791] steelseries 0003:1038:1410.0015: unbalanced collection at end of report description [ 456.403414][ T7791] steelseries 0003:1038:1410.0015: parse failed [ 456.411261][ T7791] steelseries 0003:1038:1410.0015: probe with driver steelseries failed with error -22 [ 456.585721][ T9] usb 3-1: USB disconnect, device number 90 [ 456.627023][ T5951] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 456.767105][ T5951] usb 2-1: device descriptor read/64, error -71 [ 456.786987][ T7791] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 456.971081][ T7791] usb 4-1: unable to get BOS descriptor or descriptor too short [ 457.047892][ T5951] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 457.116988][ T7791] usb 4-1: config 3 has an invalid interface number: 19 but max is 0 [ 457.125259][ T7791] usb 4-1: config 3 has an invalid interface number: 4 but max is 0 [ 457.154343][ T7791] usb 4-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 457.174045][ T7791] usb 4-1: config 3 has no interface number 0 [ 457.183989][ T7791] usb 4-1: config 3 has no interface number 1 [ 457.200052][ T7791] usb 4-1: config 3 interface 19 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 457.248625][T12363] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1748'. [ 457.253727][ T7791] usb 4-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 457.311637][ T7791] usb 4-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 457.322600][ T7791] usb 4-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 457.334688][ T7791] usb 4-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 457.346118][ T7791] usb 4-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 457.347874][ T5951] usb 2-1: device descriptor read/64, error -71 [ 457.365800][ T7791] usb 4-1: config 3 interface 19 has no altsetting 0 [ 457.390220][ T7791] usb 4-1: config 3 interface 4 has no altsetting 0 [ 457.404785][ T7791] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5 [ 457.416764][ T7791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.429433][ T7791] usb 4-1: Product: syz [ 457.433618][ T7791] usb 4-1: Manufacturer: syz [ 457.439360][ T7791] usb 4-1: SerialNumber: syz [ 457.477442][ T5951] usb usb2-port1: attempt power cycle [ 457.729084][ T7791] pl2303 4-1:3.19: required endpoints missing [ 457.751065][ T7791] pl2303 4-1:3.4: required interrupt-in endpoint missing [ 457.763134][ T7791] usb 4-1: USB disconnect, device number 83 [ 457.837150][ T7784] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 457.889524][ T5951] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 457.930131][ T5951] usb 2-1: device descriptor read/8, error -71 [ 458.090838][ T7784] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 458.101427][ T7784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.111248][ T7784] usb 5-1: config 0 descriptor?? [ 458.147452][ T7784] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 458.207134][ T5951] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 458.227809][ T5951] usb 2-1: device descriptor read/8, error -71 [ 458.337293][ T5951] usb usb2-port1: unable to enumerate USB device [ 458.570928][ T7784] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 459.071592][T12395] syzkaller0: entered promiscuous mode [ 459.079461][T12395] syzkaller0: entered allmulticast mode [ 459.162183][T12401] loop2: detected capacity change from 0 to 7 [ 459.170683][T12401] Dev loop2: unable to read RDB block 7 [ 459.176313][T12401] loop2: unable to read partition table [ 459.182715][T12401] loop2: partition table beyond EOD, truncated [ 459.189500][T12401] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 459.277071][ T5951] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 459.487275][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 459.536716][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.549064][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.567713][ T7784] gspca_cpia1: usb_control_msg 03, error -71 [ 459.577612][ T5951] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 459.586769][ T7784] cpia1 5-1:0.0: unexpected systemstate: 00 [ 459.592814][ T5951] usb 3-1: config 0 has no interface number 0 [ 459.617497][ T7784] usb 5-1: USB disconnect, device number 58 [ 459.624210][ T5951] usb 3-1: config 0 interface 237 has no altsetting 0 [ 459.644926][ T5951] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 459.654148][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.834297][ T5951] usb 3-1: Product: syz [ 459.881971][ T5951] usb 3-1: Manufacturer: syz [ 459.891186][ T5951] usb 3-1: SerialNumber: syz [ 459.924013][ T5951] usb 3-1: config 0 descriptor?? [ 459.941160][ T5951] snd_usb_podhd 3-1:0.237: Line 6 POD HD300 found [ 461.155132][T12399] syz_tun: entered promiscuous mode [ 461.197554][T12399] vlan2: entered promiscuous mode [ 461.536618][T12439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1768'. [ 462.087465][T12446] netlink: 'syz.0.1769': attribute type 1 has an invalid length. [ 462.126799][T12446] bond16: entered promiscuous mode [ 462.132603][T12446] 8021q: adding VLAN 0 to HW filter on device bond16 [ 462.153150][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 462.453340][T12454] netlink: 'syz.4.1770': attribute type 1 has an invalid length. [ 462.504373][T12452] 8021q: adding VLAN 0 to HW filter on device bond17 [ 462.512704][T12452] bond17: entered promiscuous mode [ 462.518659][T12452] bond16: (slave bond17): Enslaving as an active interface with an up link [ 463.213206][T12454] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 463.214682][T12457] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 463.250106][ T5951] snd_usb_podhd 3-1:0.237: set_interface failed [ 463.307539][ T5951] snd_usb_podhd 3-1:0.237: Line 6 POD HD300 now disconnected [ 463.397073][ T5951] snd_usb_podhd 3-1:0.237: probe with driver snd_usb_podhd failed with error -71 [ 463.439844][ T5951] usb 3-1: USB disconnect, device number 91 [ 463.698752][T12472] loop2: detected capacity change from 0 to 7 [ 463.721875][ T5871] Dev loop2: unable to read RDB block 7 [ 463.735289][ T5871] loop2: unable to read partition table [ 463.753336][ T5871] loop2: partition table beyond EOD, truncated [ 463.777042][ T7784] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 463.816093][T12472] Dev loop2: unable to read RDB block 7 [ 463.839209][T12472] loop2: unable to read partition table [ 463.861044][T12472] loop2: partition table beyond EOD, truncated [ 463.904335][T12472] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 463.947047][ T7784] usb 4-1: Using ep0 maxpacket: 16 [ 463.966828][ T7784] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 463.981499][ T7784] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.040595][ T7784] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.133600][ T7784] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 464.143894][ T7784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.160091][ T7784] usb 4-1: Product: syz [ 464.169114][ T7784] usb 4-1: Manufacturer: syz [ 464.178804][ T7784] usb 4-1: SerialNumber: syz [ 464.358931][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 464.358951][ T30] audit: type=1326 audit(1755808142.221:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12481 comm="syz.2.1780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7393b8ebe9 code=0x0 [ 464.644750][T12468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.148376][T12502] netlink: 'syz.4.1784': attribute type 16 has an invalid length. [ 466.155565][T12500] tipc: Resetting bearer [ 466.156539][T12502] netlink: 'syz.4.1784': attribute type 17 has an invalid length. [ 466.414639][T12502] tipc: Resetting bearer [ 466.557799][ T7784] usb 4-1: 0:2 : does not exist [ 466.574565][ T7784] usb 4-1: USB disconnect, device number 84 [ 466.661825][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.885988][T12508] tipc: Can't bind to reserved service type 1 [ 466.955965][T12512] loop2: detected capacity change from 0 to 7 [ 466.964801][T12512] Dev loop2: unable to read RDB block 7 [ 466.973597][T12512] loop2: unable to read partition table [ 466.980750][T12512] loop2: partition table beyond EOD, truncated [ 466.991468][T12512] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 467.093746][T12519] netlink: 'syz.4.1790': attribute type 1 has an invalid length. [ 467.168774][T12519] bond7: entered promiscuous mode [ 467.200177][T12526] loop6: detected capacity change from 0 to 1 [ 467.222180][T12526] Dev loop6: unable to read RDB block 1 [ 467.232841][T12526] loop6: unable to read partition table [ 467.257107][ T7780] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 467.276263][T12519] 8021q: adding VLAN 0 to HW filter on device bond7 [ 467.284460][T12526] loop6: partition table beyond EOD, truncated [ 467.366859][T12525] 8021q: adding VLAN 0 to HW filter on device bond8 [ 467.378731][T12525] bond8: entered promiscuous mode [ 467.389368][T12525] bond7: (slave bond8): Enslaving as an active interface with an up link [ 467.417153][T12526] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 467.478086][ T7780] usb 4-1: Using ep0 maxpacket: 16 [ 467.485637][ T7780] usb 4-1: unable to get BOS descriptor or descriptor too short [ 467.502707][ T7780] usb 4-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.531899][ T7780] usb 4-1: config 1 interface 0 has no altsetting 0 [ 467.561242][ T7780] usb 4-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 467.679357][ T7780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.739158][ T7780] usb 4-1: Product: syz [ 467.750875][ T7780] usb 4-1: Manufacturer: syz [ 467.763435][ T7780] usb 4-1: SerialNumber: syz [ 468.035088][ T7780] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input36 [ 468.174317][ T5219] bcm5974 4-1:1.0: could not read from device [ 468.235369][ T5219] bcm5974 4-1:1.0: could not read from device [ 468.277315][ T7780] usb 4-1: USB disconnect, device number 85 [ 468.327676][ T5219] bcm5974 4-1:1.0: could not read from device [ 468.587020][ T7784] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 468.750420][ T7784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.771759][ T7784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.803501][ T7784] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 468.833564][ T7784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.849661][ T7784] usb 2-1: config 0 descriptor?? [ 468.872610][T12553] loop2: detected capacity change from 0 to 7 [ 468.881251][ T5871] Dev loop2: unable to read RDB block 7 [ 468.887375][ T5871] loop2: unable to read partition table [ 468.893881][ T5871] loop2: partition table beyond EOD, truncated [ 468.904435][T12553] Dev loop2: unable to read RDB block 7 [ 468.912392][T12553] loop2: unable to read partition table [ 468.920821][T12553] loop2: partition table beyond EOD, truncated [ 468.927485][T12553] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 470.454558][T12563] binder: 12561:12563 ioctl 8138ae83 7fdb3be38aa0 returned -22 [ 470.603677][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'. [ 470.739153][T12576] bond8 (unregistering): Released all slaves [ 470.774938][ T7784] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #200: -71 [ 470.896035][ T7784] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 470.914812][ T7784] uclogic 0003:256C:006D.0016: failed probing pen v2 parameters: -71 [ 470.923796][ T7784] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 470.941425][ T7784] uclogic 0003:256C:006D.0016: probe with driver uclogic failed with error -71 [ 470.971099][ T7784] usb 2-1: USB disconnect, device number 91 [ 471.906736][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 471.926039][T12602] hsr0 (unregistering): left allmulticast mode [ 472.442124][ T30] audit: type=1326 audit(1755808150.291:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12612 comm="syz.4.1825" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bf518ebe9 code=0x0 [ 472.463952][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.879118][ T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 473.063807][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 473.104866][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.155627][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.231066][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 473.277047][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.397199][ T9] usb 4-1: config 0 descriptor?? [ 473.415158][ T9] hub 4-1:0.0: USB hub found [ 473.553565][T12636] loop2: detected capacity change from 0 to 7 [ 473.630889][ T9] hub 4-1:0.0: 1 port detected [ 473.669164][T12636] Dev loop2: unable to read RDB block 7 [ 473.717254][T12636] loop2: unable to read partition table [ 473.723423][T12636] loop2: partition table beyond EOD, truncated [ 473.730302][T12636] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 474.092508][T12642] netlink: 'syz.4.1835': attribute type 21 has an invalid length. [ 474.167138][T12642] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1835'. [ 474.176346][T12642] netlink: 'syz.4.1835': attribute type 4 has an invalid length. [ 474.216299][T12642] netlink: 'syz.4.1835': attribute type 3 has an invalid length. [ 474.217564][T12607] Bluetooth: hci3: command 0x0405 tx timeout [ 474.234501][ T7791] hub 4-1:0.0: activate --> -90 [ 474.260340][T12642] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1835'. [ 474.859582][T12655] loop6: detected capacity change from 0 to 1 [ 474.866575][T12655] Dev loop6: unable to read RDB block 1 [ 474.872576][T12655] loop6: unable to read partition table [ 474.887145][T12655] loop6: partition table beyond EOD, truncated [ 474.907623][T12655] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 475.069478][ T7791] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 475.070359][ T7786] usb 4-1: USB disconnect, device number 86 [ 475.076748][ T7791] usb 4-1-port1: attempt power cycle [ 475.292894][T12668] netlink: 'syz.2.1843': attribute type 12 has an invalid length. [ 475.302710][T12668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1843'. [ 475.319814][T12668] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 475.326450][T12668] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 475.345712][T12668] vhci_hcd vhci_hcd.0: Device attached [ 475.360657][T12664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1843'. [ 475.377108][T12669] vhci_hcd: connection closed [ 475.385618][ T1159] vhci_hcd: stop threads [ 475.427034][ T1159] vhci_hcd: release socket [ 475.437074][ T1159] vhci_hcd: disconnect device [ 475.796368][T12682] netlink: 'syz.1.1847': attribute type 21 has an invalid length. [ 475.837052][T12682] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1847'. [ 475.862639][T12682] netlink: 'syz.1.1847': attribute type 4 has an invalid length. [ 475.871894][T12682] netlink: 'syz.1.1847': attribute type 3 has an invalid length. [ 475.879843][T12682] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1847'. [ 476.175248][T12696] loop6: detected capacity change from 0 to 1 [ 476.200687][ T5871] Dev loop6: unable to read RDB block 1 [ 476.206385][ T5871] loop6: unable to read partition table [ 476.225289][ T5871] loop6: partition table beyond EOD, truncated [ 476.261966][T12696] Dev loop6: unable to read RDB block 1 [ 476.267795][T12696] loop6: unable to read partition table [ 476.273739][T12696] loop6: partition table beyond EOD, truncated [ 476.280273][T12696] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 477.337193][ T5913] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 477.428417][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 477.631752][ T5913] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 477.641677][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.666670][ T5913] usb 4-1: Product: syz [ 477.681125][ T5913] usb 4-1: Manufacturer: syz [ 477.706139][ T5913] usb 4-1: SerialNumber: syz [ 477.723679][ T5913] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 477.745576][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 478.463562][T12728] netlink: 'syz.1.1863': attribute type 21 has an invalid length. [ 478.483781][T12728] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1863'. [ 478.507058][T12728] netlink: 'syz.1.1863': attribute type 4 has an invalid length. [ 478.523720][T12728] netlink: 'syz.1.1863': attribute type 3 has an invalid length. [ 478.557229][T12728] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1863'. [ 478.623143][T12708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.637463][T12708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.647201][ T7780] usb 4-1: USB disconnect, device number 91 [ 478.731920][ T30] audit: type=1326 audit(1755808156.591:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12729 comm="syz.1.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae25f8ebe9 code=0x7ffc0000 [ 478.766749][ T30] audit: type=1326 audit(1755808156.591:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12729 comm="syz.1.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae25f8ebe9 code=0x7ffc0000 [ 478.797044][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 478.804065][ T9] ath9k_htc: Failed to initialize the device [ 478.838324][ T30] audit: type=1326 audit(1755808156.621:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12729 comm="syz.1.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fae25f8ebe9 code=0x7ffc0000 [ 478.924131][ T7780] usb 4-1: ath9k_htc: USB layer deinitialized [ 478.981308][T12738] loop6: detected capacity change from 0 to 1 [ 478.997989][ T30] audit: type=1326 audit(1755808156.621:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12729 comm="syz.1.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae25f8ebe9 code=0x7ffc0000 [ 479.020880][T12738] Dev loop6: unable to read RDB block 1 [ 479.030278][T12738] loop6: unable to read partition table [ 479.056851][T12739] vti0: entered promiscuous mode [ 479.062106][T12739] vti0: entered allmulticast mode [ 479.124294][T12738] loop6: partition table beyond EOD, truncated [ 479.138799][T12738] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 479.171156][ T30] audit: type=1326 audit(1755808156.621:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12729 comm="syz.1.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae25f8ebe9 code=0x7ffc0000 [ 479.283404][ T30] audit: type=1326 audit(1755808156.621:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12729 comm="syz.1.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fae25f8ebe9 code=0x7ffc0000 [ 479.784040][ T30] audit: type=1326 audit(1755808156.621:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12729 comm="syz.1.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae25f8ebe9 code=0x7ffc0000 [ 479.839338][ T30] audit: type=1326 audit(1755808156.621:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12729 comm="syz.1.1864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fae25f8ebe9 code=0x7ffc0000 [ 479.887005][ T7786] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 480.100357][ T7786] usb 3-1: device descriptor read/64, error -71 [ 480.342219][T12762] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1874'. [ 480.357082][ T7786] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 480.567040][ T7786] usb 3-1: device descriptor read/64, error -71 [ 480.678004][ T7786] usb usb3-port1: attempt power cycle [ 481.017012][ T7786] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 481.067706][ T7786] usb 3-1: device descriptor read/8, error -71 [ 481.347764][ T5913] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 481.357611][ T7786] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 481.377817][ T7786] usb 3-1: device descriptor read/8, error -71 [ 481.487342][ T7786] usb usb3-port1: unable to enumerate USB device [ 481.507103][ T5913] usb 2-1: Invalid ep0 maxpacket: 16 [ 481.817046][ T5913] usb 2-1: new low-speed USB device number 93 using dummy_hcd [ 481.976991][ T5913] usb 2-1: Invalid ep0 maxpacket: 16 [ 482.004208][ T5913] usb usb2-port1: attempt power cycle [ 482.027748][ T7786] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 482.187760][ T7786] usb 4-1: Using ep0 maxpacket: 32 [ 482.319527][ T7786] usb 4-1: config 0 has an invalid interface number: 215 but max is 0 [ 482.328287][ T7786] usb 4-1: config 0 has no interface number 0 [ 482.339755][ T7786] usb 4-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 482.349173][ T7786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.371830][ T7786] usb 4-1: Product: syz [ 482.378029][ T7786] usb 4-1: Manufacturer: syz [ 482.378141][ T5913] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 482.382784][ T7786] usb 4-1: SerialNumber: syz [ 482.411836][ T7786] usb 4-1: config 0 descriptor?? [ 482.422462][ T7786] io_ti 4-1:0.215: required endpoints missing [ 482.431935][ T5913] usb 2-1: Invalid ep0 maxpacket: 16 [ 482.567514][ T5913] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 482.607515][ T5913] usb 2-1: Invalid ep0 maxpacket: 16 [ 482.613396][ T5913] usb usb2-port1: unable to enumerate USB device [ 482.623564][T12789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.636191][T12789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.645063][ T5913] usb 4-1: USB disconnect, device number 92 [ 482.917000][ T5951] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 482.948675][ T7786] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 483.087369][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 483.094748][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.105735][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.115541][ T7786] usb 3-1: Using ep0 maxpacket: 16 [ 483.120754][ T5951] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 483.129969][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.140298][ T5951] usb 5-1: config 0 descriptor?? [ 483.145811][ T7786] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 483.158442][ T7786] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 483.171474][ T7786] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 483.180771][ T7786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.197917][ T7786] usb 3-1: config 0 descriptor?? [ 483.208829][ T7786] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 483.358679][T12791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.367400][T12791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.410443][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.419783][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.457205][ T5913] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 483.586975][ T5913] usb 4-1: device descriptor read/64, error -71 [ 483.779008][ T5951] usbhid 5-1:0.0: can't add hid device: -32 [ 483.786142][ T5951] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 483.795757][ T5951] usb 5-1: USB disconnect, device number 60 [ 483.827026][ T5913] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 483.957543][ T5913] usb 4-1: device descriptor read/64, error -71 [ 484.067348][ T5913] usb usb4-port1: attempt power cycle [ 484.087036][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 484.133221][T12797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.141964][T12797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.151593][T12797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.161644][T12797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.246964][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 484.253438][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 484.261785][ T9] usb 2-1: config 0 has no interface number 0 [ 484.269621][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 484.278788][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.286812][ T9] usb 2-1: Product: syz [ 484.291055][ T9] usb 2-1: Manufacturer: syz [ 484.295679][ T9] usb 2-1: SerialNumber: syz [ 484.303829][ T9] usb 2-1: config 0 descriptor?? [ 484.315769][ T9] smsc95xx v2.0.0 [ 484.408603][ T5913] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 484.443898][ T5913] usb 4-1: device descriptor read/8, error -71 [ 484.496044][T12805] netlink: 'syz.4.1890': attribute type 12 has an invalid length. [ 484.552279][T12807] netlink: 'syz.4.1891': attribute type 21 has an invalid length. [ 484.560654][T12807] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1891'. [ 484.570199][T12807] netlink: 'syz.4.1891': attribute type 4 has an invalid length. [ 484.578318][T12807] netlink: 'syz.4.1891': attribute type 3 has an invalid length. [ 484.586126][T12807] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1891'. [ 484.696992][ T5913] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 484.714312][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 484.725189][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 484.734863][ T5913] usb 4-1: device descriptor read/8, error -71 [ 484.857557][ T5913] usb usb4-port1: unable to enumerate USB device [ 484.876980][ T7780] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 485.026958][ T7780] usb 5-1: Using ep0 maxpacket: 16 [ 485.033600][ T7780] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.043632][ T7780] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 485.054923][ T7780] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 485.068192][ T7780] usb 5-1: config 0 interface 0 has no altsetting 0 [ 485.074840][ T7780] usb 5-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 485.084073][ T7780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.093614][ T7780] usb 5-1: config 0 descriptor?? [ 485.192665][T12811] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1893'. [ 485.337233][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 485.352208][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 485.367503][ T9] usb 2-1: USB disconnect, device number 96 [ 485.511536][ T7780] nzxt-smart2 0003:1E71:2010.0017: unknown main item tag 0x0 [ 485.521255][ T7780] nzxt-smart2 0003:1E71:2010.0017: unknown main item tag 0x0 [ 485.528769][ T7780] nzxt-smart2 0003:1E71:2010.0017: unknown main item tag 0x0 [ 485.536177][ T7780] nzxt-smart2 0003:1E71:2010.0017: unknown main item tag 0x0 [ 485.543782][ T7780] nzxt-smart2 0003:1E71:2010.0017: unknown main item tag 0x0 [ 485.552643][ T7780] nzxt-smart2 0003:1E71:2010.0017: hidraw0: USB HID v0.05 Device [HID 1e71:2010] on usb-dummy_hcd.4-1/input0 [ 485.607108][ T9] usb 3-1: USB disconnect, device number 96 [ 485.715497][ T7780] usb 5-1: USB disconnect, device number 61 [ 485.863605][T12823] loop2: detected capacity change from 0 to 7 [ 485.871032][T12823] Dev loop2: unable to read RDB block 7 [ 485.876641][T12823] loop2: unable to read partition table [ 485.897339][T12823] loop2: partition table beyond EOD, truncated [ 485.903622][T12823] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 485.924300][T12826] fuse: Unknown parameter 'fK' [ 485.929814][T12825] syz_tun: entered allmulticast mode [ 485.946825][T12825] syz_tun: left allmulticast mode [ 485.967119][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 486.063940][T12835] netlink: 'syz.1.1902': attribute type 21 has an invalid length. [ 486.072663][T12835] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1902'. [ 486.087125][T12835] netlink: 'syz.1.1902': attribute type 4 has an invalid length. [ 486.094922][T12835] netlink: 'syz.1.1902': attribute type 3 has an invalid length. [ 486.102891][T12835] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1902'. [ 486.147108][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 486.156566][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 486.166689][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.202065][ T9] usb 3-1: config 0 descriptor?? [ 486.296491][T12845] loop6: detected capacity change from 0 to 1 [ 486.319589][T12845] Dev loop6: unable to read RDB block 1 [ 486.328167][T12845] loop6: unable to read partition table [ 486.328342][T12845] loop6: partition table beyond EOD, truncated [ 486.328391][T12845] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 486.444947][T12847] program syz.3.1907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.454805][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 486.619395][T12859] loop2: detected capacity change from 0 to 7 [ 486.639570][T12859] Dev loop2: unable to read RDB block 7 [ 486.648584][T12859] loop2: unable to read partition table [ 486.654549][T12859] loop2: partition table beyond EOD, truncated [ 486.663350][T12859] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 486.816083][T12868] netlink: 'syz.3.1914': attribute type 2 has an invalid length. [ 486.846035][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 486.875467][T12873] netlink: 'syz.1.1916': attribute type 21 has an invalid length. [ 486.879903][ T9] asix 3-1:0.0: probe with driver asix failed with error -61 [ 486.884591][T12873] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1916'. [ 486.900528][T12873] netlink: 'syz.1.1916': attribute type 4 has an invalid length. [ 486.908465][T12873] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1916'. [ 487.010260][T12881] loop6: detected capacity change from 0 to 1 [ 487.017596][T12881] Dev loop6: unable to read RDB block 1 [ 487.023300][T12881] loop6: unable to read partition table [ 487.029325][T12881] loop6: partition table beyond EOD, truncated [ 487.035592][T12881] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 487.278679][T12894] loop2: detected capacity change from 0 to 7 [ 487.285585][T12894] Dev loop2: unable to read RDB block 7 [ 487.291323][T12894] loop2: unable to read partition table [ 487.300191][T12894] loop2: partition table beyond EOD, truncated [ 487.306432][T12894] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 487.467124][ T7780] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 487.630346][ T7780] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 487.643518][ T7780] usb 4-1: config 5 has no interface number 0 [ 487.649844][ T7780] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 487.677602][ T7780] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 487.693260][ T7780] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 487.700047][T12909] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1930'. [ 487.703493][ T7780] usb 4-1: config 5 interface 123 has no altsetting 0 [ 487.713790][T12909] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1930'. [ 487.721508][ T7780] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 487.738030][ T7780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.746137][ T7780] usb 4-1: Product: syz [ 487.751333][ T7780] usb 4-1: Manufacturer: syz [ 487.756025][ T7780] usb 4-1: SerialNumber: syz [ 487.908858][ T7786] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 488.047204][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 488.067167][ T7786] usb 5-1: Using ep0 maxpacket: 16 [ 488.079973][ T7786] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.090974][ T7786] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.102955][ T7786] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.112648][ T7786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.121157][ T7786] usb 5-1: Product: syz [ 488.125793][ T7786] usb 5-1: Manufacturer: syz [ 488.130962][ T7786] usb 5-1: SerialNumber: syz [ 488.217147][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 488.226563][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 488.238416][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 488.258549][ T9] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 488.269927][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.278048][ T9] usb 2-1: Product: syz [ 488.282237][ T9] usb 2-1: Manufacturer: syz [ 488.286855][ T9] usb 2-1: SerialNumber: syz [ 488.295999][ T9] usb 2-1: config 0 descriptor?? [ 488.305841][ T9] usb 2-1: no audio or video endpoints found [ 488.342467][ T7786] usb 5-1: 0:2 : does not exist [ 488.353964][ T7786] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 488.386177][ T7786] usb 5-1: USB disconnect, device number 62 [ 488.424387][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.509437][ T5951] usb 2-1: USB disconnect, device number 97 [ 488.720651][ T5951] usb 3-1: USB disconnect, device number 97 [ 488.771682][ T7780] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 488.791275][ T7780] usb 4-1: USB disconnect, device number 97 [ 488.925334][T12918] loop2: detected capacity change from 0 to 7 [ 488.938702][T12918] Dev loop2: unable to read RDB block 7 [ 488.949531][T12918] loop2: unable to read partition table [ 488.960292][T12918] loop2: partition table beyond EOD, truncated [ 488.970349][T12918] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 489.215797][T12928] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1939'. [ 490.704112][T12963] loop2: detected capacity change from 0 to 7 [ 490.727244][ T5871] Dev loop2: unable to read RDB block 7 [ 490.732944][ T5871] loop2: unable to read partition table [ 490.738801][ T5871] loop2: partition table beyond EOD, truncated [ 490.766436][T12963] Dev loop2: unable to read RDB block 7 [ 490.785698][T12963] loop2: unable to read partition table [ 490.808694][T12963] loop2: partition table beyond EOD, truncated [ 490.836161][ T7791] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 490.836582][T12963] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 490.997158][ T7791] usb 3-1: Using ep0 maxpacket: 32 [ 491.007663][ T7791] usb 3-1: config 0 has no interfaces? [ 491.014944][ T7791] usb 3-1: New USB device found, idVendor=05ef, idProduct=02d4, bcdDevice=c6.c2 [ 491.032380][ T7791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.053810][ T7791] usb 3-1: config 0 descriptor?? [ 491.539138][T12980] __nla_validate_parse: 2 callbacks suppressed [ 491.539154][T12980] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1951'. [ 491.604405][T12982] validate_nla: 8 callbacks suppressed [ 491.604427][T12982] netlink: 'syz.1.1952': attribute type 21 has an invalid length. [ 491.619728][T12982] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1952'. [ 491.643211][T12982] netlink: 'syz.1.1952': attribute type 4 has an invalid length. [ 491.673848][T12982] netlink: 'syz.1.1952': attribute type 3 has an invalid length. [ 491.707658][T12982] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1952'. [ 492.111973][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 493.177040][ T7780] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 493.337101][ T7780] usb 4-1: Using ep0 maxpacket: 16 [ 493.354670][T13019] netlink: 'syz.1.1964': attribute type 21 has an invalid length. [ 493.374807][ T7780] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 493.454749][ T9] usb 3-1: USB disconnect, device number 98 [ 493.520676][ T7780] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 493.522448][T13019] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1964'. [ 493.551428][ T7780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.593208][T13019] netlink: 'syz.1.1964': attribute type 4 has an invalid length. [ 493.605984][T13019] netlink: 'syz.1.1964': attribute type 3 has an invalid length. [ 493.617887][T13019] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1964'. [ 493.622669][ T7780] usb 4-1: config 0 descriptor?? [ 493.957183][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 494.127108][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 494.132785][ T9] usb 3-1: no configurations [ 494.146940][ T9] usb 3-1: can't read configurations, error -22 [ 494.367561][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 494.577261][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 494.589287][ T9] usb 3-1: no configurations [ 494.597390][ T9] usb 3-1: can't read configurations, error -22 [ 494.617650][ T9] usb usb3-port1: attempt power cycle [ 494.670424][ T5951] usb 4-1: USB disconnect, device number 98 [ 494.846987][ T7780] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 495.037213][ T7780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.062294][ T7780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.087385][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 495.096052][ T7780] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 495.132838][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 495.145937][ T7780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.155118][ T9] usb 3-1: no configurations [ 495.177951][ T7780] usb 2-1: config 0 descriptor?? [ 495.196257][ T9] usb 3-1: can't read configurations, error -22 [ 495.242463][T13069] netlink: 'syz.0.1980': attribute type 4 has an invalid length. [ 495.572209][T13069] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1980'. [ 495.668270][ T9] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 495.727516][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 495.734702][ T9] usb 3-1: no configurations [ 495.741324][ T9] usb 3-1: can't read configurations, error -22 [ 495.761986][ T9] usb usb3-port1: unable to enumerate USB device [ 496.065650][ T5913] IPVS: starting estimator thread 0... [ 496.144368][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1985'. [ 496.153803][T13094] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 496.161555][T13094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.184105][T13089] IPVS: using max 38 ests per chain, 91200 per kthread [ 496.187666][ T7780] hid-led 0003:27B8:01ED.0018: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 496.233044][ T7780] hid-led 0003:27B8:01ED.0018: ThingM blink(1) initialized [ 496.311677][ T5951] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 496.390355][T13047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.402013][T13047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.411004][T13047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.421398][T13047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.430598][ T7780] usb 2-1: USB disconnect, device number 98 [ 496.436990][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 496.477077][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 496.484442][ T5951] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 496.496072][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.511412][ T5951] usb 4-1: config 0 descriptor?? [ 496.606957][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 496.619774][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 496.628067][ T9] usb 5-1: can't read configurations, error -61 [ 496.726815][ T5951] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 496.760766][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 496.941417][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 497.026253][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 497.026290][ T9] usb 5-1: can't read configurations, error -61 [ 497.026947][ T9] usb usb5-port1: attempt power cycle [ 497.366976][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 497.386983][ T5955] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 497.396321][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 497.408612][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 497.420750][ T9] usb 5-1: can't read configurations, error -61 [ 497.546956][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 497.553729][ T5955] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 497.563730][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 497.571799][ T5955] usb 2-1: config 0 has no interface number 0 [ 497.580528][ T5955] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 497.592404][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.601227][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 497.606648][ T5955] usb 2-1: Product: syz [ 497.612292][ T5955] usb 2-1: Manufacturer: syz [ 497.617586][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 497.625596][ T9] usb 5-1: can't read configurations, error -61 [ 497.632065][ T5955] usb 2-1: SerialNumber: syz [ 497.646086][ T9] usb usb5-port1: unable to enumerate USB device [ 497.657519][ T5955] usb 2-1: config 0 descriptor?? [ 497.676160][ T5955] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 497.685516][ T5955] usb 2-1: selecting invalid altsetting 1 [ 497.691727][ T5955] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 497.728312][ T5955] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 497.740818][ T5955] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 497.750445][ T5955] usb 2-1: media controller created [ 497.777777][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 497.921935][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.937323][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.771529][T13080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.788807][T13080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.827718][ T5951] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 498.840844][ T5951] asix 4-1:0.0: probe with driver asix failed with error -71 [ 498.853440][ T5951] usb 4-1: USB disconnect, device number 99 [ 498.878429][ T5955] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 498.888504][ T5955] zl10353_read_register: readreg error (reg=127, ret==-110) [ 498.906054][ T5955] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 498.928645][ T5955] usb 2-1: USB disconnect, device number 99 [ 499.419633][ T7786] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 499.607823][ T7786] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.660282][T13137] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1998'. [ 499.705983][ T7786] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 499.723490][ T7786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 499.787996][ T7786] usb 3-1: Product: syz [ 499.792268][ T7786] usb 3-1: Manufacturer: syz [ 499.833665][ T7786] usb 3-1: SerialNumber: syz [ 500.228179][ T7786] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 103 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 500.926817][ T7786] usb 3-1: USB disconnect, device number 103 [ 500.943195][ T7786] usblp0: removed [ 501.275010][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 501.697368][ T7786] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 501.925509][ T7786] usb 5-1: Using ep0 maxpacket: 8 [ 501.933047][ T7786] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.950000][ T7786] usb 5-1: config 1 interface 0 has no altsetting 0 [ 501.960776][ T7786] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.40 [ 501.971683][ T7786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.011761][ T7786] usb 5-1: Product: 㐊 [ 502.037573][ T7786] usb 5-1: Manufacturer: 銺Ĭ譴瑃⾟㢗⊼ﳌ欈軹滐뤀蟔ꢜᘩ⨞뉪爋᧵鹨ꋪス㟇䬦츮︄炙笖酓⹔ꦭ쩼䓽李춧쩖諷鯀䦁믓愌Ё皖丫ᛃ䔁넃ঌ܆輂簗Ḃꁗ㕇崉茸岗垃直测婷槩䰓︩胬଴︣㾣鯁㑂莏鏑䎲扲ꧠ࠶༢親䍙㟅쏢튆눻헗ϔ퍋〲둑狖株䒉㶎덶⼾밬錄鉿␇◚㗕揀鳻坋뤡쐽䘆胺 [ 502.072911][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.156156][ T7786] usb 5-1: SerialNumber: syz [ 504.188396][T13218] fuse: Unknown parameter 'mGN8oad' [ 504.266864][T13212] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 504.285996][T13212] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2018'. [ 504.296488][T13212] netlink: zone id is out of range [ 504.302584][T13212] netlink: get zone limit has 8 unknown bytes [ 504.713875][ T7786] usbhid 5-1:1.0: can't add hid device: -71 [ 504.721334][ T7786] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 504.775226][ T7786] usb 5-1: USB disconnect, device number 67 [ 505.325445][T13248] netlink: 'syz.4.2027': attribute type 1 has an invalid length. [ 505.504896][T13250] gretap1: entered promiscuous mode [ 505.515820][T13250] bond9: (slave gretap1): making interface the new active one [ 505.528251][T13250] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 505.618389][T13251] macvlan2: entered promiscuous mode [ 505.626636][T13251] macvlan2: entered allmulticast mode [ 505.635041][T13251] bond9: entered promiscuous mode [ 505.644229][T13251] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 505.654550][T13251] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 505.671582][T13251] bond9: left promiscuous mode [ 506.506660][T13262] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2031'. [ 506.584322][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 506.787882][ T7786] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 506.921077][ T7786] usb 5-1: device descriptor read/64, error -71 [ 506.927631][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 40 [ 506.927664][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 506.948511][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 506.948546][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.948569][ T9] usb 2-1: Product: syz [ 506.948585][ T9] usb 2-1: Manufacturer: syz [ 506.948600][ T9] usb 2-1: SerialNumber: syz [ 506.950869][T13258] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 507.173673][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 100 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 507.217023][ T7786] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 507.347046][ T7786] usb 5-1: device descriptor read/64, error -71 [ 507.491744][ T7786] usb usb5-port1: attempt power cycle [ 507.847040][ T7786] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 507.867528][ T7786] usb 5-1: device descriptor read/8, error -71 [ 507.979268][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.985934][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.992207][ T7784] usb 2-1: USB disconnect, device number 100 [ 508.001228][ T7784] usblp0: removed [ 508.127573][ T7786] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 508.215166][ T7786] usb 5-1: device descriptor read/8, error -71 [ 508.328443][ T7786] usb usb5-port1: unable to enumerate USB device [ 508.483312][T13298] block device autoloading is deprecated and will be removed. [ 508.490894][ T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 508.601405][T13298] syz.2.2039: attempt to access beyond end of device [ 508.601405][T13298] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 508.706943][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 508.713473][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 508.721907][ T9] usb 2-1: config 0 has no interface number 0 [ 508.732988][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 508.755574][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 508.779665][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 508.792521][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.805675][ T9] usb 2-1: Product: syz [ 508.813842][ T9] usb 2-1: Manufacturer: syz [ 508.822562][ T9] usb 2-1: SerialNumber: syz [ 508.833373][ T9] usb 2-1: config 0 descriptor?? [ 508.899040][T13295] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 508.907283][T13295] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 509.117354][T13295] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 509.124730][T13295] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 509.474588][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 509.506734][ T9] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 509.697972][ T9] asix 2-1:0.251: probe with driver asix failed with error -71 [ 509.821687][ T9] usb 2-1: USB disconnect, device number 101 [ 510.147035][ T7791] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 510.297139][ T7791] usb 5-1: Using ep0 maxpacket: 8 [ 510.322913][ T7791] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 510.331555][ T7791] usb 5-1: can't read configurations, error -61 [ 510.497549][ T7791] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 510.677146][ T7791] usb 5-1: Using ep0 maxpacket: 8 [ 510.735494][ T7791] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 510.764979][ T7791] usb 5-1: can't read configurations, error -61 [ 510.793766][ T7791] usb usb5-port1: attempt power cycle [ 511.177107][ T7791] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 511.227562][ T7791] usb 5-1: Using ep0 maxpacket: 8 [ 511.234364][ T7791] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 511.796964][ T7791] usb 5-1: can't read configurations, error -61 [ 511.947006][ T7791] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 511.967710][ T7791] usb 5-1: Using ep0 maxpacket: 8 [ 511.974523][ T7791] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 511.984079][ T7791] usb 5-1: can't read configurations, error -61 [ 511.990811][ T7791] usb usb5-port1: unable to enumerate USB device [ 512.026994][ T5955] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 512.187053][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 512.198560][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.216577][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.236771][ T5955] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 512.272945][ T5955] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 512.337402][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.352636][T13365] veth0_virt_wifi: entered allmulticast mode [ 512.383980][ T5955] usb 4-1: config 0 descriptor?? [ 513.096500][T13381] tipc: Enabled bearer , priority 0 [ 513.133019][T13381] syzkaller0: entered promiscuous mode [ 513.152513][T13381] syzkaller0: entered allmulticast mode [ 513.177658][T13381] tipc: Resetting bearer [ 513.187987][T13383] netlink: 'syz.4.2062': attribute type 1 has an invalid length. [ 513.207027][T13380] tipc: Resetting bearer [ 513.242368][T13380] tipc: Disabling bearer [ 513.265850][T13383] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 513.285529][T13383] kvm: pic: non byte read [ 513.517047][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 513.657184][ T9] usb 2-1: device descriptor read/64, error -71 [ 513.897038][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 514.037184][ T9] usb 2-1: device descriptor read/64, error -71 [ 514.147330][ T9] usb usb2-port1: attempt power cycle [ 514.216485][ T5955] usbhid 4-1:0.0: can't add hid device: -71 [ 514.271174][ T5955] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 514.276386][T13395] loop6: detected capacity change from 0 to 1 [ 514.296005][T13395] Dev loop6: unable to read RDB block 1 [ 514.301404][ T5955] usb 4-1: USB disconnect, device number 100 [ 514.332130][T13395] loop6: unable to read partition table [ 514.339238][T13395] loop6: partition table beyond EOD, truncated [ 514.355010][T13395] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 514.534304][T13405] tipc: Enabled bearer , priority 0 [ 514.547150][ T7786] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 514.547291][ T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 514.610415][ T9] usb 2-1: device descriptor read/8, error -71 [ 514.682395][T13405] tipc: Disabling bearer [ 514.708936][ T7786] usb 5-1: too many configurations: 174, using maximum allowed: 8 [ 514.721910][ T7786] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 514.729908][ T7786] usb 5-1: can't read configurations, error -61 [ 514.847061][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 514.878851][ T7786] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 514.907513][ T9] usb 2-1: device descriptor read/8, error -71 [ 515.019903][ T9] usb usb2-port1: unable to enumerate USB device [ 515.038570][ T7786] usb 5-1: too many configurations: 174, using maximum allowed: 8 [ 515.047904][ T7786] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 515.055673][ T7786] usb 5-1: can't read configurations, error -61 [ 515.064898][ T7786] usb usb5-port1: attempt power cycle [ 515.419313][ T7786] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 515.450907][ T7786] usb 5-1: too many configurations: 174, using maximum allowed: 8 [ 515.462751][ T7786] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 515.471115][ T7786] usb 5-1: can't read configurations, error -61 [ 515.607005][ T7786] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 515.657156][ T7780] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 515.667920][ T7786] usb 5-1: too many configurations: 174, using maximum allowed: 8 [ 515.677866][ T7786] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 515.686382][ T7786] usb 5-1: can't read configurations, error -61 [ 515.694531][ T7786] usb usb5-port1: unable to enumerate USB device [ 515.817056][ T7780] usb 3-1: Using ep0 maxpacket: 8 [ 515.823714][ T7780] usb 3-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 515.834081][ T7780] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 515.843180][ T7780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.852492][ T7780] usb 3-1: config 0 descriptor?? [ 515.860018][ T7780] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 515.947104][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 516.097049][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 516.103510][ T9] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 516.113446][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.123071][ T9] usb 4-1: config 0 descriptor?? [ 516.284435][T13423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.293175][T13423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.540194][T13420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.549841][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.560089][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 516.566252][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 516.575956][ T9] usb 4-1: USB disconnect, device number 101 [ 516.647006][ T5955] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 516.776954][ T5955] usb 2-1: device descriptor read/64, error -71 [ 517.016984][ T5955] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 517.073588][T13418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.084778][T13418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.147026][ T5955] usb 2-1: device descriptor read/64, error -71 [ 517.258388][ T5955] usb usb2-port1: attempt power cycle [ 517.656073][ T5955] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 517.689889][ T5955] usb 2-1: device descriptor read/8, error -71 [ 517.826154][T13435] loop6: detected capacity change from 0 to 1 [ 517.860715][T13435] Dev loop6: unable to read RDB block 1 [ 517.876969][T13435] loop6: unable to read partition table [ 517.894054][T13435] loop6: partition table beyond EOD, truncated [ 517.921075][T13435] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 517.956953][ T5955] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 517.987507][ T5955] usb 2-1: device descriptor read/8, error -71 [ 518.067075][ T7780] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 518.097575][ T5955] usb usb2-port1: unable to enumerate USB device [ 518.597125][ T7780] usb 5-1: Using ep0 maxpacket: 16 [ 518.645127][ T7780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.656575][ T7780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.673071][ T7780] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 518.742823][ T9] usb 3-1: USB disconnect, device number 104 [ 518.773142][ T7780] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 518.818988][ T7780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.848246][ T7780] usb 5-1: config 0 descriptor?? [ 520.518709][T13469] loop6: detected capacity change from 0 to 63 [ 520.588141][T13469] Buffer I/O error on dev loop6, logical block 0, async page read [ 520.596336][T13469] Buffer I/O error on dev loop6, logical block 0, async page read [ 520.634234][T13469] Buffer I/O error on dev loop6, logical block 0, async page read [ 520.660298][T13469] Buffer I/O error on dev loop6, logical block 0, async page read [ 520.668541][T13470] Buffer I/O error on dev loop6, logical block 0, async page read [ 520.685737][T13469] Buffer I/O error on dev loop6, logical block 0, async page read [ 520.726399][T13470] Buffer I/O error on dev loop6, logical block 0, async page read [ 520.785676][ T5871] Buffer I/O error on dev loop6, logical block 0, async page read [ 520.797509][ T5871] Buffer I/O error on dev loop6, logical block 0, async page read [ 520.847512][ T5871] Buffer I/O error on dev loop6, logical block 0, async page read [ 521.204837][ T7780] usbhid 5-1:0.0: can't add hid device: -71 [ 521.227187][ T7780] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 521.279781][ T7780] usb 5-1: USB disconnect, device number 80 [ 521.698614][T13499] loop2: detected capacity change from 0 to 7 [ 521.705571][T13499] Dev loop2: unable to read RDB block 7 [ 521.711285][T13499] loop2: unable to read partition table [ 521.720633][T13499] loop2: partition table beyond EOD, truncated [ 521.726839][T13499] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 521.736990][ T5913] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 521.903896][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.953151][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 521.964714][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 521.992825][T13505] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.000270][T13505] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.038436][ T5913] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 522.092788][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 522.181985][ T5913] usb 2-1: SerialNumber: syz [ 522.189032][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 522.209023][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 522.231239][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.274945][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 522.293781][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.316068][ T9] usb 5-1: Product: syz [ 522.324727][ T9] usb 5-1: Manufacturer: syz [ 522.334221][ T9] usb 5-1: SerialNumber: syz [ 522.472111][ T5913] usb 2-1: 0:2 : does not exist [ 522.493676][ T5913] usb 2-1: USB disconnect, device number 110 [ 522.828633][T13505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.862585][T13505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.123570][T13505] gretap1: left promiscuous mode [ 523.174498][T13505] bond2: left promiscuous mode [ 523.202844][T13505] bond3: left promiscuous mode [ 523.260288][T13505] macvlan2: left promiscuous mode [ 523.290176][T13505] bond4: left promiscuous mode [ 523.309158][T13505] bond5: left promiscuous mode [ 523.360882][T13505] bond6: left promiscuous mode [ 523.365865][T13505] bond7: left promiscuous mode [ 523.385807][T13505] bond8: left promiscuous mode [ 523.400543][T13505] bond9: left promiscuous mode [ 523.415468][T13505] bond10: left promiscuous mode [ 523.431569][T13505] bond12: left promiscuous mode [ 523.437819][T13505] macvlan1: left promiscuous mode [ 523.443138][T13505] macsec1: left promiscuous mode [ 523.450049][T13505] hsr0: left allmulticast mode [ 523.455291][T13505] hsr_slave_0: left allmulticast mode [ 523.461531][T13505] hsr_slave_1: left allmulticast mode [ 523.468704][T13505] macvlan3: left promiscuous mode [ 523.474012][T13505] macvlan3: left allmulticast mode [ 523.520737][T13505] bond14: left promiscuous mode [ 523.530491][T13505] bond15: left promiscuous mode [ 523.554121][T13505] bond16: left promiscuous mode [ 523.562233][T13505] bond17: left promiscuous mode [ 523.605317][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.628143][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.647292][ T4607] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.666171][ T4607] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.061558][ T4607] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.098757][ T4607] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.154788][T13531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.164570][T13531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.324055][T13534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2100'. [ 524.393766][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.419501][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.441552][ T1083] bond0 (unregistering): Released all slaves [ 524.503375][ T1083] bond1 (unregistering): Released all slaves [ 524.549643][ T1083] bond2 (unregistering): Released all slaves [ 524.566980][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 524.575818][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 524.630762][ T9] usb 5-1: USB disconnect, device number 81 [ 524.721529][ T1083] bond3 (unregistering): Released all slaves [ 524.764319][ T4607] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.775748][ T4607] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.804781][ T1083] tipc: Left network mode [ 524.903080][T13553] tipc: Resetting bearer [ 524.947080][ T5955] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 525.084575][ T1083] hsr_slave_0: left promiscuous mode [ 525.090514][ T1083] hsr_slave_1: left promiscuous mode [ 525.097452][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 525.104277][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.116300][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.149549][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 525.171125][ T5955] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 525.181905][ T5955] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.182266][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.205527][ T5955] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 525.217006][ T7780] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 525.232222][ T5955] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 525.242805][ T5955] usb 2-1: Manufacturer: syz [ 525.255330][ T5955] usb 2-1: config 0 descriptor?? [ 525.335776][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.427038][ T7780] usb 3-1: Using ep0 maxpacket: 32 [ 525.433838][ T7780] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 525.446105][ T7780] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 525.509246][ T7780] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 525.529749][ T5955] rc_core: IR keymap rc-hauppauge not found [ 525.548871][ T5955] Registered IR keymap rc-empty [ 525.569300][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 525.576598][ T7780] usb 3-1: Product: syz [ 525.584626][ T7780] usb 3-1: Manufacturer: syz [ 525.592338][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 525.611680][ T7780] usb 3-1: SerialNumber: syz [ 525.689248][ T7780] usb 3-1: config 0 descriptor?? [ 525.704742][T13554] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 525.719421][ T7780] hub 3-1:0.0: bad descriptor, ignoring hub [ 525.729296][ T5955] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 525.765376][ T7780] hub 3-1:0.0: probe with driver hub failed with error -5 [ 525.774587][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 525.803466][ T5955] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 525.834465][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 525.864765][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 525.967706][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.017226][ T7780] usb 3-1: USB disconnect, device number 105 [ 526.037648][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.059954][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.090165][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.127467][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.164542][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.198697][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.247014][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.312619][ T5955] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 526.349671][ T5955] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 526.367106][ T7780] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 526.465799][ T5955] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 526.560552][ T7780] usb 3-1: Using ep0 maxpacket: 32 [ 526.562367][ T5955] usb 2-1: USB disconnect, device number 111 [ 526.574823][ T7780] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 526.643607][ T7780] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 526.662541][ T7780] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 527.037367][ T7780] usb 3-1: Product: syz [ 527.049462][ T7780] usb 3-1: config 0 descriptor?? [ 527.083252][T13552] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 527.119919][ T7780] hub 3-1:0.0: bad descriptor, ignoring hub [ 527.532316][ T7780] hub 3-1:0.0: probe with driver hub failed with error -5 [ 527.673781][T13583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.967055][ T5955] usb 3-1: reset high-speed USB device number 106 using dummy_hcd [ 527.988970][ T5955] usb 3-1: device reset changed ep0 maxpacket size! [ 528.009660][ T5955] usb 3-1: USB disconnect, device number 106 [ 528.403304][ T5955] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 528.577064][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 528.587840][ T5955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.620020][ T5955] usb 3-1: config 0 has no interfaces? [ 528.637959][ T5955] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 528.668235][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.701946][ T5955] usb 3-1: Product: syz [ 528.706167][ T5955] usb 3-1: Manufacturer: syz [ 528.726983][ T5955] usb 3-1: SerialNumber: syz [ 528.733398][ T5955] usb 3-1: config 0 descriptor?? [ 528.738476][ T9] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 528.876984][ T9] usb 4-1: device descriptor read/64, error -71 [ 528.959100][T13585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.963350][T13610] loop2: detected capacity change from 0 to 7 [ 528.967899][T13585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.982718][T13610] Dev loop2: unable to read RDB block 7 [ 528.998882][T13611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.009853][T13610] loop2: unable to read partition table [ 529.016422][T13610] loop2: partition table beyond EOD, truncated [ 529.019947][T13611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.024980][T13610] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 529.056724][ T5955] usb 3-1: USB disconnect, device number 107 [ 529.126950][ T9] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 529.267126][ T9] usb 4-1: device descriptor read/64, error -71 [ 529.378577][ T9] usb usb4-port1: attempt power cycle [ 529.873383][ T9] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 529.912798][ T9] usb 4-1: device descriptor read/8, error -71 [ 530.267155][ T9] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 530.350159][ T9] usb 4-1: device descriptor read/8, error -71 [ 530.467118][ T9] usb usb4-port1: unable to enumerate USB device [ 530.858825][T13647] netlink: 'syz.1.2132': attribute type 21 has an invalid length. [ 530.872150][T13647] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2132'. [ 530.881886][T13647] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 531.091845][ T7784] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 531.257179][ T7784] usb 5-1: device descriptor read/64, error -71 [ 531.645176][T13666] netlink: 'syz.1.2135': attribute type 10 has an invalid length. [ 531.663109][T13666] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2135'. [ 531.685830][T13666] team0: entered promiscuous mode [ 531.694984][T13666] team_slave_0: entered promiscuous mode [ 531.701156][T13666] team_slave_1: entered promiscuous mode [ 531.719851][ T7784] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 531.728400][T13666] team0: entered allmulticast mode [ 531.756685][T13666] team_slave_0: entered allmulticast mode [ 531.764751][T13666] team_slave_1: entered allmulticast mode [ 531.783362][T13666] bridge0: port 3(team0) entered blocking state [ 531.790099][T13666] bridge0: port 3(team0) entered disabled state [ 531.808344][T13666] bridge0: port 3(team0) entered blocking state [ 531.814718][T13666] bridge0: port 3(team0) entered forwarding state [ 531.967503][ T7784] usb 5-1: device descriptor read/64, error -71 [ 532.088579][ T7784] usb usb5-port1: attempt power cycle [ 532.526974][ T7784] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 532.559685][ T7784] usb 5-1: device descriptor read/8, error -71 [ 532.663985][T13686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 532.850802][ T7784] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 532.897706][ T7784] usb 5-1: device descriptor read/8, error -71 [ 533.004076][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 533.016276][ T7784] usb usb5-port1: unable to enumerate USB device [ 533.071038][T13696] bond2 (unregistering): Released all slaves [ 534.653548][T13716] kvm: pic: non byte write [ 534.697226][T13716] kvm: pic: non byte write [ 534.701992][T13716] kvm: pic: single mode not supported [ 534.702010][T13716] kvm: pic: level sensitive irq not supported [ 534.721348][T13716] kvm: pic: non byte write [ 534.754388][T13722] loop2: detected capacity change from 0 to 7 [ 534.771767][T13716] kvm: pic: non byte write [ 534.773289][ T5871] Dev loop2: unable to read RDB block 7 [ 534.787225][T13716] kvm: pic: level sensitive irq not supported [ 534.787583][T13716] kvm: pic: non byte write [ 534.827862][ T5871] loop2: unable to read partition table [ 534.833957][T13716] kvm: pic: non byte write [ 534.842684][ T5871] loop2: partition table beyond EOD, truncated [ 534.859806][T13722] Dev loop2: unable to read RDB block 7 [ 534.875906][T13722] loop2: unable to read partition table [ 534.895993][T13722] loop2: partition table beyond EOD, truncated [ 534.905974][T13722] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 535.115252][T13730] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2153'. [ 535.126935][ T7786] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 535.287248][ T7786] usb 5-1: device descriptor read/64, error -71 [ 535.566999][ T7786] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 535.697592][ T7786] usb 5-1: device descriptor read/64, error -71 [ 535.807198][ T7786] usb usb5-port1: attempt power cycle [ 535.906990][ T7780] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 536.047717][ T7780] usb 4-1: device descriptor read/64, error -71 [ 536.187071][ T7786] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 536.207854][ T7786] usb 5-1: device descriptor read/8, error -71 [ 536.254666][T13755] vivid-002: disconnect [ 536.277400][T13755] vivid-002: reconnect [ 536.287780][ T7780] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 536.371486][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2158'. [ 536.467281][ T7780] usb 4-1: device descriptor read/64, error -71 [ 536.497244][ T7786] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 536.519770][ T7786] usb 5-1: device descriptor read/8, error -71 [ 536.607122][ T7780] usb usb4-port1: attempt power cycle [ 536.638880][ T7786] usb usb5-port1: unable to enumerate USB device [ 536.967038][ T7780] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 536.987432][ T7780] usb 4-1: device descriptor read/8, error -71 [ 537.327047][ T7780] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 537.347477][ T7780] usb 4-1: device descriptor read/8, error -71 [ 537.487209][ T7780] usb usb4-port1: unable to enumerate USB device [ 538.063413][T13784] loop2: detected capacity change from 0 to 7 [ 538.073202][T13784] Dev loop2: unable to read RDB block 7 [ 538.082856][T13784] loop2: unable to read partition table [ 538.091584][T13784] loop2: partition table beyond EOD, truncated [ 538.106969][T13784] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 538.285111][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'. [ 538.304066][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2164'. [ 538.322394][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'. [ 538.322586][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.332273][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2164'. [ 538.389445][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.411076][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.437033][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.467046][T13794] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 538.474498][T13794] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 538.484871][T13794] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 538.537232][ T5955] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 538.825986][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 538.843303][ T5955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.861155][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 538.902039][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 538.984151][ T5955] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 539.054484][ T5955] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.071414][ T5955] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 539.106373][ T5955] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 539.159665][ T5955] usb 5-1: Manufacturer: syz [ 539.273894][ T5955] usb 5-1: config 0 descriptor?? [ 539.524142][T13790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.609624][T13790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.650030][T13823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.662150][T13823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.868406][ T7791] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 539.917140][ T5955] rc_core: IR keymap rc-hauppauge not found [ 539.923141][ T5955] Registered IR keymap rc-empty [ 540.002818][ T5955] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.057117][ T7791] usb 2-1: Using ep0 maxpacket: 32 [ 540.064302][ T7791] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 540.072814][ T5955] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.080306][ T7791] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 540.119378][ T5955] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 540.139136][ T5955] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input40 [ 540.159989][ T7791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 540.174689][ T7791] usb 2-1: config 1 has no interface number 0 [ 540.181144][ T5955] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.186994][ T7786] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 540.196361][ T7791] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 96, changing to 10 [ 540.211967][ T5955] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.227778][ T7791] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 8439, setting to 1024 [ 540.240311][ T5955] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.273427][ T7791] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 540.287932][ T5955] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.330153][ T7791] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 540.341548][ T5955] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.347177][ T7786] usb 3-1: Invalid ep0 maxpacket: 32 [ 540.372499][ T7791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.417070][ T5955] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.447012][ T5955] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.457542][ T7791] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 540.487217][ T5955] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.487350][ T7786] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 540.527086][ T5955] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.608504][ T5955] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 540.638634][ T7791] snd_usb_pod 2-1:1.1: set_interface failed [ 540.644676][ T7791] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 540.655877][ T5955] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 540.665394][ T7791] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 540.676571][ T5955] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 540.694258][ T7791] usb 2-1: USB disconnect, device number 112 [ 540.716833][ T5955] usb 5-1: USB disconnect, device number 90 [ 540.770040][ T7786] usb 3-1: Invalid ep0 maxpacket: 32 [ 540.787341][ T7786] usb usb3-port1: attempt power cycle [ 541.169239][T13843] tipc: Resetting bearer [ 541.175036][ T7786] usb 3-1: new low-speed USB device number 110 using dummy_hcd [ 541.209894][ T7786] usb 3-1: Invalid ep0 maxpacket: 32 [ 541.244464][T13843] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 541.337789][ T7786] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 541.464764][ T7786] usb 3-1: Invalid ep0 maxpacket: 32 [ 541.476441][ T7786] usb usb3-port1: unable to enumerate USB device [ 541.957072][ T7786] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 542.106955][ T7786] usb 5-1: Using ep0 maxpacket: 8 [ 542.114301][ T7786] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 542.122599][ T7786] usb 5-1: can't read configurations, error -61 [ 542.446119][T13858] netlink: 'syz.3.2182': attribute type 17 has an invalid length. [ 542.456331][T13858] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2182'. [ 542.477764][ T7786] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 542.646944][ T7786] usb 5-1: Using ep0 maxpacket: 8 [ 542.655330][ T7786] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 542.697002][ T7786] usb 5-1: can't read configurations, error -61 [ 542.707698][ T7786] usb usb5-port1: attempt power cycle [ 543.226998][ T7786] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 543.269880][ T7786] usb 5-1: Using ep0 maxpacket: 8 [ 543.278516][ T7786] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 543.286193][ T7786] usb 5-1: can't read configurations, error -61 [ 543.426974][ T7786] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 543.524898][ T7786] usb 5-1: Using ep0 maxpacket: 8 [ 543.570130][ T7786] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 543.584994][ T7786] usb 5-1: can't read configurations, error -61 [ 543.671844][ T7786] usb usb5-port1: unable to enumerate USB device [ 544.387496][T13890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2190'. [ 544.412862][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2190'. [ 544.427349][ T7786] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 544.581078][ T7786] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 544.590303][ T7786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.598714][ T7786] usb 2-1: Product: syz [ 544.602996][ T7786] usb 2-1: Manufacturer: syz [ 544.607669][ T7786] usb 2-1: SerialNumber: syz [ 544.613721][ T7786] usb 2-1: config 0 descriptor?? [ 544.623468][ T7786] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 546.084536][T13916] netlink: 'syz.2.2197': attribute type 21 has an invalid length. [ 546.224454][ T7786] gspca_sunplus: reg_r err -71 [ 546.234820][ T7786] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 546.364340][ T7786] usb 2-1: USB disconnect, device number 113 [ 546.962020][ T7791] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 547.138367][ T7791] usb 3-1: Using ep0 maxpacket: 32 [ 547.148294][ T7791] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 547.159531][ T7791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.168786][ T7791] usb 3-1: Product: syz [ 547.174278][ T7791] usb 3-1: Manufacturer: syz [ 547.321659][ T7791] usb 3-1: SerialNumber: syz [ 547.335694][ T7791] usb 3-1: config 0 descriptor?? [ 547.760412][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'. [ 548.119286][ T7791] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 548.231365][ T7791] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 548.241296][ T7791] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 548.390749][ T7791] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 548.859888][ T7791] usb 3-1: USB disconnect, device number 112 [ 549.788128][T13970] tipc: Enabled bearer , priority 0 [ 549.849377][T13974] ------------[ cut here ]------------ [ 549.849401][T13974] WARNING: CPU: 1 PID: 13974 at drivers/gpu/drm/vkms/vkms_crtc.c:97 vkms_get_vblank_timestamp+0x137/0x160 [ 549.849458][T13974] Modules linked in: [ 549.849483][T13974] CPU: 1 UID: 0 PID: 13974 Comm: syz.0.2213 Not tainted syzkaller #0 PREEMPT(full) [ 549.849523][T13974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.849539][T13974] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 549.849575][T13974] Code: 42 80 3c 28 00 74 08 48 89 df e8 f4 2f 2a fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 75 83 05 cc e8 9a c5 c6 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 549.849597][T13974] RSP: 0018:ffffc9001767ed68 EFLAGS: 00010283 [ 549.849621][T13974] RAX: ffffffff85f8e596 RBX: ffffc9001767eee0 RCX: 0000000000080000 [ 549.849639][T13974] RDX: ffffc9000efc2000 RSI: 0000000000001501 RDI: 0000000000001502 [ 549.849656][T13974] RBP: 1ffff92002ecfddc R08: ffffc90003439000 R09: 0000000000000000 [ 549.849673][T13974] R10: ffffc90003439000 R11: ffffffff85f8e460 R12: 0000007ffdf540c5 [ 549.849690][T13974] R13: dffffc0000000000 R14: ffff888142368028 R15: 0000007ffdf540c5 [ 549.849708][T13974] FS: 00007fdb3bdf86c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 549.849729][T13974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 549.849745][T13974] CR2: 0000001b3311bff8 CR3: 000000005a77a000 CR4: 00000000003526f0 [ 549.849765][T13974] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 549.849780][T13974] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 549.849795][T13974] Call Trace: [ 549.849805][T13974] [ 549.849816][T13974] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 549.849853][T13974] drm_crtc_next_vblank_start+0x223/0x470 [ 549.849883][T13974] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 549.849908][T13974] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 549.849936][T13974] ? drm_gem_fb_vmap+0x230/0x8d0 [ 549.849987][T13974] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 549.850021][T13974] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 549.850052][T13974] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 549.850089][T13974] drm_atomic_helper_commit+0x5c7/0xb10 [ 549.850122][T13974] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 549.850157][T13974] drm_atomic_commit+0x262/0x2c0 [ 549.850183][T13974] ? __pfx_drm_atomic_commit+0x10/0x10 [ 549.850206][T13974] ? __pfx___drm_printfn_info+0x10/0x10 [ 549.850238][T13974] ? drm_client_rotation+0x47c/0x5b0 [ 549.850283][T13974] drm_client_modeset_commit_atomic+0x620/0x760 [ 549.850326][T13974] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 549.850374][T13974] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 549.850419][T13974] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 549.850460][T13974] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 549.850498][T13974] fb_pan_display+0x39b/0x680 [ 549.850532][T13974] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 549.850566][T13974] bit_update_start+0x4d/0x1e0 [ 549.850603][T13974] fbcon_switch+0x1568/0x2040 [ 549.850642][T13974] ? __pfx_fbcon_switch+0x10/0x10 [ 549.850687][T13974] ? __pfx_hide_cursor+0x10/0x10 [ 549.850718][T13974] ? is_console_locked+0x9/0x20 [ 549.850744][T13974] ? set_origin+0x346/0x480 [ 549.850772][T13974] csi_J+0x6c1/0xe50 [ 549.850808][T13974] do_con_write+0x4169/0x5200 [ 549.850830][T13974] ? rcu_is_watching+0x15/0xb0 [ 549.850878][T13974] ? __pfx_do_con_write+0x10/0x10 [ 549.850899][T13974] ? rcu_is_watching+0x15/0xb0 [ 549.850922][T13974] ? trace_irq_disable+0x37/0x110 [ 549.850954][T13974] ? preempt_schedule_irq+0xde/0x150 [ 549.850984][T13974] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 549.851018][T13974] ? rcu_is_watching+0x15/0xb0 [ 549.851047][T13974] ? n_tty_write+0x85d/0x1200 [ 549.851075][T13974] con_write+0x24/0x40 [ 549.851095][T13974] n_tty_write+0xd29/0x1200 [ 549.851133][T13974] ? __pfx_n_tty_write+0x10/0x10 [ 549.851160][T13974] ? __pfx_woken_wake_function+0x10/0x10 [ 549.851191][T13974] ? __pfx_n_tty_write+0x10/0x10 [ 549.851222][T13974] ? __pfx_n_tty_write+0x10/0x10 [ 549.851251][T13974] ? __pfx_n_tty_write+0x10/0x10 [ 549.851285][T13974] file_tty_write+0x551/0xa20 [ 549.851322][T13974] vfs_write+0x5c9/0xb30 [ 549.851355][T13974] ? __pfx_tty_write+0x10/0x10 [ 549.851387][T13974] ? __pfx_vfs_write+0x10/0x10 [ 549.851421][T13974] ? __fget_files+0x2a/0x420 [ 549.851461][T13974] ksys_write+0x145/0x250 [ 549.851494][T13974] ? __pfx_ksys_write+0x10/0x10 [ 549.851523][T13974] ? rcu_is_watching+0x15/0xb0 [ 549.851549][T13974] ? rcu_is_watching+0x15/0xb0 [ 549.851573][T13974] do_syscall_64+0xfa/0x3b0 [ 549.851607][T13974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.851631][T13974] ? clear_bhb_loop+0x60/0xb0 [ 549.851656][T13974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.851680][T13974] RIP: 0033:0x7fdb3af8ebe9 [ 549.851700][T13974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.851722][T13974] RSP: 002b:00007fdb3bdf8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 549.851752][T13974] RAX: ffffffffffffffda RBX: 00007fdb3b1b6180 RCX: 00007fdb3af8ebe9 [ 549.851771][T13974] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 549.851787][T13974] RBP: 00007fdb3b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 549.851803][T13974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.851819][T13974] R13: 00007fdb3b1b6218 R14: 00007fdb3b1b6180 R15: 00007fdb3b2dfa28 [ 549.851846][T13974] [ 549.851859][T13974] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 549.851877][T13974] CPU: 1 UID: 0 PID: 13974 Comm: syz.0.2213 Not tainted syzkaller #0 PREEMPT(full) [ 549.851902][T13974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.851917][T13974] Call Trace: [ 549.851927][T13974] [ 549.851936][T13974] dump_stack_lvl+0x99/0x250 [ 549.851964][T13974] ? __asan_memcpy+0x40/0x70 [ 549.851990][T13974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.852017][T13974] ? __pfx__printk+0x10/0x10 [ 549.852049][T13974] vpanic+0x281/0x750 [ 549.852070][T13974] ? __pfx__printk+0x10/0x10 [ 549.852095][T13974] ? __pfx_vpanic+0x10/0x10 [ 549.852116][T13974] ? is_bpf_text_address+0x26/0x2b0 [ 549.852148][T13974] panic+0xb9/0xc0 [ 549.852167][T13974] ? __pfx_panic+0x10/0x10 [ 549.852194][T13974] __warn+0x31b/0x4b0 [ 549.852214][T13974] ? vkms_get_vblank_timestamp+0x137/0x160 [ 549.852244][T13974] ? vkms_get_vblank_timestamp+0x137/0x160 [ 549.852280][T13974] report_bug+0x2be/0x4f0 [ 549.852304][T13974] ? vkms_get_vblank_timestamp+0x137/0x160 [ 549.852334][T13974] ? vkms_get_vblank_timestamp+0x137/0x160 [ 549.852362][T13974] ? vkms_get_vblank_timestamp+0x139/0x160 [ 549.852391][T13974] handle_bug+0x84/0x160 [ 549.852420][T13974] exc_invalid_op+0x1a/0x50 [ 549.852436][T13974] asm_exc_invalid_op+0x1a/0x20 [ 549.852454][T13974] RIP: 0010:vkms_get_vblank_timestamp+0x137/0x160 [ 549.852482][T13974] Code: 42 80 3c 28 00 74 08 48 89 df e8 f4 2f 2a fc 4c 89 33 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 75 83 05 cc e8 9a c5 c6 fb 90 <0f> 0b 90 eb e3 44 89 e1 80 e1 07 38 c1 0f 8c ff fe ff ff 4c 89 e7 [ 549.852498][T13974] RSP: 0018:ffffc9001767ed68 EFLAGS: 00010283 [ 549.852514][T13974] RAX: ffffffff85f8e596 RBX: ffffc9001767eee0 RCX: 0000000000080000 [ 549.852529][T13974] RDX: ffffc9000efc2000 RSI: 0000000000001501 RDI: 0000000000001502 [ 549.852542][T13974] RBP: 1ffff92002ecfddc R08: ffffc90003439000 R09: 0000000000000000 [ 549.852555][T13974] R10: ffffc90003439000 R11: ffffffff85f8e460 R12: 0000007ffdf540c5 [ 549.852568][T13974] R13: dffffc0000000000 R14: ffff888142368028 R15: 0000007ffdf540c5 [ 549.852584][T13974] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 549.852612][T13974] ? vkms_get_vblank_timestamp+0x136/0x160 [ 549.852642][T13974] ? vkms_get_vblank_timestamp+0x136/0x160 [ 549.852668][T13974] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 549.852696][T13974] drm_crtc_next_vblank_start+0x223/0x470 [ 549.852717][T13974] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 549.852737][T13974] ? __pfx_drm_crtc_next_vblank_start+0x10/0x10 [ 549.852759][T13974] ? drm_gem_fb_vmap+0x230/0x8d0 [ 549.852785][T13974] drm_atomic_helper_wait_for_fences+0x265/0x8c0 [ 549.852811][T13974] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 549.852835][T13974] ? drm_atomic_helper_prepare_planes+0x670/0xb60 [ 549.852863][T13974] drm_atomic_helper_commit+0x5c7/0xb10 [ 549.852889][T13974] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 549.852912][T13974] drm_atomic_commit+0x262/0x2c0 [ 549.852932][T13974] ? __pfx_drm_atomic_commit+0x10/0x10 [ 549.852950][T13974] ? __pfx___drm_printfn_info+0x10/0x10 [ 549.852974][T13974] ? drm_client_rotation+0x47c/0x5b0 [ 549.853003][T13974] drm_client_modeset_commit_atomic+0x620/0x760 [ 549.853037][T13974] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 549.853074][T13974] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 549.853104][T13974] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 549.853134][T13974] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 549.853164][T13974] fb_pan_display+0x39b/0x680 [ 549.853190][T13974] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 549.853216][T13974] bit_update_start+0x4d/0x1e0 [ 549.853244][T13974] fbcon_switch+0x1568/0x2040 [ 549.853280][T13974] ? __pfx_fbcon_switch+0x10/0x10 [ 549.853310][T13974] ? __pfx_hide_cursor+0x10/0x10 [ 549.853334][T13974] ? is_console_locked+0x9/0x20 [ 549.853353][T13974] ? set_origin+0x346/0x480 [ 549.853376][T13974] csi_J+0x6c1/0xe50 [ 549.853404][T13974] do_con_write+0x4169/0x5200 [ 549.853421][T13974] ? rcu_is_watching+0x15/0xb0 [ 549.853457][T13974] ? __pfx_do_con_write+0x10/0x10 [ 549.853473][T13974] ? rcu_is_watching+0x15/0xb0 [ 549.853490][T13974] ? trace_irq_disable+0x37/0x110 [ 549.853513][T13974] ? preempt_schedule_irq+0xde/0x150 [ 549.853538][T13974] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 549.853564][T13974] ? rcu_is_watching+0x15/0xb0 [ 549.853586][T13974] ? n_tty_write+0x85d/0x1200 [ 549.853607][T13974] con_write+0x24/0x40 [ 549.853622][T13974] n_tty_write+0xd29/0x1200 [ 549.853650][T13974] ? __pfx_n_tty_write+0x10/0x10 [ 549.853670][T13974] ? __pfx_woken_wake_function+0x10/0x10 [ 549.853694][T13974] ? __pfx_n_tty_write+0x10/0x10 [ 549.853713][T13974] ? __pfx_n_tty_write+0x10/0x10 [ 549.853734][T13974] ? __pfx_n_tty_write+0x10/0x10 [ 549.853754][T13974] file_tty_write+0x551/0xa20 [ 549.853783][T13974] vfs_write+0x5c9/0xb30 [ 549.853807][T13974] ? __pfx_tty_write+0x10/0x10 [ 549.853831][T13974] ? __pfx_vfs_write+0x10/0x10 [ 549.853858][T13974] ? __fget_files+0x2a/0x420 [ 549.853888][T13974] ksys_write+0x145/0x250 [ 549.853912][T13974] ? __pfx_ksys_write+0x10/0x10 [ 549.853934][T13974] ? rcu_is_watching+0x15/0xb0 [ 549.853953][T13974] ? rcu_is_watching+0x15/0xb0 [ 549.853971][T13974] do_syscall_64+0xfa/0x3b0 [ 549.853997][T13974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.854015][T13974] ? clear_bhb_loop+0x60/0xb0 [ 549.854034][T13974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.854052][T13974] RIP: 0033:0x7fdb3af8ebe9 [ 549.854067][T13974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.854083][T13974] RSP: 002b:00007fdb3bdf8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 549.854101][T13974] RAX: ffffffffffffffda RBX: 00007fdb3b1b6180 RCX: 00007fdb3af8ebe9 [ 549.854116][T13974] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 549.854128][T13974] RBP: 00007fdb3b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 549.854141][T13974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.854152][T13974] R13: 00007fdb3b1b6218 R14: 00007fdb3b1b6180 R15: 00007fdb3b2dfa28 [ 549.854173][T13974] [ 549.854515][T13974] Kernel Offset: disabled