last executing test programs: 1m13.359753685s ago: executing program 3 (id=211): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000680)=ANY=[@ANYRESDEC=r1], 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x24}, 0xc644}, @in6={0xa, 0x4e20, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffa}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf9e}], 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x77}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000900)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x5) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m10.949249855s ago: executing program 3 (id=218): pipe2(0x0, 0x4080) socket$inet6(0xa, 0x80002, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={0x0}) 1m10.630405637s ago: executing program 3 (id=220): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x11, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0xe4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r2, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r4, 0x7000000) preadv2(r4, &(0x7f0000000000)=[{&(0x7f0000002340)=""/79, 0x4e}], 0x1, 0x3700, 0xfa1, 0x0) 1m10.358792653s ago: executing program 3 (id=224): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bf001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x50) (async, rerun: 64) listen(r0, 0x0) (async, rerun: 64) listen(r0, 0x400) 1m10.12458494s ago: executing program 3 (id=226): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="300000000000000029000000370000007c038957c914631ee0d072b2dd4c1f01014911d79a8a8e825d40000000040000"], 0x30}}], 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x7fffc}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f00000000c0)=0xe8) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000402, r9, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r11, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x800, 0x3, 0x3dc}, 0x1) sendmsg$NFT_BATCH(r10, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m6.179979148s ago: executing program 3 (id=238): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x4e) (async) r2 = syz_io_uring_setup(0x10f, &(0x7f00000001c0)={0x0, 0x1726f, 0x80, 0x2, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f000001f500)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f5, 0x6021, 0x0, 0x0, 0x0) (async) r5 = socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='\xfd\x03k.\x9f\xa2\x92\x8b\xd3\x0e\xd8\xdf\xc5T\x1a\xd4\a2\xbe2\x1eI\b\x8d^0\xd8y\xf8\xd8\xc4\xd6_R\x1a\xddk\xe0\x10', &(0x7f0000000780)="e9f821881f96074f8156c1e8adef929bb2e181ae943df9a051891829bd702ce5aaf5cff3fc3f19c6647857b43606db8a1f652f2cb5a6553398f7a3a8b313ef3def97b4506cc086679fb8f234b12dbf84cc319c6c7917dae60e82c92c469842b9d7930f01fb950176646bd19d364d68f1c5daac692e5b55cdc2d14749199bd25bdeab574944f9b948545fbdfd746a0e172464b450ac5249858f29e0e440e8fbe04c4537951c37a12372570eefc5b7e2326c1031eba28674ea392e1f3da80147a938d0fd37f05585082100b3a8b72b3675e36c064276e7f0b714061f4b90b04343aee2f7e13939968570d27ba3fc8807d436eec917657c37e73bdd5e695d4fdd1e74cbdc912bf0eae3c508b7d0982b6cb8e1ed37bc4978d82eb28c7df4bf8622c491431060813c142c041e9135ed156d9532ece5c1cb994946aa264c6a60feda336807293a4f2740964c7c8ba7725b5202aeaac821c3ae171ae89b1e7c35d4fefda1b0b467be6cb3399eab17a9d990d314a0e8b043c7074f9da6bf404b5aa7c46a229387069badc8310af1281f11a1ce4e52a7babf75e3a5f9f8bb3a509f3df8383a7cd9f8d374ba9d", 0x1a8) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0x110, r8, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) (async) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async, rerun: 64) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_OWNER(r10, 0xaf01, 0x0) (async, rerun: 32) syz_open_dev$video(&(0x7f00000000c0), 0x2, 0x200001) (rerun: 32) 50.366210632s ago: executing program 32 (id=238): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x4e) (async) r2 = syz_io_uring_setup(0x10f, &(0x7f00000001c0)={0x0, 0x1726f, 0x80, 0x2, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f000001f500)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f5, 0x6021, 0x0, 0x0, 0x0) (async) r5 = socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='\xfd\x03k.\x9f\xa2\x92\x8b\xd3\x0e\xd8\xdf\xc5T\x1a\xd4\a2\xbe2\x1eI\b\x8d^0\xd8y\xf8\xd8\xc4\xd6_R\x1a\xddk\xe0\x10', &(0x7f0000000780)="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", 0x1a8) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0x110, r8, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) fsopen(&(0x7f00000003c0)='gfs2meta\x00', 0x1) (async) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async, rerun: 64) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_OWNER(r10, 0xaf01, 0x0) (async, rerun: 32) syz_open_dev$video(&(0x7f00000000c0), 0x2, 0x200001) (rerun: 32) 12.782651201s ago: executing program 1 (id=400): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x46c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000440)=""/210, 0xd2}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.980661127s ago: executing program 0 (id=402): r0 = syz_open_dev$video4linux(&(0x7f0000000d00), 0x1000, 0x80000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000d40)=0x3200e0) clock_nanosleep(0x1, 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x80) socket$qrtr(0x2a, 0x2, 0x0) syz_io_uring_setup(0x3d09, &(0x7f0000000480)={0x0, 0xfffffffd, 0x2, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x4, 0x8000, 0x40024e}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4a, 0x9, 0x8, 0x0, 0x400003}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) get_mempolicy(0x0, &(0x7f0000000140), 0x3, &(0x7f0000ffc000/0x3000)=nil, 0x6) r10 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="200556010000b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GET_PIN_FILE(r9, 0x8004f50e, &(0x7f0000000140)) r11 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r11, 0x80000000004, 0x0) 10.145103954s ago: executing program 1 (id=410): socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0xee01) tkill(0x0, 0x13) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800800000000000b80000003600"/24], 0x18}, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000000)='logfs\x00', 0x1) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x7, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300020c000000fdffffffffdbdf2503000600002000000200000064010100000000000000000002000100000000000700fb0300190000030005000000000002000000ac1414aa0000000000000000010003d620124b4608000000000001001400000000"], 0x60}, 0x1, 0x7}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = semget$private(0x0, 0x7, 0x0) semtimedop(r4, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000007c0)=ANY=[], 0xffe0) 8.812044745s ago: executing program 0 (id=414): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) r2 = io_uring_setup(0x191a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0xf1, 0x800) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 6.977838288s ago: executing program 1 (id=421): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x5d2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xffffffde}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r6 = io_uring_setup(0x62fc, &(0x7f00000000c0)={0x0, 0x5698, 0x2000, 0x2, 0x2a9}) syz_io_uring_setup(0xdb9, &(0x7f00000021c0)={0x0, 0xec2d, 0x40, 0x1, 0x158, 0x0, r6}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r8, 0x0, 0x0, 0x80800) r9 = socket$packet(0x11, 0x3, 0x300) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000380)={0x5, {0xfffffff9, 0x8, 0x11e45439, 0x3}}) futex(&(0x7f000000cffc)=0x2, 0x5, 0x801, 0x0, &(0x7f00000002c0), 0x40000001) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r11, 0xfffffffffffffff5, 0x1) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x27ff, 0xd83, 0x6}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BLKRRPART(r12, 0x125f, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=ANY=[@ANYBLOB="28000000200c01000000000400000000020000cd47000000120000000c0014488000000000000018bd9fc31494a0cb4366d340728b8bc47db7623ebb37cc67f22cf732b6840d8ab02c4092fc00"], 0x28}}, 0xc0) 6.659268124s ago: executing program 1 (id=422): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x16, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x0, 0x2}]}}}], 0x38}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r4) 5.70879026s ago: executing program 0 (id=425): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd1, 0x0, 0xc844, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x200000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xce0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f00000000c0)={0x0, 0x800, 0x8, 0xfffffffb, 0x1, [], [0x40000000, 0xd386, 0x401, 0xfff], [0x8, 0x5], [0xffffffffffff7fff, 0x200000000003, 0x5, 0x9]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x6) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x8, 0x800005, 0x1f0}, &(0x7f0000000040), &(0x7f0000002d00)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt_acct\x00') recvmsg$unix(r7, 0x0, 0x100) setsockopt$inet_tcp_buf(r7, 0x6, 0xb, &(0x7f0000000000)="f45847d6f281d47954cc129ff101a75523399b544b228bec4c4530c320", 0x1d) 5.410413706s ago: executing program 4 (id=426): r0 = socket$inet6(0xa, 0x5, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x9}, {0xa, 0x4e24, 0x2, @empty, 0xa}, r3, 0xfffffffb}}, 0x48) (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @mcast2, 0x9}, {0xa, 0x4e22, 0x3fc, @mcast1, 0x8}, r3, 0x9}}, 0x48) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) (async, rerun: 32) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000400)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, r8, 0xb0b0b0b0}) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r5}}, 0x18) (async) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x3, @local, 0x6}, @in6={0xa, 0x4e24, 0x5, @loopback, 0x6}, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x5}], 0x54) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x1c) 4.115110345s ago: executing program 5 (id=429): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000400)=[{r2}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x214a8, 0x12104}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000280)={0xb, "5dcfa83e8a383b18ecc6e237c9e4c8f73fd861f3532f99fc4f4327317c1539c6", 0x2, 0x6, 0x3, 0x80001, 0x7000a07, 0x4}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') socket$kcm(0x2, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r4, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000000)=[{0x9, 0x201, 0x22, &(0x7f00000000c0)="2804ad0ca2888ad40b3035c92d7a381858d38d73ff1e195847be0000000000000000"}, {0x7ff, 0x1800, 0x0, 0x0}], 0x2}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = open$dir(&(0x7f0000000480)='./file0\x00', 0x103680, 0x20) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) vmsplice(r7, &(0x7f0000000400)=[{&(0x7f0000000540)="e8165ba65d46224f8c", 0x9}], 0x1, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r8, r9, 0x0, 0x6) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) 3.816665365s ago: executing program 2 (id=430): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd0ffffff}, 0x48) 3.642853002s ago: executing program 2 (id=431): socket$inet(0x2, 0x4, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') fchdir(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ftruncate(r0, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000614000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r3, 0x8000000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffc, 0x24, 0x6, 0x1101, 0x1}) syz_open_dev$I2C(&(0x7f0000000240), 0x0, 0x2080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0x1e0, 0x240, 0x32, 0xfffffffe, 0x0, 0x0, {}, {0x8000a, 0x79}, {0x2f4a, 0xfffffe}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x1, 0x0, 0x4}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.34605961s ago: executing program 0 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a50000008300000cbf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.066964991s ago: executing program 0 (id=433): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) read$FUSE(r1, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x21a028b, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) r6 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x400, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x3, 0x88) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$binfmt_misc(r10, 0x0, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) shutdown(r9, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 3.064556906s ago: executing program 1 (id=434): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x1, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x8080) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.926365456s ago: executing program 2 (id=435): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000240)={0x9, 0x6, 0x1, "9fb24c12863ed144ba2db0eec6d5218ca9894696e6e205304e26efb0a3e22f53", 0x31435750}) fanotify_mark(r1, 0x101, 0x8000011, r2, 0x0) preadv2(r2, 0x0, 0x0, 0x0, 0x97, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_dev$ndb(&(0x7f0000001200), 0x0, 0x2100) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000001340)={'\x00', 0x9, 0x7fff, 0x0, 0xfffffffffffffffe}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x9, 0x1, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x0, 0x8f}) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000140)=""/142, &(0x7f0000000200)=0x8e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x42800) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f00000004c0)={0x9, 0x2, 0x0, "0e28030426be4946eec94df25b7b4abc3e8f000000002400b375d700", 0x47504a50}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r9, 0x0, 0x22002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r9, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) 2.440775968s ago: executing program 2 (id=436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f00000002c0)={0x3, 0x4}) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async, rerun: 32) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r6, 0x5100) (async, rerun: 64) read$midi(r5, 0x0, 0x0) (async, rerun: 64) r7 = userfaultfd(0x801) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$inet6(0xa, 0x3, 0x3c) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000004242c098ffce752d0c0001007061796c6f6164002400028008000444000000c208000240000000000800054000000000080003400000000005000740610000001456ec001100010000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}}, 0x4000040) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) (async) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRES16=r12, @ANYRESDEC=r0, @ANYRES32=r11, @ANYRESHEX=r0], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x24000000) 2.233746847s ago: executing program 4 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0xc0a85320, &(0x7f00000000c0)={0x1080}) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x4) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x101}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x5c}}, 0x24008040) (rerun: 32) 2.122670014s ago: executing program 5 (id=438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x0, 0xc, 0x3, 0x7, 0xc, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000080)=""/245, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x2df, 0xff}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x1, 0x5, 0x1, 0x5}, {0x0, 0x3, 0x6, 0x4}, {0x2, 0x1, 0xb, 0x6}, {0x5, 0x1, 0xf, 0xc}, {0x5, 0x2, 0x8, 0x7}, {0x0, 0x1, 0xf, 0x7}, {0x0, 0x2, 0x0, 0x9}, {0x3, 0x3, 0x4, 0x3}], 0x10, 0x2}, 0x94) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000340)={0x0, 0x3, 0x6, 0x6}) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000340)={0x0, 0x3, 0x6, 0x6}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x4, &(0x7f0000000440)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000480)='GPL\x00', 0x800, 0x3f, &(0x7f00000004c0)=""/63, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, r2, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x0, 0x8dbd, 0x7}, 0x10, 0x0, r0, 0x2, 0x0, &(0x7f00000005c0)=[{0x0, 0x2, 0xf, 0xc}, {0x5, 0x4, 0x10, 0x1}], 0x10, 0x7fff}, 0x94) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x5, 0x4}, 0x50) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x5, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001940)={@private, @multicast2}, &(0x7f0000001980)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001940)={@private, @multicast2, 0x0}, &(0x7f0000001980)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x11, 0x11, &(0x7f0000001a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5a3, 0x0, 0x0, 0x0, 0xee}, {}, {}, [@ldst={0x2, 0x3, 0x1, 0x5, 0xa, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001b00)='GPL\x00', 0x200, 0xcf, &(0x7f0000001b40)=""/207, 0x41000, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001c40)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001c80)=[r1, r1, 0x1, r1, r1], &(0x7f0000001cc0)=[{0x3, 0x2, 0x0, 0x5}], 0x10, 0x2}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x11, 0x11, &(0x7f0000001a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5a3, 0x0, 0x0, 0x0, 0xee}, {}, {}, [@ldst={0x2, 0x3, 0x1, 0x5, 0xa, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001b00)='GPL\x00', 0x200, 0xcf, &(0x7f0000001b40)=""/207, 0x41000, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001c40)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001c80)=[r1, r1, 0x1, r1, r1], &(0x7f0000001cc0)=[{0x3, 0x2, 0x0, 0x5}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xc, 0x24, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0xba5, 0x1000, &(0x7f0000000940)=""/4096, 0x40f00, 0x21, '\x00', r7, @fallback=0xc, r2, 0x8, &(0x7f00000019c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001a00)={0x1, 0x2, 0xa, 0x5}, 0x10, 0x0, r8, 0x3, 0x0, &(0x7f0000001dc0)=[{0x1, 0x1, 0xc, 0x3}, {0x4, 0x1, 0x7, 0x8}, {0x0, 0x4, 0x3, 0xa}], 0x10, 0x9}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xc, 0x24, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0xba5, 0x1000, &(0x7f0000000940)=""/4096, 0x40f00, 0x21, '\x00', r7, @fallback=0xc, r2, 0x8, &(0x7f00000019c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001a00)={0x1, 0x2, 0xa, 0x5}, 0x10, 0x0, r8, 0x3, 0x0, &(0x7f0000001dc0)=[{0x1, 0x1, 0xc, 0x3}, {0x4, 0x1, 0x7, 0x8}, {0x0, 0x4, 0x3, 0xa}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002180)={{r4, 0xffffffffffffffff}, &(0x7f0000002100), &(0x7f0000002140)=r3}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002200)=@o_path={&(0x7f00000021c0)='./file0\x00', 0x0, 0x4018, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x18, 0x12, &(0x7f0000001ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xcd3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0xcb}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001f80)='GPL\x00', 0xffff1097, 0x85, &(0x7f0000001fc0)=""/133, 0x41000, 0x4, '\x00', r7, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000002080)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000020c0)={0x0, 0x5, 0x4, 0xfffffff8}, 0x10, 0xffffffffffffffff, r8, 0x3, &(0x7f0000002240)=[r10, r6, r5, r11, r5, r5], &(0x7f0000002280)=[{0x2, 0x2, 0x6}, {0x3, 0x1, 0xa, 0x5}, {0x3, 0x5, 0xc, 0x3}], 0x10, 0x4}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000023c0)=@o_path={&(0x7f0000002380)='./file0\x00', 0x0, 0x4010, r3}, 0x18) writev(r9, &(0x7f0000002440)=[{&(0x7f0000002400)="15a407c6a8a90d79a6a89d02d1811708c17408529a27db7c06042db28be3f303b65be45f6f710651ff31b53f327ce751f0c183e0", 0x34}], 0x1) (async) writev(r9, &(0x7f0000002440)=[{&(0x7f0000002400)="15a407c6a8a90d79a6a89d02d1811708c17408529a27db7c06042db28be3f303b65be45f6f710651ff31b53f327ce751f0c183e0", 0x34}], 0x1) syz_open_dev$vbi(&(0x7f0000002480), 0x0, 0x2) (async) syz_open_dev$vbi(&(0x7f0000002480), 0x0, 0x2) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f00000024c0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002600)={@fallback=r9, 0x2, 0x0, 0x2, &(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(r12, 0xc0189371, &(0x7f0000002640)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r13, 0x84, 0x6b, &(0x7f0000002680)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @multicast2}], 0x4c) ioctl$IOMMU_IOAS_COPY$syz(r12, 0x3b83, &(0x7f0000002700)={0x28, 0x10000, 0x0, 0x0, 0x5c098, 0x800, 0x6, 0x68d96}) socket$netlink(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_SET_POWER_SAVE(r13, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}}, 0x20000080) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002880)={@local, @multicast1}, &(0x7f00000028c0)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002880)={@local, @multicast1, 0x0}, &(0x7f00000028c0)=0xc) sendmsg$nl_route_sched(r12, &(0x7f00000064c0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006480)={&(0x7f0000002900)=@newchain={0x3b80, 0x64, 0x703, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0xc, 0xe}, {0xf, 0xa}, {0x0, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'virt_wifi0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0xeb25}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xffe0}}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_CLASSID={0x8, 0x1, {0x11, 0x2}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x37dc, 0x2, [@TCA_MATCHALL_ACT={0x1cac, 0x2, [@m_police={0x1ca8, 0xd, 0x0, 0x0, {{0xb}, {0xc7c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x8f, 0x3da, 0x4, 0x0, 0x6, 0x7, 0x7, 0x4, 0x7, 0xc5, 0x3, 0x35, 0x9e, 0x9, 0x9, 0x1, 0x6, 0xffff7fff, 0x101, 0x8, 0x3, 0x6a8, 0x6, 0x3, 0x1, 0x6d5b, 0x80000000, 0x84, 0x1, 0x7, 0xfffffc08, 0x4, 0x9, 0x8, 0x10, 0x5, 0x0, 0x6, 0x9, 0x5, 0x200, 0x81, 0x83, 0x0, 0xd000000, 0x8, 0xc6, 0x4, 0xffff8000, 0x2, 0x1400, 0x80000001, 0x6, 0x6, 0x2, 0x0, 0x2, 0x2, 0x8, 0x0, 0xc, 0x6, 0x5, 0x4, 0xa3, 0x1000, 0x1ff, 0x7fffffff, 0x5, 0x9, 0x3, 0x8, 0x0, 0x1c8, 0x1, 0x6, 0x5, 0x5c7c97e5, 0x2, 0x6d41, 0xffff0000, 0x8, 0x7, 0x0, 0x8, 0x2, 0x2, 0x45e, 0xfffffff7, 0xc, 0x8, 0x2, 0xdf91, 0x9, 0xfffffffb, 0x5, 0xffff, 0x1d, 0x200, 0x2, 0x9, 0x2, 0x6, 0xffffffff, 0x10000, 0x10, 0x9, 0x3, 0x2, 0x3, 0x46ae, 0x0, 0x7, 0x6, 0x2f8cbbe9, 0xde, 0x7, 0x2, 0xb498, 0x9, 0x672, 0xfb, 0xffffffff, 0x6, 0x401, 0x1, 0xff, 0x80000000, 0x8, 0x1384, 0x4, 0x200, 0x80000000, 0x2, 0x8, 0x5, 0xc02, 0x0, 0x8, 0x81, 0xffffffff, 0xc9, 0x7fff, 0x3, 0x3ff, 0x7, 0x8, 0x7, 0x51, 0xc5, 0x5, 0xfffffffe, 0xa, 0xe5, 0x8, 0x3, 0x1, 0x28, 0x1, 0x3, 0x7, 0x1, 0x0, 0x5, 0x4, 0x7, 0x1df, 0x4, 0x2, 0x7a8, 0x3, 0x8, 0xc, 0x5, 0x9, 0x5, 0xe4d1, 0xd, 0xfffffffa, 0x81, 0x80, 0x3, 0x9, 0xa8, 0x9, 0xc, 0x7fff, 0x5, 0x8, 0x2, 0x5, 0x6, 0x2, 0x7f, 0x4, 0xffff0001, 0xa, 0x5, 0x80, 0x6, 0xa4, 0x80000, 0x6d36c6d0, 0x69e, 0x1, 0x81, 0x0, 0x7, 0x3, 0x9, 0xff, 0x8, 0x2, 0xfffffffe, 0x4, 0x7, 0x3, 0x64e, 0x400, 0x2, 0x5, 0x1, 0x3, 0x0, 0xfffffffa, 0x80, 0x0, 0xb3, 0x80, 0xf47, 0x8000, 0x1, 0x7, 0xfff, 0xfffffff1, 0x10, 0xffff, 0x0, 0x5, 0xc316, 0x0, 0xa, 0x48, 0x4, 0xe, 0x3ff, 0x7, 0x2, 0x0, 0x40a, 0x2, 0x9, 0x6c9, 0x401]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}], [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x0, 0x10, 0x3, 0x800, 0x9, 0x8, 0x3, 0x6, 0x9e1, 0x7f5b, 0x4, 0x3, 0x3, 0x7, 0x8000, 0xa, 0x8, 0x8, 0xdf26, 0x9, 0x9bd, 0x0, 0x4a, 0xfffffe04, 0xfff, 0x8, 0x7ca, 0x2, 0x4, 0x8, 0x80000, 0xf011, 0x4, 0x8, 0x8, 0x4, 0x8, 0x2, 0x0, 0x5, 0x4, 0x4, 0x5, 0x2, 0x9, 0x2cb1, 0x57, 0x101, 0x6c55, 0x9, 0x3, 0x54ed, 0xa, 0x9, 0x3ff, 0x7f, 0x78a, 0x4, 0x4f, 0xfffffffe, 0x240000, 0x6, 0x0, 0x2, 0x7, 0x4, 0x800, 0x80000001, 0x4, 0x10, 0xc, 0xfffffff8, 0x0, 0x6, 0x58, 0xf, 0x37, 0x0, 0xa7, 0x0, 0x40, 0x8, 0x4, 0x7, 0x6, 0x8, 0x6, 0x2, 0x9, 0x9, 0xfffff020, 0x800, 0x90, 0x4, 0x6, 0x35, 0x6, 0x3ff, 0x9, 0x0, 0x9e, 0xd, 0x2, 0x4, 0x6, 0x101, 0xd, 0x5, 0x0, 0x2, 0xe53, 0x1, 0x3, 0x80, 0x4, 0xfffffff2, 0xde, 0x40, 0x80000001, 0xd, 0x8, 0x1, 0x8, 0x0, 0x7, 0x0, 0x2, 0xc0, 0x1, 0x8, 0x8, 0x6, 0x0, 0xe000000, 0x3ff, 0x3, 0xe61, 0x0, 0x5, 0x80000000, 0x3, 0x4, 0x5, 0x3, 0x7fffffff, 0x4, 0x5, 0x7, 0x6, 0x4d5, 0x800, 0x6, 0x3e4, 0x2, 0x5, 0x8, 0x2, 0x4, 0x0, 0xda8, 0x5, 0x4, 0x7, 0x820a, 0xc7dc, 0x0, 0x2, 0x2, 0x6, 0x44, 0xc, 0x7, 0x4, 0x3, 0x7, 0x3, 0x4, 0x7fffffff, 0x8, 0x9, 0x80, 0x4, 0x2, 0x882e, 0x3, 0x5, 0xc159, 0x5, 0x100, 0xb, 0x4, 0x6, 0x3961c3a, 0x2, 0xfffffffc, 0x2, 0x55, 0x1000, 0x7ff, 0x8, 0x4, 0x2, 0x4, 0x2, 0x3, 0xc, 0x7, 0x9, 0x1, 0x6, 0x0, 0x2, 0x3, 0x6, 0x8, 0x4, 0x4, 0x4, 0x19, 0x80000001, 0x800, 0x79e, 0x5, 0x3, 0x89, 0x5, 0x6, 0x9, 0x6, 0x2, 0x4, 0x7ff, 0x2, 0x2, 0xffffffff, 0xf, 0x2, 0x4, 0x6, 0xe, 0x8, 0x96, 0x5955, 0x73, 0x0, 0x829, 0x600000, 0x0, 0x2, 0x1, 0x6, 0x5ae, 0xc, 0x6, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2008000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3234, 0xfffffff9, 0x3, 0x2aba, 0x4, 0xfffffe01, 0x1, 0x6, 0x8, 0x69ee, 0x22, 0x8ad, 0x7, 0xfffffffc, 0x3ff, 0x0, 0x6, 0x698b, 0x4, 0x8, 0x3ff, 0x1, 0xfffffffb, 0xfff, 0xc, 0x4, 0x7, 0x15a, 0x1, 0x5, 0xc70, 0x2, 0xa8, 0x2, 0x7ad9, 0x81, 0x0, 0x7f, 0x4, 0x9, 0x800, 0x7, 0x94, 0x6, 0x0, 0xfffffff8, 0x7, 0x4, 0xfffffff9, 0xffffff00, 0x1ff, 0x2, 0x3, 0x8, 0x10001, 0x0, 0x800, 0x7, 0x63e8, 0x6, 0x7, 0xfd, 0x9, 0x0, 0x7, 0x3, 0x7f, 0x6, 0xbd, 0x4, 0xb16, 0x19c, 0x5, 0x1e00000, 0x0, 0x7, 0x3, 0x3, 0xe, 0xfffffffd, 0x7, 0x5, 0x7, 0x8, 0x0, 0xe94, 0xa, 0x7, 0x3, 0x5, 0x7fff, 0x7e2, 0x1000, 0x9fe, 0x3, 0x9a2, 0xa, 0x7fffffff, 0x4, 0xe, 0xb, 0x9, 0x2, 0x10, 0x1, 0x4, 0x4, 0x158, 0x8000, 0x7, 0x3, 0x3, 0x5, 0x1, 0x0, 0x5, 0x7, 0x7, 0x2, 0xea, 0xfffffffe, 0x7ff, 0x5, 0xfff, 0xd, 0xa9, 0x0, 0xf4, 0x9, 0xfffeffff, 0x2, 0xc98, 0x8001, 0x5, 0xf, 0x4, 0x4, 0x7fff, 0x5, 0x1000, 0xfffffffb, 0x2, 0x80000001, 0x2, 0x1, 0x7fffffff, 0x9dc, 0xffff, 0x1, 0x0, 0x9, 0x7, 0xff, 0xfff, 0x4, 0x2, 0x8, 0x0, 0x6, 0xfffffe58, 0x29, 0x0, 0xea8, 0x3d, 0xf, 0x5, 0x644, 0x3, 0x3, 0x7, 0x9, 0x10000, 0x10, 0x936, 0x2, 0x6, 0x6, 0x3ff, 0x4, 0x0, 0x9, 0x5, 0xb, 0x2, 0x10001, 0xfffffffd, 0x8, 0xa, 0x2, 0x4, 0x3, 0xf7d, 0x3, 0x0, 0x3, 0x9, 0x0, 0x9, 0xe, 0x4, 0x0, 0x101, 0x7bdc, 0x9, 0x40, 0x5, 0x2, 0x7, 0xfffffff8, 0x8, 0x1, 0xfffffff7, 0x3, 0x8000, 0xd, 0x7fffffff, 0x59, 0x9, 0x29, 0x49a50892, 0x8, 0x0, 0x9, 0x0, 0x1, 0xa81b, 0x2, 0x6, 0x9, 0x0, 0x81, 0x3bf, 0xc2, 0x3ff, 0x0, 0x14, 0xb3e, 0x4, 0x200, 0x6, 0x8, 0x42, 0x35d, 0xaec8, 0x8, 0x3, 0x3ff, 0xfffffff7, 0x8, 0x200000, 0x20, 0x2, 0x6, 0x1, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x0, 0xffff7fff, 0x6e4, 0xb2, {0x6, 0x2, 0x8, 0x73c, 0x8, 0x47b5}, {0x4, 0x0, 0x8, 0xfffa, 0xf, 0x8}, 0x6, 0x4, 0xfffff001}}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xffe0}}, @TCA_MATCHALL_ACT={0x1894, 0x2, [@m_sample={0x12c, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x100, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x13c, 0x1e, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd81}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb5b}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}]}, {0xd0, 0x6, "c5f8758edefa7489a624b95058500e51438c4841d38425b200ac5e1752cfc584f7ff73fbbcb3490666e25301f3bcf665cb2750b4846dfab080eabb7d121d7612b9b270188e5293ef87c9eab3aea1bf0452245d48e76f9cd00434bfbb4048b53d8761962238f604105d73e88c392a01f02e2367e47b2b9e473ca50ba2fcc86c3aa77445c595d93e3d0fdca5e7dea8d690f50f876b4b932ca64d4b81b5e084e8cddd1bd078145119916481e0adf6bc4a798189df7dbc5577a2130c47afbd5f2877a58d968f104b2a0ca24cde7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xdc, 0x0, 0x0, 0x0, {{0x7}, {0x7c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x15}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}, @TCA_CT_LABELS={0x14, 0x7, "4357f6eba9544e8434a36135d0dc936c"}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x3a, 0x6, "482770739cf5bf46f22748ede65d74d904f411ee287575f5275e30bdcaf98cde5a74b51da13d4dc124c7f83f2382f9ac96aebeb57c20"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x94, 0x1f, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x70, 0xffffffffffffffff, 0x6, 0x9}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0x7fff, 0x8, 0x2, 0x80000000}, 0x8}}]}, {0x2b, 0x6, "93fdc896b97f8d0eb00d85da42a3aa0a7d7ded1e6d88660684888b4ab3a4221d3ad272bfa4e40a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x14b8, 0x3, 0x0, 0x0, {{0xb}, {0x1454, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x341d0739}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x100, 0x0, 0x2, 0x80000000, 0x7, 0x4, 0x1000, 0x9, 0xfffffffa, 0x8000, 0xfff, 0x6, 0x70, 0x0, 0x8, 0x6, 0x5, 0x97d, 0x1000, 0x8, 0xd7, 0x3, 0xffffffff, 0xd, 0x3, 0x5, 0x8, 0x8, 0x4, 0x6, 0x5, 0xd282, 0x5, 0x0, 0x3, 0x98, 0x8, 0x10001, 0x7, 0x0, 0x4, 0x7, 0x40, 0xff, 0x100, 0x5, 0x6, 0x8, 0x1, 0x1000, 0x10, 0x10000, 0x7f, 0x9, 0x400, 0x10000, 0x2, 0x0, 0xb54, 0xf08, 0x2a0000, 0x6, 0x0, 0x7fffffff, 0xa, 0x18, 0x3, 0x200, 0x82, 0xcc3, 0x10000, 0x4, 0x2, 0x0, 0x504d, 0x80000001, 0x0, 0x5, 0x913, 0x0, 0x9, 0x4, 0x8, 0x9, 0x400, 0x0, 0x7, 0x81, 0x10, 0x1ff, 0x3ff, 0x3ff, 0x1, 0x5f1, 0x8, 0xd6a, 0xfffffffa, 0x800, 0xaa9, 0x9b, 0x4, 0x6, 0x7ff, 0x7, 0x5, 0x1, 0x5, 0xffffffff, 0x5, 0x5, 0x1, 0xd9, 0x3, 0x0, 0x6, 0x2, 0xb, 0x9188, 0x2a79, 0x4, 0x6, 0x8, 0x2, 0x9, 0xff, 0xfff, 0x8000, 0x7fff, 0x0, 0x9, 0xd0, 0x100, 0x8000, 0x6, 0x8, 0x8, 0x0, 0x4, 0x400, 0x0, 0x3, 0x40, 0x2, 0xfffffff7, 0x2, 0x0, 0xaed7, 0xfffffffd, 0x101, 0x5a7, 0x763c, 0xffff, 0x7fffffff, 0x3, 0x8, 0x6, 0x3, 0x81, 0x9, 0x1cfe, 0x5, 0xf, 0x1, 0x1ff, 0x7, 0x750588fd, 0x0, 0x6, 0x5, 0x6, 0x4, 0x6, 0x8, 0x4, 0x8000, 0x2ba8, 0xf, 0x9, 0x5, 0xc4, 0xc, 0xd, 0x1, 0x4, 0x8, 0x1, 0x1, 0x5, 0x18, 0x8, 0x8, 0xa, 0x8, 0x5, 0x7, 0x57e, 0x8, 0x9, 0xfffffffd, 0x4, 0x7, 0x7, 0xff, 0xb, 0x5, 0xb, 0x8, 0xfff, 0xfffffffe, 0x1, 0x2, 0x9, 0x88e, 0x8, 0x0, 0xe0, 0xbb3c, 0x7, 0x2, 0xb, 0x1, 0xfffff000, 0x2, 0xe6, 0x1000, 0xd13, 0x7, 0x1, 0x40, 0x4, 0xe179, 0x2890dbf7, 0x2, 0x1f6b, 0x9, 0x9999, 0x0, 0x26ae, 0x4, 0xffff, 0x4, 0x10001, 0x4, 0x12, 0x9, 0x0, 0x40, 0x1ff, 0x2, 0x8, 0x0, 0x3, 0x4, 0x81]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x800, 0x5, 0xff, 0x80000000, 0x8, 0x0, 0x9, 0x7, 0xffff, 0x1, 0xfffff195, 0xfffffffe, 0xab97, 0x3, 0x2, 0xd0ac, 0xdb8, 0x6baf, 0x80000000, 0xbe2, 0x101, 0x2f9, 0x1, 0x6197c99, 0x2, 0x3, 0xf, 0xfffffc00, 0x7, 0x10, 0x0, 0x8, 0x10, 0x8, 0x7f, 0x9, 0x7, 0x3ff, 0xc03, 0x3, 0x6, 0x59a0, 0x8, 0x101, 0x5, 0x2, 0x5, 0x0, 0xffff, 0x8, 0xffffffff, 0x7, 0x2556, 0xbfd3, 0x0, 0xde87ff9, 0x101, 0x7fffffff, 0x5, 0x875, 0x2, 0x7, 0x2, 0x1dc1, 0x9bd, 0xffffffff, 0x93, 0x3, 0x6, 0xfffffffe, 0x401, 0x4, 0x4, 0x6, 0x0, 0xb4, 0x1ede, 0x10000, 0x23, 0x6, 0x101, 0x8, 0xfffffffb, 0x2, 0xc02, 0x23, 0x7dc, 0x8, 0x4, 0x1f, 0x1, 0x8bc, 0x8, 0x0, 0x9, 0x8, 0x7, 0x401, 0x1, 0x800, 0x800, 0xfffffff8, 0x6, 0x3, 0xbd3, 0x100, 0xfc000000, 0x3, 0x3f9e, 0x7f8000, 0xf7, 0x0, 0x2, 0x3, 0xfffffff2, 0x9, 0xfc, 0x0, 0x100, 0x800, 0x9341, 0x8, 0x1, 0x6, 0x100, 0x1c000, 0x8, 0xff, 0x40, 0x728, 0x0, 0x1, 0x4, 0x9, 0xfffffff6, 0x8f, 0xfffffff9, 0x2, 0x58c, 0x0, 0x0, 0x4, 0x5, 0xb, 0xb12, 0x1dc0000, 0x1c00000, 0x2, 0x80000000, 0x3, 0xc, 0x4, 0x2, 0x10000, 0x8, 0x0, 0x6, 0x5, 0x7fffffff, 0x4, 0x16, 0x9, 0xe, 0x4, 0x4, 0x7, 0x2, 0x7, 0x5, 0x1, 0x1, 0x6, 0x4, 0x8, 0x5, 0x81, 0xe60, 0x3, 0x4, 0xba3, 0x6, 0x7, 0x80, 0x4, 0x7, 0x4, 0x3000000, 0x5, 0x4, 0x3, 0xfffffffc, 0x1ff, 0xfffffff8, 0x3, 0xe00, 0x8, 0x1, 0x81, 0x4, 0x0, 0x9, 0x6, 0x81, 0x9, 0xe, 0xfff, 0xee, 0x7, 0x4, 0xfffffff8, 0x2, 0x5, 0x9, 0x9, 0xffff9c56, 0x4, 0x10, 0x6, 0x5, 0x4, 0x5a7, 0x8, 0x6, 0x4, 0x786f, 0x8, 0x6, 0xc, 0x10, 0x2, 0x6, 0x1, 0x4, 0x1000, 0x9, 0x0, 0x99a2, 0x1000, 0x0, 0xaba, 0x2, 0x7, 0x2, 0xffffff01, 0x4388, 0x4, 0x401, 0x80000000, 0x6, 0xff2, 0x9, 0x3, 0x3, 0x2d, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x9, 0x7, 0x10001, 0x400, 0x7, 0x2, 0x4, 0x6, 0x90f, 0x9, 0x2, 0x2, 0x800, 0x7fffffff, 0x8, 0x24, 0x6, 0x4, 0x6, 0xcc, 0x372, 0x1, 0xfffff000, 0x91e, 0x2, 0x200, 0x8, 0xa1e, 0x3ff, 0xe6d, 0x9, 0x0, 0x4, 0xe05, 0xee, 0x2c9, 0x9, 0x1, 0x10001, 0x13, 0xffff2155, 0x5, 0x950, 0x80000000, 0xaa774ca, 0x7fffffff, 0x2, 0x3, 0xf, 0x8, 0x5, 0x7f2, 0x40, 0xbb, 0x0, 0xfffffffe, 0x3, 0xec73, 0x1, 0x5, 0x40, 0x7, 0xfffffffe, 0xd1f9, 0xa, 0x2, 0x7d, 0x3, 0x2400, 0xac, 0x200000, 0x6364, 0x901, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x1, 0x63, 0xc1, 0x5, 0x4, 0x4, 0x1000, 0xa4, 0x1, 0x8000, 0x9, 0x3, 0xfffffffb, 0x2, 0x1, 0xdd, 0x7, 0x2, 0xfffffffa, 0x0, 0x6, 0x2, 0x5, 0x101, 0x8a17, 0x8001, 0x6, 0x3, 0x10001, 0x1, 0x2, 0xfffffff5, 0x4, 0xf4c, 0x9, 0x10000, 0x1, 0xff, 0x7, 0x4, 0x9, 0xe00000, 0xffff, 0xae6f, 0x7, 0xd0d, 0xc, 0xee, 0x3, 0x1, 0x81, 0x7, 0x5, 0x5, 0xf, 0x7, 0x8, 0x6, 0xb7, 0x0, 0x81, 0x100, 0x0, 0x2, 0xc17, 0xc2c3, 0x4, 0x8, 0x1, 0x5, 0x2, 0x35d2, 0x200, 0x101, 0x1, 0x1ff, 0x3, 0x80000000, 0x6, 0x3, 0x1, 0x10001, 0xfff, 0xff, 0xffff, 0x7, 0x6, 0xfff, 0x9, 0x0, 0x56c0, 0xe, 0x7, 0x76dd, 0x5, 0x8, 0x0, 0xfffeffff, 0x8, 0x753, 0x2, 0x3, 0x67d4, 0x8, 0x80000001, 0x1000, 0xfffeffff, 0x100, 0xffffffff, 0xfffffff8, 0x7, 0xca90, 0x2, 0x0, 0x5acbf09b, 0x1, 0x7, 0x9, 0x7af787be, 0xffffff81, 0x3ff, 0x6, 0xffff, 0x5, 0x5, 0x1, 0x1, 0x3, 0x1, 0x6, 0x6, 0x1ff, 0x3, 0x8, 0x3, 0x4ca, 0x401, 0xff6, 0x0, 0x1, 0x800, 0x8, 0x401, 0x81, 0x8, 0x83b6, 0xffffffff, 0x2, 0x7, 0x8001, 0x9, 0x0, 0xfffffff9, 0x7, 0x31e4, 0x4, 0xd7, 0x4, 0x7, 0x3, 0x2, 0x2a2f, 0xfffff801, 0x1, 0x7fffffff, 0x3, 0x101, 0x1ff, 0x1, 0x9, 0x0, 0x9, 0x7fff, 0x6, 0xffffffff, 0x39b, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8001, 0x3, 0x2, 0x5, 0x1, 0x1000, 0x1, 0x5, 0x2, 0x8, 0x42c9, 0x8, 0x8, 0x8080000, 0x6, 0x564, 0x3, 0x8e83, 0x401, 0x2, 0xffffffff, 0x1ff, 0x3, 0x0, 0x8764, 0xd, 0x0, 0x8, 0x2, 0x40, 0xc, 0xfffffffe, 0x1327, 0x5, 0x3ff, 0x1, 0x5, 0x3, 0x2, 0xd80, 0x87f, 0x8, 0x9, 0x8ca, 0x1, 0x6, 0x180, 0x2, 0x1, 0x1, 0xff, 0x0, 0x7ff, 0x2, 0x3, 0x82, 0x7, 0x99, 0x8, 0x7, 0x400, 0x1, 0xc1a5, 0x8, 0x4, 0x4, 0x2000000, 0x9, 0x80000001, 0x4, 0x8000, 0x117, 0xf2, 0x0, 0x400, 0x3abde1d9, 0x7, 0xb0000000, 0xfffffff4, 0xa2a8, 0x7fff, 0x6, 0x2b, 0xffff, 0x7, 0xbf, 0x2, 0x8, 0x6, 0x8, 0x3ff, 0x100, 0x560, 0x9784, 0x9, 0x7, 0x401, 0x8000, 0x7, 0xe, 0x1, 0x7, 0x1000, 0x2, 0x10001, 0x97, 0x800, 0x5d, 0x1000, 0x5, 0xc97, 0x10000, 0x0, 0x10001, 0xb5, 0x6, 0x8, 0x533, 0x8, 0x1, 0x3, 0x40, 0x2, 0x0, 0x80000000, 0x8, 0x5, 0xcb, 0xc, 0x1, 0x80000000, 0x1, 0x6, 0x6, 0x4, 0xd, 0xa0e, 0xfff, 0x1, 0x3, 0x2, 0x6, 0x8, 0x4, 0xfff, 0x1000, 0x0, 0x1ff, 0x6, 0x5, 0xfffffff9, 0x4055, 0x0, 0x5, 0x6, 0x400, 0xc, 0x9, 0x4, 0x13144e3c, 0x0, 0x4, 0x71, 0x1ff, 0x9, 0x1, 0xdf, 0x4, 0x4, 0x2, 0x6, 0x3ff, 0x1000, 0x1, 0x1, 0x3ff, 0x4, 0x5fc5, 0x9, 0x1ff, 0x10000, 0x0, 0x9, 0x4dc5, 0x7, 0x1ff, 0x6, 0x7, 0x9, 0x9319, 0x6, 0x6138, 0xff, 0x6, 0x8, 0x5, 0x1, 0x101, 0x7cd87d36, 0x82a, 0x2, 0x0, 0x7, 0x14, 0x73, 0xbd, 0x1, 0x3, 0x8001, 0x2, 0x8, 0x8000, 0x80000001, 0x5, 0x4c5, 0x7fff, 0xa, 0x8a60, 0x2, 0x10, 0xfffffffb, 0x80000001, 0x8, 0x7, 0x61d, 0x1000, 0x2, 0x6, 0x80000000, 0x6, 0x9, 0x1ff, 0x986, 0x100000, 0x7, 0x10001, 0x4, 0xffff899a, 0x4, 0x5, 0x5, 0x0, 0x4, 0x5, 0xfffffffa, 0x401, 0x5, 0x6, 0x0, 0x3, 0x7, 0x57dee8d6, 0x401, 0x9, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x4871, 0xfffffffb, 0x78, 0x401, 0x4, 0x7ff, 0x2d, 0x3, 0x3a3, 0x7, 0x7, 0x2e39, 0x69e, 0xe, 0x800, 0x1, 0x6, 0x800, 0x3ff, 0x0, 0x9, 0xfffffffa, 0x8, 0xfffffffe, 0x2, 0x80, 0x9, 0x6, 0x902, 0x0, 0x9, 0x4, 0x8, 0x2, 0x40, 0x1, 0x8, 0x7, 0x8, 0xfffffa4c, 0xf1, 0x9, 0x10, 0x3, 0x8, 0x2, 0x20, 0x9, 0x2a, 0x6, 0x9, 0x5, 0xd, 0x20000000, 0x80, 0x5, 0x8, 0x7ff, 0x5, 0x9, 0x80000001, 0x4, 0x5, 0xa685, 0x9, 0x10, 0xb, 0x9, 0xd, 0xb3e1, 0x1, 0xc, 0x4, 0x2, 0x9, 0xa, 0x738, 0x3, 0x5, 0x4, 0x2, 0xb, 0x6, 0x80000000, 0x0, 0x1, 0x2, 0x1, 0x9, 0x5, 0x1, 0x3, 0x6, 0x5, 0x3, 0xaf8b, 0x6, 0x1, 0x0, 0x80000000, 0x6c9, 0x4, 0xc65cd58, 0x7, 0x2, 0xe4, 0xffff8e87, 0x5, 0x2, 0x62c4, 0x7, 0x8, 0x0, 0x5, 0x7f, 0x1ff, 0x8f, 0x5, 0x6, 0x101, 0x3, 0xab0, 0x9, 0xfff, 0x101, 0x80, 0x7, 0xfffffff9, 0x5, 0x1c, 0x80000000, 0x9, 0x0, 0x9, 0x2, 0x800, 0x1, 0x60ec, 0x4, 0x8000, 0x7f, 0x5, 0x10000, 0x1, 0x39e5, 0x5, 0x9, 0x0, 0xb, 0x6, 0x10000, 0x401, 0xe, 0x401, 0x3, 0x6, 0x4178c2f, 0x400, 0xf7, 0xc, 0xfffffffb, 0x9, 0xfffffff7, 0x4, 0x8c, 0x3, 0x1, 0x7, 0x6, 0x8, 0x9, 0x5ec, 0x1af1, 0x0, 0x82, 0xfffffff7, 0x550c, 0x97, 0x6, 0x3, 0x3, 0x6, 0x5, 0x80000000, 0xfffffffe, 0x4, 0x80, 0x1, 0x8, 0x59, 0x6, 0x24b, 0xe90, 0x3, 0x0, 0x5, 0x9, 0x7, 0x219, 0x4af, 0x4, 0x913, 0x8, 0xf06, 0x4, 0x6, 0x8, 0x41, 0x7ff, 0xffff, 0x9, 0x60b, 0xfffffffb, 0x2, 0x4, 0x1, 0x8, 0x5, 0x9, 0x5, 0x0, 0x6acc3e9a, 0x4, 0x2, 0xfffffff9, 0x1ff, 0x2, 0x1, 0x8, 0x2, 0x1, 0x2b5159e7, 0x4, 0x3, 0x51, 0x200, 0x1, 0x10001, 0x1, 0x7, 0x7b6295b3, 0x5, 0x7, 0x4fb, 0x7ff, 0xe, 0x7, 0x1, 0x6d25, 0xe16, 0x9, 0x0, 0x2, 0x9, 0xe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]]}, {0x39, 0x6, "a3910005fade2da0292640e340eb2309b3a74f8c24dbf99bd49ddc5bc48c35713e1b88c5a8d8bbf8132e425a2704758b1661cf5938"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x1c8, 0x2, [@m_skbmod={0xf8, 0xa, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0xc0, 0x6, "49dc8732cb0e0240e3ed40c6ec33569d4232adcac0e85f9d61acd8c7206048d9e43d7f13974d6d28daaf8b215d09ec303665251db8c51d38caa3b71bb1decbab27c3be3d3eee56e445fbb1f9ac43909596ba1ea37f6dff4806fd4408e95b6b663ddad7e3c72a0a94390b9d1b30f48d5301e5bb2397b4037ca23531222c6b95ff6bdaa942a77216d5f2c6affeff3f03d992bec954bc55725c672e3939d8639652bd0e2b0569ae5936397a6de73845a076c32b9d1c3c84fd3aef735552"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xcc, 0x7, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x100}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2d92}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2000}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x68, 0x6, "4a499cf79474cdeabe6758ab2a87a47f112a3cc256b6c8d0ee7d6a12136d6f675d3ba6b4c8bfc9caf9432beab6dfc219cd8e5474b586bbb804d8322cf647c679ccb3aa61c02d41da86a889cc9d77132b19c177295b67cb3f9c42ec47888d9c46e91c565b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xd}}, @TCA_MATCHALL_ACT={0xb8, 0x2, [@m_tunnel_key={0xb4, 0x1a, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x800}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}]}, {0x5b, 0x6, "826ac594ab3948d956a2480f4c8d9d659de3dad95864bc025cd8a04999ec1103b3d61754b8a36431de7577b268851aca049ddd2170b04b4a7c6da1fb15660c2cf1f5ab9f3e5f7b7a661c9516ce949d415746c343b4ef53"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_basic={{0xa}, {0x304, 0x2, [@TCA_BASIC_EMATCHES={0x300, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_META={0x70, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR="19be783147ae59e0", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="68a94e", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="72935233b8e8f2e1"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x89}, {0x9, 0x9, 0x2}}}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="c5f0c78c04a362fcbd3d", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="34e0f566a1c3", @TCF_META_TYPE_VAR="b6"]}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x400, 0x8, 0x200}, {0xffffffffffffffff, 0x5, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x260, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x144, 0x3, 0x0, 0x0, {{0x8}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x103, 0x5, "56428b7c7cdf0de8200a481a43942ce759dc2b933f87927619e2251220e111b5bccc4cec8004fb66564dad259181e4ec297d5bf012e522e500ddadd1ff9b746077b1e417e9a64f547464af17642cf0b4b297e79ae3fe2d92519604da117079124853389ad06b57330faeb03d22eef023afd29c9db645550c484b80dfe884f251a4b806de2f7e0abc81a6b61eba44c6f013a471567cba4b08e9d25dd2b40853a5ce08c615650195c8141cda78c5db8d3fb04de7cc46d855a7f682b22824ebf96e503607a62a8c39a03a922537a6a49c8551236f379d9432b632d6e99e8f0396d7b62820d593b7cce2aee62af24e951677ac2747d27fccf1eb42582583352607"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_IPT={0x98, 0x3, 0x0, 0x0, {{0xfffb, 0x9, 0x8000}, [@TCA_EM_IPT_MATCH_DATA={0x4f, 0x5, "281ac203ccbfc886a8e67770c51b812506e8f68d38c13e03753f353c8e68576af7b402ff9a6ce8079d6ebb2d02f3e968991354b0654ba77b6c1f407bd6ec825323f7caab2e229e101c0190"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x5}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x58, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xa2}, {0x6, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="adad82307edea8550811", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="f68a7d3b0ebb", @TCF_META_TYPE_VAR="b2c1a0c527cf8b785db8", @TCF_META_TYPE_VAR="d211ef81f07c8c", @TCF_META_TYPE_VAR="b57c32", @TCF_META_TYPE_VAR="11", @TCF_META_TYPE_VAR="03"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5ce7}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x3b80}, 0x1, 0x0, 0x0, 0x14}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000006600)={&(0x7f0000006500)=[0x0], &(0x7f0000006540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000006580)=[0x0, 0x0], &(0x7f00000065c0)=[0x0, 0x0, 0x0], 0x1, 0x4, 0x2, 0x3}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r13, 0x0, 0x48b, &(0x7f0000006640)={0x2, 'ipvlan1\x00', 0x2}, 0x18) bind$can_raw(r12, &(0x7f0000006680), 0x10) getsockname$packet(r12, &(0x7f00000066c0), &(0x7f0000006700)=0x14) 1.780601431s ago: executing program 5 (id=439): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) open(0x0, 0x14507e, 0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1.126623865s ago: executing program 1 (id=440): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) (async) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x28, 0x0, 0xffffffffffff625f, {{0xfffffffffffffffd, 0x400, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0x7177}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r6, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x7}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={r6, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x7ff, 0x7, 0xe166, 0xd0, 0x7, 0xfb}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r6, 0x401, 0x4, [0x8, 0x7, 0x9, 0x7]}, &(0x7f00000001c0)=0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000ff0f00000000000000feffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x1}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x0) 1.123243965s ago: executing program 4 (id=441): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c0f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001da00200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc303000051000000e5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf0ffffff}, 0x48) 1.083847784s ago: executing program 2 (id=442): syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x1, 0x13580, 0x0, 0x332}, &(0x7f0000000040), &(0x7f0000000280)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000100)={0x7, 0x4, 0x9f, 0x7, 0x2, 0x80}) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) bind$qrtr(r3, &(0x7f0000000200), 0xc) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) close(r5) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x3, 0xd}, {0x8, 0x1}}}, 0x24}}, 0x40004) openat$cgroup_int(r3, &(0x7f00000002c0)='cpu.max.burst\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 912.581811ms ago: executing program 4 (id=443): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x1a) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000000)={'dummy0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000404e000000000000005fa00000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 883.813115ms ago: executing program 4 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000018bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 803.141447ms ago: executing program 5 (id=445): socket$inet(0x2, 0x4, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') fchdir(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ftruncate(r0, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000614000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r3, 0x8000000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffc, 0x24, 0x6, 0x1101, 0x1}) syz_open_dev$I2C(&(0x7f0000000240), 0x0, 0x2080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0x1e0, 0x240, 0x32, 0xfffffffe, 0x0, 0x0, {}, {0x8000a, 0x79}, {0x2f4a, 0xfffffe}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x1, 0x0, 0x4}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 672.729826ms ago: executing program 4 (id=446): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}, {0xffff}}}, 0x24}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) socket$kcm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x87, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@routing={0x4, 0x2, 0x1, 0xf, 0x0, [@empty]}]}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000000)={0x0, 0x1000, &(0x7f0000002a80)=""/4096}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009902"]) r6 = syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x0, 0xe}, &(0x7f00000003c0)=0x90) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000000080)={0x14, &(0x7f0000000480)={0x40, 0xf, 0xbe, {0xbe, 0x3, "e28cbd3cc080a3ed3d1f1c5dca1e76ec140c64603c5494e7c8e2f08f1deb8a33b77a4dbb60dc13f2eaf07ecf79a4ed2bd1bd8b4b5f881dc67a3be2fac3079e923885c11ef41381cd7ff65a74b89fc3c6b883da77fe8db7470fb1419dab55751efd6c6c48e0e105ead28ac3c6587399d10f0656e38b020d73a5efecdec7a71b4b26b22f895b582fb5572dadcc1739bf1d5568c52b991eb35dc311ba0e688f51e18af20757601e86bce66481584ae3c895de4b4a8bf1d55919fbeef73a"}}, &(0x7f0000000100)={0x0, 0x3, 0x4e, @string={0x4e, 0x3, "bc3a5dbd2e3273352ca11336309bf41fddf4e9944487b29d43cd1379545ae8f92036a81ddf18d5cdd5c80609d16a6511e30495d011c864c57285d48d94b33827d0e58d00185f05df5389bdb4"}}}, &(0x7f0000000700)={0x44, &(0x7f0000000600)={0x0, 0x3, 0xef, "040fb312dd2157839a4292160ed1563b2122c64b08b8cee95562b22aad1c9dd5e71a2b1b4511d3bb32de306d019150562fa36d4468bbd85063c1714cc5f021ba41a502e20923dfe95742eafc9a1dbd764d825f9309b012462a8e1f3aa436d0bda6395d73b3d91f5e8043b761158953db3bdba6a26d5c5c50a38da963b8153fceceb0374b2aa74c08b151b8fd639b51bf4c05cc494d75d849fe0e40b1f128f187f6f8a7c214e0bd2258895fa5c97ef58f76f98dfbbaa750ad285812ae8d3d739c38570d6d59fb84718edc9f207713910d94a4f415f478118a9506b690861ad7f3f12cbf86d7764826772873e0170652"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xdc}, &(0x7f0000000280)={0x20, 0x81, 0x1, '\f'}, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x85, 0x3, "baed60"}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 464.338411ms ago: executing program 5 (id=447): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x5d7dc00, {0x0, 0x0, 0x0, r4, {0x6, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0xffffffffffffffac, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x3, 0x0, 0x8, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x80}], 0x1, &(0x7f0000000080), &(0x7f0000000480)={[0x80000000]}, 0x8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="1128d5eefc8e470b321a14759f5978efbc577d299d21679dce6004b6d2130b9e7160729246b8de25a9380004c6f35a670d3afed42250ef3d4e4af12a6968d2ec564f04b2aec43c9a4b61d2eebe75", 0x4e}, {&(0x7f00000000c0)="b0c4d89872f1fd83d3cc54fd592565aac3628a73773fcbeb76461334b5a53685408d079d6c3858ed923ace4c4e0af3f699e761d83653cbce07a3ad8519bdc7bf3e63531e13422c2e715a8010942d9abcab4f9f6cd91e913899649bcd59869d476c42655b31edd2074ef0ef3a758d011d66ee1f6838646d4f", 0x78}, {&(0x7f0000000140)="4d2702c6ac376ee23ea50775576f81393a81e789979c4ed4f6d17c1119122441bcddf4f6bb198bc05f93a72ab80ea9d41f19bede8253be4b3bff49ed2cff6a657b83d4eda791e0c19df4087232c66d2e22d9f31fd71d342cd568480ec0563b0e59f0cbfbfcfc3fd6c9bcabab59f0d1dfb08ec539e9ffe01c1a53df6bceab1a375a1293b11792029bb41088559f3db201c24d4997c946a4e90adbd14b3ae2c8515aa788f5c08eea", 0xa7}, {&(0x7f0000000200)="f163cdbebfef6a840e45b549338daf0457de60c784fa89c48e8f40ca79781e64b571019ca6092601d11c1381c3eb48ba0f0798b0ba63342ffa9aa33a86bbbb86f7b295666a9e91ac26b31e99252a33914777d60863c31328f524461fd5ebb7533e8a66d34d4b3123eaff8a08c0712d50678e0970e90c65a41ac18fed6ce000bd53d2794bb2984231ac282f6447591d8cfd0bb87f635f24d7898b347afa1575011016e0b736d307129e24823368e1687d3a9cda19dd41bba330e037670e889d57633a15b0a7d9eb30f58e6fd744", 0xcd}, {&(0x7f0000000300)="24eca3c05ac51607c539b1aa064779d4c999d9e07b3da71760a5d9ec81ff2afc1bba70b3b3525b3a3d06ee4670420b7278a0ac3f989b656546fa56332030c747f39b9bcec285e3c4eb1b80b41d55dd9f41a52951f2ee635bb0e5df457c283d5bff00d2d48a647eccc64accd75a5c5d39b892da6404b7", 0x76}], 0x5, 0x0, 0x0, 0x4000}, 0x3500000000040045) 263.497747ms ago: executing program 5 (id=448): syz_usb_connect(0x2, 0x2b, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x3e, 0x62, 0x42, 0x40, 0x424, 0xcf18, 0xbf99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x7, 0xce32f8c6b27ab905, 0x4, [{{0x9, 0x4, 0x6d, 0xe, 0x0, 0x3f, 0xb3, 0x58, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0x2, 0x1001}]}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x7e3a, &(0x7f0000000000)={0x0, 0xb433, 0x2000, 0x3, 0x23f}) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x3}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRESDEC], 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 104.680859ms ago: executing program 2 (id=449): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r2, 0x30) connect$inet6(r1, &(0x7f00000000c0), 0x1c) 0s ago: executing program 0 (id=450): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="0f4eee260f013c660faeb99ee8660f3822670136f30f1edfb8ce008ee00f070f09", 0xfffffd16}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e22, 0xfffffff7, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8}, {0xa, 0x4e23, 0x3, @loopback, 0x7}, 0x0, {[0x7, 0x6, 0xd5, 0x7fffffff, 0xffff, 0x3, 0x9, 0xff]}}, 0x5c) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x400080, 0x0, 0x400}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f0000000140)='2', 0x1, 0x8000c61) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r10, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x100000001, &(0x7f0000000080)=0x2) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000001017650e1e9927472704e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7cc2000090780000"], 0x0) kernel console output (not intermixed with test programs): ] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 112.445837][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.462070][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 112.468907][ T5945] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.502520][ T849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.553605][ T849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.566546][ T849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.580939][ T849] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.594847][ T849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.647357][ T849] usb 4-1: config 0 descriptor?? [ 112.654962][ T24] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 112.672783][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.683785][ T24] usb 5-1: Product: syz [ 112.691753][ T24] usb 5-1: Manufacturer: syz [ 112.696675][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 112.760212][ T24] usb 5-1: SerialNumber: syz [ 112.776311][ T5945] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.822030][ T5931] usb 1-1: USB disconnect, device number 4 [ 112.923053][ T5945] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.955034][ T24] usb 5-1: config 0 descriptor?? [ 113.039788][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 113.068916][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 113.097039][ T5945] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15136, setting to 1024 [ 113.122418][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 113.138436][ T6160] netlink: 'syz.1.52': attribute type 7 has an invalid length. [ 113.210666][ T5945] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 113.669862][ T5960] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.678521][ T24] gspca_sunplus: reg_r err -110 [ 113.683502][ T24] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 113.782899][ T849] usbhid 4-1:0.0: can't add hid device: -71 [ 113.795131][ T849] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 113.817932][ T849] usb 4-1: USB disconnect, device number 5 [ 113.837774][ T5960] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 113.858395][ T5960] usb 1-1: config 0 has no interface number 0 [ 114.005733][ T5945] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.009086][ T5960] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 114.079017][ T5931] usb 5-1: USB disconnect, device number 5 [ 114.130619][ T5945] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.134745][ T5960] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 114.167736][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.181740][ T5960] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 114.181796][ T5960] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 114.181820][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.194196][ T5960] usb 1-1: config 0 descriptor?? [ 114.250470][ T5960] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 114.442138][ T6171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.486247][ T6171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.496958][ T5981] usb 1-1: USB disconnect, device number 5 [ 114.575939][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 114.651613][ T5945] usb 3-1: GET_CAPABILITIES returned 0 [ 114.663402][ T5945] usbtmc 3-1:16.0: can't read capabilities [ 115.474523][ T5960] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.545785][ T5931] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.584768][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 115.595725][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 115.604733][ T6177] netlink: 'syz.3.54': attribute type 7 has an invalid length. [ 116.234835][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 116.241503][ T5960] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.270170][ T5960] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.270270][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.288645][ T5981] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 116.313022][ T5960] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 116.330905][ T5931] usb 1-1: config 4 interface 0 has no altsetting 0 [ 116.429715][ T5931] usb 1-1: string descriptor 0 read error: -22 [ 116.445920][ T5931] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 116.460881][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.498122][ T5981] usb 5-1: config 4 has an invalid interface number: 231 but max is 0 [ 116.507031][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.513319][ T5981] usb 5-1: config 4 has no interface number 0 [ 116.519986][ T5960] usb 2-1: config 0 descriptor?? [ 116.564440][ T5931] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 116.588266][ T5981] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 116.635679][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.647718][ T5931] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 116.668518][ T5981] usb 5-1: Product: syz [ 116.673018][ T5981] usb 5-1: Manufacturer: syz [ 116.701817][ T5945] usb 3-1: USB disconnect, device number 4 [ 116.705695][ T5931] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 116.715456][ T5931] usb 1-1: media controller created [ 116.768349][ T5981] usb 5-1: SerialNumber: syz [ 116.906977][ T5981] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 116.908203][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.000682][ T5960] apple 0003:05AC:027A.0002: global environment stack underflow [ 117.009857][ T5960] apple 0003:05AC:027A.0002: item 0 0 1 11 parsing failed [ 117.030815][ T5960] apple 0003:05AC:027A.0002: parse failed [ 117.047591][ T5960] apple 0003:05AC:027A.0002: probe with driver apple failed with error -22 [ 117.080852][ T6202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 117.211523][ T5930] usb 2-1: USB disconnect, device number 3 [ 117.246276][ T5931] usb 1-1: USB disconnect, device number 6 [ 117.313478][ T5981] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 117.333101][ T5981] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 117.417746][ T5960] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.581737][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 117.598467][ T5981] usb 5-1: USB disconnect, device number 6 [ 117.687880][ T5960] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.704068][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.815790][ T5960] usb 4-1: Product: syz [ 117.825694][ T5960] usb 4-1: Manufacturer: syz [ 117.836257][ T5960] usb 4-1: SerialNumber: syz [ 117.937885][ T5960] usb 4-1: config 0 descriptor?? [ 117.979975][ T6214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.021491][ T6212] netlink: 'syz.4.62': attribute type 11 has an invalid length. [ 118.256017][ T5931] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.326534][ T5981] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 118.425827][ T5930] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.445916][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 118.459040][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 118.468810][ T5931] usb 1-1: config 8 has an invalid interface number: 101 but max is 0 [ 118.484497][ T5931] usb 1-1: config 8 has no interface number 0 [ 118.492601][ T5931] usb 1-1: too many endpoints for config 8 interface 101 altsetting 114: 112, using maximum allowed: 30 [ 118.506625][ T5981] usb 5-1: Using ep0 maxpacket: 16 [ 118.507069][ T5931] usb 1-1: config 8 interface 101 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 118.527654][ T5931] usb 1-1: config 8 interface 101 has no altsetting 0 [ 118.539354][ T5931] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34 [ 118.549564][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.551280][ T5981] usb 5-1: config index 0 descriptor too short (expected 36, got 27) [ 118.557868][ T5931] usb 1-1: Product: syz [ 118.572300][ T5931] usb 1-1: Manufacturer: syz [ 118.587938][ T5981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.594440][ T5931] usb 1-1: SerialNumber: syz [ 118.599479][ T5981] usb 5-1: config 0 has no interfaces? [ 118.614693][ T5930] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.615999][ T5981] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 118.633077][ T5930] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.662125][ T5930] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 118.675311][ T5981] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 118.675333][ T5930] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 118.695778][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.715951][ T6217] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 118.728039][ T5981] usb 5-1: Product: syz [ 118.744230][ T5981] usb 5-1: Manufacturer: syz [ 118.755506][ T5981] usb 5-1: SerialNumber: syz [ 118.783472][ T5981] usb 5-1: config 0 descriptor?? [ 118.934858][ T5931] usb 1-1: USB disconnect, device number 7 [ 119.004936][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.034993][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.123529][ T5981] usb 5-1: USB disconnect, device number 7 [ 119.445953][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.615134][ T24] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 119.649177][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.667623][ T24] usb 3-1: Product: syz [ 119.674255][ T24] usb 3-1: Manufacturer: syz [ 119.684465][ T24] usb 3-1: SerialNumber: syz [ 119.702522][ T24] usb 3-1: config 0 descriptor?? [ 119.740399][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 120.135340][ T5960] usb 4-1: USB disconnect, device number 6 [ 120.185760][ T5931] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.230856][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.70'. [ 120.245073][ T6237] netlink: 200 bytes leftover after parsing attributes in process `syz.3.70'. [ 120.314709][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.387290][ T24] usb 3-1: USB disconnect, device number 5 [ 120.408933][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.431954][ T5931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.469883][ T5931] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 120.511501][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.531691][ T5931] usb 5-1: SerialNumber: syz [ 120.674403][ T6245] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 120.775737][ T5945] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 120.832370][ T5931] usb 5-1: 0:2 : does not exist [ 120.885446][ T5931] usb 5-1: USB disconnect, device number 8 [ 120.935871][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 120.951696][ T5945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.994082][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.021649][ T6252] ipvlan0: mtu less than device minimum [ 121.028034][ T5945] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.086816][ T5945] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 121.115947][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.142673][ T5930] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 121.159145][ T5945] usb 1-1: Product: syz [ 121.180628][ T5945] usb 1-1: Manufacturer: syz [ 121.199198][ T5930] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input5 [ 121.210392][ T5945] usb 1-1: SerialNumber: syz [ 121.244056][ T5945] usb 1-1: config 0 descriptor?? [ 121.348885][ T6256] netlink: 'syz.1.76': attribute type 10 has an invalid length. [ 121.373668][ T5930] usb 2-1: USB disconnect, device number 4 [ 121.373734][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 121.373940][ T6256] netlink: 40 bytes leftover after parsing attributes in process `syz.1.76'. [ 121.392730][ T6256] batman_adv: batadv0: Adding interface: vlan1 [ 121.411159][ T6256] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.443778][ T6256] batman_adv: batadv0: Interface activated: vlan1 [ 121.462004][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 121.618560][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 121.632555][ T24] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 121.658285][ T24] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 121.674039][ T24] usb 3-1: config 166 has no interface number 0 [ 121.689654][ T24] usb 3-1: config 166 has no interface number 1 [ 121.697431][ T24] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 121.713362][ T24] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 121.740303][ T24] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 121.772448][ T24] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 121.815889][ T24] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 121.852439][ T24] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 121.878910][ T24] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 121.898380][ T24] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 121.908924][ T24] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 121.930695][ T24] usb 3-1: config 166 interface 177 has no altsetting 0 [ 121.941014][ T24] usb 3-1: config 166 interface 34 has no altsetting 0 [ 121.953220][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 121.963011][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.971647][ T24] usb 3-1: Product: syz [ 121.980176][ T24] usb 3-1: Manufacturer: syz [ 121.988329][ T24] usb 3-1: SerialNumber: syz [ 122.175826][ T5981] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.191051][ T5930] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.203258][ T24] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 122.280753][ T24] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 122.314869][ T24] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 122.324224][ T5981] usb 4-1: device descriptor read/64, error -71 [ 122.332503][ T24] usb 3-1: Found UVC 0.00 device syz (0bda:0138) [ 122.339885][ T24] usb 3-1: No valid video chain found. [ 122.352840][ T24] usb 3-1: USB disconnect, device number 6 [ 122.361448][ T5930] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 122.376535][ T5930] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 122.389295][ T5930] usb 2-1: config 0 has an invalid interface number: 2 but max is -1 [ 122.404022][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.420320][ T5930] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 122.431135][ T5930] usb 2-1: config 0 has no interface number 0 [ 122.441247][ T5930] usb 2-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.461975][ T5930] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.471433][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.479873][ T5930] usb 2-1: Product: syz [ 122.484432][ T5930] usb 2-1: Manufacturer: syz [ 122.489137][ T5930] usb 2-1: SerialNumber: syz [ 122.513248][ T5930] usb 2-1: config 0 descriptor?? [ 122.565794][ T5981] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 122.695983][ T5981] usb 4-1: device descriptor read/64, error -71 [ 122.742162][ T5930] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 122.751540][ T5930] usb 2-1: MIDIStreaming interface descriptor not found [ 122.816658][ T5981] usb usb4-port1: attempt power cycle [ 122.833202][ T5930] usb 2-1: USB disconnect, device number 5 [ 122.945042][ T6241] udevd[6241]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.165904][ T5945] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.185924][ T5981] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 123.206559][ T5981] usb 4-1: device descriptor read/8, error -71 [ 123.329439][ T5945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.348043][ T5945] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 123.363134][ T5945] usb 3-1: string descriptor 0 read error: -22 [ 123.375518][ T5945] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 123.401315][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.476134][ T5981] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.506742][ T5981] usb 4-1: device descriptor read/8, error -71 [ 123.520381][ T24] usb 1-1: USB disconnect, device number 8 [ 123.566658][ T5945] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 123.624390][ T5981] usb usb4-port1: unable to enumerate USB device [ 123.655907][ T5944] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 123.830004][ T5944] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.841693][ T5944] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.867219][ T5944] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.879856][ T5944] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 123.906745][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.943174][ T5944] usb 2-1: config 0 descriptor?? [ 123.996260][ T24] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 124.135732][ T24] usb 1-1: device descriptor read/64, error -71 [ 124.255997][ T5945] usb 3-1: device descriptor read/64, error -71 [ 124.481067][ T24] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 124.510729][ T5931] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 124.548242][ T5931] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.571803][ T5944] lenovo 0003:17EF:60EE.0004: hidraw1: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 124.635727][ T24] usb 1-1: device descriptor read/64, error -71 [ 124.642230][ T5945] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 124.677790][ T5945] usb 3-1: device reset changed ep0 maxpacket size! [ 124.718220][ T5945] usb 3-1: USB disconnect, device number 7 [ 124.727970][ T5944] lenovo 0003:17EF:60EE.0004: Failed to switch middle button: -71 [ 124.757202][ T24] usb usb1-port1: attempt power cycle [ 124.776396][ T5944] lenovo 0003:17EF:60EE.0004: Fn-lock setting failed: -71 [ 124.795000][ T5944] lenovo 0003:17EF:60EE.0004: Sensitivity setting failed: -71 [ 124.846121][ T5944] usb 2-1: USB disconnect, device number 6 [ 124.938264][ T5945] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.115760][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 125.150328][ T24] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 125.189834][ T5945] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.216678][ T24] usb 1-1: device descriptor read/8, error -71 [ 125.232599][ T5945] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 125.242603][ T5945] usb 3-1: can't read configurations, error -71 [ 125.475708][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 125.504258][ T6300] team0: Port device vlan2 added [ 125.516998][ T24] usb 1-1: device descriptor read/8, error -71 [ 125.649458][ T24] usb usb1-port1: unable to enumerate USB device [ 126.109502][ T6312] netlink: 'syz.3.88': attribute type 4 has an invalid length. [ 127.276757][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 127.438984][ T24] usb 1-1: device descriptor read/64, error -71 [ 127.716275][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 127.736317][ T5931] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.761946][ T6355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.769540][ T6355] IPv6: NLM_F_CREATE should be set when creating new route [ 127.926396][ T24] usb 1-1: device descriptor read/64, error -71 [ 127.930468][ T5931] usb 5-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config [ 127.966342][ T5931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.997327][ T5931] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.020384][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.031811][ T5931] usb 5-1: SerialNumber: syz [ 128.046274][ T24] usb usb1-port1: attempt power cycle [ 128.062488][ T6362] mmap: syz.1.106 (6362) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.135747][ T5930] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 128.464477][ T5931] usb 5-1: 0:2 : does not exist [ 128.471269][ T5931] usb 5-1: unit 48 not found! [ 128.481335][ T5930] usb 4-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config [ 128.508398][ T5930] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.509571][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 128.517897][ T5931] usb 5-1: USB disconnect, device number 9 [ 128.533484][ T5930] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.583406][ T6364] Zero length message leads to an empty skb [ 128.641412][ T5930] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.650683][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.692550][ T24] usb 1-1: device descriptor read/8, error -71 [ 128.696762][ T5930] usb 4-1: Product: syz [ 128.703618][ T5930] usb 4-1: Manufacturer: syz [ 128.709125][ T5930] usb 4-1: SerialNumber: syz [ 128.757808][ T5930] usb 4-1: bad CDC descriptors [ 128.857436][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.978463][ T5931] usb 4-1: USB disconnect, device number 11 [ 129.066020][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 129.096294][ T24] usb 1-1: device descriptor read/8, error -71 [ 129.195830][ T5944] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 129.206431][ T24] usb usb1-port1: unable to enumerate USB device [ 129.213988][ T6373] syz.4.108 (6373): /proc/6372/oom_adj is deprecated, please use /proc/6372/oom_score_adj instead. [ 129.363417][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.391511][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.419724][ T5944] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.431382][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.450308][ T5944] usb 3-1: config 0 descriptor?? [ 129.863953][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.114'. [ 129.904572][ T6371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.914292][ T6371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.005695][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.165762][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 130.188354][ T24] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 130.198000][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.207025][ T24] usb 5-1: Product: syz [ 130.211255][ T24] usb 5-1: Manufacturer: syz [ 130.217272][ T24] usb 5-1: SerialNumber: syz [ 130.226017][ T24] usb 5-1: config 0 descriptor?? [ 130.250485][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 130.367447][ T5930] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 130.497464][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'. [ 130.498390][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'. [ 130.534280][ T5930] usb 1-1: not running at top speed; connect to a high speed hub [ 130.548393][ T5930] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 130.559244][ T5930] usb 1-1: config 1 has no interface number 1 [ 130.568248][ T5930] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 130.587283][ T5981] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.588583][ T5930] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.608420][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.619906][ T5930] usb 1-1: Product: Ṝⱳ칭ઞꞬᤧ좴㉗롆䫨゙ᬗ츿팡å™è™€å¶µéƒƒå¯²ìººî’碈埯볭ꢙ殅㌞ⷊ泑ã¢æ‰¥ãŠ‹á¹£ïµ¡Ô¥æ˜›æ¿¸éž¾â½‹çƒ¶è²¸ä’ᙃ蛵ϒ䪲鬧ᔓᮖ㓬敬䲱핻鬀îæ‰ä£®â’†ëµ¦ïš¼é¨Šì½…逈Žᬲ삌쾃舩è•ä¦ƒî’ªî”‘à­âµ­ì–Šìˆ¥â¯¥ç°ë®›ê‡îµ€á¤œâº£æº»ï¤êŽ±â™£ä‰ [ 130.650113][ T5944] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 130.659738][ T5930] usb 1-1: Manufacturer: ࡃ [ 130.664583][ T5944] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 130.672871][ T5930] usb 1-1: SerialNumber: 쇾蛳糯íƒí‚¦èœê”’ç®êꎙ [ 130.681266][ T5944] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 130.695696][ T5944] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 130.711655][ T5944] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 130.730336][ T5944] usb 3-1: USB disconnect, device number 10 [ 130.760953][ T5981] usb 2-1: Using ep0 maxpacket: 16 [ 130.782961][ T5981] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 130.813179][ T5981] usb 2-1: config 0 has no interface number 0 [ 130.844956][ T5981] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 130.870856][ T5981] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 130.884265][ T5981] usb 2-1: config 0 interface 41 has no altsetting 0 [ 130.908382][ T5981] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 130.918095][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.929316][ T5981] usb 2-1: Product: syz [ 130.930108][ T5930] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 130.933675][ T5981] usb 2-1: Manufacturer: syz [ 130.933694][ T5981] usb 2-1: SerialNumber: syz [ 130.938186][ T5981] usb 2-1: config 0 descriptor?? [ 130.956848][ T6400] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 130.964372][ T6400] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 131.011604][ T5930] usb 1-1: USB disconnect, device number 17 [ 131.084616][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.193537][ T6400] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 131.203137][ T6400] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 131.425783][ T5981] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 131.450028][ T5981] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 131.525241][ T5981] usb 2-1: USB disconnect, device number 7 [ 131.531387][ T24] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 131.682930][ T6415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.119'. [ 131.786530][ T24] usb 5-1: device descriptor read/64, error -32 [ 132.114776][ T24] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 132.283864][ T24] usb 5-1: device descriptor read/64, error -32 [ 132.358630][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 132.563148][ T6420] openvswitch: netlink: Flow actions attr not present in new flow. [ 132.730545][ T24] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 132.893950][ T43] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 132.937295][ T43] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.035770][ T24] usb 5-1: device not accepting address 10, error -71 [ 133.205805][ T30] audit: type=1800 audit(1756265870.581:2): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.124" name="bus" dev="ramfs" ino=11963 res=0 errno=0 [ 133.382241][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.403823][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.405720][ T5930] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 133.603243][ T6440] tipc: Started in network mode [ 133.624923][ T6440] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 133.643313][ T6440] tipc: Enabling of bearer rejected, failed to enable media [ 133.667680][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.691977][ T5930] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 133.725767][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.725814][ T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 133.750310][ T5930] usb 2-1: config 0 descriptor?? [ 133.909545][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 133.922765][ T43] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 133.941970][ T43] usb 3-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config [ 133.955811][ T24] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 133.979019][ T43] usb 3-1: config 4 has no interface number 0 [ 133.990933][ T43] usb 3-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.030271][ T24] usb 5-1: device reset changed ep0 maxpacket size! [ 134.048660][ T43] usb 3-1: config 4 interface 51 has no altsetting 0 [ 134.059301][ T24] gspca_se401: read req failed req 0x06 error -19 [ 134.083547][ T43] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 134.108757][ T24] usb 5-1: USB disconnect, device number 10 [ 134.114913][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.152659][ T43] usb 3-1: Product: syz [ 134.164577][ T43] usb 3-1: Manufacturer: syz [ 134.199191][ T43] usb 3-1: SerialNumber: syz [ 134.336139][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 134.379712][ T6457] netlink: 'syz.3.130': attribute type 12 has an invalid length. [ 134.416427][ T6457] netlink: 'syz.3.130': attribute type 29 has an invalid length. [ 134.434163][ T6457] netlink: 148 bytes leftover after parsing attributes in process `syz.3.130'. [ 134.443597][ T6457] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 134.451746][ T6457] netlink: 'syz.3.130': attribute type 2 has an invalid length. [ 134.460997][ T6457] netlink: 7 bytes leftover after parsing attributes in process `syz.3.130'. [ 134.470136][ T43] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 134.504404][ T43] usb 3-1: USB disconnect, device number 11 [ 134.569064][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.599401][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.618621][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 134.630193][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.649069][ T24] usb 5-1: config 0 descriptor?? [ 134.845905][ T5944] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 134.871688][ T24] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 134.918966][ T24] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 134.979160][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0007/input/input7 [ 135.008887][ T5944] usb 1-1: Using ep0 maxpacket: 16 [ 135.051587][ T5944] usb 1-1: config 6 has an invalid interface number: 227 but max is 0 [ 135.146804][ T5944] usb 1-1: config 6 has no interface number 0 [ 135.196101][ T5944] usb 1-1: config 6 has an invalid interface number: 227 but max is 0 [ 135.222546][ T5944] usb 1-1: config 6 has no interface number 0 [ 135.257895][ T5944] usb 1-1: config 6 has an invalid interface number: 227 but max is 0 [ 135.274563][ T5944] usb 1-1: config 6 has no interface number 0 [ 135.285522][ T5944] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 7.79 [ 135.451307][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.460570][ T5944] usb 1-1: Product: syz [ 135.465018][ T5944] usb 1-1: Manufacturer: syz [ 135.470566][ T5944] usb 1-1: SerialNumber: syz [ 136.076821][ T24] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 136.141716][ T24] usb 5-1: USB disconnect, device number 11 [ 136.223292][ T5944] kalmia 1-1:6.227: probe with driver kalmia failed with error -22 [ 136.348170][ T6486] syzkaller0: entered promiscuous mode [ 136.405271][ T6486] syzkaller0: entered allmulticast mode [ 136.441915][ T30] audit: type=1326 audit(1756265873.831:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf758ebe9 code=0x7ffc0000 [ 136.508004][ T6489] fido_id[6489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 136.512086][ T24] usb 1-1: USB disconnect, device number 18 [ 136.569961][ T30] audit: type=1326 audit(1756265873.861:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f8bf758ebe9 code=0x7ffc0000 [ 136.624205][ T5930] usbhid 2-1:0.0: can't add hid device: -71 [ 136.663925][ T5930] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 136.696513][ T5930] usb 2-1: USB disconnect, device number 8 [ 136.703820][ T30] audit: type=1326 audit(1756265873.861:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf758ebe9 code=0x7ffc0000 [ 136.731837][ T6499] tipc: Started in network mode [ 136.748806][ T6499] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 136.797669][ T6499] tipc: Enabling of bearer rejected, failed to enable media [ 136.798775][ T30] audit: type=1326 audit(1756265873.861:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf758ebe9 code=0x7ffc0000 [ 136.834035][ T30] audit: type=1326 audit(1756265873.941:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f8bf758ebe9 code=0x7ffc0000 [ 136.867200][ T30] audit: type=1326 audit(1756265873.941:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf758ebe9 code=0x7ffc0000 [ 136.892886][ T6502] kernel profiling enabled (shift: 6) [ 136.993372][ T30] audit: type=1326 audit(1756265873.941:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf758ebe9 code=0x7ffc0000 [ 137.119326][ T30] audit: type=1326 audit(1756265873.941:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8bf758ebe9 code=0x7ffc0000 [ 137.151108][ T30] audit: type=1326 audit(1756265873.941:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6485 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf758ebe9 code=0x7ffc0000 [ 137.230473][ T5930] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 137.356405][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 137.398338][ T5930] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 137.408412][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.420779][ T5930] usb 2-1: config 0 descriptor?? [ 137.431949][ T5930] cp210x 2-1:0.0: cp210x converter detected [ 137.485847][ T981] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 137.508443][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.522509][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 137.530425][ T24] usb 1-1: can't read configurations, error -61 [ 137.565879][ T5960] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 137.631678][ T5930] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 137.641956][ T5930] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 137.654046][ T5930] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 137.656379][ T981] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.672761][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 137.674620][ T5930] usb 2-1: cp210x converter now attached to ttyUSB0 [ 137.680843][ T981] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 137.701034][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 137.711597][ T981] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.730534][ T981] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 137.734330][ T5960] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 137.748932][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.768319][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.774291][ T981] usb 3-1: Product: syz [ 137.782385][ T981] usb 3-1: Manufacturer: syz [ 137.785001][ T5960] usb 5-1: config 0 descriptor?? [ 137.796541][ T981] usb 3-1: SerialNumber: syz [ 137.799746][ T5960] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 137.815510][ T981] usb 3-1: config 0 descriptor?? [ 137.842925][ T981] usb 2-1: USB disconnect, device number 9 [ 137.861389][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 137.873141][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 137.883511][ T981] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.899450][ T24] usb 1-1: can't read configurations, error -61 [ 137.909717][ T981] cp210x 2-1:0.0: device disconnected [ 137.916990][ T24] usb usb1-port1: attempt power cycle [ 138.008221][ T6512] bridge_slave_0: left allmulticast mode [ 138.017366][ T6512] bridge_slave_0: left promiscuous mode [ 138.024044][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.074065][ T6515] program syz.4.145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.092921][ T6512] bridge_slave_1: left allmulticast mode [ 138.095093][ T6515] netlink: 'syz.4.145': attribute type 11 has an invalid length. [ 138.109482][ T6512] bridge_slave_1: left promiscuous mode [ 138.115545][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.134135][ T6512] bond0: (slave bond_slave_0): Releasing backup interface [ 138.208636][ T6512] bond0: (slave bond_slave_1): Releasing backup interface [ 138.235247][ T6512] team0: Port device team_slave_0 removed [ 138.251159][ T6512] team0: Port device team_slave_1 removed [ 138.259103][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.271126][ T6512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.275894][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 138.297152][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.304932][ T6512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.319081][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.330589][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 138.348625][ T24] usb 1-1: can't read configurations, error -61 [ 138.434727][ T6516] pimreg: entered allmulticast mode [ 138.481991][ T6517] pimreg: left allmulticast mode [ 138.510593][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 138.554143][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.558163][ T6512] netlink: 'syz.4.145': attribute type 11 has an invalid length. [ 138.567407][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 138.625544][ T5960] gp8psk: usb out operation failed. [ 138.631669][ T5960] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 138.647278][ T5960] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 138.663993][ T5944] usb 3-1: USB disconnect, device number 12 [ 138.693862][ T24] usb 1-1: can't read configurations, error -61 [ 138.712696][ T24] usb usb1-port1: unable to enumerate USB device [ 138.718979][ T5960] usb 5-1: USB disconnect, device number 12 [ 139.797008][ T5944] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 139.923060][ T6543] tipc: Started in network mode [ 139.968549][ T6543] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 139.978668][ T6543] tipc: Enabling of bearer rejected, failed to enable media [ 140.050901][ T5944] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 140.078904][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.087728][ T5944] usb 5-1: Product: syz [ 140.092387][ T5944] usb 5-1: Manufacturer: syz [ 140.111729][ T5944] usb 5-1: SerialNumber: syz [ 140.116574][ T5930] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 140.153083][ T5944] usb 5-1: config 0 descriptor?? [ 140.167985][ T5944] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 140.305738][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 140.354888][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 140.388504][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 140.481465][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 140.529908][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 140.623749][ T5930] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 140.636941][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.650233][ T5930] usb 3-1: Product: syz [ 140.654710][ T5930] usb 3-1: Manufacturer: syz [ 140.660516][ T5930] usb 3-1: SerialNumber: syz [ 140.674714][ T5930] usb 3-1: config 0 descriptor?? [ 140.733087][ T5945] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 140.768117][ T5944] usb 5-1: USB disconnect, device number 13 [ 141.271533][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 141.314191][ T5945] usb 4-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 141.726364][ T5945] usb 4-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.156512][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 142.181923][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.157'. [ 142.216359][ T6568] netlink: 'syz.1.157': attribute type 7 has an invalid length. [ 142.269567][ T6573] loop8: detected capacity change from 0 to 7 [ 142.319404][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.328931][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 142.345911][ T5945] usb 4-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.481179][ T5945] usb 4-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 142.495467][ T5945] usb 4-1: config 64 interface 0 has no altsetting 0 [ 142.502860][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.512181][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 142.526250][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.535724][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 142.545473][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.555366][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 142.572043][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.572231][ T5945] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 142.581673][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 142.582291][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.609262][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 142.620698][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.629919][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 142.637857][ T6573] ldm_validate_partition_table(): Disk read failed. [ 142.648501][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.657986][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 142.669082][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.678311][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 142.688584][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.697817][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 142.706030][ T6573] Dev loop8: unable to read RDB block 0 [ 142.721189][ T6573] loop8: unable to read partition table [ 142.728867][ T6573] loop8: partition table beyond EOD, truncated [ 142.766471][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.789890][ T6573] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 143.197124][ T5945] usbhid 4-1:64.0: can't add hid device: -71 [ 143.223754][ T5945] usbhid 4-1:64.0: probe with driver usbhid failed with error -71 [ 143.287620][ T5945] usb 4-1: USB disconnect, device number 12 [ 143.903561][ T43] usb 3-1: USB disconnect, device number 13 [ 144.687113][ T6603] tipc: Enabling of bearer rejected, failed to enable media [ 145.467533][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.171'. [ 146.076042][ T5960] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 146.095779][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 146.109546][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 146.255948][ T5960] usb 3-1: Using ep0 maxpacket: 32 [ 146.271370][ T5960] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 146.290166][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.350805][ T5960] usb 3-1: config 0 descriptor?? [ 146.383777][ T5960] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 147.194852][ T5960] gspca_vc032x: reg_w err -71 [ 147.209000][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.239305][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.258730][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.289287][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.326835][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.349477][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.373631][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.421326][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.454096][ T6673] tipc: Enabling of bearer rejected, failed to enable media [ 147.470312][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.495166][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.511373][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.532531][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.548277][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.565645][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.585365][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.605014][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.626472][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.676124][ T5960] gspca_vc032x: I2c Bus Busy Wait 00 [ 147.712495][ T5960] gspca_vc032x: Unknown sensor... [ 147.730432][ T5960] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 147.806138][ T5960] usb 3-1: USB disconnect, device number 14 [ 147.933640][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.980708][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.145770][ T5945] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 148.682663][ T6712] netlink: 'syz.4.185': attribute type 1 has an invalid length. [ 148.868618][ T6712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.500409][ T6717] bond1: (slave geneve2): making interface the new active one [ 149.510059][ T6717] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 149.766622][ T6726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.186'. [ 150.073225][ T981] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 150.258139][ T981] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.411116][ T981] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.580878][ T981] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 150.715828][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.724972][ T981] usb 2-1: Product: syz [ 150.730498][ T981] usb 2-1: Manufacturer: syz [ 150.736953][ T981] usb 2-1: SerialNumber: syz [ 150.754682][ T981] usb 2-1: config 0 descriptor?? [ 150.764314][ T981] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 150.777585][ T981] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.799445][ T981] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 150.823254][ T981] usb 2-1: media controller created [ 150.932143][ T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.055838][ T981] DVB: Unable to find symbol tda10046_attach() [ 151.086109][ T981] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 151.114590][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.192'. [ 151.161358][ T981] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 151.185639][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 151.199218][ T6744] netlink: 'syz.4.192': attribute type 7 has an invalid length. [ 151.259532][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.194'. [ 151.638006][ T6751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.770408][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 151.782552][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.793240][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 151.802827][ T6733] netlink: 'syz.0.191': attribute type 7 has an invalid length. [ 151.822877][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.849319][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.113651][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.154651][ T981] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 152.424995][ T981] usb 2-1: USB disconnect, device number 10 [ 152.464387][ T6753] bond1: (slave veth3): Enslaving as an active interface with an up link [ 153.256004][ T5930] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 153.335927][ T981] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 153.472792][ T5930] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 153.503552][ T981] usb 2-1: device descriptor read/64, error -71 [ 153.509082][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.543503][ T5930] usb 3-1: Product: syz [ 153.553580][ T6771] veth1_macvtap: left promiscuous mode [ 153.571302][ T5930] usb 3-1: Manufacturer: syz [ 153.590247][ T5930] usb 3-1: SerialNumber: syz [ 153.647381][ T5930] usb 3-1: config 0 descriptor?? [ 153.684115][ T6771] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 153.795668][ T981] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 153.867128][ T5960] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 153.878270][ T5930] usb 3-1: ignoring: probably an ADSL modem [ 153.905668][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 153.986151][ T981] usb 2-1: device descriptor read/64, error -71 [ 154.056876][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 154.064665][ T43] usb 4-1: device descriptor read/64, error -71 [ 154.098340][ T5960] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 154.121286][ T981] usb usb2-port1: attempt power cycle [ 154.150277][ T5960] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 154.233721][ T5960] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.287368][ T5960] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.310785][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.315975][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 154.367219][ T5960] usb 5-1: Product: syz [ 154.392056][ T5960] usb 5-1: Manufacturer: syz [ 154.404443][ T5960] usb 5-1: SerialNumber: syz [ 154.515653][ T43] usb 4-1: device descriptor read/64, error -71 [ 154.535700][ T981] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 154.591227][ T981] usb 2-1: device descriptor read/8, error -71 [ 154.626244][ T43] usb usb4-port1: attempt power cycle [ 154.784729][ T5960] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 154.837787][ T5944] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 154.847069][ T5960] cdc_ncm 5-1:1.0: bind() failure [ 154.855675][ T981] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 154.887630][ T5960] usb 5-1: USB disconnect, device number 15 [ 154.896692][ T981] usb 2-1: device descriptor read/8, error -71 [ 154.995776][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 155.017384][ T981] usb usb2-port1: unable to enumerate USB device [ 155.030277][ T5944] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 155.042387][ T43] usb 4-1: device descriptor read/8, error -71 [ 155.046480][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.091515][ T5944] usb 1-1: config 0 descriptor?? [ 155.109597][ T5944] pwc: Samsung MPC-C10 USB webcam detected. [ 155.304072][ T5944] pwc: send_video_command error -71 [ 155.305809][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 155.323806][ T5944] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 155.336120][ T5930] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 155.351248][ T43] usb 4-1: device descriptor read/8, error -71 [ 155.351600][ T5944] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 155.384406][ T5930] usb 3-1: USB disconnect, device number 15 [ 155.408364][ T5944] usb 1-1: USB disconnect, device number 23 [ 155.476871][ T43] usb usb4-port1: unable to enumerate USB device [ 155.823275][ T6807] program syz.4.205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.848810][ T5944] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 156.024039][ T5944] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 156.040836][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.055715][ T5944] usb 1-1: config 0 descriptor?? [ 156.067934][ T5944] pwc: Samsung MPC-C10 USB webcam detected. [ 156.208716][ T5960] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 156.387715][ T5960] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.406729][ T5960] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 156.415010][ T5960] usb 3-1: can't read configurations, error -71 [ 156.497939][ T5930] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 156.520374][ T5944] pwc: recv_control_msg error -71 req 02 val 2b00 [ 156.550646][ T5944] pwc: recv_control_msg error -71 req 02 val 2700 [ 156.600363][ T5944] pwc: recv_control_msg error -71 req 04 val 1700 [ 156.633509][ T5944] pwc: recv_control_msg error -71 req 02 val 2c00 [ 156.666508][ T5944] pwc: recv_control_msg error -71 req 04 val 1000 [ 156.677100][ T5944] pwc: recv_control_msg error -71 req 04 val 1300 [ 156.686035][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 156.689478][ T5930] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 156.718752][ T5944] pwc: recv_control_msg error -71 req 04 val 1400 [ 156.735997][ T5944] pwc: recv_control_msg error -71 req 02 val 2000 [ 156.742575][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.751583][ T5944] pwc: recv_control_msg error -71 req 02 val 2100 [ 156.765911][ T5930] usb 2-1: Product: syz [ 156.770324][ T5944] pwc: recv_control_msg error -71 req 02 val 2200 [ 156.777786][ T5930] usb 2-1: Manufacturer: syz [ 156.783368][ T5930] usb 2-1: SerialNumber: syz [ 156.790610][ T5944] pwc: recv_control_msg error -71 req 06 val 0600 [ 156.809224][ T5930] usb 2-1: config 0 descriptor?? [ 156.815398][ T5944] pwc: recv_control_msg error -71 req 04 val 1500 [ 156.829918][ T5930] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 156.847903][ T5944] pwc: recv_control_msg error -71 req 02 val 2500 [ 156.859224][ T5944] pwc: recv_control_msg error -71 req 02 val 2400 [ 156.917613][ T5944] pwc: recv_control_msg error -71 req 02 val 2600 [ 156.961571][ T5944] pwc: recv_control_msg error -71 req 02 val 2900 [ 156.979598][ T5944] pwc: recv_control_msg error -71 req 02 val 2800 [ 157.013094][ T5944] pwc: recv_control_msg error -71 req 04 val 1100 [ 157.050784][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 157.050806][ T30] audit: type=1326 audit(1756265894.431:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9154f8ebe9 code=0x7ffc0000 [ 157.106695][ T5944] pwc: recv_control_msg error -71 req 04 val 1200 [ 157.113698][ T5944] videodev: could not get a free minor [ 157.140407][ T5944] pwc: Failed to register as video device (-23). [ 157.162568][ T5944] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -23 [ 157.196248][ T30] audit: type=1326 audit(1756265894.431:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9154f8ebe9 code=0x7ffc0000 [ 157.322306][ T5944] usb 1-1: USB disconnect, device number 24 [ 157.365054][ T30] audit: type=1326 audit(1756265894.431:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f9154f8ebe9 code=0x7ffc0000 [ 157.449190][ T6836] hub 9-0:1.0: USB hub found [ 157.455254][ T6836] hub 9-0:1.0: 1 port detected [ 157.543383][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 157.589359][ T30] audit: type=1326 audit(1756265894.431:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9154f8ebe9 code=0x7ffc0000 [ 157.699891][ T30] audit: type=1326 audit(1756265894.431:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9154f8e7eb code=0x7ffc0000 [ 158.181979][ T30] audit: type=1326 audit(1756265894.431:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9154f8e7eb code=0x7ffc0000 [ 158.379751][ T6844] warning: `syz.4.215' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.455462][ T30] audit: type=1326 audit(1756265894.441:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9154fc14a5 code=0x7ffc0000 [ 158.674293][ T30] audit: type=1326 audit(1756265894.691:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9154f8ebe9 code=0x7ffc0000 [ 158.775017][ T30] audit: type=1326 audit(1756265894.691:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9154f8ebe9 code=0x7ffc0000 [ 158.950484][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 159.009566][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 159.105746][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 159.172109][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 159.215716][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 159.242016][ T5960] usb 2-1: USB disconnect, device number 15 [ 159.300232][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 159.356601][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 159.396026][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 160.050909][ T6884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.845704][ T30] audit: type=1326 audit(1756265900.231:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea138ebe9 code=0x7ffc0000 [ 162.956583][ T30] audit: type=1326 audit(1756265900.241:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea138ebe9 code=0x7ffc0000 [ 163.026290][ T6913] netlink: 'syz.0.232': attribute type 21 has an invalid length. [ 163.034371][ T6913] __nla_validate_parse: 47 callbacks suppressed [ 163.034388][ T6913] netlink: 128 bytes leftover after parsing attributes in process `syz.0.232'. [ 163.051236][ T6913] netlink: 'syz.0.232': attribute type 5 has an invalid length. [ 163.060093][ T6913] netlink: 3 bytes leftover after parsing attributes in process `syz.0.232'. [ 163.626040][ T30] audit: type=1326 audit(1756265900.261:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f4ea138ebe9 code=0x7ffc0000 [ 163.785667][ T30] audit: type=1326 audit(1756265900.261:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea138ebe9 code=0x7ffc0000 [ 163.898027][ T30] audit: type=1326 audit(1756265900.261:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea138ebe9 code=0x7ffc0000 [ 164.144991][ T30] audit: type=1326 audit(1756265900.261:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ea138d550 code=0x7ffc0000 [ 164.300057][ T30] audit: type=1326 audit(1756265900.261:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea138ebe9 code=0x7ffc0000 [ 164.452083][ T30] audit: type=1326 audit(1756265900.261:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ea138d550 code=0x7ffc0000 [ 164.501977][ T30] audit: type=1326 audit(1756265900.261:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea138ebe9 code=0x7ffc0000 [ 164.697651][ T6941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 164.704510][ T6941] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 164.725638][ T30] audit: type=1326 audit(1756265900.261:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ea138ebe9 code=0x7ffc0000 [ 164.877836][ T6941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 164.884234][ T6941] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 165.130216][ T6941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 165.205931][ T6941] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 165.383195][ T6941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 165.422199][ T6941] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 165.626314][ T6968] netlink: 'syz.2.242': attribute type 1 has an invalid length. [ 165.634205][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.242'. [ 165.703891][ T6941] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 165.755746][ T6941] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 165.995743][ T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 166.220387][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 166.266652][ T43] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 166.286102][ T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 166.340020][ T43] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 166.375748][ T43] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 166.419468][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.439933][ T5944] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 166.506996][ T43] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 166.527013][ T43] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 166.544511][ T43] usb 3-1: Product: syz [ 166.558557][ T43] usb 3-1: Manufacturer: syz [ 166.568858][ T43] usb 3-1: SerialNumber: syz [ 166.585444][ T43] usb 3-1: config 0 descriptor?? [ 166.630172][ T43] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 166.652258][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 166.671262][ T5944] usb 2-1: config 0 has an invalid interface number: 149 but max is 0 [ 166.672916][ T43] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 166.697067][ T5944] usb 2-1: config 0 has no interface number 0 [ 166.714396][ T5944] usb 2-1: config 0 interface 149 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 166.737304][ T5944] usb 2-1: config 0 interface 149 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 166.759329][ T5944] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 166.775633][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.794097][ T5944] usb 2-1: Product: syz [ 166.798919][ T5944] usb 2-1: Manufacturer: syz [ 166.814339][ T5944] usb 2-1: SerialNumber: syz [ 166.826176][ T5960] usb 3-1: USB disconnect, device number 18 [ 166.856964][ T5960] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 166.870058][ T5944] usb 2-1: config 0 descriptor?? [ 167.155462][ T43] usb 2-1: USB disconnect, device number 16 [ 168.050232][ T7006] trusted_key: encrypted_key: insufficient parameters specified [ 168.140996][ T7006] input: syz1 as /devices/virtual/input/input8 [ 169.022294][ T7026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.254'. [ 169.817388][ T5960] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 169.986377][ T7048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.005922][ T7048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.029888][ T5960] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 170.065965][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.165765][ T981] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 170.200715][ T5960] usb 5-1: config 0 descriptor?? [ 170.237027][ T5960] cp210x 5-1:0.0: cp210x converter detected [ 170.963961][ T7060] netlink: 'syz.1.261': attribute type 27 has an invalid length. [ 170.971947][ T7060] netlink: 'syz.1.261': attribute type 3 has an invalid length. [ 170.979976][ T7060] netlink: 132 bytes leftover after parsing attributes in process `syz.1.261'. [ 171.061485][ T7058] input: syz1 as /devices/virtual/input/input9 [ 171.068264][ T5960] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 171.073669][ T6714] bond0: (slave bond_slave_0): interface is now down [ 171.119749][ T7060] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 171.128495][ T5960] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 171.147654][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 171.155778][ T6714] bond0: (slave bond_slave_1): interface is now down [ 171.178237][ T5960] usb 5-1: cp210x converter now attached to ttyUSB0 [ 171.214814][ T7060] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 171.222297][ T36] bond0: (slave bond_slave_0): interface is now down [ 171.245882][ T5960] usb 5-1: USB disconnect, device number 16 [ 171.293468][ T5960] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 171.314301][ T36] bond0: (slave bond_slave_1): interface is now down [ 171.340511][ T36] bond0: now running without any active interface! [ 171.356590][ T5960] cp210x 5-1:0.0: device disconnected [ 172.115677][ T5960] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 172.725688][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 173.235003][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 173.257904][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 174.044345][ T5930] IPVS: starting estimator thread 0... [ 174.136891][ T7105] IPVS: using max 29 ests per chain, 69600 per kthread [ 174.333929][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 174.503931][ T5960] usb 3-1: unable to get BOS descriptor or descriptor too short [ 174.543320][ T5960] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 174.573671][ T5960] usb 3-1: can't read configurations, error -71 [ 175.400522][ T7135] FAULT_INJECTION: forcing a failure. [ 175.400522][ T7135] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 175.491205][ T7135] CPU: 0 UID: 0 PID: 7135 Comm: syz.1.278 Not tainted syzkaller #0 PREEMPT(full) [ 175.491233][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.491249][ T7135] Call Trace: [ 175.491257][ T7135] [ 175.491266][ T7135] dump_stack_lvl+0x189/0x250 [ 175.491297][ T7135] ? __pfx____ratelimit+0x10/0x10 [ 175.491326][ T7135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.491350][ T7135] ? __pfx__printk+0x10/0x10 [ 175.491393][ T7135] should_fail_ex+0x414/0x560 [ 175.491431][ T7135] _copy_to_user+0x31/0xb0 [ 175.491458][ T7135] simple_read_from_buffer+0xe1/0x170 [ 175.491492][ T7135] proc_fail_nth_read+0x1b3/0x220 [ 175.491519][ T7135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.491546][ T7135] ? rw_verify_area+0x2a6/0x4d0 [ 175.491568][ T7135] ? __lock_acquire+0xab9/0xd20 [ 175.491593][ T7135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.491617][ T7135] vfs_read+0x1fd/0xa30 [ 175.491641][ T7135] ? fdget_pos+0x247/0x320 [ 175.491665][ T7135] ? __pfx___mutex_lock+0x10/0x10 [ 175.491694][ T7135] ? __pfx_vfs_read+0x10/0x10 [ 175.491722][ T7135] ? __fget_files+0x2a/0x420 [ 175.491756][ T7135] ? __fget_files+0x3a0/0x420 [ 175.491783][ T7135] ? __fget_files+0x2a/0x420 [ 175.491823][ T7135] ksys_read+0x145/0x250 [ 175.491851][ T7135] ? __pfx_ksys_read+0x10/0x10 [ 175.491883][ T7135] ? do_syscall_64+0xbe/0x3b0 [ 175.491916][ T7135] do_syscall_64+0xfa/0x3b0 [ 175.491943][ T7135] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.491969][ T7135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.491989][ T7135] ? clear_bhb_loop+0x60/0xb0 [ 175.492013][ T7135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.492033][ T7135] RIP: 0033:0x7f9154f8d5fc [ 175.492051][ T7135] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 175.492067][ T7135] RSP: 002b:00007f9155edd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.492089][ T7135] RAX: ffffffffffffffda RBX: 00007f91551b5fa0 RCX: 00007f9154f8d5fc [ 175.492102][ T7135] RDX: 000000000000000f RSI: 00007f9155edd0a0 RDI: 0000000000000004 [ 175.492115][ T7135] RBP: 00007f9155edd090 R08: 0000000000000000 R09: 0000000000000000 [ 175.492128][ T7135] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 175.492140][ T7135] R13: 00007f91551b6038 R14: 00007f91551b5fa0 R15: 00007f91552dfa28 [ 175.492181][ T7135] [ 176.645479][ T7159] tipc: Started in network mode [ 176.653743][ T7159] tipc: Node identity 0000000012005f000000000000000001, cluster identity 4711 [ 176.675781][ T7159] tipc: Enabling of bearer rejected, failed to enable media [ 176.776769][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 176.933720][ T7160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.166341][ T7169] netlink: 36 bytes leftover after parsing attributes in process `syz.4.285'. [ 177.295956][ T5960] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 177.494066][ T5960] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 177.572764][ T5960] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 177.608330][ T5960] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.659377][ T5960] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 177.696371][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.735287][ T5960] usb 2-1: Product: syz [ 177.747879][ T5960] usb 2-1: Manufacturer: syz [ 177.810211][ T5960] usb 2-1: SerialNumber: syz [ 177.886023][ T5960] hub 2-1:1.0: bad descriptor, ignoring hub [ 177.913996][ T5960] hub 2-1:1.0: probe with driver hub failed with error -5 [ 178.149624][ T7189] netlink: 732 bytes leftover after parsing attributes in process `syz.0.287'. [ 178.149702][ T7186] (unnamed net_device) (uninitialized): up delay (511) is not a multiple of miimon (6516), value rounded to 0 ms [ 178.175131][ T5960] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 178.259378][ T7186] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 178.820227][ T7152] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 179.083618][ T7200] vxcan2: entered allmulticast mode [ 179.145901][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 179.145919][ T30] audit: type=1326 audit(1756265916.541:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bf758ebe9 code=0x0 [ 180.510298][ T7227] tipc: Enabling of bearer rejected, failed to enable media [ 180.571795][ T7230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.296'. [ 180.678845][ T30] audit: type=1326 audit(1756265918.071:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.4.297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b1ff8ebe9 code=0x0 [ 180.700784][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.997021][ T5930] usb 2-1: USB disconnect, device number 17 [ 181.051259][ T5930] usblp0: removed [ 181.367336][ T7249] trusted_key: encrypted_key: key user:syz not found [ 181.471921][ T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 181.904107][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.928192][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 181.998410][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.014471][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.045996][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.067786][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.069557][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 182.122749][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.138689][ T43] usb 3-1: Product: syz [ 182.142971][ T43] usb 3-1: Manufacturer: syz [ 182.155375][ T43] usb 3-1: SerialNumber: syz [ 182.166891][ T43] usb 3-1: config 0 descriptor?? [ 182.439418][ T5868] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.467631][ T5868] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.477017][ T5868] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.506937][ T5868] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.516554][ T5868] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.786740][ T7257] chnl_net:caif_netlink_parms(): no params data found [ 184.060709][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.075089][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.093394][ T7257] bridge_slave_0: entered allmulticast mode [ 184.103519][ T7257] bridge_slave_0: entered promiscuous mode [ 184.125774][ T7257] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.138961][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.157521][ T7257] bridge_slave_1: entered allmulticast mode [ 184.188910][ T7257] bridge_slave_1: entered promiscuous mode [ 184.396664][ T7257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.424831][ T7257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.634723][ T7257] team0: Port device team_slave_0 added [ 184.669044][ T7257] team0: Port device team_slave_1 added [ 184.750935][ T5868] Bluetooth: hci5: command tx timeout [ 184.801956][ T5944] usb 3-1: USB disconnect, device number 21 [ 185.247189][ T7284] tipc: Enabling of bearer rejected, failed to enable media [ 185.484636][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.515671][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.603069][ T7257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.952609][ T7257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.981989][ T7257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.983195][ T7300] syz.2.314 uses obsolete (PF_INET,SOCK_PACKET) [ 186.045872][ T7257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.273715][ T6714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.448790][ T6714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.817099][ T5868] Bluetooth: hci5: command tx timeout [ 186.862105][ T6714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.903500][ T7316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.318'. [ 186.904851][ T7257] hsr_slave_0: entered promiscuous mode [ 186.932791][ T7257] hsr_slave_1: entered promiscuous mode [ 186.970704][ T7257] debugfs: 'hsr0' already exists in 'hsr' [ 186.979574][ T7316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.318'. [ 186.992842][ T7257] Cannot create hsr debugfs directory [ 187.040532][ T6714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.185707][ T981] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 187.365875][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 187.388449][ T981] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.421916][ T981] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 187.435698][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.515306][ T981] usb 1-1: Product: syz [ 187.545881][ T981] usb 1-1: Manufacturer: syz [ 187.550612][ T981] usb 1-1: SerialNumber: syz [ 187.803859][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.876224][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.956386][ T7317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.006891][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.093623][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.166119][ T7317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.212338][ T981] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 188.250900][ T7334] capability: warning: `syz.1.323' uses 32-bit capabilities (legacy support in use) [ 188.274599][ T6714] bridge_slave_1: left allmulticast mode [ 188.280642][ T981] usb 1-1: USB disconnect, device number 26 [ 188.285075][ T981] usblp0: removed [ 188.322255][ T30] audit: type=1326 audit(1756265925.711:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9154f8ebe9 code=0x0 [ 188.357753][ T6714] bridge_slave_1: left promiscuous mode [ 188.393483][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.403491][ T7339] vivid-002: disconnect [ 188.456964][ T6714] bridge_slave_0: left allmulticast mode [ 188.462697][ T6714] bridge_slave_0: left promiscuous mode [ 188.486187][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.675983][ T43] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 188.828977][ T43] usb 2-1: device descriptor read/64, error -71 [ 188.906992][ T5868] Bluetooth: hci5: command tx timeout [ 189.118946][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 189.286657][ T43] usb 2-1: device descriptor read/64, error -71 [ 189.396623][ T43] usb usb2-port1: attempt power cycle [ 189.866123][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 189.956552][ T43] usb 2-1: device descriptor read/8, error -71 [ 190.216083][ T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 190.231665][ T6714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.242965][ T6714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.252733][ T43] usb 2-1: device descriptor read/8, error -71 [ 190.373971][ T6714] bond0 (unregistering): Released all slaves [ 190.437943][ T43] usb usb2-port1: unable to enumerate USB device [ 190.621756][ T6714] tipc: Left network mode [ 190.976029][ T5868] Bluetooth: hci5: command tx timeout [ 191.258978][ T7397] bridge0: entered promiscuous mode [ 191.276590][ T7397] syz_tun: entered promiscuous mode [ 191.296650][ T7397] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 191.313142][ T7397] hsr1: entered allmulticast mode [ 191.319457][ T7397] bridge0: entered allmulticast mode [ 191.325427][ T7397] syz_tun: entered allmulticast mode [ 191.461316][ T7341] vivid-002: reconnect [ 192.085951][ T5930] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 192.159631][ T6714] hsr_slave_0: left promiscuous mode [ 192.209987][ T6714] hsr_slave_1: left promiscuous mode [ 192.246081][ T6714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.260821][ T5930] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.300684][ T5930] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 192.321826][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.324770][ T5930] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 192.365743][ T5960] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 192.393825][ T5930] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.417181][ T6714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.445000][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.496217][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.505725][ T5960] usb 2-1: device descriptor read/64, error -71 [ 192.521013][ T5930] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.666504][ T6714] veth0_macvtap: left promiscuous mode [ 192.672494][ T6714] veth1_vlan: left promiscuous mode [ 192.719144][ T6714] veth0_vlan: left promiscuous mode [ 192.751603][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.778075][ T5960] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 192.842589][ T5930] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 192.949472][ T5960] usb 2-1: device descriptor read/64, error -71 [ 193.066270][ T5960] usb usb2-port1: attempt power cycle [ 193.426491][ T5960] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 193.484106][ T5960] usb 2-1: device descriptor read/8, error -71 [ 193.765962][ T5960] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 193.796528][ T5960] usb 2-1: device descriptor read/8, error -71 [ 193.906013][ T5960] usb usb2-port1: unable to enumerate USB device [ 194.218288][ T6714] team0 (unregistering): Port device team_slave_1 removed [ 194.270481][ T6714] team0 (unregistering): Port device team_slave_0 removed [ 194.819880][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.829135][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.930785][ T7257] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.946265][ T5945] usb 1-1: USB disconnect, device number 27 [ 194.986293][ T7257] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.111277][ T7257] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.194205][ T7257] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.410704][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.341'. [ 195.427531][ T7447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.341'. [ 195.683021][ T7257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.696089][ T5959] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 195.778998][ T7257] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.865670][ T5959] usb 2-1: Using ep0 maxpacket: 8 [ 195.888915][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.896281][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.908928][ T5959] usb 2-1: unable to get BOS descriptor or descriptor too short [ 195.934369][ T5959] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 195.971938][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.979196][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.998508][ T5959] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 196.031083][ T5959] usb 2-1: No eUSB2 isoc ep 7 companion for config 7 interface 0 altsetting 0 [ 196.087318][ T5959] usb 2-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.123732][ T7466] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.346'. [ 196.173694][ T5959] usb 2-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 196.220778][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.248705][ T7469] netlink: 188348 bytes leftover after parsing attributes in process `syz.0.347'. [ 196.258600][ T5959] usb 2-1: Product: syz [ 196.262846][ T5959] usb 2-1: Manufacturer: syz [ 196.277117][ T5959] usb 2-1: SerialNumber: syz [ 196.400426][ T7257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.504175][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.525698][ T981] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 196.536536][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.537676][ T7438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.596436][ T7438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.712491][ T7257] veth0_vlan: entered promiscuous mode [ 196.762687][ T5959] usb 2-1: USB disconnect, device number 26 [ 196.772680][ T981] usb 1-1: Using ep0 maxpacket: 8 [ 196.823687][ T981] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 196.831485][ T7257] veth1_vlan: entered promiscuous mode [ 196.870518][ T981] usb 1-1: config 0 has no interface number 0 [ 196.909096][ T981] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 196.948589][ T981] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 197.002388][ T7257] veth0_macvtap: entered promiscuous mode [ 197.003707][ T981] usb 1-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 197.045914][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.063180][ T7257] veth1_macvtap: entered promiscuous mode [ 197.081270][ T981] usb 1-1: Product: syz [ 197.109301][ T981] usb 1-1: Manufacturer: syz [ 197.111367][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.142606][ T981] usb 1-1: SerialNumber: syz [ 197.195009][ T981] usb 1-1: config 0 descriptor?? [ 197.209703][ T7257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.412376][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.472812][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.483026][ T981] iowarrior 1-1:0.186: IOWarrior product=0x1500, serial= interface=186 now attached to iowarrior0 [ 197.563255][ T981] usb 1-1: USB disconnect, device number 28 [ 197.600070][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.653812][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.944596][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.974478][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.207651][ T7496] netdevsim netdevsim1: Direct firmware load for . [ 198.207651][ T7496] failed with error -2 [ 198.239714][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.290024][ T7496] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 198.290024][ T7496] [ 198.303163][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.505161][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 199.035892][ T5960] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 199.043816][ T5930] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 199.209994][ T5930] usb 3-1: device descriptor read/64, error -71 [ 199.465839][ T5930] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 199.631806][ T7525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.355'. [ 199.676130][ T5930] usb 3-1: device descriptor read/64, error -71 [ 199.866297][ T5930] usb usb3-port1: attempt power cycle [ 199.919573][ T849] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 200.105790][ T849] usb 6-1: Using ep0 maxpacket: 32 [ 200.126755][ T849] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 200.147084][ T849] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 200.157129][ T849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.285747][ T5930] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 200.312792][ T849] usb 6-1: Product: syz [ 200.324588][ T849] usb 6-1: Manufacturer: syz [ 200.333465][ T5930] usb 3-1: device descriptor read/8, error -71 [ 200.545875][ T849] usb 6-1: SerialNumber: syz [ 200.686503][ T5930] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 200.752369][ T849] usb 6-1: config 0 descriptor?? [ 200.780938][ T849] usb 6-1: bad CDC descriptors [ 200.788335][ T849] usb 6-1: unsupported MDLM descriptors [ 200.808566][ T5930] usb 3-1: device descriptor read/8, error -71 [ 200.948332][ T5930] usb usb3-port1: unable to enumerate USB device [ 201.872760][ T5960] usb 1-1: device descriptor read/64, error -71 [ 202.176515][ T5960] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 202.357453][ T5960] usb 1-1: device descriptor read/64, error -71 [ 202.490521][ T5960] usb usb1-port1: attempt power cycle [ 202.577232][ T5944] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 202.760418][ T5944] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 202.791033][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.810126][ T5944] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 202.826884][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 202.844536][ T5944] usb 5-1: Product: syz [ 202.859097][ T5944] usb 5-1: Manufacturer: syz [ 202.873889][ T5944] usb 5-1: SerialNumber: syz [ 202.885241][ T5960] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 202.929613][ T5944] usb 5-1: config 0 descriptor?? [ 202.938766][ T5960] usb 1-1: device descriptor read/8, error -71 [ 202.961861][ T5944] usb 5-1: selecting invalid altsetting 0 [ 203.007677][ T7555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.196349][ T5960] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 203.230007][ T5960] usb 1-1: device descriptor read/8, error -71 [ 203.337765][ T5959] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 203.362868][ T5944] usb 6-1: USB disconnect, device number 2 [ 203.469872][ T5945] usb 5-1: USB disconnect, device number 18 [ 203.487893][ T5960] usb usb1-port1: unable to enumerate USB device [ 203.558998][ T5959] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.586409][ T5959] usb 2-1: New USB device found, idVendor=0572, idProduct=0320, bcdDevice= 1.85 [ 203.630799][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.649417][ T5959] usb 2-1: Product: syz [ 203.659542][ T5959] usb 2-1: Manufacturer: syz [ 203.702661][ T5959] usb 2-1: SerialNumber: syz [ 203.785016][ T7566] tty tty2: ldisc open failed (-12), clearing slot 1 [ 203.795937][ T5959] usb 2-1: config 0 descriptor?? [ 203.814542][ T7571] netlink: 56 bytes leftover after parsing attributes in process `syz.5.363'. [ 203.841731][ T5959] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 203.895848][ T5959] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 203.915645][ T5959] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 204.029137][ T7575] netlink: 20 bytes leftover after parsing attributes in process `syz.5.365'. [ 204.038492][ T5959] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 204.046491][ T5959] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 204.061933][ T7576] binder: 7572:7576 ioctl c0306201 200000000580 returned -14 [ 204.070098][ T7576] binder: 7572:7576 ioctl c0306201 200000000240 returned -11 [ 204.098756][ T7573] binder: BINDER_SET_CONTEXT_MGR already set [ 204.129333][ T7573] binder: 7572:7573 ioctl 4018620d 2000000000c0 returned -16 [ 204.165828][ T5959] usb 2-1: dvb_usb_v2: found a 'DVBSky T330' in warm state [ 204.233233][ T5959] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 205.765740][ T5930] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 206.031115][ T5930] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 33, changing to 9 [ 206.037287][ T43] usb 2-1: USB disconnect, device number 27 [ 206.077390][ T5930] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.40 [ 206.105086][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.146722][ T5930] usb 1-1: Product: syz [ 206.151027][ T5930] usb 1-1: Manufacturer: syz [ 206.222838][ T5930] usb 1-1: SerialNumber: syz [ 206.338568][ T7618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.406829][ T7623] netlink: 56 bytes leftover after parsing attributes in process `syz.4.377'. [ 206.514650][ T7625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.541750][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.550914][ T7625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.565638][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 206.596540][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.695094][ T5930] usbhid 1-1:1.0: can't add hid device: -71 [ 206.712433][ T5930] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 206.739683][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 206.751922][ T5930] usb 1-1: USB disconnect, device number 33 [ 206.784095][ T43] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 206.800575][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.813805][ T43] usb 2-1: Product: syz [ 206.813830][ T43] usb 2-1: Manufacturer: syz [ 206.814073][ T43] usb 2-1: SerialNumber: syz [ 206.862751][ T43] usb 2-1: config 0 descriptor?? [ 206.884469][ T43] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 206.906489][ T43] usb 2-1: Detected FT232H [ 206.906784][ T5959] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 207.092576][ T5959] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.119352][ T5959] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.145948][ T43] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 207.154407][ T43] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 207.171761][ T43] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 207.180636][ T5959] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.192434][ T43] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 207.201080][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.220573][ T5959] usb 3-1: SerialNumber: syz [ 207.231488][ T43] usb 2-1: USB disconnect, device number 28 [ 207.290581][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 207.369468][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 207.499848][ T43] ftdi_sio 2-1:0.0: device disconnected [ 207.646771][ T7627] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.378'. [ 207.978473][ T5945] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 208.169881][ T5945] usb 6-1: Invalid ep0 maxpacket: 32 [ 208.307824][ T5945] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 208.515954][ T5945] usb 6-1: Invalid ep0 maxpacket: 32 [ 208.541500][ T7642] team0 (unregistering): Port device team_slave_0 removed [ 208.644900][ T5945] usb usb6-port1: attempt power cycle [ 208.670374][ T7642] team0 (unregistering): Port device team_slave_1 removed [ 208.770053][ T7663] lo: entered promiscuous mode [ 208.790245][ T7663] tunl0: entered promiscuous mode [ 208.807297][ T7663] gre0: entered promiscuous mode [ 208.823242][ T7663] gretap0: entered promiscuous mode [ 208.834324][ T7663] erspan0: entered promiscuous mode [ 208.841127][ T7663] ip_vti0: entered promiscuous mode [ 208.924762][ T7663] ip6_vti0: entered promiscuous mode [ 208.933650][ T7663] sit0: entered promiscuous mode [ 208.975005][ T7663] ip6tnl0: entered promiscuous mode [ 208.997771][ T7663] ip6gre0: entered promiscuous mode [ 209.005946][ T5945] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 209.019622][ T7663] syz_tun: entered promiscuous mode [ 209.066498][ T5945] usb 6-1: Invalid ep0 maxpacket: 32 [ 209.103813][ T7663] ip6gretap0: entered promiscuous mode [ 209.157326][ T7663] bridge0: entered promiscuous mode [ 209.164036][ T7663] vcan0: entered promiscuous mode [ 209.175743][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 209.184995][ T7663] bond0: entered promiscuous mode [ 209.195689][ T5945] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 209.222236][ T7663] bond_slave_0: entered promiscuous mode [ 209.230855][ T7663] bond_slave_1: entered promiscuous mode [ 209.246926][ T5945] usb 6-1: Invalid ep0 maxpacket: 32 [ 209.252801][ T5945] usb usb6-port1: unable to enumerate USB device [ 209.260728][ T7663] team0: entered promiscuous mode [ 209.285118][ T7663] team_slave_0: entered promiscuous mode [ 209.295431][ T7663] team_slave_1: entered promiscuous mode [ 209.325252][ T7663] vlan2: entered promiscuous mode [ 209.335674][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 209.352499][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.363038][ T7663] dummy0: entered promiscuous mode [ 209.371160][ T7663] nlmon0: entered promiscuous mode [ 209.407235][ T7663] caif0: entered promiscuous mode [ 209.447071][ T7663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.681635][ T43] usb 2-1: config 4 has an invalid interface number: 239 but max is 0 [ 209.876301][ T43] usb 2-1: config 4 has no interface number 0 [ 210.059651][ T43] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=48.59 [ 210.078013][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.110332][ T43] usb 2-1: Product: syz [ 210.116321][ T43] usb 2-1: Manufacturer: syz [ 210.131053][ T43] usb 2-1: SerialNumber: syz [ 210.287207][ T5959] usb 3-1: 0:2 : does not exist [ 210.293435][ T5959] usb 3-1: unit 5 not found! [ 210.435620][ T5959] usb 3-1: USB disconnect, device number 26 [ 210.710278][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.002364][ T5959] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 211.664030][ T5960] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 211.729597][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 211.753320][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 211.789158][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.823159][ T5959] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.870573][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 211.888841][ T5960] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 211.938295][ T5959] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 211.950528][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.979026][ T5960] usb 6-1: Product: syz [ 211.990542][ T5960] usb 6-1: Manufacturer: syz [ 212.005333][ T5960] usb 6-1: SerialNumber: syz [ 212.054014][ T5959] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 212.083004][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.116770][ T5960] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 212.301525][ T5959] usb 3-1: config 0 descriptor?? [ 212.357963][ T7678] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.928548][ T5944] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 212.965980][ T5945] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 213.008699][ T5868] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 213.356788][ T5959] usb 3-1: USB disconnect, device number 27 [ 213.437873][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 213.523761][ T5945] usb 5-1: config 0 has no interfaces? [ 213.918677][ T5945] usb 5-1: string descriptor 0 read error: -71 [ 213.978065][ T5945] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 214.012901][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'. [ 214.049100][ T5944] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 214.058101][ T5945] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 214.072618][ T5944] ath9k_htc: Failed to initialize the device [ 214.162300][ T5945] usb 5-1: config 0 descriptor?? [ 214.244523][ T5945] usb 5-1: can't set config #0, error -71 [ 214.322707][ T5945] usb 5-1: USB disconnect, device number 19 [ 214.329303][ T43] usb 2-1: MBOX3: Invalid descriptor size=18. [ 214.330838][ T5944] usb 6-1: ath9k_htc: USB layer deinitialized [ 214.476121][ T7703] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 214.485309][ T43] usb 2-1: USB disconnect, device number 29 [ 214.517255][ T7703] bond2: (slave vti0): Error -95 calling set_mac_address [ 215.214542][ T7719] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 215.313494][ T43] usb 6-1: USB disconnect, device number 7 [ 215.420934][ T7719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.392'. [ 216.828112][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.396'. [ 216.991722][ T7749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.398'. [ 217.527367][ T7757] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 217.586996][ T7757] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 217.895754][ T5944] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 217.942059][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 217.951525][ T7756] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 218.049458][ T7765] bridge0: entered promiscuous mode [ 218.066800][ T7765] erspan0: entered promiscuous mode [ 218.073627][ T7765] debugfs: 'hsr1' already exists in 'hsr' [ 218.107303][ T7765] Cannot create hsr debugfs directory [ 218.124922][ T5944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.157034][ T5944] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 218.183914][ T7765] hsr1: entered allmulticast mode [ 218.202287][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.241046][ T7765] bridge0: entered allmulticast mode [ 218.269948][ T5944] usb 2-1: config 0 descriptor?? [ 218.275225][ T7765] erspan0: entered allmulticast mode [ 218.382134][ T5944] pwc: Askey VC010 type 2 USB webcam detected. [ 218.550344][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.611808][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.626126][ T5960] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 218.655717][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 218.781780][ T5944] pwc: recv_control_msg error -32 req 02 val 2b00 [ 218.817079][ T5944] pwc: recv_control_msg error -32 req 02 val 2700 [ 218.843732][ T5960] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.855258][ T5944] pwc: recv_control_msg error -32 req 02 val 2c00 [ 218.884608][ T5960] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 218.898435][ T5944] pwc: recv_control_msg error -32 req 04 val 1000 [ 218.926374][ T5944] pwc: recv_control_msg error -32 req 04 val 1300 [ 218.933300][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.965204][ T5944] pwc: recv_control_msg error -32 req 04 val 1400 [ 218.986713][ T5960] usb 1-1: config 0 descriptor?? [ 219.002485][ T5944] pwc: recv_control_msg error -32 req 02 val 2000 [ 219.028201][ T5960] pwc: Askey VC010 type 2 USB webcam detected. [ 219.075111][ T5944] pwc: recv_control_msg error -32 req 02 val 2100 [ 219.122675][ T5944] pwc: recv_control_msg error -32 req 04 val 1500 [ 219.150262][ T5944] pwc: recv_control_msg error -32 req 02 val 2500 [ 219.192834][ T5944] pwc: recv_control_msg error -32 req 02 val 2400 [ 219.431692][ T5944] pwc: recv_control_msg error -71 req 02 val 2900 [ 219.456197][ T5944] pwc: recv_control_msg error -71 req 02 val 2800 [ 219.481874][ T5944] pwc: recv_control_msg error -71 req 04 val 1100 [ 219.501716][ T5944] pwc: recv_control_msg error -71 req 04 val 1200 [ 219.533963][ T5944] pwc: Registered as video103. [ 219.574273][ T5944] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 219.650527][ T5944] usb 2-1: USB disconnect, device number 30 [ 219.873555][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.406'. [ 219.997475][ T7802] vivid-008: kernel_thread() failed [ 220.176974][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 220.466204][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 220.481828][ T7814] netlink: 40 bytes leftover after parsing attributes in process `syz.4.411'. [ 220.496081][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 220.577462][ T24] usb 6-1: New USB device found, idVendor=0006, idProduct=0000, bcdDevice=93.52 [ 220.589399][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.628497][ T24] usb 6-1: Product: syz [ 220.672927][ T24] usb 6-1: Manufacturer: syz [ 220.709174][ T24] usb 6-1: SerialNumber: syz [ 220.807729][ T24] usb 6-1: config 0 descriptor?? [ 221.052247][ T24] usb 6-1: USB disconnect, device number 8 [ 221.228018][ T7821] fuse: Bad value for 'user_id' [ 221.269859][ T5960] pwc: recv_control_msg error -71 req 02 val 2700 [ 221.306018][ T5960] pwc: recv_control_msg error -71 req 02 val 2c00 [ 221.319679][ T7821] fuse: Bad value for 'user_id' [ 221.339837][ T5960] pwc: recv_control_msg error -71 req 04 val 1000 [ 221.358936][ T5960] pwc: recv_control_msg error -71 req 04 val 1300 [ 221.517500][ T5960] pwc: recv_control_msg error -71 req 04 val 1400 [ 221.622614][ T5960] pwc: recv_control_msg error -71 req 02 val 2000 [ 221.869672][ T5960] pwc: recv_control_msg error -71 req 02 val 2100 [ 221.915709][ T5960] pwc: recv_control_msg error -71 req 04 val 1500 [ 221.963290][ T5960] pwc: recv_control_msg error -71 req 02 val 2500 [ 221.967051][ T7833] fuse: Bad value for 'fd' [ 221.983959][ T5960] pwc: recv_control_msg error -71 req 02 val 2400 [ 222.013951][ T5960] pwc: recv_control_msg error -71 req 02 val 2600 [ 222.041446][ T5960] pwc: recv_control_msg error -71 req 02 val 2900 [ 222.069779][ T5960] pwc: recv_control_msg error -71 req 02 val 2800 [ 222.110931][ T5960] pwc: recv_control_msg error -71 req 04 val 1100 [ 222.125855][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 222.169461][ T5960] pwc: recv_control_msg error -71 req 04 val 1200 [ 222.222046][ T5960] pwc: Registered as video103. [ 222.247416][ T5960] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 222.313983][ T5960] usb 1-1: USB disconnect, device number 34 [ 222.353632][ T24] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 222.431448][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.454161][ T24] usb 5-1: Product: syz [ 222.478937][ T24] usb 5-1: Manufacturer: syz [ 222.499645][ T24] usb 5-1: SerialNumber: syz [ 222.528521][ T24] usb 5-1: config 0 descriptor?? [ 222.686673][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 222.700079][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 222.752442][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 223.136097][ T5930] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 223.194500][ T5945] usb 5-1: USB disconnect, device number 20 [ 223.288323][ T5930] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 223.337213][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.390133][ T5930] usb 3-1: config 0 descriptor?? [ 223.405886][ T24] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 223.417151][ T7856] af_packet: tpacket_rcv: packet too big, clamped from 2556 to 488. macoff=96 [ 223.610127][ T24] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 223.613184][ T5930] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 223.653815][ T24] usb 6-1: can't read configurations, error -22 [ 223.959793][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.997175][ T5930] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 224.012079][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.025915][ T24] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 224.046718][ T5930] [drm] Initialized udl on minor 2 [ 224.110132][ T5930] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 224.184906][ T5930] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 224.256337][ T5945] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 224.279594][ T24] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 224.331040][ T5960] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 224.340342][ T24] usb 6-1: can't read configurations, error -22 [ 224.349359][ T5930] usb 3-1: USB disconnect, device number 29 [ 224.350326][ T7872] ======================================================= [ 224.350326][ T7872] WARNING: The mand mount option has been deprecated and [ 224.350326][ T7872] and is ignored by this kernel. Remove the mand [ 224.350326][ T7872] option from the mount to silence this warning. [ 224.350326][ T7872] ======================================================= [ 224.393623][ T5960] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 224.437689][ T24] usb usb6-port1: attempt power cycle [ 224.536410][ T5945] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 224.593065][ T5945] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 224.647764][ T5945] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.779955][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.882534][ T7864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 224.890136][ T24] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 224.986678][ T24] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 225.026288][ T5945] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.040529][ T24] usb 6-1: can't read configurations, error -22 [ 225.086371][ T5960] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 225.214532][ T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 225.263187][ T24] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 225.271304][ T24] usb 6-1: can't read configurations, error -22 [ 225.279723][ T24] usb usb6-port1: unable to enumerate USB device [ 225.323448][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 225.484891][ T5960] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.611108][ T5960] usb 5-1: config 0 has no interface number 0 [ 225.661218][ T5960] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 225.685717][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.713630][ T5960] usb 5-1: Product: syz [ 225.724964][ T5960] usb 5-1: Manufacturer: syz [ 225.731208][ T5960] usb 5-1: SerialNumber: syz [ 225.779989][ T5960] usb 5-1: config 0 descriptor?? [ 225.839576][ T5960] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 226.466032][ T24] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 226.516899][ T5960] gspca_spca1528: reg_w err -110 [ 226.535972][ T5960] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 226.631478][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.669831][ T24] usb 6-1: config 0 has no interface number 0 [ 226.731335][ T24] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 226.856227][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.912709][ T24] usb 6-1: config 0 descriptor?? [ 226.962022][ T24] usb 6-1: selecting invalid altsetting 1 [ 227.000111][ T5945] usb 2-1: USB disconnect, device number 31 [ 227.014506][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 227.059275][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 227.353188][ T24] DVB: Unable to find symbol cx22700_attach() [ 227.368859][ T5960] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 227.464720][ T24] DVB: Unable to find symbol tda10046_attach() [ 227.474330][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 227.504332][ T24] usb 6-1: USB disconnect, device number 13 [ 227.526020][ T5945] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 227.569011][ T5960] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 227.585668][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.603204][ T5960] usb 1-1: Product: syz [ 227.608016][ T5960] usb 1-1: Manufacturer: syz [ 227.612946][ T5960] usb 1-1: SerialNumber: syz [ 227.634430][ T5960] usb 1-1: config 0 descriptor?? [ 227.645083][ T5960] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 227.708376][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.738218][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.748481][ T5945] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 227.760462][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.772394][ T5945] usb 2-1: config 0 descriptor?? [ 227.887701][ T5930] usb 5-1: USB disconnect, device number 21 [ 228.156078][ T5960] gspca_sunplus: reg_r err -110 [ 228.161307][ T5960] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 228.217021][ T5945] hid-retrode 0003:0403:97C1.0008: unknown main item tag 0x0 [ 228.284089][ T5945] hid-retrode 0003:0403:97C1.0008: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.1-1/input0 [ 228.463430][ T30] audit: type=1326 audit(1756265965.851:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7950 comm="syz.5.439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f776bf8ebe9 code=0x0 [ 228.496707][ T5945] usb 2-1: USB disconnect, device number 32 [ 229.762163][ T7986] netlink: 56 bytes leftover after parsing attributes in process `syz.5.447'. [ 229.771734][ T7986] netlink: 56 bytes leftover after parsing attributes in process `syz.5.447'. [ 230.091956][ T5930] usb 1-1: USB disconnect, device number 35 [ 230.188042][ T5959] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 230.362069][ T5959] usb 6-1: not running at top speed; connect to a high speed hub [ 230.370424][ T5945] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 230.395293][ T5959] usb 6-1: config 1 has an invalid interface number: 109 but max is 0 [ 230.414300][ T5959] usb 6-1: config 1 has no interface number 0 [ 230.420655][ T5959] usb 6-1: config 1 interface 109 has no altsetting 0 [ 230.432169][ T5959] usb 6-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=bf.99 [ 230.445931][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.464454][ T5959] usb 6-1: Product: syz [ 230.471035][ T5959] usb 6-1: Manufacturer: syz [ 230.481146][ T5959] usb 6-1: SerialNumber: syz [ 230.558920][ T5945] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 230.569931][ T5945] usb 5-1: config 150 has no interface number 0 [ 230.601905][ T5945] usb 5-1: config 150 interface 204 has no altsetting 0 [ 230.620126][ T5945] usb 5-1: config 150 interface 1 has no altsetting 0 [ 230.641826][ T5945] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 230.666839][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.674950][ T5945] usb 5-1: Product: syz [ 230.685703][ T5945] usb 5-1: Manufacturer: syz [ 230.690394][ T5945] usb 5-1: SerialNumber: syz [ 230.701562][ T7989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.714692][ T7989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.732384][ T7989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.794028][ T5959] usb 6-1: USB disconnect, device number 14 [ 230.828780][ T5959] ================================================================== [ 230.837097][ T5959] BUG: KASAN: slab-use-after-free in hdm_disconnect+0x10d/0x1c0 [ 230.844893][ T5959] Read of size 8 at addr ffff8880327f58a0 by task kworker/1:6/5959 [ 230.853013][ T5959] [ 230.855375][ T5959] CPU: 1 UID: 0 PID: 5959 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 230.855401][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.855414][ T5959] Workqueue: usb_hub_wq hub_event [ 230.855444][ T5959] Call Trace: [ 230.855453][ T5959] [ 230.855461][ T5959] dump_stack_lvl+0x189/0x250 [ 230.855488][ T5959] ? __kasan_check_byte+0x12/0x40 [ 230.855517][ T5959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.855537][ T5959] ? lock_release+0x4b/0x3e0 [ 230.855565][ T5959] ? __virt_addr_valid+0x4a5/0x5c0 [ 230.855587][ T5959] print_report+0xca/0x240 [ 230.855604][ T5959] ? hdm_disconnect+0x10d/0x1c0 [ 230.855623][ T5959] kasan_report+0x118/0x150 [ 230.855649][ T5959] ? hdm_disconnect+0x10d/0x1c0 [ 230.855672][ T5959] hdm_disconnect+0x10d/0x1c0 [ 230.855703][ T5959] usb_unbind_interface+0x26b/0x910 [ 230.855733][ T5959] ? __pfx_usb_unbind_interface+0x10/0x10 [ 230.855756][ T5959] device_release_driver_internal+0x4d6/0x800 [ 230.855781][ T5959] bus_remove_device+0x34d/0x410 [ 230.855807][ T5959] device_del+0x511/0x8e0 [ 230.855828][ T5959] ? __pm_runtime_barrier+0x212/0x460 [ 230.855851][ T5959] ? __pfx_device_del+0x10/0x10 [ 230.855871][ T5959] ? __pfx___mutex_lock+0x10/0x10 [ 230.855902][ T5959] usb_disable_device+0x3e9/0x8a0 [ 230.855929][ T5959] usb_disconnect+0x330/0x950 [ 230.855953][ T5959] hub_event+0x1cf5/0x4a20 [ 230.855988][ T5959] ? do_raw_spin_lock+0x121/0x290 [ 230.856012][ T5959] ? register_lock_class+0x51/0x320 [ 230.856047][ T5959] ? __pfx_hub_event+0x10/0x10 [ 230.856069][ T5959] ? process_scheduled_works+0x9ef/0x17b0 [ 230.856091][ T5959] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.856114][ T5959] ? process_scheduled_works+0x9ef/0x17b0 [ 230.856131][ T5959] ? process_scheduled_works+0x9ef/0x17b0 [ 230.856157][ T5959] process_scheduled_works+0xae1/0x17b0 [ 230.856187][ T5959] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.856213][ T5959] worker_thread+0x8a0/0xda0 [ 230.856232][ T5959] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 230.856257][ T5959] ? __kthread_parkme+0x7b/0x200 [ 230.856281][ T5959] kthread+0x70e/0x8a0 [ 230.856303][ T5959] ? __pfx_worker_thread+0x10/0x10 [ 230.856322][ T5959] ? __pfx_kthread+0x10/0x10 [ 230.856345][ T5959] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.856369][ T5959] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.856392][ T5959] ? __pfx_kthread+0x10/0x10 [ 230.856414][ T5959] ret_from_fork+0x3f9/0x770 [ 230.856434][ T5959] ? __pfx_ret_from_fork+0x10/0x10 [ 230.856456][ T5959] ? __switch_to_asm+0x39/0x70 [ 230.856480][ T5959] ? __switch_to_asm+0x33/0x70 [ 230.856503][ T5959] ? __pfx_kthread+0x10/0x10 [ 230.856527][ T5959] ret_from_fork_asm+0x1a/0x30 [ 230.856555][ T5959] [ 230.856561][ T5959] [ 231.121578][ T5959] Allocated by task 5959: [ 231.125993][ T5959] kasan_save_track+0x3e/0x80 [ 231.130779][ T5959] __kasan_kmalloc+0x93/0xb0 [ 231.135382][ T5959] __kmalloc_cache_noprof+0x230/0x3d0 [ 231.140772][ T5959] hdm_probe+0x96/0x1400 [ 231.145122][ T5959] usb_probe_interface+0x668/0xc30 [ 231.150243][ T5959] really_probe+0x26d/0x9e0 [ 231.154920][ T5959] __driver_probe_device+0x18c/0x2f0 [ 231.160203][ T5959] driver_probe_device+0x4f/0x430 [ 231.165235][ T5959] __device_attach_driver+0x2ce/0x530 [ 231.170693][ T5959] bus_for_each_drv+0x24e/0x2e0 [ 231.175637][ T5959] __device_attach+0x2b8/0x400 [ 231.180429][ T5959] bus_probe_device+0x185/0x260 [ 231.185284][ T5959] device_add+0x7b6/0xb50 [ 231.189613][ T5959] usb_set_configuration+0x1a87/0x20e0 [ 231.195165][ T5959] usb_generic_driver_probe+0x8d/0x150 [ 231.200627][ T5959] usb_probe_device+0x1c4/0x390 [ 231.205578][ T5959] really_probe+0x26d/0x9e0 [ 231.210086][ T5959] __driver_probe_device+0x18c/0x2f0 [ 231.215377][ T5959] driver_probe_device+0x4f/0x430 [ 231.220407][ T5959] __device_attach_driver+0x2ce/0x530 [ 231.226055][ T5959] bus_for_each_drv+0x24e/0x2e0 [ 231.230924][ T5959] __device_attach+0x2b8/0x400 [ 231.235771][ T5959] bus_probe_device+0x185/0x260 [ 231.240630][ T5959] device_add+0x7b6/0xb50 [ 231.244997][ T5959] usb_new_device+0xa39/0x16f0 [ 231.249797][ T5959] hub_event+0x2958/0x4a20 [ 231.254214][ T5959] process_scheduled_works+0xae1/0x17b0 [ 231.260109][ T5959] worker_thread+0x8a0/0xda0 [ 231.264713][ T5959] kthread+0x70e/0x8a0 [ 231.268785][ T5959] ret_from_fork+0x3f9/0x770 [ 231.273374][ T5959] ret_from_fork_asm+0x1a/0x30 [ 231.278151][ T5959] [ 231.280648][ T5959] Freed by task 5959: [ 231.284640][ T5959] kasan_save_track+0x3e/0x80 [ 231.289322][ T5959] kasan_save_free_info+0x46/0x50 [ 231.294520][ T5959] __kasan_slab_free+0x5b/0x80 [ 231.299285][ T5959] kfree+0x18e/0x440 [ 231.303277][ T5959] device_release+0x99/0x1c0 [ 231.308481][ T5959] kobject_put+0x22b/0x480 [ 231.312904][ T5959] hdm_disconnect+0xf3/0x1c0 [ 231.317675][ T5959] usb_unbind_interface+0x26b/0x910 [ 231.322987][ T5959] device_release_driver_internal+0x4d6/0x800 [ 231.329236][ T5959] bus_remove_device+0x34d/0x410 [ 231.334180][ T5959] device_del+0x511/0x8e0 [ 231.338511][ T5959] usb_disable_device+0x3e9/0x8a0 [ 231.343624][ T5959] usb_disconnect+0x330/0x950 [ 231.348303][ T5959] hub_event+0x1cf5/0x4a20 [ 231.352734][ T5959] process_scheduled_works+0xae1/0x17b0 [ 231.358304][ T5959] worker_thread+0x8a0/0xda0 [ 231.362987][ T5959] kthread+0x70e/0x8a0 [ 231.367070][ T5959] ret_from_fork+0x3f9/0x770 [ 231.371657][ T5959] ret_from_fork_asm+0x1a/0x30 [ 231.376437][ T5959] [ 231.378776][ T5959] The buggy address belongs to the object at ffff8880327f4000 [ 231.378776][ T5959] which belongs to the cache kmalloc-8k of size 8192 [ 231.392940][ T5959] The buggy address is located 6304 bytes inside of [ 231.392940][ T5959] freed 8192-byte region [ffff8880327f4000, ffff8880327f6000) [ 231.407028][ T5959] [ 231.409366][ T5959] The buggy address belongs to the physical page: [ 231.415955][ T5959] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x327f0 [ 231.424814][ T5959] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 231.433340][ T5959] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 231.441493][ T5959] page_type: f5(slab) [ 231.445479][ T5959] raw: 00fff00000000040 ffff88801a442280 ffffea0001efb400 dead000000000003 [ 231.454118][ T5959] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 231.462898][ T5959] head: 00fff00000000040 ffff88801a442280 ffffea0001efb400 dead000000000003 [ 231.471678][ T5959] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 231.480349][ T5959] head: 00fff00000000003 ffffea0000c9fc01 00000000ffffffff 00000000ffffffff [ 231.489038][ T5959] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 231.497789][ T5959] page dumped because: kasan: bad access detected [ 231.504205][ T5959] page_owner tracks the page as allocated [ 231.509927][ T5959] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5518, tgid 5518 (rcS), ts 58935961767, free_ts 58808548029 [ 231.529901][ T5959] post_alloc_hook+0x240/0x2a0 [ 231.534685][ T5959] get_page_from_freelist+0x21e4/0x22c0 [ 231.540507][ T5959] __alloc_frozen_pages_noprof+0x181/0x370 [ 231.546604][ T5959] alloc_pages_mpol+0x232/0x4a0 [ 231.551742][ T5959] allocate_slab+0x8a/0x370 [ 231.556354][ T5959] ___slab_alloc+0xbeb/0x1410 [ 231.561801][ T5959] __kmalloc_cache_noprof+0x296/0x3d0 [ 231.567241][ T5959] tomoyo_init_log+0x111f/0x1f70 [ 231.572672][ T5959] tomoyo_supervisor+0x340/0x1480 [ 231.577856][ T5959] tomoyo_env_perm+0x149/0x1e0 [ 231.582742][ T5959] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 231.588449][ T5959] tomoyo_bprm_check_security+0x11c/0x180 [ 231.594449][ T5959] security_bprm_check+0x89/0x270 [ 231.599485][ T5959] bprm_execve+0x8ee/0x1450 [ 231.603991][ T5959] do_execveat_common+0x510/0x6a0 [ 231.609031][ T5959] __x64_sys_execve+0x94/0xb0 [ 231.613726][ T5959] page last free pid 5516 tgid 5516 stack trace: [ 231.620049][ T5959] __free_frozen_pages+0xbc4/0xd30 [ 231.625188][ T5959] __put_partials+0x156/0x1a0 [ 231.630050][ T5959] put_cpu_partial+0x17c/0x250 [ 231.634830][ T5959] __slab_free+0x2d5/0x3c0 [ 231.639251][ T5959] qlist_free_all+0x97/0x140 [ 231.643884][ T5959] kasan_quarantine_reduce+0x148/0x160 [ 231.649357][ T5959] __kasan_slab_alloc+0x22/0x80 [ 231.654391][ T5959] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 231.659858][ T5959] mas_alloc_nodes+0x2e9/0x8e0 [ 231.664975][ T5959] mas_preallocate+0x3ad/0x6f0 [ 231.669758][ T5959] commit_merge+0x1fd/0x700 [ 231.674278][ T5959] vma_expand+0x40c/0x7e0 [ 231.678695][ T5959] relocate_vma_down+0x2e6/0x500 [ 231.683637][ T5959] setup_arg_pages+0x5df/0xaa0 [ 231.688517][ T5959] load_elf_binary+0xba4/0x2740 [ 231.693420][ T5959] bprm_execve+0x999/0x1450 [ 231.697989][ T5959] [ 231.700335][ T5959] Memory state around the buggy address: [ 231.706105][ T5959] ffff8880327f5780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.714187][ T5959] ffff8880327f5800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.722270][ T5959] >ffff8880327f5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.730340][ T5959] ^ [ 231.735452][ T5959] ffff8880327f5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.743513][ T5959] ffff8880327f5980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 231.751567][ T5959] ================================================================== [ 231.897216][ T5945] xr_serial 5-1:150.204: xr_serial converter detected [ 232.015838][ T5959] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 232.023427][ T5959] CPU: 1 UID: 0 PID: 5959 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 232.033154][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.043318][ T5959] Workqueue: usb_hub_wq hub_event [ 232.048386][ T5959] Call Trace: [ 232.052156][ T5959] [ 232.055117][ T5959] dump_stack_lvl+0x99/0x250 [ 232.059737][ T5959] ? __asan_memcpy+0x40/0x70 [ 232.064344][ T5959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.069567][ T5959] ? __pfx__printk+0x10/0x10 [ 232.074199][ T5959] vpanic+0x281/0x750 [ 232.078318][ T5959] ? preempt_schedule+0xae/0xc0 [ 232.083214][ T5959] ? __pfx_vpanic+0x10/0x10 [ 232.087740][ T5959] ? preempt_schedule_common+0x83/0xd0 [ 232.093233][ T5959] ? preempt_schedule+0xae/0xc0 [ 232.098197][ T5959] ? __pfx_preempt_schedule+0x10/0x10 [ 232.103758][ T5959] panic+0xb9/0xc0 [ 232.107484][ T5959] ? __pfx_panic+0x10/0x10 [ 232.112081][ T5959] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 232.118156][ T5959] ? hdm_disconnect+0x10d/0x1c0 [ 232.123055][ T5959] check_panic_on_warn+0x89/0xb0 [ 232.128005][ T5959] ? hdm_disconnect+0x10d/0x1c0 [ 232.133222][ T5959] end_report+0x78/0x160 [ 232.137932][ T5959] kasan_report+0x129/0x150 [ 232.142446][ T5959] ? hdm_disconnect+0x10d/0x1c0 [ 232.147299][ T5959] hdm_disconnect+0x10d/0x1c0 [ 232.152007][ T5959] usb_unbind_interface+0x26b/0x910 [ 232.157299][ T5959] ? __pfx_usb_unbind_interface+0x10/0x10 [ 232.163023][ T5959] device_release_driver_internal+0x4d6/0x800 [ 232.169191][ T5959] bus_remove_device+0x34d/0x410 [ 232.174162][ T5959] device_del+0x511/0x8e0 [ 232.178517][ T5959] ? __pm_runtime_barrier+0x212/0x460 [ 232.183961][ T5959] ? __pfx_device_del+0x10/0x10 [ 232.188814][ T5959] ? __pfx___mutex_lock+0x10/0x10 [ 232.193848][ T5959] usb_disable_device+0x3e9/0x8a0 [ 232.198895][ T5959] usb_disconnect+0x330/0x950 [ 232.203576][ T5959] hub_event+0x1cf5/0x4a20 [ 232.208090][ T5959] ? do_raw_spin_lock+0x121/0x290 [ 232.213146][ T5959] ? register_lock_class+0x51/0x320 [ 232.218795][ T5959] ? __pfx_hub_event+0x10/0x10 [ 232.223911][ T5959] ? process_scheduled_works+0x9ef/0x17b0 [ 232.229717][ T5959] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.234920][ T5959] ? process_scheduled_works+0x9ef/0x17b0 [ 232.240639][ T5959] ? process_scheduled_works+0x9ef/0x17b0 [ 232.246386][ T5959] process_scheduled_works+0xae1/0x17b0 [ 232.252043][ T5959] ? __pfx_process_scheduled_works+0x10/0x10 [ 232.258636][ T5959] worker_thread+0x8a0/0xda0 [ 232.263233][ T5959] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 232.269568][ T5959] ? __kthread_parkme+0x7b/0x200 [ 232.274945][ T5959] kthread+0x70e/0x8a0 [ 232.279114][ T5959] ? __pfx_worker_thread+0x10/0x10 [ 232.284411][ T5959] ? __pfx_kthread+0x10/0x10 [ 232.289450][ T5959] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.294835][ T5959] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.300070][ T5959] ? __pfx_kthread+0x10/0x10 [ 232.305212][ T5959] ret_from_fork+0x3f9/0x770 [ 232.309900][ T5959] ? __pfx_ret_from_fork+0x10/0x10 [ 232.315038][ T5959] ? __switch_to_asm+0x39/0x70 [ 232.319809][ T5959] ? __switch_to_asm+0x33/0x70 [ 232.324588][ T5959] ? __pfx_kthread+0x10/0x10 [ 232.329213][ T5959] ret_from_fork_asm+0x1a/0x30 [ 232.334006][ T5959] [ 232.337334][ T5959] Kernel Offset: disabled [ 232.341655][ T5959] Rebooting in 86400 seconds..