last executing test programs: 6m37.087682457s ago: executing program 1 (id=2076): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r1 = accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{}, 0x1}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="754d1fd199b33f5d351863723d974fa326bebfcf3ac4e5", 0x17}], 0x1, &(0x7f0000000180)="b25981d863ed7d12d0c6d076dd8f5ea6f2d95c746f361a3c2848f849f7c1ee870691d37c5b5c31b4d998623e9934f79c2930b0bedc35c6233e3c6ed0ca97959540571e1cf4e9130e5e63e8967a4bf6059a9a39de8da8ade1399b5da6a0be27e239cd38b37fc48e4beb7768c593640d2fe3ba7545b6fee02390abd9bf5d347f", 0x7f, 0x844}, 0x4) write$P9_RREADLINK(r0, &(0x7f0000001280)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) timer_create(0x5, &(0x7f00000012c0)={0x0, 0x3a, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000001300)=0x0) timer_settime(r2, 0x1, &(0x7f0000001340)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000001380)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) 6m36.887891879s ago: executing program 1 (id=2077): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) gettid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 6m34.281945899s ago: executing program 1 (id=2087): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_usb_disconnect(0xffffffffffffffff) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000", @ANYRES8], 0x0) 6m33.395304186s ago: executing program 1 (id=2089): r0 = mq_open(&(0x7f0000000000)='-]\'\xe7(\x00', 0x0, 0x150, &(0x7f0000000040)={0x8000, 0x0, 0x4594, 0x4}) r1 = dup(r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f00000000c0)=0x79) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x0, 0x7}, &(0x7f00000001c0)=0x8) r4 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x7, 0x2100) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x1, 0x5}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000300)={0x7, [0x1, 0x6, 0x5, 0x5d1, 0x668f, 0x8, 0x1ff]}, 0x12) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000340)) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000380)={0x7, 0x9b, 0x40}) write$nbd(r1, &(0x7f00000003c0)={0x67446698, 0x1, 0x0, 0x0, 0x1, "0b47e34dbceb65b9e29a3d9caf4c9f35c23ac4cfcfa26a7b3a648c8e0f8acb7cd01e093f30c65e38a20ed40ab772063b9282c6cc098bde06101791ec27d0b663296ad4fbfe995e64b9826754d27f6fa0460d5d27a2a96b5d0ade19d0d592bf10ae97a45169011b9e774e71ecc5fbebeec9a45327769062bd08b45ad4c1f107a8c65dfccb"}, 0x94) io_setup(0x200, &(0x7f0000000480)=0x0) io_cancel(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0xca9, r1, &(0x7f00000004c0)="9f3e37c014cd727ed20b37da526d138a6195eaaaca0b92b0f34cfcefedabc34723a87937887d5158d296b030c7133d02699cc66286d0c70a684f265f4252013269201785b56950fb4d590bf5daab7d8a24bd02ba836ffee1260b6c3f5ce453bd4298df1f78f8f95cf4588a5b1a2d67218b114b6c946b6c240108d9cc2c1eaad81f8ec90363f04756cbc2d2862ebcee69e8c5be66b5efb9a198aa5e7307f47fc647e502b2d6cd94278d6e6fa127cf6fba5aa6d1a2048c7a908d7c85b4e16b5726a93f87ea1f72b1ed4ae935578a21e97edecaf9d5ac4ddc6a60ed", 0xda, 0x88, 0x0, 0x2}, &(0x7f0000000600)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000640)) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000680)={0xb}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'macvlan1\x00'}) r7 = accept$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000800)={0x4, &(0x7f00000007c0)=[{0x0, 0x6, 0x4, 0xfffffffe}, {0x5, 0x3, 0x9, 0x8001}, {0x3, 0xa0, 0x80, 0x1000}, {0x7, 0x2, 0x3, 0x401}]}, 0x10) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f0000000880)={{@host, 0x8}, 0x1, 0x1, 0xcc21}) syz_io_uring_setup(0x5b2a, &(0x7f00000008c0)={0x0, 0x961b, 0x1, 0x2, 0x3cd, 0x0, r1}, &(0x7f0000000940), &(0x7f0000000980)) socket(0xb, 0x2, 0x7ff) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f00000009c0)) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000b80)={0x1, 0x8001, 0x6, {0xb, @win={{0xe, 0xd, 0x2, 0x40}, 0x8, 0x1, &(0x7f0000000a80)={{0x4, 0x4, 0xfffffff9, 0x3}, &(0x7f0000000a40)={{0x9, 0xe7a, 0x8, 0x7fffffff}, &(0x7f0000000a00)={{0x7c7e3ba9, 0x20000, 0x8, 0x7fffffff}}}}, 0x5, &(0x7f0000000ac0)="313a3a7bb9c7d30c1a646252c4b48ece0089613528d1ca821f50d569a5b84a8d1a1178e4741f2ed79425217301b0d585127e78431d2dd976cf7b46d15eef9f657773f0a5ab5d3d3d33044621c3d946377df99c7e6f637d38dc3cef3ae35234ca5cc63cf90ea7f30d11adbac7b86fad8956800ee88e84055ac42c90a2d53bb31d97dbbe714c5de339d67e369ce951efadcd4edb3636890f24d56fe73cd9e7e750aa35d86571c336813bd8", 0x9}}, 0x1}) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000c80)) 6m32.911446796s ago: executing program 1 (id=2090): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_io_uring_setup(0x23c05, &(0x7f0000000480)={0x0, 0x0, 0x200, 0x3, 0x335}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x4, 0x30, 0xd24, 0x9}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r4, 0x7}, 0x8) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2081, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x2000, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @broadcast}]}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x859) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) unshare(0x2c060000) 6m30.749914404s ago: executing program 1 (id=2097): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x1, r5, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000500)={0x0, 0x0, r6}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000300)={0x200, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x8000, 0x101, 0xfffffffb, 0x5, 0x4, 0x6, 0xc], &(0x7f0000000280)=[r6], &(0x7f00000002c0)=[0x46, 0x8, 0x200, 0x5], 0x0, 0x38000000000}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000200)={r3, 0x0, 0x0, 0x4, 0x0, [], [0xffffffff]}) (async) r7 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES32], 0x0) preadv2(r1, 0x0, 0x0, 0x4, 0x1, 0x8) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x20) write$char_usb(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) gettid() (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00'}) write$char_usb(r9, 0x0, 0x0) (async) syz_usb_disconnect(r7) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20040004) syz_usb_disconnect(0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r11, 0xc0145401, &(0x7f0000000000)={{0x3, 0x2, 0x1, 0x3, 0x401}, 0x0, 0x4, 'id0\x00', 'timer0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x544a}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r10, {}, {0x5, 0xa}, {0x9, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x140, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xfc, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffff21a}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x20}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x400}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xd31}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7b674000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x8001}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x10001}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x24004004}, 0x45001) 6m15.506662351s ago: executing program 32 (id=2097): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x1, r5, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000000500)={0x0, 0x0, r6}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000300)={0x200, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x8000, 0x101, 0xfffffffb, 0x5, 0x4, 0x6, 0xc], &(0x7f0000000280)=[r6], &(0x7f00000002c0)=[0x46, 0x8, 0x200, 0x5], 0x0, 0x38000000000}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000200)={r3, 0x0, 0x0, 0x4, 0x0, [], [0xffffffff]}) (async) r7 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES32], 0x0) preadv2(r1, 0x0, 0x0, 0x4, 0x1, 0x8) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x20) write$char_usb(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) gettid() (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg2\x00'}) write$char_usb(r9, 0x0, 0x0) (async) syz_usb_disconnect(r7) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20040004) syz_usb_disconnect(0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r11, 0xc0145401, &(0x7f0000000000)={{0x3, 0x2, 0x1, 0x3, 0x401}, 0x0, 0x4, 'id0\x00', 'timer0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x544a}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r10, {}, {0x5, 0xa}, {0x9, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x140, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xfc, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffff21a}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x20}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x400}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xd31}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7b674000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x8001}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x10001}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x24004004}, 0x45001) 11.247937599s ago: executing program 0 (id=3591): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3}) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa008d747ea4dc9278634a4e3ae5520000000000ecf598c86ef0dc512c2b2efbe470f9551d803030130301a49099533bcd28998a2377ad94ca90e8a37623b730a25feac3a187e667b4c55ad0e2152827fb1c0cdb8aaeb224dbe35c11239cc6cf35dd01bc12543e4b875c04f1eac7f8c5e3ff91e611fb84ff921ab2a5ad57fd472ae18cc083c509255bcab63fd0d3b58ba59a7e168db3"], 0x28}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3}) (async) dup3(r1, 0xffffffffffffffff, 0x0) (async) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa008d747ea4dc9278634a4e3ae5520000000000ecf598c86ef0dc512c2b2efbe470f9551d803030130301a49099533bcd28998a2377ad94ca90e8a37623b730a25feac3a187e667b4c55ad0e2152827fb1c0cdb8aaeb224dbe35c11239cc6cf35dd01bc12543e4b875c04f1eac7f8c5e3ff91e611fb84ff921ab2a5ad57fd472ae18cc083c509255bcab63fd0d3b58ba59a7e168db3"], 0x28}}, 0x0) (async) 10.831969518s ago: executing program 0 (id=3594): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 9.61154946s ago: executing program 0 (id=3598): ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) (async) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x1) fsmount(r2, 0x0, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r7 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) (async) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r8, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x7fffc}, 0xc) (async) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x7fffc}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f00000000c0)=0xe8) quotactl_fd$Q_GETFMT(r7, 0xffffffff80000400, r10, 0x0) (async) quotactl_fd$Q_GETFMT(r7, 0xffffffff80000400, r10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYRES32=r10], 0xa0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.869051201s ago: executing program 0 (id=3603): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da05000000000001090224"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x100000000, 0xfa11, 0xffffffff}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120110030000004081179808400001020301090224000101fa60c409040066020301010c09210e000401226f08090581032000060505"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x5a, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x11, 0x400009, 0x4, 0xa}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8682, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0x0, 0x9}}, 0x28) 8.412219352s ago: executing program 2 (id=3605): openat$nullb(0xffffffffffffff9c, 0x0, 0x42000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r9, 0x40045613, &(0x7f0000000380)=0x7) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xc}, {0xf, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7ff, 0x3, 0x8}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0x100, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x6}, {}, {0x7, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x19, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r13, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x400000, 0x5], [0x1000, 0x0, 0x0, 0x80], [0x0, 0xfffffffffffffffd, 0x800000000, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r14, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r15}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0)={0x9, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r4, r4, 0x27, 0x6034, 0x0, @void, @void, @value=r16}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 6.315801692s ago: executing program 3 (id=3612): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100ffffbeda00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 6.212044704s ago: executing program 4 (id=3613): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x8, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000400)=[0x1, 0x321a0f98, 0x105, 0x9, 0x9, 0x7, 0x4, 0x8, 0x7], &(0x7f0000000380)=[0x0], 0x6) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000100)={[&(0x7f00000000c0)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']}) (async) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000100)={[&(0x7f00000000c0)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']}) 5.989714699s ago: executing program 4 (id=3614): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x2, 0x4070bd28}, 0x384}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket(0x9, 0x6, 0xfffffffd) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0xfffffff8, 0x3, 0x4}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001a00010a000000000400000090000003a38dead7a4a562ea6596998a8ac292de914d8baa5b051eb6f276294a919cd0"], 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x83}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)}], 0x1}, 0x4000000) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x40) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x32e01) 5.975418074s ago: executing program 2 (id=3615): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000500)="6665b9800000c0c032ba430066ed0f300f20e06635000100000f22e036808a0d0001ba4300b84b00ef66b88c5000000f23d00f21f866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x55}], 0x1, 0xc, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x40a00) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x2, 'sed\x00', 0x2, 0x8, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x4e22, 0x1, 0xa, 0x7ffffffe, 0xfb}}, 0x44) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000180)={0x0, 0x677}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0xfffffffffffffe04) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=@newlink={0x100, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x11418, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0xc4, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0xffe}, {0x8, 0x1a}]}}, @AF_MPLS={0x4}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}, @AF_MPLS={0x4}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x19, 0x0, 0x0, 0x2}, {0x8, 0xb, 0x0, 0x0, 0x75d7}, {0x8, 0x1, 0x0, 0x0, 0x7f8d}, {0x8, 0xf, 0x0, 0x0, 0xfffffffb}, {0x8, 0x1, 0x0, 0x0, 0x4}]}}, @AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xaa}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}]}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}]}, @AF_BRIDGE={0x4}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0x9}, {0x8, 0x7, 0x0, 0x0, 0x10}, {0x8, 0xd, 0x0, 0x0, 0x9}, {0x8, 0x2}]}}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x400}]}, 0x100}, 0x1, 0x0, 0x0, 0x8800}, 0x40880) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000140)=ANY=[@ANYRESDEC=r10, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r12, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}]) 5.751803891s ago: executing program 3 (id=3616): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000340)={'vlan0\x00', @ifru_ivalue=0x5}}) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1c}], 0x1, 0x0, 0x45, 0x4002}, 0x4000004) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000440)=[{}, {}, {}], 0x3, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f00000004c0)={[0x800]}, 0x8) r2 = syz_open_dev$sg(&(0x7f0000000880), 0x0, 0x4844c0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffe, 0x6, 0x10, @buffer={0x0, 0xc8, &(0x7f0000000640)=""/200}, &(0x7f0000000240)="238d7acf0800", 0x0, 0x0, 0x2a, 0x0, 0x0}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="0c00238006000100f2000000ecd0800b61741cb41dd120ce7202fe52844fab78f27408e5c1f8b3e35e8c67b3c40384c72df3d8006208d3fbb6bab71eae9f3d2d314c9c1d7abf5eece640214fa0"], 0x28}}, 0x40040) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00042cbd7000fcdbdf258100000008000300", @ANYRES32=r6, @ANYBLOB="0600660007000000000000000000010000000000"], 0x30}}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x10, 0xa, 0x7}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) openat2(0xffffffffffffffff, &(0x7f00000001c0)='\x00', &(0x7f0000000500)={0x200001, 0x180, 0x4}, 0x18) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000280)={0x1, r9, 0x1, 0x1, 0xa, 0x1ff, 0x1}) 5.716684893s ago: executing program 5 (id=3617): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0xf1a) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="1c", 0x1, r5) keyctl$read(0x2, r6, &(0x7f00000020c0)=""/4092, 0x88c) keyctl$read(0xb, r6, &(0x7f00000010c0)=""/4096, 0x1000) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x80045b09, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 4.262854358s ago: executing program 0 (id=3618): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x20, 0x0, 0x4, "b85b9ee0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x33eb4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) fsconfig$FSCONFIG_SET_STRING(r1, 0x3, &(0x7f0000000000)=':\xeb\x98+:P\xabyske`1\x9c\t\x8f\xdb\x02\fC\xf60;\x7f{\x01r\xce', &(0x7f0000000280)='[\x8b\xa4[\x13\x9b\x04U\xd7\xcb+3,\x999\xa9\"\x02\x00\x00\x00\x93\xba\x8d\xff\x14\x8a\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&_1\x9d\x01O\xc8\t\xd2\xceZ\x8a\x7f\xbc\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3b2m\xe3\t\x00\x01\xc2\xa1|\x90\xd5\x8d;U\xe2\xcc\t\xeec\xff\xbd\xa9\x18\xc4a\xb9#\x88\x16p7?\x06\xe2\x04\xe07\x80\xa0l?y\x7fy\x16\x14\xae\x10=\xbcR/x\xbe\x19&%\x9c\x8bxE\xed\'\v0\xb9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x84\x83\xd0\xf0\xc5\x96\x94L\xb3dH\x9c\x84\x90\xb9\x17%\xd2K\xa7>\xb5\a?\xe9\x8a\x04\x04\xf9\x19\xb4\'\xa7y\x94\x93\xe6\x14X\xf6\x05\xc7\xfc\xda\xc8\a1\x8c\x175\x98w\xb8\x93~\x8c\x16\x15t\x10\xd2\xdaw\xc7\x14%kc\xfd\xf2L\x96\xa7;\xce\xf3O\xed\x8b\xc0\xdfN\"\xd05w\'\xd4\x9b\x94\xbfK.\xa8\x1d\xdc\x14\xff\x94J\x88\xdbV\xce\x05\xee\x7f(Y\xb7\x1e\xad\vg^\x19Q&\n\x92\xa0%\xc9:NVlB\xfd\xbcq\x8c\x19\nD\xf0\xa2\xfd\x86\xab\xf3\xefs\v\x94\x01\xaf\x96S@\xfe\x92I\xb7\x7f0}\xae\x11\xab\xbf\x94\xad\x92Y\r\x9d\x93\x14UX\xed\xaa\x91\xb4\x8b\xb5f\x10\xa8\xdb\xbf\xaa\xf8\xd9\xf0\xc0\x84\x96\x00$*vp\f\x8b\xdf\x834\'\x19\xb2\x1b\xc1\xa8\xf2}\xcd\xfevD|\x1a\xfa\xad\xda\x83\x18\xe0\xc6f\x89\xa0A.%}\xd5C]\xe5\x8d=4E\xba\xdb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x15\xa7($\xe1\x95Zv \xc4\xcb?\x80\x83\x03/\x96\xa9\xe0V,\x8a\xb6\xab\xf1\xae\xe9\xa2e\xa1\x18\xa4\x1d\x02\x04\xfe\x00\xd6\xee\'{b`\xbd\xda\xb6\xed\x9b\x88\xf6bw8\xa3RN\xf8\x82\x0e\x18\xbf\xd3\xd9\x94/eD\x04E\xf6\xc6\x06\xcc\xe2\'', 0x0) 3.486814828s ago: executing program 3 (id=3619): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 2.755946347s ago: executing program 4 (id=3620): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x181801, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x210000, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="0f07ca4977c2ddbcb9aebc392b04533eacedf608564e77782ee065245bedd084cfe83f5a43bc79a5185c84d5dca9b743131bb415a6b1f21689ac6cf1e541f5be36868424f1751ae19325c25c414e3717b29991e3fe1ffa", 0x57}, {&(0x7f00000000c0)="fabaa434e5a787405c5731c9383f64fa4c4a4aaa986b8d633754741e0d135250fc297147b529eefc5f85824ac907159c4cd71243fd9d7fe300f49efe670087b56db07d3285c43594d2d91831d64f036f2ce4d630b013e594d8f564a9930306587dc5e0d230fe54ef", 0x68}], 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x181801, 0x0) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x210000, 0x0) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="0f07ca4977c2ddbcb9aebc392b04533eacedf608564e77782ee065245bedd084cfe83f5a43bc79a5185c84d5dca9b743131bb415a6b1f21689ac6cf1e541f5be36868424f1751ae19325c25c414e3717b29991e3fe1ffa", 0x57}, {&(0x7f00000000c0)="fabaa434e5a787405c5731c9383f64fa4c4a4aaa986b8d633754741e0d135250fc297147b529eefc5f85824ac907159c4cd71243fd9d7fe300f49efe670087b56db07d3285c43594d2d91831d64f036f2ce4d630b013e594d8f564a9930306587dc5e0d230fe54ef", 0x68}], 0x2) (async) 2.653474793s ago: executing program 4 (id=3621): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f8) lseek(r2, 0xf00, 0x4) 2.582069984s ago: executing program 2 (id=3622): r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x8000000, 0x10100, 0x100000}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6840abb1c9b4ef6d}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x264681, 0x0) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'B${!/-['}, {0x20, '@$[*%-$'}, {0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '&'}, {0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '--'}, {0x20, '\xff\xff\xff\xff\xff\xff'}, {0x20, '-['}], 0xa, "4dba24bdb6999db9a6b8dc30bcd9a848ec964f1cdb8842d15201233084ab5cf59ac7dddb3460ef8c625760137843b29040dbeddd8846f009c3713a06f3617a33ea9019330a2c"}, 0x7e) r4 = socket$tipc(0x1e, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) unshare(0x24060400) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001100)="946edb7833b385b03936cb0d2aae8bf2a8cfb3b83d44a8d7a88a7ed2d1de2e79c299b8e815fd323ffe2c7b9510d104d443f927322896495f3760ee5b66f01367c540ff1197345e762cce66e7bf99000e57e10a4bc06da5e8c4", 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r6, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000029}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000200)={0x1, {0x80, 0x2, 0x1, 0x6}}) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 2.499849421s ago: executing program 3 (id=3623): r0 = userfaultfd(0x801) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4f, 0x7193, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) (async) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000500), 0x6) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)={0x3}) (async) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)={0x3}) 2.493868937s ago: executing program 5 (id=3624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200)={0x400, 0x8, 0x100, 0x5}, 0x8) (async) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00\x00\x00']) (async) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, &(0x7f0000000000)) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', r3, 0x4, 0x0, 0x2, 0x7, 0x8, @mcast1, @mcast2, 0x8, 0x80, 0x3, 0x2}}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newchain={0x44, 0x64, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc, 0x5}, {0xc, 0x9}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r7) 2.307728956s ago: executing program 2 (id=3625): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x10000}) ioctl$KDDISABIO(r0, 0x4b37) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0xbc, 0x5, 0x0, 0x46, 0xbb0, 0x2, 0x4, 0x3, 0x9, 0x0, 0x3, 0x401, 0x7, 0x0, 0x5, 0x5, 0x400, 0x40, 0xd, 0x4, 0x7, 0x10000, 0xffffffff, 0x6, 0x3, 0xd40, 0x800, 0x3, 0x7, 0x6, 0x81, 0x59e, 0x9, 0x9, 0xff, 0x8, 0x0, 0x6, 0x2, 0x5, 0xffffffff, 0x0, 0x5, 0x6, 0x3, 0x0, 0x7, 0x4, 0x9, 0x0, 0xa, 0x1, 0x401, 0x6, 0xcf05, 0x81, 0x68000000, 0x2, 0x8, 0x14, 0x4, 0x9, 0x0, 0x6, 0x7, 0x0, 0x2, 0x80000000, 0x3, 0x8, 0x3ff, 0x3, 0x3, 0x2275, 0x8001, 0x3, 0xed, 0x4, 0x20000000, 0x8, 0x4, 0x7f, 0x4, 0x9, 0x2, 0x4, 0x3, 0xf7, 0x6, 0x800, 0x80000, 0x80, 0x7ff, 0x7f, 0xd9b, 0x154, 0x2, 0x5, 0x6, 0x1, 0x3d6, 0x9c15, 0x4aee, 0x4, 0x5, 0x4, 0x9, 0xc5, 0x80000001, 0x0, 0x3, 0x94cd, 0x400, 0x7, 0x9, 0xc, 0x7, 0xc33, 0x7fff, 0x8, 0x94, 0x3, 0x24d, 0x7, 0xc1d, 0x10001, 0x7, 0xfffffffd, 0xf, 0x7, 0x4, 0xc, 0x80000000, 0x6, 0x9, 0x7ff, 0x5, 0x436a, 0xc, 0x53ea, 0x5, 0x5, 0xfffffffe, 0x5, 0x2, 0x5, 0x3, 0x7, 0x2a00, 0x6, 0x7fffffff, 0x2, 0xffffffff, 0x7ff, 0x2, 0xf, 0x7, 0x7, 0xff, 0x5, 0x30, 0xc93, 0x4, 0x2, 0x8, 0x1, 0x100, 0xfffffffb, 0x80000000, 0x7f, 0x0, 0x0, 0x83, 0x7, 0x400, 0x3, 0x1, 0x3, 0x1, 0x7, 0x2, 0xf1f, 0x7, 0x1, 0x9, 0x3, 0x2aa, 0x84ad, 0x3, 0x2, 0x7, 0x3ff, 0x3ff, 0x54049079, 0x9, 0x9, 0x400, 0x7ff, 0x8, 0x8, 0x9, 0x20, 0xfffffff7, 0x9, 0x5, 0x3, 0x1, 0x3, 0xffffffe3, 0x3, 0x4, 0x2, 0x4, 0x8, 0xb, 0x7, 0xf, 0x5, 0x1, 0x6, 0xc0, 0x9, 0xc, 0x6, 0x9, 0x7, 0xb0, 0x10000, 0x7, 0x7, 0xddfe, 0x44d, 0x4, 0x8, 0x9, 0x5, 0x1, 0xff, 0x7, 0x7, 0x2, 0x6, 0x3, 0x4, 0x4, 0x9, 0xfffffffd, 0x8, 0xfffffff7, 0x1, 0x6, 0xec36, 0x7, 0x3ff, 0x6, 0x101, 0x8, 0x4, 0xfffffffa, 0xf, 0xffff8001, 0x4, 0xfffffff9, 0x8, 0xfffffff7, 0x8, 0x8, 0x7, 0x73, 0x1ff, 0x80a, 0x8000, 0x6, 0x4, 0x7, 0x5893, 0x5, 0x48f3870d, 0x1, 0x73, 0x9, 0x0, 0xa, 0x1, 0x101, 0x7, 0x2baa, 0x9, 0x7116c1af, 0x132, 0x1, 0x0, 0xbb, 0xfffffeff, 0xb0, 0xffffff80, 0x10000, 0xfffffffa, 0x3, 0x7, 0xfffffffd, 0x7, 0x8, 0x1, 0x2, 0x8001, 0x500000, 0x800, 0xcb1, 0x7fffffff, 0x4, 0x7f, 0xd9aa, 0x6, 0x6, 0x100, 0x321, 0xf3fe, 0x2, 0x6, 0x0, 0x4, 0x3, 0x7, 0x8, 0x3, 0x6, 0x97f, 0x5533, 0x1, 0x2, 0x0, 0x0, 0x101, 0x0, 0x9, 0x0, 0x1ff, 0x2, 0x1, 0x64, 0x9, 0x9, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x40, 0x5, 0x1ff, 0x7, 0x800, 0xa36, 0x8, 0xffff, 0x3, 0xd3, 0x6, 0xfffffff7, 0xb96b, 0x8, 0xc492, 0x526000d3, 0x1, 0x2, 0x2, 0xe0, 0x4, 0xd, 0x0, 0x3, 0xf007, 0xbc5b, 0x2, 0xf, 0xb, 0x3, 0xd10, 0x0, 0x5, 0x5, 0x0, 0x4, 0x101, 0x7ff, 0x7fff, 0x0, 0x6, 0xd9f, 0x3, 0x9, 0x6, 0xfca, 0xe, 0x4, 0x3, 0x2, 0x4, 0x7, 0x4, 0x9, 0x0, 0xca, 0xbc, 0x3, 0x80000001, 0xb, 0x6, 0x3, 0x7, 0x7, 0x9, 0x2, 0x4089, 0x3, 0x4, 0x4, 0x100, 0x8, 0x7, 0x6, 0x351, 0x7, 0x7fff, 0x6, 0x8, 0x5, 0x9, 0x1, 0x4, 0x0, 0x3ff, 0x2128, 0x7, 0x8, 0x1ff, 0x4, 0x2, 0x8, 0x1, 0x4, 0xe, 0x5, 0xf3, 0x2, 0x6, 0x1ff, 0x1, 0x9, 0x9, 0x5, 0xfa8, 0x3, 0xffffffff, 0x6, 0xe0c, 0x0, 0xffff0001, 0x7, 0x3, 0x2, 0x1, 0x401, 0x101, 0x6fdc, 0x8, 0x100, 0x4, 0x800, 0x0, 0xb, 0x400, 0x9, 0x4, 0x3d6, 0xe03, 0x1, 0x0, 0x400, 0x5, 0x1, 0x2, 0xc708, 0x2, 0x4, 0x1, 0x9, 0x4, 0x8000000, 0x5, 0xa, 0x2, 0x5, 0x0, 0x10, 0x8, 0x2, 0x1, 0xf8, 0x7fff, 0x2, 0x97f9, 0xa9, 0x7fff, 0xd0, 0xd, 0xc5f2, 0x9, 0x8c85, 0x1, 0x5, 0x3, 0x5d, 0xfffffffa, 0x7a, 0x9, 0x401, 0xbfa8, 0xd7f, 0x4, 0x6, 0x76d1, 0x7, 0x4, 0x10001, 0xfffffffd, 0x101, 0x0, 0xffff8001, 0xfffffffc, 0x4, 0x3, 0x0, 0x8000, 0x1868, 0x1, 0x2, 0x6, 0x2, 0xa1, 0xffff0a17, 0x3ff, 0x39, 0x400, 0x4e33, 0x2, 0x5, 0x6, 0xffff, 0x1, 0x6, 0x0, 0x0, 0x800, 0x1000, 0x3, 0x80000001, 0x5, 0x0, 0x614ae64b, 0x9, 0x8, 0x5, 0x80, 0x2fac0, 0x43, 0x97, 0x4, 0x7, 0x4, 0xc, 0x200, 0x10000, 0x3, 0xd, 0xba5, 0x10001, 0x400, 0x2, 0x4, 0x662c, 0x7ff8000, 0x8, 0x8, 0x61, 0x2, 0x82, 0x7f, 0xd, 0x5, 0xaa1, 0x8, 0x0, 0x2, 0x5, 0x1a10c088, 0x3610, 0x4, 0xffffffff, 0x10001, 0x3ff, 0x18, 0x5, 0x2, 0x7, 0x1, 0xfffff63e, 0xf, 0x49, 0x5, 0xbd, 0x0, 0x4, 0x7, 0xfa9, 0x4, 0x10000, 0x80, 0xd, 0x9, 0xfff, 0x800, 0x6, 0x0, 0x5, 0xce, 0xfffffffc, 0x9, 0x4, 0x2, 0xade, 0x7, 0x7, 0x6, 0x3, 0x5, 0x4, 0x5, 0xeaf, 0xffffffff, 0xfffff576, 0x3, 0x10, 0x5b03f549, 0x6, 0x5, 0xc776, 0x3af8339b, 0xfff80000, 0x1a2f, 0x8, 0x9, 0x2, 0x3, 0xff, 0x8001, 0x6, 0x2, 0x3, 0x1ff, 0xa3, 0x80000000, 0x1, 0x2, 0x8, 0x66, 0xff, 0x50000000, 0x514d, 0x10, 0x7, 0x401, 0x9, 0x1, 0xffffff81, 0x81, 0x0, 0x0, 0x46591ac4, 0x4, 0x4, 0x80, 0x2, 0x6, 0x80000000, 0x6, 0x0, 0x3, 0x7, 0x3, 0xee3d, 0x4, 0x7, 0x4, 0x2, 0xca8e, 0x6, 0xc, 0x8c, 0x8, 0x101, 0x17, 0x2, 0x80000000, 0xa47a, 0x0, 0x4dfd, 0x9, 0x1, 0x7, 0xd31, 0x174b000, 0x80, 0x9, 0x5, 0x7, 0xd, 0x2, 0xff, 0x10001, 0x8, 0x80000001, 0x1, 0x0, 0xd, 0x97, 0xdc78, 0x5, 0x2, 0x4, 0x8, 0x7fffffff, 0x3, 0x5, 0x6c, 0x8, 0x2, 0x9, 0x5, 0x9, 0x0, 0x1efa, 0x0, 0x3, 0x80000001, 0x0, 0xfffffc00, 0x8000, 0xe, 0x5, 0x1, 0x6, 0x6, 0x800, 0x6, 0x1ff, 0x80, 0xa68a, 0x10001, 0x4, 0x2, 0x9, 0x3c, 0x9, 0x9f3, 0xfffffb23, 0x6, 0x7, 0xff, 0xaa6, 0x8, 0x8, 0x80000000, 0x40, 0x4, 0x9, 0x4, 0x4, 0xcb7, 0x14000, 0x8, 0x2, 0x6, 0x3a63, 0xa0, 0x1ff, 0xfffffffe, 0x287c, 0x8, 0x9, 0x7fffffff, 0x8, 0x7, 0xc5f5, 0x13, 0xffffff81, 0x7, 0x4, 0x5, 0x8, 0x1ff, 0x3, 0x1, 0x25124cf5, 0x6, 0x2, 0x9f98, 0x7, 0x2, 0x5, 0x7f, 0x8, 0xd, 0x1, 0x50, 0x6, 0xf, 0x8001, 0x800, 0x2, 0x5, 0x234, 0x5, 0x301, 0x8, 0x1, 0x7, 0xffff, 0x401, 0xf49, 0x8001, 0x491, 0x0, 0x0, 0x8, 0xa446, 0x4, 0x933, 0x2, 0x38, 0xa847, 0xffffff4d, 0x1, 0x80000001, 0x3, 0x9, 0xc5cb, 0x3, 0x79, 0x4, 0x0, 0x3, 0x2, 0xb9c6, 0xe, 0x3, 0x8000, 0x8, 0xf0, 0x6, 0x1, 0x9, 0x9, 0x7, 0x8, 0xc, 0x9, 0x27d9, 0x101, 0x2, 0x8, 0xe778, 0x7c0300, 0x2, 0x10001, 0x5, 0xfffffffa, 0x1, 0x6, 0x2, 0xfff, 0x1000, 0x2, 0x3, 0x4, 0x6, 0x0, 0x8, 0x10, 0x7, 0x9, 0x81, 0x6, 0x1, 0x480, 0x6ea, 0x7, 0x2, 0x6, 0x0, 0x5, 0x81, 0x6, 0xda7e, 0x5, 0x9, 0x9943, 0x81, 0x7fff, 0x4, 0x4, 0x8, 0x2, 0x5, 0x3, 0x0, 0x4, 0x1ff, 0xffffffff, 0x3, 0xd54, 0xf, 0x5, 0x7, 0x4, 0x8, 0x6, 0x0, 0x8, 0x4884, 0x81c, 0x2, 0x80000001, 0x101, 0x1, 0xc844, 0x99f4, 0x1351, 0x70, 0xffffff01, 0x123e, 0x2, 0x2, 0x5, 0x6, 0xe, 0x8000, 0xfffffff7, 0x0, 0x6, 0x401, 0xf90, 0x8eb6, 0x61, 0x401, 0x7, 0xa, 0x0, 0x53, 0x5, 0x7, 0x9, 0x5, 0xa, 0x8f00000, 0x5, 0x8, 0x8, 0x687e68b1, 0x3, 0xe1, 0x400, 0x1, 0x3, 0x6, 0x5, 0x7, 0x6c8, 0x260, 0x8, 0x81, 0x2, 0x30, 0x8, 0xf624, 0x9, 0x0, 0x7, 0x101, 0x1, 0xcf, 0x2, 0x5, 0xffffffff, 0xf, 0xe1, 0x200, 0x80000000, 0xe, 0x5, 0x6, 0xb, 0x3, 0xff0b, 0x0, 0x0, 0x7ff, 0x4, 0x9, 0x10000, 0x3, 0x5, 0x6, 0x9, 0x3, 0x3, 0x80, 0x4, 0x6, 0x400, 0x2, 0x0, 0xb3], 0x6, 0x400, 0x76}) readlink(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)=""/187, 0xbb) r2 = accept4(0xffffffffffffffff, &(0x7f0000001200)=@isdn, &(0x7f0000001280)=0x80, 0x800) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000001480)=0xe8) mount$fuseblk(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', &(0x7f0000001340), 0x2120010, &(0x7f00000014c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0xb}}], [{@seclabel}, {@seclabel}, {@fowner_lt={'fowner<', 0xee01}}, {@permit_directio}, {@smackfshat={'smackfshat', 0x3d, '\xe3'}}]}}) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_GETMODE(r6, 0x5601, &(0x7f0000001600)) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000001640)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast2}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000001680)={0x0, 'pim6reg0\x00', {0x2}, 0x9}) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f00000016c0)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001880)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x315a87b4, 0x80000001, 0x2a10, 0xf, 0xfffffffe}, &(0x7f0000001940)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000001980)={r8, 0x1, 0x3f, 0x4, 0x7, 0x8}, &(0x7f00000019c0)=0x14) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000001a00)={0x5, 0xfffffffc, 0x9}) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000001a40)={0xd, 0x200}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000001a80)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000001ac0)={r9}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000001b40)={0x3, 0x0, &(0x7f0000001b00)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000001bc0)={r10, 0x3, 0x3, 0x5, &(0x7f0000001b80)=[{0x2, 0x1, 0x7ff, 0x2}, {0x4, 0x7, 0x200, 0x5}, {0x4, 0xce, 0x9, 0x24}, {0x8, 0xee7, 0x1, 0x1}, {0x3, 0xf, 0x6, 0x5}]}) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000001c00)="b7a825ec17a061aef8251bf274a416025e7b2fa29ce86f5dfeb91e348beb82a0ee606eff03120e343737dac8ebba72aa0191f3ee") ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000001c80)={r10, 0x1, 0x5, 0x6, &(0x7f0000001c40)=[{0xf800, 0x7, 0x7, 0xa}, {0x6, 0x7ff, 0xd, 0x7fff}, {0x0, 0xfc43, 0x2, 0xf0}, {0x1, 0xb92e, 0x7, 0x5ff8}, {0xe, 0x2, 0x0, 0x5}, {0x5, 0xffff, 0x2, 0x4}]}) 2.239971564s ago: executing program 3 (id=3626): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010055aaffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 1.817565666s ago: executing program 2 (id=3627): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005b}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.668168026s ago: executing program 5 (id=3628): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f00000042c0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000000000)=[{&(0x7f0000000180)="0ba5883e", 0x4}], 0x1}}], 0x1, 0x40840) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = signalfd(r1, &(0x7f00000000c0)={[0x1f74d173]}, 0x8) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000240)={0x2, 0x0, [{0x3, 0xfffff4b4, 0x2, 0x2, 0x3, 0x80000001, 0x9}, {0x2, 0x1, 0x6, 0xa, 0x1129, 0x83b, 0x9d10}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) 1.619824981s ago: executing program 4 (id=3629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYRES32=0x41424344, @ANYBLOB="b4000007907800130b0300050a460000c1000040000008d58838068b910000002244070000bc0be4bdf9da24708a4ec90000932b52c828de6f79d82439cc93c6f9516a4873ed9248ba27afeb7396efe6"], 0x7e) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x67a, "a2280852ff108a7ccdc851b446a3b788"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="92fe47349353f9afdf37a086a89b9062376c73a2ef00fb1faf72d02a666e14b6ef6c50760da58392f5ea8d564db2c809caa68bed5c4e51cbe5cca2478ebd3e54931fbcdfe052affd37998ec6ddecfd0c3a043fadb25da7", 0x57}, {&(0x7f00000001c0)="ce7ecc9322cfbcf82fbb722d6daefc28", 0x10}, {&(0x7f00000002c0)="9b3991357d5b7f2401b988bc0593130a664d0cd8c8b62484240f25b5942632207a5bb232abe1d8bfa3c83c82998c188cf91a9197582dd7c9689bbe6b3c91a54cad86a37220fc4b11236fcd4a4f9b88ba6d4d703184d47e10e3245b4f5a4941aebaa26127cffee67eb54c503a2c72ad103ff01c55", 0x74}, {&(0x7f0000000340)="81f78beebc87ca261348f6bc55c33ddd3758f42ed06589bc6411b3ea0019236a237f09454dd53020a0963dc9ee85c2fd73dce59237a1f328d618cddd690c16a6e388b2a178ac77b8abfc0907", 0x4c}, {&(0x7f00000003c0)="2ef32208aeedd819272a43787b94c23848ee46397a23d781fd270a1ee7bf2cd07d0163f503d843afc4cef442fe5bba571283f215c6d439e394f97ef83e8a0982640d6d1cfad91c79e6a970be62208a2ee85779ed910ac61dac93303f3885a3fa8e9b2393e0f83198a41379404ae8cb09eda87b4b1f204fb1db8f032eec4cf3e4846644255a34a806ae8d5e565851e1da480419ca58cb2c081c7b7825300840be597d", 0xa2}, {&(0x7f0000000740)="27bdd63cebc59cdef1981ee379250a9a538c477eba639a87", 0x18}, {&(0x7f00000004c0)="e93c4cc3acb8fd83be20d4676a31ab5df70f7e852aad98a0f5d066428fb5f0dc08109b1fa8503caee2ed8e092b2d81eb8c5b29ac651d0c6783956d1b0a8aa3e3fe730400ba31bc64689d09b6f7654ad1f90ae1b916440beda292b9b76f2fe9e372e69060", 0x64}, {&(0x7f0000000540)="cb2aa0dc61b1e6076063d1fb13d43b79c958605e56796bcf5c47127f12c439a5634a020e34e7abdb7f900aa3988a3e89864adf72798909ab788b37a945d35ead0dab6ad2", 0x44}], 0x8, &(0x7f0000000640)=[{0xa8, 0x115, 0xfb, "11857b4e2879bb4a5085d930eece7e6fb1d3ebe57cae57b2d4f3228310267a49c7ef8bd5ad61ff4abda1875d5e401383c885fdf8bf64437e8c9807ac4deff6b74778cf89d370de8642628d34dfa5d378d4f432e02eb7253ab70a2fe84aa2d06ba678d98b2ef76f1a7f4ccf7a48205a631dd774148a6eedec35f76f03997e6f9c8ff031fa2c686a41a879e79190b978c386"}], 0xa8}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYRES32=0x41424344, @ANYBLOB="b4000007907800130b0300050a460000c1000040000008d58838068b910000002244070000bc0be4bdf9da24708a4ec90000932b52c828de6f79d82439cc93c6f9516a4873ed9248ba27afeb7396efe6"], 0x7e) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x67a, "a2280852ff108a7ccdc851b446a3b788"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)="92fe47349353f9afdf37a086a89b9062376c73a2ef00fb1faf72d02a666e14b6ef6c50760da58392f5ea8d564db2c809caa68bed5c4e51cbe5cca2478ebd3e54931fbcdfe052affd37998ec6ddecfd0c3a043fadb25da7", 0x57}, {&(0x7f00000001c0)="ce7ecc9322cfbcf82fbb722d6daefc28", 0x10}, {&(0x7f00000002c0)="9b3991357d5b7f2401b988bc0593130a664d0cd8c8b62484240f25b5942632207a5bb232abe1d8bfa3c83c82998c188cf91a9197582dd7c9689bbe6b3c91a54cad86a37220fc4b11236fcd4a4f9b88ba6d4d703184d47e10e3245b4f5a4941aebaa26127cffee67eb54c503a2c72ad103ff01c55", 0x74}, {&(0x7f0000000340)="81f78beebc87ca261348f6bc55c33ddd3758f42ed06589bc6411b3ea0019236a237f09454dd53020a0963dc9ee85c2fd73dce59237a1f328d618cddd690c16a6e388b2a178ac77b8abfc0907", 0x4c}, {&(0x7f00000003c0)="2ef32208aeedd819272a43787b94c23848ee46397a23d781fd270a1ee7bf2cd07d0163f503d843afc4cef442fe5bba571283f215c6d439e394f97ef83e8a0982640d6d1cfad91c79e6a970be62208a2ee85779ed910ac61dac93303f3885a3fa8e9b2393e0f83198a41379404ae8cb09eda87b4b1f204fb1db8f032eec4cf3e4846644255a34a806ae8d5e565851e1da480419ca58cb2c081c7b7825300840be597d", 0xa2}, {&(0x7f0000000740)="27bdd63cebc59cdef1981ee379250a9a538c477eba639a87", 0x18}, {&(0x7f00000004c0)="e93c4cc3acb8fd83be20d4676a31ab5df70f7e852aad98a0f5d066428fb5f0dc08109b1fa8503caee2ed8e092b2d81eb8c5b29ac651d0c6783956d1b0a8aa3e3fe730400ba31bc64689d09b6f7654ad1f90ae1b916440beda292b9b76f2fe9e372e69060", 0x64}, {&(0x7f0000000540)="cb2aa0dc61b1e6076063d1fb13d43b79c958605e56796bcf5c47127f12c439a5634a020e34e7abdb7f900aa3988a3e89864adf72798909ab788b37a945d35ead0dab6ad2", 0x44}], 0x8, &(0x7f0000000640)=[{0xa8, 0x115, 0xfb, "11857b4e2879bb4a5085d930eece7e6fb1d3ebe57cae57b2d4f3228310267a49c7ef8bd5ad61ff4abda1875d5e401383c885fdf8bf64437e8c9807ac4deff6b74778cf89d370de8642628d34dfa5d378d4f432e02eb7253ab70a2fe84aa2d06ba678d98b2ef76f1a7f4ccf7a48205a631dd774148a6eedec35f76f03997e6f9c8ff031fa2c686a41a879e79190b978c386"}], 0xa8}, 0x0) (async) 1.556862464s ago: executing program 3 (id=3630): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x2}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x21, 0x0, @broadcast, @rand_addr=0x64010100}, @timestamp_reply={0xe, 0x0, 0x0, 0xb92, 0x7, 0x4, 0x3ff, 0x7f}}}}}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280", @ANYRES32=r9, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.426359699s ago: executing program 5 (id=3631): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8cacadc3c6e540f3, '\x00', 0x0, 0x2}, 0x94) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @remote}, 0x10) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r2, 0x29, 0x92, 0x2, 0x73, 0x45, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8000, 0x8, 0x200}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r2, 0x29, 0x92, 0x2, 0x73, 0x45, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8000, 0x8, 0x200}}) r3 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f0000000200)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x1000, 0xb4b, 0x9, 0x9, 0x0, 0x400003}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x1000, 0xb4b, 0x9, 0x9, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) (async) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0xfffffffff0000000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)=0x1) 1.196211811s ago: executing program 2 (id=3632): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r4, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="04002abd7000fcdbdf2506000000050005000000000008000200020000001c0006800800060008000000060001000200000008000300ffffffff54000180080003007f0000010400fe80000000000000000000000000000000000000000000001206000100020000000800030064010102080006001f00000008001300e00000010000"], 0x94}, 0x1, 0x0, 0x0, 0x404c010}, 0x24040013) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, &(0x7f0000000240)={0x6}) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.059948513s ago: executing program 5 (id=3633): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 959.150122ms ago: executing program 4 (id=3634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x400) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000010d21f07600000000000010902"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 671.821511ms ago: executing program 5 (id=3635): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) r1 = syz_usb_connect$uac1(0x4, 0xa9, &(0x7f0000000180)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x3, 0x1, 0x6, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x13}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x4, 0x7, 0x3ff, 0x1, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x6, 0x3}, @as_header={0x7, 0x24, 0x1, 0x4, 0x5}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf, 0x4, 0x6, 0x7, "486fba755f1b"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x3, 0xf6, 0x1, "facca7bb79b808b8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x4, 0x5b, {0x7, 0x25, 0x1, 0x80, 0x2, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0xf, 0x0, {0x7, 0x25, 0x1, 0x83, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x7, 0x20, 0x3, 0xff, 0x31}, 0x138, &(0x7f0000000400)={0x5, 0xf, 0x138, 0x4, [@generic={0x3d, 0x10, 0x6, "00431211d77d1e5e06607b877452fc0bcb651107ed70fb88df4cbcdb5e1380b90c91cb3eeba99f9a8fabbf202300754285a5148e27270fc531c6"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x8, 0xff0f, 0x400, [0x30]}, @generic={0xc2, 0x10, 0xa, "f2aff0e4054d68afba67ab6866bc3d59889396874b6c47ec727d9ba72432494e76fc8d46640eb83918acd093508b843fe649111b1bd3e6925b6b777e39198f97cfc58b35df295788d104352b163138c28915de060d16d1699120798d5cb193a2e8c4f4d20c8334536c4edb04310fb76bfc537777eb05a3e44f13c150788a4de3433e8076b308bd52f9dc3e2ed0c0cb0ef7081237ad6ab48ff827da756b5c35c2aa023bf694c52ffa32aa68e36bd76339b43da170a89d3d919537fc9185ff29"}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x44fcb0, 0xff00, 0x8, [0xc0, 0xf0, 0x0, 0x30, 0xff0000, 0xf]}]}, 0x5, [{0x34, &(0x7f00000002c0)=@string={0x34, 0x3, "73924e6713942ef754b0dcdc3fb549c2e21ab2ce101cb2b0af4e4ea3ec936b97cb24aea0927f0ff4e2bd85a920e6fe336810"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x440a}}]}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000100)={0xffffff9f, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002580)={&(0x7f0000000080)=[{0xd0, 0x0, 0x0, 0x0}, {0xc, 0x4a00, 0x0, 0x0}], 0x2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x402c2, 0x0) write$rfkill(r3, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1}, 0x8) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x30000041, &(0x7f00000003c0)={0xa, 0x4ea4, 0x44, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) 0s ago: executing program 0 (id=3636): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) lseek(r5, 0xf00, 0x4) io_uring_enter(r2, 0x154c, 0xef91, 0x48, 0x0, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r6, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) kernel console output (not intermixed with test programs): udit(1758521570.080:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.0.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 948.281085][T18020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.366350][ T30] audit: type=1326 audit(1758521570.080:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.0.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 948.403405][T12565] go7007 4-1:162.253: probe with driver go7007 failed with error -12 [ 948.436144][T12565] usb 4-1: USB disconnect, device number 60 [ 948.547416][ T30] audit: type=1326 audit(1758521570.080:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.0.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 948.581383][T12557] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 948.599304][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.704556][T12557] cx231xx 3-1:0.1: bad scenario!!!!! [ 948.704556][T12557] config_info=0 [ 948.713715][ T30] audit: type=1326 audit(1758521570.080:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.0.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 948.737804][T12557] cx231xx 3-1:0.1: Failed to read PCB config [ 948.746360][ T30] audit: type=1326 audit(1758521570.080:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.0.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 948.778606][ T30] audit: type=1326 audit(1758521570.080:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.0.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 948.940975][ T30] audit: type=1326 audit(1758521570.080:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18026 comm="syz.0.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 949.154455][T12557] usb 3-1: USB disconnect, device number 39 [ 949.292214][T18046] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 949.726970][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.855264][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.921153][ T8774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.930060][T12565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.985422][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3250'. [ 950.190083][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.313401][ T43] usb 5-1: string descriptor 0 read error: -71 [ 950.335996][ T43] usb 5-1: USB disconnect, device number 65 [ 950.583125][T18060] tipc: Enabling of bearer rejected, failed to enable media [ 951.201226][T18073] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 951.209909][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.366315][ T43] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 951.497085][ T43] usb 5-1: device descriptor read/64, error -71 [ 951.856956][ T43] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 952.046352][ T43] usb 5-1: device descriptor read/64, error -71 [ 952.195663][ T43] usb usb5-port1: attempt power cycle [ 952.236436][ T24] net_ratelimit: 1 callbacks suppressed [ 952.236447][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.610365][ T43] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 952.657350][ T43] usb 5-1: device descriptor read/8, error -71 [ 952.886610][T12569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.936310][ T43] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 952.987987][ T43] usb 5-1: device descriptor read/8, error -71 [ 953.126594][ T43] usb usb5-port1: unable to enumerate USB device [ 953.279759][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.296421][T12565] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 953.391058][T18100] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3263'. [ 953.462440][T18102] program syz.0.3264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 953.498065][T12565] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 953.508128][T12565] usb 4-1: config 1 has no interface number 0 [ 953.522998][T12565] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 953.549759][T12565] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 953.590753][T12565] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 953.631950][T12565] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 953.687228][T12565] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 953.698229][T12565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.708147][T12565] usb 4-1: Product: syz [ 953.718669][T12565] usb 4-1: Manufacturer: syz [ 953.728736][T12565] usb 4-1: SerialNumber: syz [ 953.750794][T18095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 953.762950][T18095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 953.897096][ T43] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 954.059065][T18095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 954.085988][T18095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 954.115833][ T43] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 954.147618][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.203455][ T43] usb 1-1: config 0 descriptor?? [ 954.246391][ T43] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 954.324149][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.419101][T12565] usb 4-1: Incompatible driver and firmware versions [ 954.444846][T18106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3265'. [ 954.483483][T12565] usb 4-1: USB disconnect, device number 61 [ 954.490940][T18106] program syz.0.3265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 954.551615][T18106] netlink: 'syz.0.3265': attribute type 11 has an invalid length. [ 955.006429][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 955.143759][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 955.224326][T12565] usb 1-1: USB disconnect, device number 44 [ 955.356745][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.926597][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.944922][T18128] loop8: detected capacity change from 0 to 8 [ 955.952357][T18128] Dev loop8: unable to read RDB block 8 [ 955.964319][T18128] loop8: unable to read partition table [ 955.975643][T18128] loop8: partition table beyond EOD, truncated [ 955.989357][T18128] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 956.386709][T12565] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 956.401377][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.639747][T12565] usb 3-1: too many configurations: 80, using maximum allowed: 8 [ 956.668016][T12565] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 956.726520][T12565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.734557][T12565] usb 3-1: Product: syz [ 956.830737][T12565] usb 3-1: Manufacturer: syz [ 956.846171][T12565] usb 3-1: SerialNumber: syz [ 957.088256][T18143] batadv_slave_1: entered promiscuous mode [ 957.439719][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.506896][T18142] batadv_slave_1: left promiscuous mode [ 957.987928][T18161] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3280'. [ 958.056520][T12552] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 958.269293][T12552] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 958.290403][T12552] usb 6-1: config 1 has no interface number 0 [ 958.315010][T12552] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 958.341752][T12552] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 958.356817][T12552] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 958.372672][T12552] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 958.391025][T12552] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 958.442918][T12552] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.462727][T12552] usb 6-1: Product: syz [ 958.476825][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.486501][T12552] usb 6-1: Manufacturer: syz [ 958.495154][T12552] usb 6-1: SerialNumber: syz [ 958.520792][T18150] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 958.529152][T18150] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 958.609510][ T9] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 958.630635][T12565] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 958.750329][T18170] openvswitch: netlink: Flow key attr not present in new flow. [ 958.780807][ T9] usb 5-1: config 0 has an invalid interface number: 212 but max is 0 [ 958.790395][ T9] usb 5-1: config 0 has no interface number 0 [ 958.799913][T18150] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 958.808331][ T9] usb 5-1: config 0 interface 212 has no altsetting 0 [ 958.882038][T18150] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 958.898500][ T9] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 958.911422][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.941696][ T9] usb 5-1: Product: syz [ 958.951285][T18173] loop8: detected capacity change from 0 to 8 [ 958.957812][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.966087][ T9] usb 5-1: Manufacturer: syz [ 958.973502][ T9] usb 5-1: SerialNumber: syz [ 958.981846][T18173] Dev loop8: unable to read RDB block 8 [ 958.996131][ T9] usb 5-1: config 0 descriptor?? [ 959.002253][T18173] loop8: unable to read partition table [ 959.018330][ T9] HFC-S_USB 5-1:0.212: probe with driver HFC-S_USB failed with error -5 [ 959.027420][T18173] loop8: partition table beyond EOD, truncated [ 959.059045][T18173] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 959.108637][T12552] usb 6-1: Incompatible driver and firmware versions [ 959.130315][T12552] usb 6-1: USB disconnect, device number 58 [ 959.271495][T18167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.327327][T18167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.516661][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.621342][T12552] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 959.660771][T12557] usb 5-1: USB disconnect, device number 70 [ 959.776355][T12552] usb 1-1: Using ep0 maxpacket: 32 [ 959.794336][T12552] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 959.815607][T12552] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 959.844275][T12552] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 959.872127][T12552] usb 1-1: Product: syz [ 959.881502][T12552] usb 1-1: Manufacturer: syz [ 959.891697][T12552] usb 1-1: SerialNumber: syz [ 959.904467][T12552] usb 1-1: config 0 descriptor?? [ 959.919295][T18177] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 960.066461][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 960.145511][T12566] usb 1-1: USB disconnect, device number 45 [ 960.186520][T12569] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 960.245504][T12565] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 960.279442][T12565] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 960.291532][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 960.299938][T12565] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 960.314236][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.334444][T12565] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 960.343614][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.362319][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 960.372413][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.382860][T12565] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 960.411288][ T9] usb 6-1: config 0 descriptor?? [ 960.420253][T12565] usb 3-1: USB disconnect, device number 40 [ 960.456596][T12569] usb 4-1: Using ep0 maxpacket: 32 [ 960.465897][T12569] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 960.475251][T12569] usb 4-1: config 0 has no interface number 0 [ 960.483090][T12569] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 960.494415][T12569] usb 4-1: config 0 interface 1 has no altsetting 0 [ 960.556740][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.578652][T12569] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 960.593001][T12569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.601996][T12569] usb 4-1: Product: syz [ 960.614924][T12569] usb 4-1: Manufacturer: syz [ 960.621563][T12569] usb 4-1: SerialNumber: syz [ 960.642641][T12569] usb 4-1: config 0 descriptor?? [ 960.888134][T12569] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 960.920647][T12569] cx231xx 4-1:0.1: Failed to read PCB config [ 960.929211][T12569] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 960.940061][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 960.946339][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 960.983995][T12569] usb 4-1: USB disconnect, device number 62 [ 961.057929][ T9] usb 6-1: USB disconnect, device number 59 [ 961.426339][T12566] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 961.506467][T12569] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 961.577993][T12566] usb 3-1: config 0 has no interfaces? [ 961.585937][T12566] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 961.596682][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.596714][T12566] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.696678][T12566] usb 3-1: Product: syz [ 961.736785][T12569] usb 4-1: Using ep0 maxpacket: 32 [ 961.748023][T12569] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 961.756037][T12569] usb 4-1: config 0 has no interface number 0 [ 961.815787][T12569] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 961.843209][T12566] usb 3-1: Manufacturer: syz [ 961.853315][T12569] usb 4-1: config 0 interface 1 has no altsetting 0 [ 961.876816][T12566] usb 3-1: SerialNumber: syz [ 961.900162][T12569] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 961.909438][T12569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.926429][T12566] usb 3-1: config 0 descriptor?? [ 961.939621][T12569] usb 4-1: Product: syz [ 962.135572][T12569] usb 4-1: Manufacturer: syz [ 962.209445][T12569] usb 4-1: SerialNumber: syz [ 962.239785][T12569] usb 4-1: config 0 descriptor?? [ 962.557740][T12569] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 962.579176][T12569] cx231xx 4-1:0.1: bad scenario!!!!! [ 962.579176][T12569] config_info=0 [ 962.587949][T12566] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 962.602920][T12569] cx231xx 4-1:0.1: Failed to read PCB config [ 962.637032][T12552] net_ratelimit: 1 callbacks suppressed [ 962.637046][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.761680][T12566] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 962.781489][T12566] usb 5-1: config 0 has no interface number 0 [ 962.801959][T12566] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 962.826453][T12566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.846092][T12566] usb 5-1: Product: syz [ 962.872807][T12566] usb 5-1: Manufacturer: syz [ 962.890400][T12566] usb 5-1: SerialNumber: syz [ 962.921422][T12566] usb 5-1: config 0 descriptor?? [ 962.955678][T12557] usb 4-1: USB disconnect, device number 63 [ 963.106411][T12569] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 963.156359][T12566] usb 5-1: Firmware version (0.0) predates our first public release. [ 963.166820][T12566] usb 5-1: Please update to version 0.2 or newer [ 963.180083][T12565] usb 3-1: USB disconnect, device number 41 [ 963.256641][T12569] usb 1-1: device descriptor read/64, error -71 [ 963.414511][T12566] usb 5-1: USB disconnect, device number 71 [ 963.521038][T12557] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 963.539215][T12569] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 963.637444][T12565] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 963.679251][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.688384][T12557] usb 6-1: Using ep0 maxpacket: 16 [ 963.694754][T12557] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.706472][T12569] usb 1-1: device descriptor read/64, error -71 [ 963.712702][T12557] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.722529][T12557] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 963.735639][T12557] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 963.745772][T12557] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.755835][T12557] usb 6-1: config 0 descriptor?? [ 963.808298][T12565] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 963.816926][T12569] usb usb1-port1: attempt power cycle [ 963.822457][T12565] usb 3-1: config 1 has no interface number 0 [ 963.829995][T12565] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 963.842920][T12565] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 963.853187][T12565] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 963.863206][T12565] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 963.885797][T12565] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 963.895187][T12565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.904167][T12565] usb 3-1: Product: syz [ 963.908532][T12565] usb 3-1: Manufacturer: syz [ 963.913182][T12565] usb 3-1: SerialNumber: syz [ 963.926528][T18221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 963.936418][T18221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 963.969045][T18222] sctp: [Deprecated]: syz.5.3299 (pid 18222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 963.969045][T18222] Use struct sctp_sack_info instead [ 964.157067][T18221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 964.165323][T18221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 964.176334][T12569] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 964.220358][T12569] usb 1-1: device descriptor read/8, error -71 [ 964.252161][T12557] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0045/input/input83 [ 964.306692][T12557] microsoft 0003:045E:07DA.0045: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 964.372644][T18242] i2c i2c-0: Invalid block write size 255 [ 964.398925][T12566] usb 6-1: USB disconnect, device number 60 [ 964.406161][T12565] usb 3-1: Incompatible driver and firmware versions [ 964.430142][T18241] fido_id[18241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 964.451783][T12565] usb 3-1: USB disconnect, device number 42 [ 964.489233][T12569] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 964.537328][T12569] usb 1-1: device descriptor read/8, error -71 [ 964.667213][T12569] usb usb1-port1: unable to enumerate USB device [ 964.716584][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.946353][T12552] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 965.036560][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.143772][T12552] usb 5-1: config 0 has no interfaces? [ 965.155265][T12552] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 965.172139][T12552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.184384][T12552] usb 5-1: Product: syz [ 965.192629][T12552] usb 5-1: Manufacturer: syz [ 965.197732][T12552] usb 5-1: SerialNumber: syz [ 965.209260][T12552] usb 5-1: config 0 descriptor?? [ 965.236608][T12569] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 965.407673][T12569] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 965.452255][T12569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.463344][T12569] usb 3-1: config 0 descriptor?? [ 965.468336][T18244] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.521398][T18244] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 965.545964][T12565] usb 5-1: USB disconnect, device number 72 [ 965.710191][T18251] tipc: Enabled bearer , priority 0 [ 965.718446][T18251] syzkaller0: entered promiscuous mode [ 965.723940][T18251] syzkaller0: entered allmulticast mode [ 965.739810][T12569] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 965.756014][T18251] tipc: Resetting bearer [ 965.760121][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.779860][T12569] asix 3-1:0.0: probe with driver asix failed with error -71 [ 965.795683][T18249] tipc: Resetting bearer [ 965.841319][T12569] usb 3-1: USB disconnect, device number 43 [ 965.908581][T18249] tipc: Disabling bearer [ 965.936626][T18255] fuse: Unknown parameter '' [ 966.806595][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.944491][T18276] hub 9-0:1.0: USB hub found [ 967.076047][T18276] hub 9-0:1.0: 1 port detected [ 967.212190][T18273] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 967.228184][T18273] team0: Port device batadv1 added [ 967.340575][T12569] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 967.516533][T12569] usb 5-1: Using ep0 maxpacket: 32 [ 967.523613][T12569] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 967.547789][T12569] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 967.596683][T12569] usb 5-1: config 1 has no interface number 1 [ 967.632451][T12569] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 967.701715][T12569] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 967.723737][T12569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.747397][T12569] usb 5-1: Product: syz [ 967.761754][T12569] usb 5-1: Manufacturer: syz [ 967.780705][T12569] usb 5-1: SerialNumber: syz [ 967.838632][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.032163][T18284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.088561][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.136860][T18284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.240068][T12569] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 968.296807][T12569] usb 5-1: 2:1 : format type 6 is not supported yet [ 968.450761][T12569] usb 5-1: USB disconnect, device number 73 [ 968.765063][T18307] netlink: 'syz.0.3318': attribute type 5 has an invalid length. [ 968.774128][T18309] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3319'. [ 968.886506][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.257744][T12552] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 969.457153][T12552] usb 5-1: Using ep0 maxpacket: 16 [ 969.528220][T12552] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.581599][T12552] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.799763][T12552] usb 5-1: config 0 interface 0 has no altsetting 0 [ 969.932375][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.943413][T12552] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 969.983657][T12552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.287926][T12552] usb 5-1: config 0 descriptor?? [ 970.574943][T12552] usbhid 5-1:0.0: can't add hid device: -71 [ 970.581406][T12552] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 970.664449][T12552] usb 5-1: USB disconnect, device number 74 [ 970.879850][T18351] loop2: detected capacity change from 0 to 7 [ 970.889344][T18351] Dev loop2: unable to read RDB block 7 [ 970.894912][T18351] loop2: unable to read partition table [ 970.904856][T18351] loop2: partition table beyond EOD, truncated [ 970.914932][T18351] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 970.956431][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.116294][T12552] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 971.119482][T12569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.314836][T12552] usb 5-1: Using ep0 maxpacket: 32 [ 971.326649][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 971.326660][ T30] audit: type=1326 audit(1758521593.840:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18354 comm="syz.5.3330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66f378ec29 code=0x0 [ 971.414376][T12552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.464125][T12552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.513217][T12552] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 971.567251][T12552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.626856][T12552] usb 5-1: config 0 descriptor?? [ 971.996472][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.120523][T12552] ft260 0003:0403:6030.0046: unknown main item tag 0x7 [ 972.141464][T18364] netlink: 'syz.0.3334': attribute type 3 has an invalid length. [ 972.200584][T18364] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3334'. [ 972.301650][T12552] ft260 0003:0403:6030.0046: chip code: 6424 8183 [ 972.378522][T18374] kvm: pic: non byte write [ 972.504611][T12552] ft260 0003:0403:6030.0046: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 972.700399][T12569] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 972.716541][T12552] ft260 0003:0403:6030.0046: failed to retrieve status: -32, no wakeup [ 972.760689][T12552] ft260 0003:0403:6030.0046: failed to retrieve status: -32 [ 972.993227][T12552] ft260 0003:0403:6030.0046: failed to reset I2C controller: -71 [ 973.034797][T12569] usb 6-1: Using ep0 maxpacket: 8 [ 973.042365][T12552] usb 5-1: USB disconnect, device number 75 [ 973.447273][T12569] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 973.456554][T12569] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 973.460699][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.464950][T12569] usb 6-1: Product: syz [ 973.479206][T12569] usb 6-1: Manufacturer: syz [ 973.483912][T12569] usb 6-1: SerialNumber: syz [ 973.491142][T12569] usb 6-1: config 0 descriptor?? [ 973.551645][T12569] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 974.156582][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.194839][T18405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3342'. [ 974.344636][T12569] gspca_zc3xx: reg_r err -110 [ 974.349544][T12569] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 974.497579][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.520093][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.204363][T18419] sctp: [Deprecated]: syz.2.3346 (pid 18419) Use of int in max_burst socket option. [ 976.204363][T18419] Use struct sctp_assoc_value instead [ 976.556999][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.887519][T18426] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3348'. [ 977.186314][ T43] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 977.201262][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.326477][ T43] usb 4-1: device descriptor read/64, error -71 [ 977.576344][ T43] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 977.596515][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.726332][ T43] usb 4-1: device descriptor read/64, error -71 [ 977.748292][T12552] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 977.868393][T12569] usb 6-1: USB disconnect, device number 61 [ 977.887060][ T43] usb usb4-port1: attempt power cycle [ 977.967067][T12552] usb 1-1: Using ep0 maxpacket: 16 [ 978.009516][T12552] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 978.031047][T12552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 978.045183][T12552] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 978.054529][T12552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.062717][T12552] usb 1-1: Product: syz [ 978.067091][T12552] usb 1-1: Manufacturer: syz [ 978.071689][T12552] usb 1-1: SerialNumber: syz [ 978.080500][T12552] usb 1-1: config 0 descriptor?? [ 978.092920][T12552] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 978.111111][T12552] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 978.158210][T18440] netlink: 'syz.5.3352': attribute type 10 has an invalid length. [ 978.175029][T18440] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 978.246645][ T43] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 978.285139][ T43] usb 4-1: device descriptor read/8, error -71 [ 978.546339][ T43] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 978.589602][ T43] usb 4-1: device descriptor read/8, error -71 [ 978.636701][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.710488][T12552] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 978.717484][ T43] usb usb4-port1: unable to enumerate USB device [ 978.735135][T12552] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 979.357900][T12552] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 979.416968][T18452] tipc: Enabling of bearer rejected, failed to enable media [ 979.425970][T12552] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 979.446112][T12552] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 979.454372][T12552] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 979.496332][T12552] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 979.678911][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.913425][T12552] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 980.032073][T12552] usb 1-1: USB disconnect, device number 50 [ 980.244918][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.663059][T18470] tipc: Started in network mode [ 980.668169][T18470] tipc: Node identity d2246c1c48bb, cluster identity 4711 [ 980.690716][T18470] tipc: Enabled bearer , priority 0 [ 980.699541][T12552] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 980.721873][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.876404][T12552] usb 4-1: Using ep0 maxpacket: 16 [ 980.882061][T18471] syzkaller0: entered promiscuous mode [ 980.884155][T12552] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 980.913010][T12552] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.934308][T12552] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.950185][T18471] syzkaller0: entered allmulticast mode [ 980.952750][T12552] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.978496][T12552] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.989704][T18470] tipc: Resetting bearer [ 981.002545][T12552] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.038423][T12552] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.051382][T12552] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.070367][T12552] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.136776][T12552] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 981.196930][T12552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 981.205046][T12552] usb 4-1: SerialNumber: syz [ 981.266683][T12552] usb 4-1: config 0 descriptor?? [ 981.323000][T12552] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input86 [ 981.515576][T18467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.580486][T18467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.589611][T18477] loop8: detected capacity change from 0 to 8 [ 981.607917][T18477] Dev loop8: unable to read RDB block 8 [ 981.636384][T18477] loop8: unable to read partition table [ 981.656867][T18477] loop8: partition table beyond EOD, truncated [ 981.696739][T12552] usb 4-1: USB disconnect, device number 68 [ 981.703445][ T5220] bcm5974 4-1:0.0: could not read from device [ 981.726665][T18477] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 981.736373][T12569] tipc: Node number set to 2594139164 [ 981.756847][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.228640][T18488] hub 9-0:1.0: USB hub found [ 982.236314][T18488] hub 9-0:1.0: 1 port detected [ 982.294448][T18491] netlink: 'syz.4.3368': attribute type 4 has an invalid length. [ 982.796415][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.292090][T12569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.856574][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.916618][ T5951] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 984.023989][T18470] tipc: Resetting bearer [ 984.081392][ T5951] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 984.096323][ T5951] usb 6-1: config 1 has no interface number 0 [ 984.170824][ T5951] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.221620][ T5951] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 984.232175][T18470] tipc: Disabling bearer [ 984.246153][ T5951] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 984.290682][ T5951] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 984.299945][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.392217][ T5951] usb 6-1: Product: syz [ 984.406340][ T5951] usb 6-1: Manufacturer: syz [ 984.416367][ T5951] usb 6-1: SerialNumber: syz [ 984.456440][ T24] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 984.618118][ T24] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 984.627737][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.660446][ T24] usb 4-1: config 0 descriptor?? [ 984.782747][T18516] binder: 18514:18516 ioctl c0306201 200000000100 returned -14 [ 984.880919][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.894269][T18516] binder: 18514:18516 ioctl c0306201 200000000100 returned -14 [ 984.904713][T18516] binder: 18514:18516 ioctl c0306201 200000000100 returned -14 [ 984.923794][T18511] tipc: Enabled bearer , priority 0 [ 984.938828][T18511] syzkaller0: entered promiscuous mode [ 984.944743][T18511] syzkaller0: entered allmulticast mode [ 985.016923][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 985.017553][T18511] tipc: Resetting bearer [ 985.027719][ T24] asix 4-1:0.0: probe with driver asix failed with error -71 [ 985.071258][ T24] usb 4-1: USB disconnect, device number 69 [ 985.080444][T18510] tipc: Resetting bearer [ 985.167054][T18510] tipc: Disabling bearer [ 985.330702][T18523] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 985.916592][T12569] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 985.924424][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.066309][T12569] usb 3-1: Using ep0 maxpacket: 16 [ 986.080269][T12569] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 986.102653][T12569] usb 3-1: config 0 has no interface number 0 [ 986.114175][T12569] usb 3-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 986.142169][T12569] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 986.154350][T12569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.183864][T12569] usb 3-1: Product: syz [ 986.232312][T12569] usb 3-1: Manufacturer: syz [ 986.236672][T12552] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 986.249566][T12569] usb 3-1: SerialNumber: syz [ 986.263825][T12569] usb 3-1: config 0 descriptor?? [ 986.286665][T18534] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 986.362856][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.391526][T12569] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 986.436455][T12552] usb 4-1: Using ep0 maxpacket: 8 [ 986.475879][T12552] usb 4-1: unable to get BOS descriptor or descriptor too short [ 986.503161][ T4811] usb 3-1: Failed to submit usb control message: -71 [ 986.510814][T12569] usb 3-1: USB disconnect, device number 44 [ 986.531149][ T4811] usb 3-1: unable to send the bmi data to the device: -71 [ 986.552868][ T4811] usb 3-1: unable to get target info from device [ 986.571202][ T4811] usb 3-1: could not get target info (-71) [ 986.578898][T12552] usb 4-1: config 8 has an invalid interface number: 24 but max is 1 [ 986.588381][T12552] usb 4-1: config 8 has an invalid interface number: 242 but max is 1 [ 986.597611][ T4811] usb 3-1: could not probe fw (-71) [ 986.605262][T12552] usb 4-1: config 8 has no interface number 0 [ 986.613607][T12552] usb 4-1: config 8 has no interface number 1 [ 986.620070][T12552] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 986.631558][T12552] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 986.669479][T12552] usb 4-1: config 8 interface 24 has no altsetting 0 [ 986.718209][T12552] usb 4-1: config 8 interface 242 has no altsetting 0 [ 986.727974][T12552] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 986.737885][T12552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.745966][T12552] usb 4-1: Product: syz [ 986.750653][T12552] usb 4-1: Manufacturer: syz [ 986.755264][T12552] usb 4-1: SerialNumber: syz [ 986.837719][T18543] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 986.956448][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.055801][T18543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.106664][T18543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.145096][T18543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.188027][T18543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.202662][ T5951] cdc_ncm 6-1:1.1: bind() failure [ 987.238311][ T5951] usb 6-1: USB disconnect, device number 62 [ 987.399337][T18555] fuse: Unknown parameter 'RwO/$#k)0x0000000000000004' [ 987.425373][T12552] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 987.529835][T12552] vmk80xx 4-1:8.242: driver 'vmk80xx' failed to auto-configure device. [ 987.596559][T12552] usb 4-1: USB disconnect, device number 70 [ 987.869845][ T30] audit: type=1326 audit(1758521610.400:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ab38ec29 code=0x7ffc0000 [ 987.892302][ C0] vkms_vblank_simulate: vblank timer overrun [ 987.936599][T18577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3392'. [ 987.952021][ T30] audit: type=1326 audit(1758521610.400:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ab38ec29 code=0x7ffc0000 [ 987.974482][ C0] vkms_vblank_simulate: vblank timer overrun [ 987.996628][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.104498][ T30] audit: type=1326 audit(1758521610.400:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f07ab38ec29 code=0x7ffc0000 [ 988.126931][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.147842][ T30] audit: type=1326 audit(1758521610.400:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ab38ec29 code=0x7ffc0000 [ 988.179069][ T30] audit: type=1326 audit(1758521610.400:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ab38ec29 code=0x7ffc0000 [ 988.214265][T12569] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 988.366330][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 988.386951][ T30] audit: type=1326 audit(1758521610.400:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f07ab38ec29 code=0x7ffc0000 [ 988.409317][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.437116][T18587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3395'. [ 988.456789][T12569] usb 4-1: Using ep0 maxpacket: 16 [ 988.481559][T18587] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.497362][T12569] usb 4-1: unable to get BOS descriptor or descriptor too short [ 988.512782][T12569] usb 4-1: config 4 has an invalid interface number: 111 but max is 0 [ 988.522427][T12569] usb 4-1: config 4 has no interface number 0 [ 988.530313][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 988.541249][T12569] usb 4-1: config 4 interface 111 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 8 [ 988.559517][ T30] audit: type=1326 audit(1758521610.400:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ab38ec29 code=0x7ffc0000 [ 988.603857][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 988.611623][T12569] usb 4-1: config 4 interface 111 has no altsetting 0 [ 988.630481][ T30] audit: type=1326 audit(1758521610.400:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ab38ec29 code=0x7ffc0000 [ 988.664102][ T30] audit: type=1326 audit(1758521610.430:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07ab38ec29 code=0x7ffc0000 [ 988.690422][T12569] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 988.701209][T12569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.788215][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 988.798342][T12569] usb 4-1: Product: syz [ 988.809806][T12569] usb 4-1: Manufacturer: syz [ 988.820311][ T30] audit: type=1326 audit(1758521610.430:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18568 comm="syz.4.3391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ab38ec29 code=0x7ffc0000 [ 988.842723][ C0] vkms_vblank_simulate: vblank timer overrun [ 988.869368][T12569] usb 4-1: SerialNumber: syz [ 988.896016][T18567] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 988.934896][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 988.987533][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 989.015927][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.038446][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.094060][ T24] usb 3-1: config 0 descriptor?? [ 989.154394][T12569] pvrusb2: Hardware description: Terratec Grabster AV400 [ 989.181759][T12569] pvrusb2: ********** [ 989.198625][T12569] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 989.218697][T12569] pvrusb2: Important functionality might not be entirely working. [ 989.237396][T12569] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 989.258772][T12569] pvrusb2: ********** [ 989.286604][T12569] usb 4-1: selecting invalid altsetting 0 [ 989.313051][T12569] usb 4-1: USB disconnect, device number 71 [ 989.319194][ T2346] pvrusb2: Failed to submit write-control URB status=-19 [ 989.354366][ T2346] pvrusb2: Device being rendered inoperable [ 989.373330][ T24] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 989.454990][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 989.703862][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.726729][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 989.892299][T12566] usb 3-1: USB disconnect, device number 45 [ 990.077684][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.286309][T12566] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 990.447870][T12566] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 990.460706][T12566] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 990.552867][T12566] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 990.611547][T12566] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 990.663259][T12566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.704415][T12566] usb 3-1: config 0 descriptor?? [ 990.733341][T18616] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 990.745113][T12566] gspca_main: spca561-2.14.0 probing abcd:cdee [ 990.969712][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 991.046001][T18616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.110560][T18616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.123311][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.140905][ T9] usb 4-1: config index 0 descriptor too short (expected 1106, got 82) [ 991.164117][ T9] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 136 [ 991.244018][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.306463][T12566] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 991.315411][T12566] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 991.318893][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 991.346048][T12566] usb 3-1: MIDIStreaming interface descriptor not found [ 991.409022][ T9] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 991.450196][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.479122][ T5951] usb 3-1: USB disconnect, device number 46 [ 991.480551][ T9] usb 4-1: Product: syz [ 991.495421][ T9] usb 4-1: Manufacturer: syz [ 991.535046][ T9] usb 4-1: SerialNumber: syz [ 991.558476][T18643] Invalid option length (0) for dns_resolver key [ 991.593395][ T9] usb 4-1: config 0 descriptor?? [ 991.651918][T18643] fuse: Bad value for 'group_id' [ 991.669648][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 991.676301][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 991.689470][T18643] fuse: Bad value for 'group_id' [ 991.718095][ T9] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 991.856330][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 991.885459][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.921047][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.926695][T12565] usb 4-1: USB disconnect, device number 72 [ 991.938060][ T24] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 991.954534][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.967101][T12566] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 991.988139][ T24] usb 1-1: config 0 descriptor?? [ 992.136465][T12566] usb 6-1: Using ep0 maxpacket: 8 [ 992.147550][T12566] usb 6-1: config 162 has an invalid interface number: 166 but max is 0 [ 992.216331][T12566] usb 6-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 992.844054][T12565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.874357][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.914295][T12566] usb 6-1: config 162 has no interface number 0 [ 992.953555][T12566] usb 6-1: config 162 interface 166 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 993.016367][T12566] usb 6-1: config 162 interface 166 has no altsetting 0 [ 993.055745][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 993.055758][ T30] audit: type=1326 audit(1758521615.580:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 993.116094][ T30] audit: type=1326 audit(1758521615.620:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd02bb8e82b code=0x7ffc0000 [ 993.118891][T12566] usb 6-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 993.151348][ T30] audit: type=1326 audit(1758521615.620:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd02bb8e82b code=0x7ffc0000 [ 993.251801][T12566] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.280410][T12566] usb 6-1: Product: syz [ 993.343176][T18672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 993.346746][ T24] corsair 0003:1B1C:1B02.0048: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 993.380003][T12566] usb 6-1: Manufacturer: syz [ 993.385814][ T30] audit: type=1326 audit(1758521615.620:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd02bbc14e5 code=0x7ffc0000 [ 993.409853][T12566] usb 6-1: SerialNumber: syz [ 993.439649][T12566] appledisplay 6-1:162.166: Could not find int-in endpoint [ 993.453727][T12566] usbhid 6-1:162.166: couldn't find an input interrupt endpoint [ 993.532167][ T24] corsair 0003:1B1C:1B02.0048: Failed to get K90 initial state (error -71). [ 993.565451][ T30] audit: type=1326 audit(1758521615.820:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 993.588693][ T30] audit: type=1326 audit(1758521615.820:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 993.611034][ C0] vkms_vblank_simulate: vblank timer overrun [ 993.622215][ T30] audit: type=1326 audit(1758521615.820:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 993.644563][ C0] vkms_vblank_simulate: vblank timer overrun [ 993.714653][ T24] usb 1-1: USB disconnect, device number 51 [ 993.829535][ T30] audit: type=1326 audit(1758521615.960:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 993.889316][ T30] audit: type=1326 audit(1758521615.960:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02bb8ec29 code=0x7ffc0000 [ 993.935817][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.243664][ T43] usb 6-1: USB disconnect, device number 63 [ 994.286476][T12566] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 994.357387][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 994.481236][T12566] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 994.493153][T12566] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 994.503502][T12566] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 994.513168][T12566] usb 5-1: config 1 has no interface number 0 [ 994.533878][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.539053][T12566] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 994.556977][T12566] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 994.574150][T12566] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 994.583684][T12566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.603969][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 994.639557][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.650078][T12566] usb 5-1: Product: syz [ 994.661488][ T24] usb 1-1: config 0 descriptor?? [ 994.668084][T12566] usb 5-1: Manufacturer: syz [ 994.682142][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 994.682571][T12566] usb 5-1: SerialNumber: syz [ 994.861089][T18704] loop4: detected capacity change from 0 to 4 [ 994.967235][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.088394][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 995.127782][ T24] pwc: recv_control_msg error -71 req 02 val 2700 [ 995.135808][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 995.185352][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 995.196008][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 995.208089][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 995.215681][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 995.223043][ T43] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 995.244379][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 995.294420][T12557] usb 5-1: USB disconnect, device number 76 [ 995.311006][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 995.318311][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 995.327733][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 995.336622][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 995.343466][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 995.351907][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 995.359368][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 995.367262][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 995.381904][ T24] pwc: Registered as video103. [ 995.388759][ T43] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 995.397517][ T43] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 995.405631][ T43] usb 4-1: config 0 has no interface number 0 [ 995.413846][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input90 [ 995.436629][ T43] usb 4-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 995.478344][ T24] usb 1-1: USB disconnect, device number 52 [ 995.514975][ T43] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 995.558956][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.591874][ T43] usb 4-1: config 0 descriptor?? [ 995.916783][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.019953][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.566390][ T9] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 996.815501][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 996.827788][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 996.863951][ T9] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 996.963904][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.002058][ T9] usb 6-1: Product: syz [ 997.024456][ T9] usb 6-1: Manufacturer: syz [ 997.036614][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.047172][T12565] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 997.074401][ T9] usb 6-1: SerialNumber: syz [ 997.117948][ T9] usb 6-1: config 0 descriptor?? [ 997.155748][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 997.167929][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 997.191001][T12565] usb 3-1: device descriptor read/64, error -71 [ 997.234271][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 997.509978][T12565] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 997.596600][ T43] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 997.635494][T18735] netlink: 'syz.0.3432': attribute type 10 has an invalid length. [ 997.656407][T12565] usb 3-1: device descriptor read/64, error -71 [ 997.669063][T18735] team0: Port device dummy0 added [ 997.675182][T18735] netlink: 'syz.0.3432': attribute type 10 has an invalid length. [ 997.693544][T18735] team0: Port device dummy0 removed [ 997.704031][T18735] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 997.746386][ T43] usb 5-1: device descriptor read/64, error -71 [ 997.763228][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'. [ 997.766434][T18740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'. [ 997.781716][T12565] usb usb3-port1: attempt power cycle [ 997.806568][T18739] syzkaller0: entered promiscuous mode [ 997.812261][T18739] syzkaller0: entered allmulticast mode [ 997.950901][T12557] usb 4-1: USB disconnect, device number 73 [ 997.986844][ T43] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 998.034785][T18746] xt_limit: Overflow, try lower: 604147548/4200216962 [ 998.082176][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.130448][ T43] usb 5-1: device descriptor read/64, error -71 [ 998.141015][T12565] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 998.187171][T12565] usb 3-1: device descriptor read/8, error -71 [ 998.242395][T18752] loop2: detected capacity change from 0 to 7 [ 998.254066][T18752] Dev loop2: unable to read RDB block 7 [ 998.255658][ T43] usb usb5-port1: attempt power cycle [ 998.268609][T18752] loop2: unable to read partition table [ 998.275480][T18752] loop2: partition table beyond EOD, truncated [ 998.302494][T18752] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 998.426369][T12565] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 998.475086][T12565] usb 3-1: device descriptor read/8, error -71 [ 998.524400][ T30] audit: type=1326 audit(1758521621.050:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18753 comm="syz.3.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6038ec29 code=0x7ffc0000 [ 998.579771][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.586079][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.592817][T12565] usb usb3-port1: unable to enumerate USB device [ 998.629057][ T30] audit: type=1326 audit(1758521621.080:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18753 comm="syz.3.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6038ec29 code=0x7ffc0000 [ 998.746396][ T43] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 998.786995][ T43] usb 5-1: device descriptor read/8, error -71 [ 998.802159][ T30] audit: type=1326 audit(1758521621.080:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18753 comm="syz.3.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a6038ec29 code=0x7ffc0000 [ 998.827477][ T30] audit: type=1326 audit(1758521621.080:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18753 comm="syz.3.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6038ec29 code=0x7ffc0000 [ 998.850925][ T30] audit: type=1326 audit(1758521621.080:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18753 comm="syz.3.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6038ec29 code=0x7ffc0000 [ 998.916039][ T30] audit: type=1326 audit(1758521621.080:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18753 comm="syz.3.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a6038ec29 code=0x7ffc0000 [ 998.965732][T12565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.036631][ T43] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 999.063091][ T30] audit: type=1326 audit(1758521621.080:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18753 comm="syz.3.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6038ec29 code=0x7ffc0000 [ 999.063759][ T43] usb 5-1: device descriptor read/8, error -71 [ 999.122225][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.145415][ T30] audit: type=1326 audit(1758521621.080:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18753 comm="syz.3.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a6038ec29 code=0x7ffc0000 [ 999.231192][ T30] audit: type=1326 audit(1758521621.080:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18753 comm="syz.3.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a6038ec29 code=0x7ffc0000 [ 999.279007][ T30] audit: type=1326 audit(1758521621.090:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18753 comm="syz.3.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3a6038ec29 code=0x7ffc0000 [ 999.333521][ T43] usb usb5-port1: unable to enumerate USB device [ 999.353505][T12565] usb 6-1: USB disconnect, device number 64 [ 999.703956][T18768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3440'. [ 1000.162801][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.216462][T12564] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1000.376390][T12564] usb 3-1: Using ep0 maxpacket: 16 [ 1000.386606][T12564] usb 3-1: config index 0 descriptor too short (expected 31780, got 36) [ 1000.417400][T12564] usb 3-1: config 27 has too many interfaces: 185, using maximum allowed: 32 [ 1000.426456][ T24] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1000.441674][T12564] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.466637][T12564] usb 3-1: config 27 has 1 interface, different from the descriptor's value: 185 [ 1000.487809][T18786] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3445'. [ 1000.512488][T12564] usb 3-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=86.ae [ 1000.526341][T12564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.546700][T12564] usb 3-1: Product: syz [ 1000.586307][T12564] usb 3-1: Manufacturer: syz [ 1000.603867][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.604995][T12564] usb 3-1: SerialNumber: syz [ 1000.631262][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1000.647889][T18791] loop2: detected capacity change from 0 to 7 [ 1000.683543][T18791] Dev loop2: unable to read RDB block 7 [ 1000.691468][T18791] loop2: unable to read partition table [ 1000.696401][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1000.697990][T18791] loop2: partition table beyond EOD, truncated [ 1000.713505][T18791] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1000.762335][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.805680][ T24] usb 4-1: config 0 descriptor?? [ 1000.837312][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1000.847170][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1000.873727][T12564] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 1000.883533][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1000.907359][T12565] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1000.915934][T12564] gspca_sn9c20x: Write register 1000 failed -71 [ 1000.924439][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1000.941698][T12564] gspca_sn9c20x: Device initialization failed [ 1000.971277][T12564] gspca_sn9c20x 3-1:27.0: probe with driver gspca_sn9c20x failed with error -71 [ 1001.008852][ T24] usb 4-1: media controller created [ 1001.016606][T12564] usb 3-1: USB disconnect, device number 51 [ 1001.045239][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1001.096878][T12565] usb 6-1: device descriptor read/64, error -71 [ 1001.141381][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1001.158680][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1001.185712][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input91 [ 1001.201408][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.246735][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1001.261845][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1001.358268][T12565] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1001.418194][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1001.426086][ T24] dvb-usb: error while querying for an remote control event. [ 1001.496400][T12565] usb 6-1: device descriptor read/64, error -71 [ 1001.596659][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1001.602503][ T24] dvb-usb: error while querying for an remote control event. [ 1001.616665][T12565] usb usb6-port1: attempt power cycle [ 1001.766351][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1001.773868][ T24] dvb-usb: error while querying for an remote control event. [ 1001.936810][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1001.942565][ T24] dvb-usb: error while querying for an remote control event. [ 1002.006871][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.066269][T12565] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1002.086950][T12565] usb 6-1: device descriptor read/8, error -71 [ 1002.147533][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1002.156708][ T24] dvb-usb: error while querying for an remote control event. [ 1002.294556][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.326346][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 1002.332400][ T43] dvb-usb: error while querying for an remote control event. [ 1002.348745][T12565] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1002.378370][T12564] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 1002.388843][T12565] usb 6-1: device descriptor read/8, error -71 [ 1002.496969][T12565] usb usb6-port1: unable to enumerate USB device [ 1002.516701][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 1002.522735][ T43] dvb-usb: error while querying for an remote control event. [ 1002.544018][T12564] usb 3-1: device descriptor read/64, error -71 [ 1002.686621][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 1002.781575][ T43] dvb-usb: error while querying for an remote control event. [ 1002.806555][T12564] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 1002.949698][T12564] usb 3-1: device descriptor read/64, error -71 [ 1003.026357][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 1003.043333][ T43] dvb-usb: error while querying for an remote control event. [ 1003.056600][T12564] usb usb3-port1: attempt power cycle [ 1003.356268][T12557] dvb-usb: bulk message failed: -22 (1/0) [ 1003.362139][T12557] dvb-usb: error while querying for an remote control event. [ 1003.387187][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.405665][ T24] usb 4-1: USB disconnect, device number 74 [ 1003.426284][T12564] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 1003.557042][T12564] usb 3-1: device descriptor read/8, error -71 [ 1003.608072][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1003.806844][T12564] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 1004.096218][ T5951] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1004.196309][T12564] usb 3-1: device descriptor read/8, error -71 [ 1004.276268][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 1004.283434][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.295453][ T5951] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1004.331879][ T5951] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1004.342385][T12564] usb usb3-port1: unable to enumerate USB device [ 1004.345621][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.393265][ T5951] usb 5-1: Product: syz [ 1004.397988][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.412899][ T5951] usb 5-1: Manufacturer: syz [ 1004.438497][ T5951] usb 5-1: SerialNumber: syz [ 1004.465885][ T5951] usb 5-1: config 0 descriptor?? [ 1005.036548][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.436675][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.630156][T18844] program syz.5.3461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1005.936404][ T5951] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1006.026394][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1006.086272][ T5951] usb 6-1: Using ep0 maxpacket: 8 [ 1006.093245][ T5951] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1006.152262][T12557] usb 5-1: USB disconnect, device number 81 [ 1006.216411][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1006.239174][ T5951] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 1006.270700][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.290932][ T5951] usb 6-1: config 0 has no interface number 0 [ 1006.306346][ T24] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1006.320204][ T5951] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1006.332007][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.344265][ T5951] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1006.359719][ T24] usb 1-1: config 0 descriptor?? [ 1006.374914][ T5951] usb 6-1: config 0 interface 88 has no altsetting 0 [ 1006.394072][ T5951] usb 6-1: string descriptor 0 read error: -22 [ 1006.405290][ T5951] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1006.422340][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1006.444193][ T5951] usb 6-1: config 0 descriptor?? [ 1006.462983][ T5951] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input92 [ 1006.487083][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.606495][T12564] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1006.644045][ T5995] udevd[5995]: Error opening device "/dev/input/event4": Input/output error [ 1006.674378][ T9] usb 6-1: USB disconnect, device number 69 [ 1006.691707][ T5995] udevd[5995]: Unable to EVIOCGABS device "/dev/input/event4" [ 1006.701711][ T5995] udevd[5995]: Unable to EVIOCGABS device "/dev/input/event4" [ 1006.778106][T12564] usb 5-1: Using ep0 maxpacket: 16 [ 1006.790313][T18846] delete_channel: no stack [ 1006.798957][T12564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1006.808191][ T24] stadia 0003:18D1:9400.0049: hidraw0: USB HID v0.01 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0 [ 1006.833730][T12564] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1006.853139][ T24] stadia 0003:18D1:9400.0049: no inputs found [ 1006.869795][T12564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.871965][ T24] stadia 0003:18D1:9400.0049: force feedback init failed [ 1006.899567][T12564] usb 5-1: Product: syz [ 1006.903749][T12564] usb 5-1: Manufacturer: syz [ 1006.936786][T12564] usb 5-1: SerialNumber: syz [ 1006.968688][T12564] usb 5-1: config 0 descriptor?? [ 1006.997072][T12564] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1007.008184][ T24] usb 1-1: USB disconnect, device number 53 [ 1007.053151][T12564] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1007.518695][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.600542][T12564] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1008.076618][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.490485][T18878] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3471'. [ 1008.523154][T12564] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1008.531477][T12564] em28xx 5-1:0.0: board has no eeprom [ 1008.556626][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.676345][T12564] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1008.708812][T12564] em28xx 5-1:0.0: dvb set to bulk mode. [ 1008.714431][ T9] em28xx 5-1:0.0: Binding DVB extension [ 1008.818930][T12564] usb 5-1: USB disconnect, device number 82 [ 1008.885747][T12564] em28xx 5-1:0.0: Disconnecting em28xx [ 1008.992761][T18891] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3475'. [ 1009.036403][T12557] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1009.037943][ T9] em28xx 5-1:0.0: Registering input extension [ 1009.148357][T12564] em28xx 5-1:0.0: Closing input extension [ 1009.259252][T12557] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1009.302460][T12557] usb 6-1: not running at top speed; connect to a high speed hub [ 1009.310877][T12564] em28xx 5-1:0.0: Freeing device [ 1009.387237][T12557] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.433795][T12557] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1009.480903][T12557] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1009.546257][T12557] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.554278][T12557] usb 6-1: Product: syz [ 1009.576238][T12557] usb 6-1: Manufacturer: syz [ 1009.580876][T12557] usb 6-1: SerialNumber: syz [ 1009.606465][T18895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3477'. [ 1009.629777][T18895] netlink: 'syz.0.3477': attribute type 3 has an invalid length. [ 1009.637998][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.765242][T18904] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3479'. [ 1009.852250][ T5951] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1009.918158][T12557] usb 6-1: 0:2 : does not exist [ 1009.927085][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1009.996302][T12557] usb 6-1: USB disconnect, device number 70 [ 1010.037727][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 1010.058408][ T5951] usb 5-1: config 0 has an invalid interface number: 4 but max is 1 [ 1010.096614][ T24] usb 3-1: device descriptor read/64, error -71 [ 1010.105438][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.147645][ T5951] usb 5-1: config 0 has no interface number 1 [ 1010.160038][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1010.198917][ T5951] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1010.213501][ T5951] usb 5-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1010.230688][ T5951] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 1010.240461][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.249311][ T5951] usb 5-1: Product: syz [ 1010.253821][ T5951] usb 5-1: Manufacturer: syz [ 1010.258676][ T5951] usb 5-1: SerialNumber: syz [ 1010.267604][ T5951] usb 5-1: config 0 descriptor?? [ 1010.347002][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1010.477301][ T5951] cxacru 5-1:0.0: cxacru_bind: interface has incorrect endpoints [ 1010.498241][ T24] usb 3-1: device descriptor read/64, error -71 [ 1010.518576][ T5951] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1010.544549][ T5951] cxacru 5-1:0.4: cxacru_bind: interface has incorrect endpoints [ 1010.555032][ T5951] cxacru 5-1:0.4: usbatm_usb_probe: bind failed: -19! [ 1010.569615][ T5951] usb 5-1: USB disconnect, device number 83 [ 1010.629132][ T24] usb usb3-port1: attempt power cycle [ 1010.686550][T18909] netlink: 'syz.5.3482': attribute type 7 has an invalid length. [ 1010.694425][T18909] netlink: 'syz.5.3482': attribute type 8 has an invalid length. [ 1010.729404][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.976412][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1011.037351][ T24] usb 3-1: device descriptor read/8, error -71 [ 1011.104971][T18918] netlink: 5852 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1011.126396][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.146332][T18918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.286318][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1011.340775][ T24] usb 3-1: device descriptor read/8, error -71 [ 1011.536281][T12557] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1011.544571][ T24] usb usb3-port1: unable to enumerate USB device [ 1011.771391][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.926775][T12557] usb 4-1: config 0 has no interfaces? [ 1011.938567][T12557] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1011.985876][T12557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.007034][T12557] usb 4-1: Product: syz [ 1012.011233][T12557] usb 4-1: Manufacturer: syz [ 1012.028941][T12557] usb 4-1: SerialNumber: syz [ 1012.042865][T12557] usb 4-1: config 0 descriptor?? [ 1012.278773][T12557] usb 4-1: USB disconnect, device number 75 [ 1012.449878][T12564] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1012.465001][T18940] geneve2: entered allmulticast mode [ 1012.638050][T12564] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1012.648426][T12564] usb 5-1: config 1 has no interface number 0 [ 1012.668618][T12564] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1012.736282][T12564] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1012.746120][T12564] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1012.806583][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.846790][T12564] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1012.872301][T12564] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1012.896901][T12564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.905293][T12564] usb 5-1: Product: syz [ 1012.909772][T12564] usb 5-1: Manufacturer: syz [ 1012.914475][T12564] usb 5-1: SerialNumber: syz [ 1012.943685][T18935] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1012.975076][T18935] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1013.014966][T18948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3495'. [ 1013.155106][T18953] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3496'. [ 1013.228146][T18935] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1013.235728][T18953] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1013.244580][T18935] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1013.426616][ T9] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1013.500186][T12564] usb 5-1: Incompatible driver and firmware versions [ 1013.545046][T12564] usb 5-1: USB disconnect, device number 84 [ 1013.576535][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1013.594101][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1013.635279][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1013.655476][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.689100][ T9] usb 6-1: config 0 descriptor?? [ 1013.736299][T12566] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1013.836714][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.866302][T12566] usb 4-1: device descriptor read/64, error -71 [ 1013.903338][ T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1014.116869][T12566] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1014.156836][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.267896][T12566] usb 4-1: device descriptor read/64, error -71 [ 1014.377343][T12566] usb usb4-port1: attempt power cycle [ 1014.450830][T18982] tipc: New replicast peer: 0.0.0.0 [ 1014.457757][T18982] tipc: Enabled bearer , priority 17 [ 1014.468595][T18982] ptrace attach of "./syz-executor exec"[16444] was attempted by "./syz-executor exec"[18982] [ 1014.549864][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1014.549878][ T30] audit: type=1326 audit(1758521637.080:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18968 comm="syz.0.3502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd02bb8ec29 code=0x0 [ 1014.776299][T12566] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1014.879034][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.140773][T12566] usb 4-1: device descriptor read/8, error -71 [ 1015.386413][T12566] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1015.422909][T12566] usb 4-1: device descriptor read/8, error -71 [ 1015.539970][T18989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3506'. [ 1015.576338][T12557] tipc: Node number set to 351041390 [ 1015.577369][T12566] usb usb4-port1: unable to enumerate USB device [ 1015.607688][T18989] vlan0: entered promiscuous mode [ 1015.640955][T18989] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 1015.919041][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.028874][ T24] usb 6-1: USB disconnect, device number 71 [ 1016.077240][T18992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3507'. [ 1016.545275][ T30] audit: type=1326 audit(1758521639.070:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19004 comm="syz.4.3513" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07ab38ec29 code=0x0 [ 1016.606398][ T24] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1016.652902][T12566] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1016.769746][ T24] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1016.782716][ T24] usb 6-1: config 1 has no interface number 0 [ 1016.801788][ T24] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1016.819155][T12566] usb 1-1: Using ep0 maxpacket: 8 [ 1016.825686][ T24] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1016.847324][ T24] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 1016.856239][T12566] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1016.862605][ T24] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1016.903417][T12566] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1016.942156][ T5951] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1016.942703][T12566] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1017.003231][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.015808][ T24] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1017.025183][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.033647][ T24] usb 6-1: Product: syz [ 1017.039098][ T24] usb 6-1: Manufacturer: syz [ 1017.050315][ T24] usb 6-1: SerialNumber: syz [ 1017.071398][T19001] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1017.080219][T19001] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1017.131116][T12566] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1017.157517][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 1017.171862][T12566] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1017.176047][ T5951] usb 5-1: config 5 has an invalid interface number: 35 but max is 1 [ 1017.206937][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.212693][ T5951] usb 5-1: config 5 has an invalid interface number: 4 but max is 1 [ 1017.234115][T12566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.255682][ T5951] usb 5-1: config 5 has an invalid interface number: 4 but max is 1 [ 1017.287705][ T5951] usb 5-1: config 5 has no interface number 0 [ 1017.311037][ T5951] usb 5-1: config 5 has no interface number 1 [ 1017.333262][ T5951] usb 5-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1017.356761][T19001] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1017.374351][T19001] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1017.408753][ T5951] usb 5-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1017.439538][ T5951] usb 5-1: config 5 interface 35 has no altsetting 0 [ 1017.453554][ T5951] usb 5-1: config 5 interface 4 has no altsetting 0 [ 1017.465318][ T5951] usb 5-1: config 5 interface 4 has no altsetting 1 [ 1017.506643][T12566] usb 1-1: GET_CAPABILITIES returned 0 [ 1017.544960][ T5951] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 1017.575491][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.593882][T12566] usbtmc 1-1:16.0: can't read capabilities [ 1017.599978][ T5951] usb 5-1: Product: syz [ 1017.613043][ T5951] usb 5-1: Manufacturer: syz [ 1017.623728][ T24] usb 6-1: Incompatible driver and firmware versions [ 1017.716288][ T5951] usb 5-1: SerialNumber: syz [ 1017.755290][ T24] usb 6-1: USB disconnect, device number 72 [ 1018.000508][ T5951] ttusbir 5-1:5.35: cannot find expected altsetting [ 1018.041659][ T5951] ttusbir 5-1:5.4: cannot find expected altsetting [ 1018.077795][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.121984][ T5951] usb 5-1: USB disconnect, device number 85 [ 1019.165278][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.294172][ T30] audit: type=1326 audit(1758521641.790:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cef8ec29 code=0x7ffc0000 [ 1019.359600][ T30] audit: type=1326 audit(1758521641.790:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2cef8ec29 code=0x7ffc0000 [ 1019.402367][ T30] audit: type=1326 audit(1758521641.790:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cef8ec29 code=0x7ffc0000 [ 1019.428439][ T30] audit: type=1326 audit(1758521641.800:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2cef8ec29 code=0x7ffc0000 [ 1019.467184][T19039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3521'. [ 1019.543096][ T30] audit: type=1326 audit(1758521641.800:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cef8ec29 code=0x7ffc0000 [ 1019.599371][ T30] audit: type=1326 audit(1758521641.800:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2cef8ec29 code=0x7ffc0000 [ 1019.675647][ T30] audit: type=1326 audit(1758521641.800:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cef8ec29 code=0x7ffc0000 [ 1019.759748][ T24] usb 1-1: USB disconnect, device number 54 [ 1019.768334][ T30] audit: type=1326 audit(1758521641.800:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb2cef8ec29 code=0x7ffc0000 [ 1019.921465][ T30] audit: type=1326 audit(1758521641.850:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cef8ec29 code=0x7ffc0000 [ 1019.995364][ T30] audit: type=1326 audit(1758521641.850:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19032 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2cef8ec29 code=0x7ffc0000 [ 1020.082348][T19059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3529'. [ 1020.237378][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.253693][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.376299][ T24] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1020.426411][ T43] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1020.494420][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3528'. [ 1020.526424][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1020.533291][ T24] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1020.542155][ T24] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1020.550893][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1020.567130][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1020.582562][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1020.621462][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1020.670333][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.684656][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1020.709883][ T43] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1020.737929][ T24] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1020.747936][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.772970][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.792217][ T43] usb 4-1: config 0 descriptor?? [ 1020.843802][ T24] usb 1-1: config 0 descriptor?? [ 1021.060456][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1021.086627][ T24] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1021.227195][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1021.244446][ T9] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1021.253301][ T9] usb 3-1: config 1 has no interface number 0 [ 1021.270404][ T9] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1021.276567][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.288219][ T43] pantherlord 0003:0E8F:0003.004A: unknown main item tag 0x0 [ 1021.295630][ T43] pantherlord 0003:0E8F:0003.004A: unknown main item tag 0x0 [ 1021.304375][T12564] usb 1-1: USB disconnect, device number 55 [ 1021.321043][T12564] usblp0: removed [ 1021.332406][ T9] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1021.355788][ T43] pantherlord 0003:0E8F:0003.004A: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.3-1/input0 [ 1021.377296][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.392647][ T9] usb 3-1: Product: syz [ 1021.397411][ T43] pantherlord 0003:0E8F:0003.004A: no output reports found [ 1021.414818][ T9] usb 3-1: Manufacturer: syz [ 1021.424938][ T9] usb 3-1: SerialNumber: syz [ 1021.506930][T19065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3531'. [ 1021.659909][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3531'. [ 1021.689300][ T9] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 1021.712533][ T9] usb 3-1: USB disconnect, device number 60 [ 1021.723474][T19065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3531'. [ 1021.768017][T12564] usb 4-1: USB disconnect, device number 80 [ 1022.118327][T19088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.133915][T19088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.243717][ T1159] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.278847][ T1159] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.301626][T12564] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1022.319240][ T1331] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.340194][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.489011][T12564] usb 6-1: Using ep0 maxpacket: 16 [ 1022.496127][T12564] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.507475][T12564] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.517836][T12564] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1022.529271][T12564] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1022.565627][T12564] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1022.596657][T12564] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1022.606639][T12564] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1022.621836][T12564] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1022.641329][T12564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1022.657783][T12564] usb 6-1: SerialNumber: syz [ 1022.678163][T12564] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1022.688991][T12564] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 1022.706251][T12565] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1022.816325][ T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1022.858045][T12565] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1022.867243][T12565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.878966][T12565] usb 3-1: config 0 descriptor?? [ 1022.966418][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1022.978644][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1022.992356][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 54240, setting to 1024 [ 1023.006689][T12564] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1023.013990][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1023.024349][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1023.046930][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1023.056055][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.064698][ T24] usb 1-1: Product: syz [ 1023.068992][ T24] usb 1-1: Manufacturer: syz [ 1023.073715][ T24] usb 1-1: SerialNumber: syz [ 1023.085492][T19108] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1023.093739][ T5951] usb 6-1: USB disconnect, device number 73 [ 1023.112922][T19108] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1023.135714][T19107] tipc: Enabled bearer , priority 0 [ 1023.144975][T19107] syzkaller0: entered promiscuous mode [ 1023.151328][T19107] syzkaller0: entered allmulticast mode [ 1023.173719][T12565] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1023.179242][T19107] tipc: Resetting bearer [ 1023.201703][T12564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1023.212003][T12565] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1023.223132][T19106] tipc: Resetting bearer [ 1023.223802][T12564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1023.244213][T12565] usb 3-1: USB disconnect, device number 61 [ 1023.252783][T12564] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1023.264835][T19106] tipc: Disabling bearer [ 1023.278076][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.299316][T12564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.315309][T12564] usb 5-1: config 0 descriptor?? [ 1023.337935][T19108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.358185][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.370578][T19108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.447723][T19124] netlink: 'syz.3.3547': attribute type 21 has an invalid length. [ 1023.598102][T12565] usb 5-1: USB disconnect, device number 86 [ 1023.916380][T12566] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1024.087835][T12566] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.099270][T12566] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.111923][T12566] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1024.127886][T12566] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1024.137066][T12566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.152855][T12566] usb 6-1: config 0 descriptor?? [ 1024.262127][T19137] vivid-000: disconnect [ 1024.274888][T19137] vivid-000: reconnect [ 1024.396591][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.456045][T19128] tipc: Enabling of bearer rejected, failed to enable media [ 1024.480058][T19128] syzkaller0: entered promiscuous mode [ 1024.496396][T19128] syzkaller0: entered allmulticast mode [ 1024.508915][T19144] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3552'. [ 1024.627315][T12564] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1024.804797][T12566] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 1024.824454][T12564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1024.845395][T12564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.863992][T12566] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1024.886314][T12564] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1024.911265][T12564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.934699][T12564] usb 4-1: config 0 descriptor?? [ 1025.108663][T12557] usb 6-1: USB disconnect, device number 74 [ 1025.372660][T12564] pantherlord 0003:0E8F:0003.004C: unknown main item tag 0x0 [ 1025.391404][T12564] pantherlord 0003:0E8F:0003.004C: unknown main item tag 0x0 [ 1025.440148][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.440183][T12564] pantherlord 0003:0E8F:0003.004C: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.3-1/input0 [ 1025.516729][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1025.526210][T12564] pantherlord 0003:0E8F:0003.004C: no output reports found [ 1025.570049][T19141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3553'. [ 1025.572320][ T24] usbtest 1-1:1.0: Linux user mode ISO test driver [ 1025.709697][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1025.768326][ T24] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1025.819905][ T24] usb 1-1: USB disconnect, device number 56 [ 1025.907774][ T9] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1025.927869][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.992166][ T5951] usb 4-1: USB disconnect, device number 81 [ 1026.034024][ T9] usb 3-1: config 0 descriptor?? [ 1026.254381][T19161] tipc: Enabled bearer , priority 0 [ 1026.281137][T19161] syzkaller0: entered promiscuous mode [ 1026.303652][T19161] syzkaller0: entered allmulticast mode [ 1026.318638][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.425394][T12565] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1026.456628][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1026.472754][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1026.478647][T19161] tipc: Resetting bearer [ 1026.484895][ T9] usb 3-1: USB disconnect, device number 62 [ 1026.486119][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.588420][T19159] tipc: Resetting bearer [ 1026.596371][T12565] usb 6-1: Using ep0 maxpacket: 8 [ 1026.605156][T12565] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1026.618372][T12565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.626603][T12565] usb 6-1: Product: syz [ 1026.632483][T12565] usb 6-1: Manufacturer: syz [ 1026.640988][T12565] usb 6-1: SerialNumber: syz [ 1026.654930][T12565] usb 6-1: config 0 descriptor?? [ 1026.722436][T19159] tipc: Disabling bearer [ 1026.902656][T12565] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1027.322679][T12565] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1027.339162][T12565] usb 6-1: USB disconnect, device number 75 [ 1027.566016][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.780648][T19189] openvswitch: netlink: Message has 4 unknown bytes. [ 1027.968126][ T30] audit: type=1326 audit(1758521650.500:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.5.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f378ec29 code=0x7ffc0000 [ 1028.032405][ T30] audit: type=1326 audit(1758521650.530:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.5.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f66f378ec29 code=0x7ffc0000 [ 1028.055466][ T30] audit: type=1326 audit(1758521650.530:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.5.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f378ec29 code=0x7ffc0000 [ 1028.071238][T19198] kvm: pic: non byte write [ 1028.079508][ T30] audit: type=1326 audit(1758521650.530:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.5.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f378ec29 code=0x7ffc0000 [ 1028.115397][T19198] kvm: pic: non byte read [ 1028.121549][ T30] audit: type=1326 audit(1758521650.530:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.5.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f66f378ec29 code=0x7ffc0000 [ 1028.127650][T19198] kvm: pic: non byte read [ 1028.144790][ T30] audit: type=1326 audit(1758521650.530:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.5.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f378ec29 code=0x7ffc0000 [ 1028.177872][ T30] audit: type=1326 audit(1758521650.530:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.5.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f66f378ec29 code=0x7ffc0000 [ 1028.207612][ T30] audit: type=1326 audit(1758521650.530:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.5.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f378ec29 code=0x7ffc0000 [ 1028.232897][T19198] kvm: pic: non byte write [ 1028.242293][ T30] audit: type=1326 audit(1758521650.530:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.5.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f66f378ec29 code=0x7ffc0000 [ 1028.265508][T19198] kvm: pic: non byte write [ 1028.271549][T19198] kvm: pic: non byte write [ 1028.276139][ T30] audit: type=1326 audit(1758521650.530:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.5.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f378ec29 code=0x7ffc0000 [ 1028.281714][T19198] kvm: pic: non byte write [ 1028.328924][T19198] kvm: pic: non byte write [ 1028.333667][T19198] kvm: pic: non byte write [ 1028.344617][T19198] kvm: pic: non byte write [ 1028.349414][T19198] kvm: pic: non byte write [ 1028.354230][T19198] kvm: pic: non byte write [ 1028.367389][T19198] kvm: pic: non byte read [ 1028.391786][T19198] kvm: pic: non byte read [ 1028.866486][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.356588][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.970760][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.641441][T19233] loop8: detected capacity change from 0 to 8 [ 1030.768821][T19233] Dev loop8: unable to read RDB block 8 [ 1030.845852][T19233] loop8: unable to read partition table [ 1030.883528][T19233] loop8: partition table beyond EOD, truncated [ 1030.921069][T19233] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1031.038640][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.520481][T12565] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1031.690878][T12565] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1031.736238][T12565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.757998][T12565] usb 6-1: Product: syz [ 1031.770205][T12565] usb 6-1: Manufacturer: syz [ 1031.782624][T12565] usb 6-1: SerialNumber: syz [ 1031.836575][T12565] usb 6-1: config 0 descriptor?? [ 1031.913593][T12565] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1031.954861][T19253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1032.009584][T12565] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1032.037540][T12565] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1032.077402][T12565] usb 6-1: media controller created [ 1032.085808][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.237333][T12565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1032.419622][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.566648][T12565] DVB: Unable to find symbol mt352_attach() [ 1032.827346][T12565] DVB: Unable to find symbol nxt6000_attach() [ 1032.905679][T12565] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1032.957945][T12565] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input96 [ 1033.004569][T12565] dvb-usb: schedule remote query interval to 1000 msecs. [ 1033.027956][T19280] tipc: Enabled bearer , priority 0 [ 1033.035485][T12565] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1033.058019][T19280] syzkaller0: entered promiscuous mode [ 1033.063521][T19280] syzkaller0: entered allmulticast mode [ 1033.076275][T12565] dvb-usb: bulk message failed: -22 (7/0) [ 1033.086216][T12565] dvb-usb: bulk message failed: -22 (7/0) [ 1033.112632][T12565] usb 6-1: USB disconnect, device number 76 [ 1033.130567][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.179750][T19288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3596'. [ 1033.225650][T19280] tipc: Resetting bearer [ 1033.343324][T19280] tipc: Resetting bearer [ 1033.361839][T12565] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1033.410072][T12564] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1033.448683][T19280] syzkaller0: left promiscuous mode [ 1033.479458][T19280] syzkaller0: left allmulticast mode [ 1033.621210][T19279] tipc: Disabling bearer [ 1033.622011][T12564] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1033.711787][T12564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.778400][T12565] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 1033.901118][T12564] usb 4-1: Product: syz [ 1033.915386][T12564] usb 4-1: Manufacturer: syz [ 1033.959199][T12565] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1033.960293][T19298] loop2: detected capacity change from 0 to 7 [ 1034.008505][T12564] usb 4-1: SerialNumber: syz [ 1034.021173][T12565] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.038707][T12565] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1034.058035][T12565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.070019][T12565] usb 6-1: config 0 descriptor?? [ 1034.078023][T19298] Dev loop2: unable to read RDB block 7 [ 1034.092725][T19298] loop2: unable to read partition table [ 1034.107337][T19298] loop2: partition table beyond EOD, truncated [ 1034.133966][T19298] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1034.159541][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.668387][T12565] pantherlord 0003:0E8F:0003.004D: unknown main item tag 0x0 [ 1034.699290][T12565] pantherlord 0003:0E8F:0003.004D: unknown main item tag 0x0 [ 1034.739512][T12565] pantherlord 0003:0E8F:0003.004D: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.5-1/input0 [ 1034.769211][T12565] pantherlord 0003:0E8F:0003.004D: no output reports found [ 1034.885360][T19277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3595'. [ 1035.187912][T12565] usb 6-1: USB disconnect, device number 77 [ 1035.196364][ T24] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1035.204270][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.416285][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1035.492434][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3599'. [ 1035.502115][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.510923][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.527076][T19287] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 1035.538093][ T24] usb 1-1: config 0 has no interfaces? [ 1035.547108][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1035.671463][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.683183][T12564] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1035.740095][ T24] usb 1-1: config 0 descriptor?? [ 1035.755870][T12564] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1035.802837][T12564] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1035.838226][T12564] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1035.864333][T12564] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1035.988991][T12564] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1036.111080][T12564] usb 4-1: USB disconnect, device number 82 [ 1036.151820][T19320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.164177][T19320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.414382][ T5951] net_ratelimit: 1 callbacks suppressed [ 1037.414398][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.501545][T19342] loop2: detected capacity change from 0 to 7 [ 1037.508908][T19342] Dev loop2: unable to read RDB block 7 [ 1037.518337][T19342] loop2: unable to read partition table [ 1037.579556][T19342] loop2: partition table beyond EOD, truncated [ 1037.625468][T19342] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1038.048833][T12557] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1038.226492][T12557] usb 3-1: Using ep0 maxpacket: 8 [ 1038.268921][ T5951] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1038.366782][T19361] netlink: 'syz.5.3617': attribute type 21 has an invalid length. [ 1038.374751][T19361] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3617'. [ 1038.399332][T12557] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1038.563689][T12557] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1038.591244][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.599549][T12565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.628911][T12557] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1038.646498][T12566] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1038.673894][T12557] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1038.715546][T12557] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1038.732131][ T5951] usb 5-1: config 0 has no interfaces? [ 1038.742478][ T5951] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1038.758923][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.772771][T12557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.795520][ T5951] usb 5-1: Product: syz [ 1038.823998][ T5951] usb 5-1: Manufacturer: syz [ 1038.828911][ T5951] usb 5-1: SerialNumber: syz [ 1038.846247][T12566] usb 6-1: device descriptor read/64, error -71 [ 1039.019398][ T5951] usb 5-1: config 0 descriptor?? [ 1039.181207][T19350] picdev_write: 371 callbacks suppressed [ 1039.181221][T19350] kvm: pic: non byte write [ 1039.226465][T12566] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1039.306474][T12557] usb 3-1: GET_CAPABILITIES returned 0 [ 1039.354618][T12564] usb 1-1: USB disconnect, device number 57 [ 1039.376385][T12566] usb 6-1: device descriptor read/64, error -71 [ 1039.409748][T12557] usbtmc 3-1:16.0: can't read capabilities [ 1039.621151][T12566] usb usb6-port1: attempt power cycle [ 1039.685396][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.946914][T12564] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1040.006556][T12566] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1040.026941][T12566] usb 6-1: device descriptor read/8, error -71 [ 1040.186456][T12564] usb 1-1: Using ep0 maxpacket: 32 [ 1040.193582][T12564] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1040.207463][T12564] usb 1-1: config 0 has no interface number 0 [ 1040.221227][T12564] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1040.231527][T12564] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1040.241660][T12564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.255274][T12564] usb 1-1: Product: syz [ 1040.260181][T12564] usb 1-1: Manufacturer: syz [ 1040.265373][T12564] usb 1-1: SerialNumber: syz [ 1040.280264][T12564] usb 1-1: config 0 descriptor?? [ 1040.286794][T12566] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1040.298215][T12564] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1040.308615][T12564] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1040.327988][T12566] usb 6-1: device descriptor read/8, error -71 [ 1040.436714][T12566] usb usb6-port1: unable to enumerate USB device [ 1040.720472][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.821989][ T9] usb 5-1: USB disconnect, device number 87 [ 1040.902683][T12564] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1041.052726][ T5951] usb 3-1: USB disconnect, device number 63 [ 1041.649372][T19389] loop2: detected capacity change from 0 to 7 [ 1041.676487][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.734090][T19389] Dev loop2: unable to read RDB block 7 [ 1041.760736][T12557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.783503][T19389] loop2: unable to read partition table [ 1041.811892][T19389] loop2: partition table beyond EOD, truncated [ 1041.854884][T19389] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1042.138722][T19396] syzkaller1: entered promiscuous mode [ 1042.144259][T19396] syzkaller1: entered allmulticast mode [ 1042.322535][T19404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.331473][T19404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.374105][T19407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3630'. [ 1042.445497][T12564] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 1042.478640][T12564] em28xx 1-1:0.89: board has no eeprom [ 1042.546299][T12564] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1042.554020][T12564] em28xx 1-1:0.89: analog set to bulk mode. [ 1042.594762][T12566] em28xx 1-1:0.89: Registering V4L2 extension [ 1042.702459][T19413] hub 9-0:1.0: USB hub found [ 1042.707513][T19413] hub 9-0:1.0: 1 port detected [ 1042.912037][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.113176][T12566] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1043.126746][T19422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3632'. [ 1043.135856][T19422] netlink: 'syz.2.3632': attribute type 7 has an invalid length. [ 1043.143787][T19422] netlink: 'syz.2.3632': attribute type 8 has an invalid length. [ 1043.151623][T19422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3632'. [ 1043.197453][T12566] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1043.228969][T12565] usb 1-1: USB disconnect, device number 58 [ 1043.236988][T12565] em28xx 1-1:0.89: Disconnecting em28xx [ 1043.251705][T19422] syz_tun: entered promiscuous mode [ 1043.269895][T12566] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1043.290738][T12566] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1043.344808][T19422] batadv_slave_1: entered promiscuous mode [ 1043.352742][T19422] erspan0: entered promiscuous mode [ 1043.455027][T12566] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1043.456791][T12557] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1043.529770][T12566] em28xx 1-1:0.89: No AC97 audio processor [ 1043.587699][T12566] usb 1-1: Decoder not found [ 1043.592309][T12566] em28xx 1-1:0.89: failed to create media graph [ 1043.598861][ T9] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1043.638304][T12566] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1043.716263][T12557] usb 5-1: Using ep0 maxpacket: 16 [ 1043.732681][T12557] usb 5-1: config 0 has no interfaces? [ 1043.738538][T12557] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1043.760294][T12557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.776353][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1043.786376][T12566] em28xx 1-1:0.89: Registering snapshot button... [ 1043.794647][T19426] ================================================================== [ 1043.802732][T19426] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 1043.810138][T19426] Read of size 8 at addr ffff888067750740 by task v4l_id/19426 [ 1043.817682][T19426] [ 1043.820009][T19426] CPU: 1 UID: 0 PID: 19426 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1043.820030][T19426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1043.820040][T19426] Call Trace: [ 1043.820046][T19426] [ 1043.820052][T19426] dump_stack_lvl+0x189/0x250 [ 1043.820069][T19426] ? rcu_is_watching+0x15/0xb0 [ 1043.820082][T19426] ? __kasan_check_byte+0x12/0x40 [ 1043.820109][T19426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1043.820128][T19426] ? rcu_is_watching+0x15/0xb0 [ 1043.820145][T19426] ? lock_release+0x4b/0x3e0 [ 1043.820171][T19426] ? __virt_addr_valid+0x1c8/0x5c0 [ 1043.820190][T19426] ? __virt_addr_valid+0x4a5/0x5c0 [ 1043.820206][T19426] print_report+0xca/0x240 [ 1043.820218][T19426] ? v4l2_fh_open+0xc7/0x430 [ 1043.820230][T19426] kasan_report+0x118/0x150 [ 1043.820256][T19426] ? v4l2_fh_open+0xc7/0x430 [ 1043.820277][T19426] v4l2_fh_open+0xc7/0x430 [ 1043.820296][T19426] em28xx_v4l2_open+0x157/0x9a0 [ 1043.820327][T19426] v4l2_open+0x20f/0x360 [ 1043.820343][T19426] chrdev_open+0x4c9/0x5e0 [ 1043.820355][T19426] ? __pfx_chrdev_open+0x10/0x10 [ 1043.820366][T19426] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1043.820393][T19426] ? __pfx_chrdev_open+0x10/0x10 [ 1043.820407][T19426] do_dentry_open+0x950/0x13f0 [ 1043.820432][T19426] vfs_open+0x3b/0x340 [ 1043.820447][T19426] ? path_openat+0x2ecd/0x3830 [ 1043.820470][T19426] path_openat+0x2ee5/0x3830 [ 1043.820484][T19426] ? arch_stack_walk+0xfc/0x150 [ 1043.820509][T19426] ? stack_depot_save_flags+0x40/0x860 [ 1043.820536][T19426] ? __pfx_path_openat+0x10/0x10 [ 1043.820556][T19426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.820582][T19426] do_filp_open+0x1fa/0x410 [ 1043.820601][T19426] ? __lock_acquire+0xab9/0xd20 [ 1043.820626][T19426] ? __pfx_do_filp_open+0x10/0x10 [ 1043.820648][T19426] ? _raw_spin_unlock+0x28/0x50 [ 1043.820666][T19426] ? alloc_fd+0x64c/0x6c0 [ 1043.820692][T19426] do_sys_openat2+0x121/0x1c0 [ 1043.820712][T19426] ? __pfx_do_sys_openat2+0x10/0x10 [ 1043.820731][T19426] ? exc_page_fault+0x76/0xf0 [ 1043.820749][T19426] ? do_user_addr_fault+0xc8a/0x1390 [ 1043.820775][T19426] __x64_sys_openat+0x138/0x170 [ 1043.820790][T19426] do_syscall_64+0xfa/0x3b0 [ 1043.820804][T19426] ? lockdep_hardirqs_on+0x9c/0x150 [ 1043.820816][T19426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.820835][T19426] ? clear_bhb_loop+0x60/0xb0 [ 1043.820855][T19426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.820889][T19426] RIP: 0033:0x7f3cf9aa7407 [ 1043.820907][T19426] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1043.820925][T19426] RSP: 002b:00007fffd2df5ae0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1043.820941][T19426] RAX: ffffffffffffffda RBX: 00007f3cfa1f4880 RCX: 00007f3cf9aa7407 [ 1043.820952][T19426] RDX: 0000000000000000 RSI: 00007fffd2df6f1b RDI: ffffffffffffff9c [ 1043.820963][T19426] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1043.820972][T19426] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1043.820985][T19426] R13: 00007fffd2df5d30 R14: 00007f3cfa35b000 R15: 000055b456fe04d8 [ 1043.821011][T19426] [ 1043.821019][T19426] [ 1044.128584][T19426] Allocated by task 12566: [ 1044.133011][T19426] kasan_save_track+0x3e/0x80 [ 1044.137685][T19426] __kasan_kmalloc+0x93/0xb0 [ 1044.142284][T19426] __kmalloc_cache_noprof+0x230/0x3d0 [ 1044.147651][T19426] em28xx_v4l2_init+0x10b/0x2e70 [ 1044.152588][T19426] em28xx_init_extension+0x120/0x1c0 [ 1044.157873][T19426] process_scheduled_works+0xae1/0x17b0 [ 1044.163409][T19426] worker_thread+0x8a0/0xda0 [ 1044.167995][T19426] kthread+0x70e/0x8a0 [ 1044.172097][T19426] ret_from_fork+0x439/0x7d0 [ 1044.176720][T19426] ret_from_fork_asm+0x1a/0x30 [ 1044.181491][T19426] [ 1044.183811][T19426] Freed by task 12566: [ 1044.187866][T19426] kasan_save_track+0x3e/0x80 [ 1044.192546][T19426] kasan_save_free_info+0x46/0x50 [ 1044.197560][T19426] __kasan_slab_free+0x5b/0x80 [ 1044.202322][T19426] kfree+0x18e/0x440 [ 1044.206209][T19426] em28xx_v4l2_init+0x1683/0x2e70 [ 1044.211241][T19426] em28xx_init_extension+0x120/0x1c0 [ 1044.216527][T19426] process_scheduled_works+0xae1/0x17b0 [ 1044.222107][T19426] worker_thread+0x8a0/0xda0 [ 1044.226696][T19426] kthread+0x70e/0x8a0 [ 1044.230759][T19426] ret_from_fork+0x439/0x7d0 [ 1044.235373][T19426] ret_from_fork_asm+0x1a/0x30 [ 1044.240147][T19426] [ 1044.242480][T19426] The buggy address belongs to the object at ffff888067750000 [ 1044.242480][T19426] which belongs to the cache kmalloc-8k of size 8192 [ 1044.256524][T19426] The buggy address is located 1856 bytes inside of [ 1044.256524][T19426] freed 8192-byte region [ffff888067750000, ffff888067752000) [ 1044.270479][T19426] [ 1044.272792][T19426] The buggy address belongs to the physical page: [ 1044.279195][T19426] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67750 [ 1044.287946][T19426] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1044.296442][T19426] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1044.303976][T19426] page_type: f5(slab) [ 1044.307950][T19426] raw: 00fff00000000040 ffff88801a442280 ffffea00012c5400 dead000000000004 [ 1044.316531][T19426] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1044.325114][T19426] head: 00fff00000000040 ffff88801a442280 ffffea00012c5400 dead000000000004 [ 1044.333775][T19426] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1044.342435][T19426] head: 00fff00000000003 ffffea00019dd401 00000000ffffffff 00000000ffffffff [ 1044.351103][T19426] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1044.359807][T19426] page dumped because: kasan: bad access detected [ 1044.366210][T19426] page_owner tracks the page as allocated [ 1044.371915][T19426] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 19037, tgid 19032 (syz.2.3520), ts 1019266273680, free_ts 993365474525 [ 1044.394929][T19426] post_alloc_hook+0x240/0x2a0 [ 1044.399697][T19426] get_page_from_freelist+0x21e4/0x22c0 [ 1044.405236][T19426] __alloc_frozen_pages_noprof+0x181/0x370 [ 1044.411038][T19426] alloc_pages_mpol+0x232/0x4a0 [ 1044.415900][T19426] allocate_slab+0x8a/0x370 [ 1044.420390][T19426] ___slab_alloc+0xbeb/0x1420 [ 1044.425071][T19426] __kmalloc_cache_noprof+0x296/0x3d0 [ 1044.430437][T19426] audit_log_d_path+0xb5/0x190 [ 1044.435204][T19426] audit_log_d_path_exe+0x42/0x70 [ 1044.440223][T19426] audit_log_task+0x2b3/0x3c0 [ 1044.444912][T19426] audit_seccomp+0x86/0x190 [ 1044.449402][T19426] __seccomp_filter+0x9aa/0x1a40 [ 1044.454337][T19426] syscall_trace_enter+0xaa/0x160 [ 1044.459361][T19426] do_syscall_64+0xd3/0x3b0 [ 1044.463854][T19426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.469736][T19426] page last free pid 18669 tgid 18666 stack trace: [ 1044.476224][T19426] __free_frozen_pages+0xbc4/0xd30 [ 1044.481341][T19426] __put_partials+0x156/0x1a0 [ 1044.486023][T19426] put_cpu_partial+0x17c/0x250 [ 1044.490779][T19426] __slab_free+0x2d5/0x3c0 [ 1044.495186][T19426] qlist_free_all+0x97/0x140 [ 1044.499771][T19426] kasan_quarantine_reduce+0x148/0x160 [ 1044.505223][T19426] __kasan_slab_alloc+0x22/0x80 [ 1044.510071][T19426] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 1044.515960][T19426] __alloc_skb+0x112/0x2d0 [ 1044.520377][T19426] rtmsg_ifinfo_build_skb+0x84/0x260 [ 1044.525660][T19426] rtmsg_ifinfo+0x8c/0x1a0 [ 1044.530074][T19426] netif_state_change+0x29e/0x3a0 [ 1044.535090][T19426] do_setlink+0x35de/0x41c0 [ 1044.539613][T19426] rtnl_newlink+0x149f/0x1c70 [ 1044.544296][T19426] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1044.549228][T19426] netlink_rcv_skb+0x208/0x470 [ 1044.553991][T19426] [ 1044.556330][T19426] Memory state around the buggy address: [ 1044.561959][T19426] ffff888067750600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.570016][T19426] ffff888067750680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.578101][T19426] >ffff888067750700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.586151][T19426] ^ [ 1044.592294][T19426] ffff888067750780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.600345][T19426] ffff888067750800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1044.608410][T19426] ================================================================== [ 1044.616547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1044.637825][T12566] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input97 [ 1044.643769][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.736465][T12569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.794990][T12566] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1044.823753][T12565] em28xx 1-1:0.89: Closing input extension [ 1044.834735][T12565] em28xx 1-1:0.89: Deregistering snapshot button [ 1044.860868][T12557] usb 5-1: config 0 descriptor?? [ 1044.896418][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1044.905817][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.005261][T19426] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1045.012496][T19426] CPU: 0 UID: 0 PID: 19426 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1045.021522][T19426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1045.031594][T19426] Call Trace: [ 1045.034885][T19426] [ 1045.037831][T19426] dump_stack_lvl+0x99/0x250 [ 1045.042427][T19426] ? __asan_memcpy+0x40/0x70 [ 1045.047022][T19426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1045.052232][T19426] ? __pfx__printk+0x10/0x10 [ 1045.056837][T19426] vpanic+0x281/0x750 [ 1045.060829][T19426] ? preempt_schedule+0xae/0xc0 [ 1045.065665][T19426] ? __pfx_vpanic+0x10/0x10 [ 1045.070176][T19426] ? preempt_schedule_common+0x83/0xd0 [ 1045.075634][T19426] ? preempt_schedule+0xae/0xc0 [ 1045.080509][T19426] ? __pfx_preempt_schedule+0x10/0x10 [ 1045.085871][T19426] panic+0xb9/0xc0 [ 1045.089615][T19426] ? __pfx_panic+0x10/0x10 [ 1045.094060][T19426] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1045.099997][T19426] ? v4l2_fh_open+0xc7/0x430 [ 1045.104598][T19426] check_panic_on_warn+0x89/0xb0 [ 1045.109566][T19426] ? v4l2_fh_open+0xc7/0x430 [ 1045.114171][T19426] end_report+0x78/0x160 [ 1045.118421][T19426] kasan_report+0x129/0x150 [ 1045.122924][T19426] ? v4l2_fh_open+0xc7/0x430 [ 1045.127521][T19426] v4l2_fh_open+0xc7/0x430 [ 1045.131936][T19426] em28xx_v4l2_open+0x157/0x9a0 [ 1045.136796][T19426] v4l2_open+0x20f/0x360 [ 1045.141032][T19426] chrdev_open+0x4c9/0x5e0 [ 1045.145438][T19426] ? __pfx_chrdev_open+0x10/0x10 [ 1045.150364][T19426] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1045.156728][T19426] ? __pfx_chrdev_open+0x10/0x10 [ 1045.161679][T19426] do_dentry_open+0x950/0x13f0 [ 1045.166449][T19426] vfs_open+0x3b/0x340 [ 1045.170514][T19426] ? path_openat+0x2ecd/0x3830 [ 1045.175274][T19426] path_openat+0x2ee5/0x3830 [ 1045.179867][T19426] ? arch_stack_walk+0xfc/0x150 [ 1045.184725][T19426] ? stack_depot_save_flags+0x40/0x860 [ 1045.190208][T19426] ? __pfx_path_openat+0x10/0x10 [ 1045.195159][T19426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.201280][T19426] do_filp_open+0x1fa/0x410 [ 1045.205800][T19426] ? __lock_acquire+0xab9/0xd20 [ 1045.210649][T19426] ? __pfx_do_filp_open+0x10/0x10 [ 1045.215679][T19426] ? _raw_spin_unlock+0x28/0x50 [ 1045.220545][T19426] ? alloc_fd+0x64c/0x6c0 [ 1045.224892][T19426] do_sys_openat2+0x121/0x1c0 [ 1045.229565][T19426] ? __pfx_do_sys_openat2+0x10/0x10 [ 1045.234753][T19426] ? exc_page_fault+0x76/0xf0 [ 1045.239451][T19426] ? do_user_addr_fault+0xc8a/0x1390 [ 1045.244753][T19426] __x64_sys_openat+0x138/0x170 [ 1045.249598][T19426] do_syscall_64+0xfa/0x3b0 [ 1045.254113][T19426] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.259302][T19426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.265352][T19426] ? clear_bhb_loop+0x60/0xb0 [ 1045.270021][T19426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.275917][T19426] RIP: 0033:0x7f3cf9aa7407 [ 1045.280322][T19426] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1045.299931][T19426] RSP: 002b:00007fffd2df5ae0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1045.308341][T19426] RAX: ffffffffffffffda RBX: 00007f3cfa1f4880 RCX: 00007f3cf9aa7407 [ 1045.316326][T19426] RDX: 0000000000000000 RSI: 00007fffd2df6f1b RDI: ffffffffffffff9c [ 1045.324301][T19426] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1045.332265][T19426] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1045.340232][T19426] R13: 00007fffd2df5d30 R14: 00007f3cfa35b000 R15: 000055b456fe04d8 [ 1045.348228][T19426] [ 1045.351604][T19426] Kernel Offset: disabled [ 1045.355923][T19426] Rebooting in 86400 seconds..