last executing test programs: 18.530437524s ago: executing program 3 (id=2693): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x53, "005ff9297d00001392000100"}, {0x18, 0x1, "00f5ffffff00"}]}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x557d, &(0x7f0000000180)={0x0, 0xb11b, 0x400}, &(0x7f0000000380), &(0x7f0000000240)) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x10, 0x0}, 0x0) r5 = timerfd_create(0x19, 0x80800) poll(&(0x7f00000000c0)=[{r3, 0x220}, {r4, 0x4059}, {r1, 0x44a3}, {r5, 0xa141}, {0xffffffffffffffff, 0x1001}], 0x5, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e23, 0xa0002000, @private1, 0x7fff}, 0x1c) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000011c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000140), 0xc840, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x3}}}, 0x24}}, 0x0) 18.09077012s ago: executing program 0 (id=2697): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70003c85d4b2000000003b5d85c70000000000000001ac1414aa00000000000000000000330000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000440005"], 0xfc}}, 0x0) 17.421004214s ago: executing program 0 (id=2699): unshare(0x8040600) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000200)="561700", 0x3}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0xd0, 0x23b) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x40000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180)=0x3, 0x0, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x800000000000191, 0x2041, 0x0) socket$inet6(0xa, 0x3, 0x1) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@hyper}, @host, 0xe, 0x0, 0x7, 0xfffffffffffffffb, 0x0, 0x5}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r6, 0x7aa, &(0x7f0000000000)={{@host}, 0x6000, 0x208}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r7 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000480)={'\x00', 0x9, 0x0, 0x8001}) 15.130539316s ago: executing program 3 (id=2703): socket$inet_udplite(0x2, 0x2, 0x88) eventfd2(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x7c, 0xcc, 0x2d, 0x40, 0xc45, 0x62a0, 0xa822, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xed, 0xe3}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x2) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[], 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x20) 14.256038436s ago: executing program 4 (id=2706): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) (fail_nth: 2) 13.570423236s ago: executing program 4 (id=2708): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa842, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="931c00007d00000005f00000ffa00000000000000000000000000000000000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 13.415675525s ago: executing program 1 (id=2709): r0 = memfd_create(&(0x7f0000000400)='9\x84\xdf\xa3{.XS|F\a\xa9N\xb8%\x00\n\xf0\x99\xb8\xbdp\xbb\x8bQ/\xaf\x89\x13\xe3V\x1a\xc7\xab\x97|\x9f}=\xa7\x03\x8d\x90\xe9\x10K\xd9L+\xf9\xbcO\b\xf3\xac\xdb\xbb\xbc\xfb3\xe1*\x14\xd3\xe8\xe3\x99\x8c>\xa8M\x96\xf6\xb0\xf8l\x1bn\xaf\xa8\xd0k\xbem\b~\x1bh\xf4-\xe4\x05V\x90\x85e\xf6\x10`\xf3(\xe8\xf4', 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r0, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/157, 0x200000}, {0x0}], 0x2, 0x20, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x40000000}) 13.202607983s ago: executing program 3 (id=2711): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88003, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000600), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x800) ptrace(0x10, r2) sendfile(r0, r1, 0x0, 0x20000023896) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00', @ANYRES16=r5, @ANYBLOB="000229bd7000ffdbdf253500000008000300", @ANYRES32, @ANYBLOB="0c00991eff0000000d0000001400fe00f774ec2a01049424b3d0d52eba8e6e3dd932eb5d7d21b42c029ab705002001150000001d003400f93e6cfbd60c35adb7a4bc63e9aba2a414d19f2e11473204520008000000c6bc008f99137a1e6949a214755bf201b6937d2d87ef915ecd411db7be717270c9c69bbebd3f0dfae38cc74d8309ed6ebee50bb4d3826fbf1e7db2fa38bf936244cd94eaa903bfcb8dfffdc3f9da844f5de788d75bb463b109000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0xb4}}, 0x0) syz_emit_ethernet(0x99, &(0x7f0000000280)={@empty, @link_local, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x2, 0x1, 0x1}}, {@llc={0x4, {@snap={0xaa, 0x54, "f61d", "d0384a", 0x8864, "0c0b3539615a1e01c7218a2b1baef60287083b80f912b2933c75b7e6c58be03a85c75177ccfd275fc1aeaa8bad895d6d32252b560d07d50b21549ac2af783e1cb5c293083560e32064778751407fc40682ae3bb2a1fdef2e563e4ffc8b2e46974749239ee89ad0ef12663b49ea7ea991cfbde1a68a6b9a46d426"}}}}}, &(0x7f0000000000)={0x1, 0x2, [0x98, 0x781, 0x753, 0x303]}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000088ff0000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000004009", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) 12.369195363s ago: executing program 4 (id=2712): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r1 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000080)={r1, 0x4}) close(0x5) unshare(0x20000400) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000fc0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x3, 0x6, 0x1, 0x65, 0x400, 0x4, 0x6c, 0x4, @loopback, @dev={0xac, 0x14, 0x14, 0x18}, {[@rr={0x7, 0x27, 0x51, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @multicast1, @local, @rand_addr=0x64010102]}, @ssrr={0x89, 0x13, 0x6e, [@dev={0xac, 0x14, 0x14, 0x15}, @remote, @empty, @private=0xa010101]}, @timestamp_prespec={0x44, 0x4, 0x40, 0x3, 0xd}]}}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x14, r4, 0x303, 0x70bd2a, 0x25dfdbff}, 0xec0}}, 0x80) unshare(0x2a020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x1, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r9 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x8, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x0, r12}}) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x6000, @fd_index=0x9, 0x100000001, 0x0, 0x0, 0x9, 0x1, {0x1, r12}}) socket$alg(0x26, 0x5, 0x0) 11.694879532s ago: executing program 4 (id=2714): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r4, 0x0, 0x7}, 0x38) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40000002, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 11.509619239s ago: executing program 1 (id=2715): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x9, '\x00', 0x0, r2, 0x4, 0xffffffff, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001040)=ANY=[@ANYBLOB="0400000000000001181100586f6ed22c4cfcea4d803157e18574e93a09472b73ff95de82e299bb2abee0df9f48bf11f1e945806fdff5b97602b6575ad677d191fbcf81bfa718f0ebccaed01b92598419e9794e985cb0f4c62b35978feb9f2116edb509f9ea39770d240b4bef053f9c0018439ac4e87c1f408f0eca2f082ff18843cff8670d9b79d93fa966c89d94a3b39964734466b2c3e27050a7e8e8e79ba95f18503b41e9e6b68ffadbbb35fa9f2b06db73112ea3b5e6032d25f6eb1a8a1fbd332f8ff0ff0c5e4ca781c6afb74a6f394447dc923c703b6595bac94fc4", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b509050000000000dbaaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000080000004600000076000000bf91000000000000b6080000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 9.507903908s ago: executing program 1 (id=2716): pipe2$9p(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) r2 = msgget(0x0, 0x2c4) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = epoll_create(0x5643) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xc0000004}) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000180)={0x2}) dup2(r4, r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES8=r1], 0x48) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x30, r6, 0x7db3c000) r7 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x4d}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', 0x3, 0x80001, 0x23456}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x8000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(r9, 0x0, &(0x7f0000000100)=0x3) msgctl$IPC_RMID(r2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000340)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x2e, &(0x7f0000000100), 0x0) 8.894127647s ago: executing program 4 (id=2717): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0xa, 0x4a141) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000b000000000000be"]) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 8.366144448s ago: executing program 1 (id=2718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x38ff01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = eventfd2(0x0, 0x801) read$eventfd(r3, &(0x7f0000000000), 0x8) fsopen(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x2}) r6 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r6, 0x0, 0x10002) syz_usb_control_io(r5, 0x0, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r7, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) quotactl_fd$Q_SYNC(r1, 0xffffffff80000103, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0x300}, &(0x7f00000000c0)=0x24) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) 7.077355251s ago: executing program 3 (id=2719): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="13", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="4800000000000000290000003700000033050000000000000001000104000000000109000000000000000000c910fc00000000000000000000000000001a01030002557b0000000038"], 0x80}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0x1, @local, 0x9c}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000002b40)="0604347a", 0x4}], 0x1}}], 0x2, 0x44) 6.384265101s ago: executing program 2 (id=2720): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) pwrite64(r0, 0x0, 0x0, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0xc8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) (async) pwrite64(r0, 0x0, 0x0, 0x6) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) (async) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0xc8000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) (async) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) (async) 5.938140377s ago: executing program 3 (id=2721): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r5, &(0x7f0000002340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0x20582a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0xfffffffd}}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r6 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 5.922624548s ago: executing program 0 (id=2722): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500efffffffffffffff000000", @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}}, 0x0) 5.051750572s ago: executing program 0 (id=2723): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x9, 0x0, 0x28) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010008506000000000000000000010000", @ANYRES32, @ANYBLOB="01020000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800e0001006970366772657461700000002800028006000300010000001400070000000000000000000200ffffac1e000105000b000b00000008000a00", @ANYRES32], 0x64}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x0, 0x26, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10, 0x8000, 0x7f, 0x2}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="9c070000", @ANYRES16=0x0, @ANYBLOB="000329bd7000dcdbdf250800000034000180140002006d610c00000000000000000000000000001400020076657468305f746f5f62617461647600080001c7e9ccb3f3e8a7d8f12863e7acc9104370926f926301163635df719d68b552d58917862119046771b3ac2ae1c3944d853991f5ba8b6389fd6f4d0117aa49c83c994728bf54c3b1", @ANYRES32=0x0, @ANYBLOB="58000180080003000000000014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4c0001801400020076657468305f766972745f776966690008000300020000000800030000000000080003000200000008000300020000001400020076657468305f746f5f6261746164760058000180140002006e7230000000000000000000000000001400020073697430000000000000000000000000080003000200000008000100", @ANYRES32=r4, @ANYBLOB="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"], 0x79c}, 0x1, 0x0, 0x0, 0x8000}, 0x4044815) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040480) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x2000, 0x1000, 0x0, 0xfffffffd}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r5, 0x1ff, 0x0, 0x0, 0xe, 0x0, {0x3}}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) r9 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r11 = getuid() fsetxattr$security_capability(r9, &(0x7f0000000040), &(0x7f00000001c0)=@v3={0x3000000, [{0x1, 0x6}, {0x6, 0x4}], r11}, 0x18, 0x2) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::.:\x00', 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r9}, 0x8) dup3(r9, r1, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.520805616s ago: executing program 1 (id=2724): syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@ba={{}, {0x81}, @device_a, @broadcast, @basic={{0x1, 0x0, 0x0, 0x0, 0xc}, {0x9, 0x80}, "489be860d59d557f2d1595be9e98d4c4a36de2db97855822a4d278352a0e14f870afb9be28cab8d735fb4556764b1fb361229f372a239fb9b4e3a010f3027713fb66488ec1368beaf42e685fcf56106204312be547de4becd776231b6ed01522916ddef57a30f59859a010d0b011dc1cf38c49f1bbae22e391cad0a2df22d349"}}, 0x94) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x4}, @broadcast, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x1}, {0x3, 0x7}, "ac494351ad763af52b3e362dae85d3a6a887ca8b1b3ee79470dbd2d81b9d6d8e786463103e9bed2482c486fe8166710b1c027089f656b81c97575b8964e027dcb98201eca859d38c4d62e0633045832710c5bdac4e80ad88512e46ad3532821b87163a05746d0f5c2f7fe8a8b2849e1436bd89a7bca2fc89ab92f80bdf5a88dc"}}, 0x94) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000240)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @from_mac, @initial, {0x4, 0x3}}, @a_msdu=[{@device_a, @device_b, 0x10, "b2a293c3357d88738741a39960ac164e"}, {@device_a, @device_a, 0x7f, "2140129abd9e47f7a1a8e0eaf030380dda0e1c00253379a042e612a14b6592fd0352cd7fc24f2cc96187c1f6ada8a6bbef4f67e91a58a27288f5f9dc304df3794bca46861cbf611ccd2fb228e6b06a77375b0cc458e38cf3d96f9960a7cb7fb13a6ffb602aa36b7e33133d3b5305b8fd4ac68087c60a6dcfe82fdcb5e97cd6"}, {@device_b, @broadcast, 0xd, "8ec5ac5455df45b7c93fb3bed7"}, {@device_b, @broadcast, 0x5c, "ccbbc7e1fa8191e59b32744f64a3d5c6ce1f2a9972b2305837be476a55df9a4b28424256e9ae9238ee119a0f8d0d0eb0cc44a59b3d2aba36f257d2d97f6b37e25ae083faacf5e213b451e2fa0ed0256c22c40375af32fe14b49e0f5b"}, {@broadcast, @device_b, 0x90, "f7f0b2c7221ec69b0472ef3cb13d3f18d895a5028d9ad407b1a2c1773dbe5d57fcdb41b8d4ed67433374239cde37b11d6dcfab45e1f85bc8962f2e38155d0e3b033f85a32fc6c3ca3729ce45e11a0ff0fc1299c5aaed0c6ae70594bc02353fa3f2e79ed2924bbaf975af9c5f11a2a79827693771774f6b785c6eb9a46505fd0396c7da0e92b9273ec996205754f695b6"}, {@device_b, @broadcast, 0x52, "f0dfa81554e9d92ce0346d341fe1fa849e5eaf8e91af70e68734d4311ed81f956eb5685fb873d1cb15e0e2d18fb38fc86a4df08e19d1ce36067704ab442fff42821e8551f2fe3fd29135c0910251e9bed743"}, {@broadcast, @broadcast, 0xb2, "ed5269701b896e19043e42333a8bad926f3aa3df4daa32522e87bf47971b3aaef275f422066c2f159a28dadded766f03228d95f57688d4baddfbf0447bc97c26eda1a29ec764147312f7ae56e26eabb481cd9ffe5f631085d2f3fd400e00411083b02b7594389555d25a86ffb5b141cc23bda950a829e77afe3d8c8b27182e79a17c36449bc889c2c283c7d483cc9c84441b47db0d7bd9bcdde2687bae3c3866b431c6641d88d0bc3a60e32e18fd0a71ac98"}, {@broadcast, @device_a, 0x17, "0da0e358f3e09b6ff6eb42513b63d20ae03509d5e7e99d"}]}, 0x338) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@ctrl_frame=@bar={{}, {0x3}, @broadcast, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0xf, {0x7, 0x8}, "990bce973d8a1671"}, {0x0, 0x0, {0x9, 0xff}, "ffa071b7829e2e82"}, {0x0, 0x8, {0x3, 0x4}, "d4f91bb83779ef1a"}, {0x0, 0x8, {0xc, 0xc}, "d053c31efa34b308"}]}}, 0x42) syz_80211_inject_frame(&(0x7f0000000640)=@broadcast, &(0x7f0000000680)=@data_frame={@msdu=@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x1}, {0x31b}, @device_a, @from_mac, @device_a, {0x2, 0x2}, "", @value={0xb, 0x1, 0x0, 0x0, 0x4}}, @a_msdu=[{@broadcast, @broadcast, 0x77, "2a06b63bf820abd43662891786535dd117a57997a9e7519574f03406eac1b7977f04970cfc5ddf24819c941ad872b604190aca5e879c9ea5368e3539da3664559b2f7f858449af1670623b90e5112f8832d94ad65c7319d9f8711626f0f35ea90a0dece05babee4e2af62c5928b874d4c9676e922b55c5"}, {@broadcast, @broadcast}, {@broadcast, @device_b, 0xad, "19930ee7cd21e8e3eb2c0971ab79b667002a2b536a43633c0fe9810888c8af9bf460d87f22014cfec7fd6679329de1d3da2c732c4d16b37481d48d79738ad278f1f1432dac220671b89daf078d5e35c9fa841bfe83ae0bc482de4ea661c49659ce2928d60f5d503536ae875771f5dcf74b4c705ef5850ba1300cc6ca64947d404a69f8c9c5428f799740769ac7ae6fd95c98aaa3d42ca1d561e87a96d82fc515e58898ebf8d5469f65c93e8016"}, {@device_b, @broadcast, 0x1000, "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"}, {@device_b, @device_a, 0x51, "bd71a701b0e32bba186b9993629324e2bd2b9ec31b8fb9ee81762f2e88b3afc029b27babeb372c486800e7238efe05623b8c165eb30051ca36d5115201778c5f138a3e3c7dc51fe8d80636351bccd37007"}, {@device_b, @device_a, 0xbd, "b7828c81435dcfadd4b1c3af8878614383e936295aaeb054f1b552edb893f94da3b480b52dd6ab42ecd4caf1e41fbeca0fd9db0e6dfc780a0f5a609d7d0272bec1ca12d15cd04bb4138fe74203a18c743197156650024fb3c9fcc1bfb07f824bf65f52ebb6750adf8a0c97b3a562928db1454991c78c8efcd7122a9797b34370e6c69279572bd63fa072c265698fdc49d36088907baa955929e5e1582624dbf0bd01ed263cbfefd98c65c2aab34a76f7177f0d9e55ea09ae8e4044baf0"}, {@device_a, @broadcast, 0xcc, "efb28aeecfa7fc09fd50db46620637de451f6a0a81d3b47ffd8431cdf5460da48dbf0be05c0fb2cbd74a92526c1cb0875052af9b344025d2fd60bb6954340d1e2b8ff041a15ab4cf4ab10f1761c40e96f9a521a2ffa3e68d1ee55079bc3c6339362634d52ec472d8cb74e027a8e254985d6a4cff9fa5b3cb334b5e7a4dd9feed54b80d9421eafa74946986b4e8aaa8e405a354fc146f414ee7c9dd03a809050bbf7c46ef1e7b5c3ebebe90a24ace1c56ddb4977f3989782ecb44d121a6ae86e717166605543bac65b339657c"}, {@device_a, @device_b, 0x5, "19fb6596d2"}]}, 0x139a) syz_80211_inject_frame(&(0x7f0000001a40), &(0x7f0000001a80)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x6000}, @device_a, @device_b, @initial, {0x7, 0x7}}, @a_msdu=[{@broadcast, @device_b, 0xea, "a314f50a0463cf2a9f3f9ff2d232b1efff732ad902c65093c3778f6e07bd1a3760c837972884a3357e978d764fd332f07efc1770d4502bb353a6b6d060fc64f369aba1370d57632dc9d414578b3edaa8331ecf337c9e01173112dfbe899af712f9e7c65aee42b0eebe6a7ccd9e18719f2c3565480023a9e82004fd70413e462cf23c34192af6441031af2c76518aefed829d0b0a8a42c2265e431fb06490ebb68761f58512df0f63950c03303cd83a4e0c4fd775cbb04be5f94a245a2a7224f9566b8697f379bfe6b767e17364711c4ac3494614b3801748fbba70d1ac25b87f9ac1daa8fc096106bb89"}, {@device_b, @broadcast, 0xae, "6a2ba10b9e56faabee5f9fcb52e139efe4c5bfda0af51feace411a6f9e576aa2aeeb903b31c9f33d5c9061ea523d482ac86e0c1180c30b75ded40831809b4fbc7c044f7bc185f72ba03f7be868bdb1d96acfc31c817b5623e032512be89d56427298f66aad18696716f9a11ea6aaf75a8a3083717fceb1df26e92e729a28dece04312476b69c909d64be081b8ce500dd803526da87eb00c790763fea4eeafe7baa65296269ee59bab6e8fc240c9e"}, {@broadcast, @broadcast, 0x7, "570a29e775f292"}, {@broadcast, @device_b, 0x69, "eaa3dc1a031934c90ad82a758ae52482e33312f22b72df208c34e113015ed37b2a0516e7cd8711f41b2575257116ae3f39a0a0fddd93ed0a8f76c6fe41f353d43f66b2d740ae51440d6b6fc326ff93ceeb70459c713428640dd0b729b003a9f845040cb1051612da90"}, {@device_b, @device_b, 0x5e, "6faace990949ceb06a87e25f19bcab7d7d0a9da1104f7c8ce6f2b5d407bf5a7abd20b4ca0e4b7a9f2dd3e4090627cd450ece1610b55e0ea61220b25df7aa84ba998e40e6868d006f10e89406559893f0d95be65afe5b5c73451e44a29d79"}, {@device_a, @device_a, 0x43, "162fcd68bb9e3b3fc51bfc4b7f6b5f17f15b7d4d97afd716b31a362c104a4a4ef1e455066070c05286848afc54af4b78a39f62561384f50b411988d151181721c462d1"}, {@broadcast, @device_a, 0xc9, "23877455f814a257c4af18985af34e1cc8419131525540a5006e66392f12c4cb2226cb51eb77fc059cc2d6abaa8720551369d3957663d1de095ba05c37ea1fbeb4da1a6f9ffffe3ae2da3a47bb68227f0e5e57f412542227a34eb08ba4a47ed5f991f7d27964cf8cf491e34f5d823181cfdd198a8e57a2358a3762ebf8799547f8715ec84260056b8ae06b19e9d09ad8c144a8d17aaf7efdb3dbd0906903c5fdeef4786748db253c3c2b76c1bfca634e4424683fead0390323556710dc207ebbfc19aacff939c913c0"}, {@device_a, @device_a, 0x29, "419667df0497e4b43c1d3982c01f99cf1306fbf7e56b6214aea18dc18adbc0b478da28688025a9a3fe"}]}, 0x42c) r0 = openat$vcsu(0xffffff9c, &(0x7f0000001ec0), 0x18000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_80211_inject_frame(&(0x7f0000001f00), &(0x7f0000001f40)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x4}, @broadcast}, @a_msdu=[{@device_a, @device_b, 0xf9, "8524811d15ed2d722d47420b423f6bf670279e52a86598582bb673f11e061d448f130fc59431e12df16f3b1145a418cb81aa7775f1e9392ba6cada5564e021ef42f3d456fa26078a1df9fee692fbd1827d587643b8e781957f16a08ddff977c5b785f4d546744572295145ad5ee114bd68dbd6a434a5e39dc212349004d80549b7597edece66f9e757147b70e62c6529c20b334a371e2e3fe233b958ee8ff01dae3ce1734717dc2fc4606e2ebd18b99a7c598e01022f7e471b007a77cfa4e576c3bd0c16f35e43e65b125eff2a2c10fb41f505dc54476da2f65da730e36b91c6cb8b45a1a56cf7396370f2030c08769faa021507ac79b762f9"}, {@broadcast, @broadcast, 0x4d, "792ac3da9e9a166fc3a51941703ce2fda39cdce83036ad4721c14a10849d7492c13615270cb8e294aa1cf7d899bc70f2944095afd29c40dc694e4783a4e4db1b7b9d60b3d3154d20234b647fb4"}, {@device_a, @device_b, 0x21, "ee7cd5af9141e16fad9d085d3e860d25a5a5fbc5f3438c2613550f3185b173dc95"}, {@broadcast, @device_b, 0x96, "d2c7a3ab2023c7e86f6b609d650e061f9d5d330a0ba5eecd1b654f22e35f49e74fca812fd6bf19b7a714a8c0be0e1bc7873105df21add055d7cb43ea790dea09d6a79213a59397fd0389d37f7de368130c9fc6d7fd93229e9e1f40d77d27953c88847dc2f262970ee04d187a77c5fced1780a8f2548c9c45803f67584ccf7c652070138cd97329b5ab75465106e9297f4e9897cef21e"}, {@broadcast, @device_b, 0x6f, "11e9d025e237415c89472301cdc4dbb81cb3e20729cd8e15d7f64f0518f5ce14f2658da38185b2169b78e3bcacce7c06a8ded2757a43911b561389a046edbc90d829600bd0ad7142342c0cb9ffcd05456f9aea9cbeb40fb7efa94b9da97c7e4d43f8a42a8c9bb8dc87472d38a2f502"}, {@broadcast, @device_b, 0xb6, "9ac4c337debc66c7dfb4f016d71256f8404b43280d606f8510bd5d592378de8651726cc4801568baeb39256d1e0376f69c5c0747a56d01a7481b8f5037c0bf81307b00f9d8c10474abba6b65aa24b1884bb0ceb1fa67016c27e75578bfb54b8d8f23df99f832d88ffc38a3584cc5afe42a2df9b4624a431c8c632e7b49cc93e75994e5d181ba978be24f28cfd4520919a8c76a991245c2c34fc606857c27dd2f68c89254bb88724f11c805d1bef9072974ccc4ebbc07"}]}, 0x39a) syz_80211_inject_frame(&(0x7f0000002300), &(0x7f0000002340)=@ctrl_frame=@cf_end={{}, {0x2}, @device_a, @random="4c2cdc3c520e"}, 0x10) syz_80211_inject_frame(&(0x7f0000002380)=@broadcast, &(0x7f00000023c0)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f99}, @broadcast, @broadcast, @broadcast, {0x6, 0x81}, @device_b, @value={0x4, 0x1, 0x0, 0x0, 0x2}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x1}}, @a_msdu=[{@broadcast, @device_b, 0xaa, "28a4196496a8a7c1d0430532abda2fd2092068c11f09ccdd53efc811deca69e4f7b983c3705d56d7f2b21a25b1d3cabc795554f71eab19fb88ede3171b09cab92bd125a9e4d9bd9f56cf878d36785c1efe33dc59a50f70b74c903611e063165ae0766c5b33d8d60f1b98f457a619f556b79dbe0027f9761552948e6c23a84cb7ba1c25478d4196a56860626e07dd03a3bc19b8ed4555471e1f80305ee1804984f5f541f575b63f48a41f"}, {@device_a, @device_b, 0x19, "a62a10701b0bce74fc7cc83a96a891ca8505d90b9ac5740b44"}, {@device_a, @device_b, 0xa3, "b62f29693b9ca6aebcf1dcd2a7a636b3935c869510a7fa6572f54c5017795fb5fe7fa6f903f2320b724d532797ddaf6ca73ddd7672ed2091241e681e4423e72f9feb2b7a2ab5f9528ba7cad5b47bcf100b771b741a6ec8d477790fb2187bfd6c465e22c30d0f83553b9ff7a4840f94a71c1456ddd9731419182ffd6880c268a1d42df21c21b26c1c69d1f1392c25678ce5e759f13aa450a6491e2625d97237ca5b7fff"}, {@device_a, @device_b, 0x7d, "d373a3d846d7b764b483a8ded9b5d8e718bef9ffba7a89fd4ff9d1cdccfe4006cdf4f987a898118f48b8e7c6924f314c3d97863e8720ad1cb9d4b72d45f8681f233aa9d70082643082695190e539116a0401dc502f9308aa89bf77651c8f1f81d2055f865007f0327fa93cab51476a056e4010ad6544f7b8ffb9641a7f"}, {@device_a, @broadcast, 0x29, "5db15429d20f3e7557da3a04fd8eedf49557f2ac8210fae526598c01be1afcce762de087a512a7481e"}, {@device_b, @device_b, 0xa2, "2f8ea5162b6f3ea3327379eda5bc45b252a949d14183f9d8aa6820dad4717394ceba0dea5318a7223acbdcb4b4ce822706182c23ea800ac2a5c3f425f79c44c5ccd0b21179b309702b9938bf162cfb5b0c11c553ea0379c83b48a826e9e45d47d44043d0fab03889d2896556739b530a2cdf376a13fa42676d146a029c87f8cf65afb1cdb627ff67981d7f3043e591830da5e2a7f6f6d3b0e32d9a37ce88266ed57b"}, {@device_b, @device_a, 0xe7, "1c1b5888298346e79dd7d06b2bfa536581289616ad67c31dd6ab44c95f46f52cb86852a086873f4f0e6122f2b49558cb84c52817e139ad9e74937b123ce09dfaf8480de4868efd054b74199abb6892d4bae719b88cafac5f650c59e071d9bb5ac33f48c8d77288923ee450eb8082e8d3157557c6cf0082b5643f18c59e962259fc588da8e8c6d4d764a69f40086112ebf5578ee209ba2a26bba2b92a3794422ea4f2f144af1fa022523e1757777ce62d2ed98136115334309ac32f848ad506027e763481a7cae9f7f3e19d0fdf3b757fc0cd31ee9dbc334c0e6824450e35d294bdab0942415d1e"}, {@broadcast, @broadcast, 0x80, "a306e34d66f47e04d9217e8ae12957c308cdd0680b7a3fad999e5bdaa342491f2f59569e80d0dc31075dfcbf84f08e652ab4ceee7f7890e87b34c25ddd7938c2e7ef8d3d48b00a884d1a8f805a9eba79f21d7878a07ffcce0e7fa60794b6b5bb13e11f5f28cb763616743716b6791a770b9826dc6570d930f2cc3c7ee7de5e3f"}]}, 0x4b4) syz_80211_inject_frame(&(0x7f0000002880)=@broadcast, &(0x7f00000028c0)=@ctrl_frame=@bar={{}, {0x9}, @broadcast, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x0, {0x0, 0x7a9}, "545c7b3c5d8bc29b"}]}}, 0x1e) clock_gettime(0x0, &(0x7f0000004a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002900)=""/116, 0x74}, {&(0x7f0000002980)=""/80, 0x50}, {&(0x7f0000002a00)=""/182, 0xb6}], 0x3, &(0x7f0000002b00)=""/110, 0x6e}, 0xfff}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002b80)=""/86, 0x56}, {&(0x7f0000002c00)=""/120, 0x78}, {&(0x7f0000002c80)=""/62, 0x3e}, {&(0x7f0000002cc0)=""/28, 0x1c}], 0x4}, 0x1}, {{&(0x7f0000002d40)=@isdn, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/101, 0x65}, {&(0x7f0000002e40)=""/252, 0xfc}, {&(0x7f0000002f40)=""/227, 0xe3}], 0x3}, 0x9}, {{&(0x7f0000003080)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003100)=""/7, 0x7}, {&(0x7f0000003140)=""/39, 0x27}, {&(0x7f0000003180)=""/37, 0x25}, {&(0x7f00000031c0)=""/92, 0x5c}, {&(0x7f0000003240)=""/147, 0x93}, {&(0x7f0000003300)=""/44, 0x2c}, {&(0x7f0000003340)=""/140, 0x8c}, {&(0x7f0000003400)=""/121, 0x79}, {&(0x7f0000003480)=""/245, 0xf5}], 0x9, &(0x7f0000003600)=""/59, 0x3b}, 0x81}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000003640)=""/40, 0x28}, {&(0x7f0000003680)=""/25, 0x19}, {&(0x7f00000036c0)=""/151, 0x97}, {&(0x7f0000003780)=""/220, 0xdc}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/253, 0xfd}], 0x6}, 0x3}], 0x5, 0x10100, &(0x7f0000004ac0)={r1, r2+60000000}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000004bc0)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b40)={0x38, 0x1409, 0x2, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8b5}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000004c00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) shutdown(r3, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000004c40)=0x2) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000004cc0)={&(0x7f0000004c80)=""/60, 0x1001000, 0x0, 0x7, 0x3}, 0x1c) unshare(0x20000) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000004d00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r4, &(0x7f0000004f80)={0x18, &(0x7f0000004d80)={0x40, 0x21, 0x9b, {0x9b, 0x9, "045a958f0f731661efd1eff24094179df6098b1e092dc90e83f36fbb944316a6697b288441cf0f3952077bc65bf5c03cd55bfac55062f06bd28a1d09289396beda035fcb8d50c7a3e6050ff95d1cf9b5e11d5a76fa1268820b24dee720cd7058ca4f07ebf8e737d0d3c78fec2d8d4d83724a1db18cb49c2282752aac183479ebb8f516ab3a9bf91f02fa7c1d66c79a7c9b6b13a86345113e06"}}, &(0x7f0000004e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000004e80)={0x0, 0xf, 0x57, {0x5, 0xf, 0x57, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0f792354812b90739775d8f550c60112"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc0, 0x9f, 0xb9, 0x9, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "0be3e9c63fe6e12c513b1fe336f6cddb"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x9, 0x0, 0x8, [0xc00f, 0xffc000, 0xc0, 0xff00cf]}]}}, &(0x7f0000004f00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x10, 0x0, 0x2, 'C7mq', "c79cc7bc"}}, &(0x7f0000004f40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x18, 0x3, 0x29, 0x3, 0xff}}}, &(0x7f00000053c0)={0x44, &(0x7f0000004fc0)={0x40, 0x11, 0x1c, "6147926f77aced2f5b0f6b86b85f9f7237392daa088683659505cfb0"}, &(0x7f0000005000)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000005040)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000005080)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000050c0)={0x20, 0x0, 0x8, {0x1320, 0x80, [0xff0]}}, &(0x7f0000005100)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000005140)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000005180)={0x40, 0xb, 0x2, "3ae6"}, &(0x7f00000051c0)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000005200)={0x40, 0x13, 0x6, @remote}, &(0x7f0000005240)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, &(0x7f0000005280)={0x40, 0x19, 0x2, "1c9c"}, &(0x7f00000052c0)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000005300)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000005340)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000005380)={0x40, 0x21, 0x1, 0x1}}) syz_80211_inject_frame(&(0x7f0000005440)=@device_b, &(0x7f0000005480)=@ctrl_frame=@ack={{}, {0xb}, @broadcast}, 0xa) syz_80211_inject_frame(&(0x7f00000054c0), &(0x7f0000005500)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xd}, @device_a, @broadcast, @from_mac=@device_b, {0x8, 0x4}}, 0x1, 0x2, 0x4b, @void, [{0xdd, 0x69, "2ef8533af68c5428b86ac13e2426924056572d25f1fc3da8b0e34a0df3b1d7cfc89dc1dffdb8d825c998e4b67a1e590ea26c29ae4cdf1abc2876d998e3701d744d6112255ef01bf9e137207f2efb632eb7208024ba57d84e4d586473e0382a845f6a6972c3e58fe3c8"}, {0xdd, 0x71, "bf8cf50666bc25f3089d99a76babaa2fa737e677501c3c6abbe2801fc702a6ae5ca6c92d2e32cb6a5c82fa9a0ec949fc4881b37c7848bac7bc3d8e925cce5fab628eafa410e21e74174bf792883ef30affb2cacfbd1ae2584a680b969e7bf44312a38d8559acdd93dfa0049de0a863ae55"}, {0xdd, 0x7c, "fbde8cecb6bb548169c4aa596b0b4a29085c2941c51409802cbc5559c401b8c18dd5fd69b3fb6cb27b60264d503da312b85cf00f19a1c18fe6508c8747aa47a19522d1602997257e0144ceba81fda75e3306508aabadfc0f43c05df9179b89d2aa893d9c71c373220f8abd6b075a1d0aa4a8707eac1650ba6b19704e"}, {0xdd, 0x4d, "e6944d254fd41584484e3d9a899513df45cf14ba09166fc36ed268a1f891d40f5f3698eb9f462a497414efe6b7060b46407a3a646743eea845392112f13d354856294373ffee29a5c18bea34a9"}, {0xdd, 0xfe, "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"}, {0xdd, 0x24, "77a9672e56c678f219ef5d15e25c017a863c2c02eac458f0f571e599078ce81a606957ec"}, {0xdd, 0xd1, "fbdee8f2cd921ac0a86c5ef7ee5f287d6b0df6c7af899ddbf50f326724fca6e76c5b10f60370487282a9b28de8739c42fd09b76e89ad56f8d667c1be757c69c4bb6998750cdb6b74474ba35ed7f47c9ae32070d31525c196e0740519d94465d9444596d06650caaf3a8090de1fcf44a4654f3e0e3e8bc6800064e1632622858b20ba77bddcef538b106d30b43303d902b01d32cd97b89b9bf3a8f408fc08cc8f2658b1b49f3fbc5e0cfa0f219dae7190be7afa53cb8be1cc15ae331a9f65befed84c64af36b7a1be8d3b08fcb8faf283f5"}, {0xdd, 0x45, "8f25452e243c120c0cd8a81953a3eda8ca766d88f84d9df83c43db0ec62fb478f328c1a2d08f41454371ad332a58966a766e17eb1eb34b089d16237180eac59ff9d8d95b3b"}, {0xdd, 0x28, "3add076db78c1fe705e5d2f304388332554ea268735690b928808b65453be7b6c35c9bbe9f0fe232"}, {0xdd, 0x1a, "fa3b3a4afe21390c9d017e8ef3aa5633bb96d37e2006359887eb"}]}, 0x44f) syz_80211_inject_frame(&(0x7f0000005980)=@device_b, &(0x7f00000059c0)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x9}, @broadcast, @device_b, @initial, {0xb, 0xffd}}, @a_msdu=[{@device_b, @device_b, 0x21, "b301a93f63c378a29768396c69c3476ae442c07e5f62fe642211c0abfc25734d7a"}, {@device_a, @device_b, 0xe9, "83370f4196aa59bc203c64524a003939f1d9bb1069082faf8f75432451175f91321c2079160c18b03f80fa821c86ee46c6b9c0b4444e0011395f7a42b3610b69856183f9073206393ae177b3816251c9b77efa8387fefc955c6d728fc81d586dfdc943931e99c591ea112d5fd4a649d26bada0b1891bc7948163b3a59b848106ec8167e9a088b58cb311f57c3a91537b5ba49137d81ea5077ce9715c86c517db27f5cb6c802eb20495e2c523dd459ee1ae3044627d6c0f0d53b03404f6aecedbd4598e943a89116d87b497ff0a0b8a27b2e508378d3f1d1019c801d47bc9f5c1cff074d2b1a2d22c9e"}, {@device_a, @device_a, 0xd9, "c23f1fd7c9927cdcce12b0af5a17d0340d6fb9dff2dc83f15565114b63828b0596a3834d649b36641c36797797fa40429e8c4aa7218def13420bdfcdc142daddedb3523926241d82e29c3e09f1349ac1d9e5fa40d5db5e63b6dfbf8c34b346ce952d2117b97b235ec531de869e90ad6a2320de04c07bb37e7982f29206c701b40e4c7da910d54f6cc6b21834d7b9f7d6422e412008a5ddf4642a8ec435dca7cd5d2652952ec6aa5b4dbbdfe54a7b6cea527d712ea7ad2f4dfb8f25f141896b345f2052bef8bb0549889c6a90b4c9ca08b039a21a316299b01f"}, {@device_b, @device_b, 0xe3, "695c8582131316bb1051f1d548b17c6ae79d6a6b06c561fce32a719adc1f8fa8bcac2bae848b954d117a084a2abd291241bcfac5613dfc154958a37dc6b2eeb0e07c2d8d3817ba8cb9c85361d3623ac1c1371d56e1c7ce0f76708fb9cc66053f3759c2bc22d860a2ddb4265bc08820ee7444831d5076cbdbbe8d56ee4c5f8573d5775b403847f9a5f8ec1e0eb20433d9ae8269517eb15927fb12cdb781511bebf0dbaea45c11b7c0d0e4bcad281167d52b1819149f7f99ca8aeb5c8477f1982f59d57ec488f4fbe1bcea2cf57663ed3e789008d9c6abb41827cddc6287f5c15cfdfdce"}, {@broadcast, @broadcast, 0x2b, "342e4a91ec9364d152898ccc1e1b018bd99f0e19867bbd149e715182a450bbe3ebb578b356e6188905e107"}, {@device_a, @broadcast, 0x1000, "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"}]}, 0x136e) r5 = syz_usb_connect$uac1(0x1, 0x115, &(0x7f0000006d40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x9f, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x103, 0x3, 0x1, 0x9, 0x160, 0x53, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xff}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x6, 0x3, '4$X.'}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x0, "b77e7323"}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x7, "ccde57"}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0xf, 0x5}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x7, "7806a8af"}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x3, 0x1, [0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x87, 0x2, 0x4, 0xb, "e5b312"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x10, 0x4, 0x2, 0x9, "838fa0b5"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x400, 0x15, "e677bc"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x4, 0x1, 0x6}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x26, 0x4, 0x5, 0x1, "c380af56d6eb34e1f8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x1, 0x4, {0x7, 0x25, 0x1, 0x80, 0x7b, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x4, 0x9, 0x7, "", "18"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x41, 0x1, 0x3, 0x3, "a353d1"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x3, 0x41, 0xd9, "c2bae210a326cd"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x2, 0x61, 0x0, "dafb64710bc5dd9d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x97, 0x0, {0x7, 0x25, 0x1, 0x2, 0x80, 0x6}}}}}}}]}}, &(0x7f00000071c0)={0xa, &(0x7f0000006e80)={0xa, 0x6, 0x300, 0x0, 0x5, 0x4, 0x20, 0x3}, 0x12c, &(0x7f0000006ec0)={0x5, 0xf, 0x12c, 0x5, [@ptm_cap={0x3}, @generic={0x83, 0x10, 0xb, "17ea12ea3991c88c12af7291cff3cdfa6b9ea20d4fe76832f20f1678d140b4a3f3d1cda724aab23bc8815e70c8adb9e608756fb04ec5093f2ec1587e80a5ee98e8bcdb16f057cc79c8c97484ac4f6779b7d56596b22233a1f12f83346ecb55a44eb0e5351e1fd4026d3da97d051c5c9c882b7173184d0bd8026d94ebc4e57182"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x7, 0xf, 0x1, [0x1f80, 0xc007]}, @generic={0x63, 0x10, 0x4, "fae38bd6095de9e6571fb507a2a949cec2a5a94c6b2a4f9e9623e43b0bbb6f64f54d387d9e6836900bfa1cf93e0f804334cbf94a2b3d719bf333b6d5511eeec21ae73106168742f5fa5ef540061ede494ae68e184acd1784f89f369a32d4aa62"}, @generic={0x2a, 0x10, 0x3, "840c099f98890d746ed72a151745515c2556dc62353990d25cf21e94f935a1b583d77420d7fcb7"}]}, 0x5, [{0x4, &(0x7f0000007000)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000007040)=@lang_id={0x4, 0x3, 0x2001}}, {0x93, &(0x7f0000007080)=@string={0x93, 0x3, "5ba53d64ecb75ea61ae8419c594b675f2656044a8bd88a70f6dff2061f3699f9e6fea66474a5ade13c01c16c0cf7f6770b2ffd9e056d128ab225f62754a3af9413448e9bcc97bb28e4298c0aa4f0e693c66243574b621dbd1e72a6ab7569362119cfd375b7780b799acd80dc840eb5a78f332feebd0ca176bdcf445664a6ffd6c495702106e8e8b113bf6ce6ce76517599"}}, {0x2c, &(0x7f0000007140)=@string={0x2c, 0x3, "778b4c022630e9c7121eefd77b9813fa45e1c6ac7f89972c1a533425ac0ea353b39eb0a1c9eb1ddfec4a"}}, {0x4, &(0x7f0000007180)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io$uac1(r5, &(0x7f00000073c0)={0xc, &(0x7f0000007200)={0x20, 0x7, 0x4c, {0x4c, 0xb7ad55ff2cffd36e, "850c610395eb8ac0d2f3baa7309b8764c3bde423d6780404bddb212b3bf8c2602925e3ed63d0999cb6fcc90cee8c8e369fdad4ca1ae3518d2da22bd25611dc07f906460e4dda50b2d21c"}}, &(0x7f0000007280)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}}, &(0x7f0000007680)={0x24, &(0x7f0000007400)={0x20, 0xf, 0x86, "52118568e20537ecf06448c73cbc89a9cbe70a522c3ab579b41109c8cc5abd1feb3af8468a93d3deaaa439f2e81b5f0964c69d217407f5388508edb43bccc7f2771c8427001aeeeb5652231bcba4940ccc5a46dfdce668e7dec916b0551f71314a1b1d4d58a0b260772f5533a06c851bad7ec0fd02337d23bbbde7829301e32afe0adff640b4"}, &(0x7f00000074c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000007500)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000007540)={0x20, 0x81, 0x2, "f0ea"}, &(0x7f0000007580)={0x20, 0x82, 0x3, "c88caa"}, &(0x7f00000075c0)={0x20, 0x83, 0x1, "83"}, &(0x7f0000007600)={0x20, 0x84, 0x4, "4616ffc7"}, &(0x7f0000007640)={0x20, 0x85, 0x3, "aa6012"}}) syz_80211_inject_frame(&(0x7f00000076c0)=@device_b, &(0x7f0000007700)=@ctrl_frame=@ack={{}, {0x2}, @broadcast}, 0xa) syz_80211_inject_frame(&(0x7f0000007740)=@device_b, &(0x7f0000007780)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xd9}, @from_mac=@device_b, @device_b, @broadcast, {0x9, 0x8}, "", @void, @value=@ver_80211n={0x0, 0x81, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x6c5) unshare(0x10000) 3.430589266s ago: executing program 2 (id=2725): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000500), 0x0, 0x20000001) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000b40), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000040)={0x40, 0x32315659, 0x500, 0x438, 0x3, @stepwise={{0x6, 0xf7}, {0x3, 0x10001}, {0xdbc6, 0xe34}}}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2, 0x0, 0xffffffff], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r5, 0x5501) preadv(r4, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) io_setup(0xa, 0x0) io_setup(0xff, &(0x7f0000002c40)) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, 0x0, 0x0, 0x8910, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 2.985653673s ago: executing program 3 (id=2726): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000001c0)="4888", 0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r4, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5, 0x0, 0x0, r6}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2.467932081s ago: executing program 2 (id=2727): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3f, {0x80000001}}) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000300)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x4d16], [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x6, '\x00', {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [], "89416bb3f62b5a41"}}}}}}}, 0x0) 1.901925167s ago: executing program 2 (id=2728): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000400)={0x0, "f2e325f519c4802404ab2d269ac51b8c18b8e41016f7c189a0936af11fcd1e27", 0x0, 0x506, 0x3, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x7e, 0x8, 0x10, @loopback, @loopback={0x0, 0xffff888101827518}, 0x20, 0x8000, 0x5, 0xffffffff}}) 1.687707815s ago: executing program 2 (id=2729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc0000000000000000000000fc000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) 1.599511798s ago: executing program 0 (id=2730): io_uring_setup(0x775d, &(0x7f00000001c0)={0x0, 0x35bc, 0x40, 0x3, 0x19f}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000206010200000000000000000100000005fa0300000000000900020073797a3100"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000200", "f4bd0007003219002bfd000000000000000000af1e4ccfb7b3cad800000800", [0x0, 0x2000000000001]}}) 811.525246ms ago: executing program 0 (id=2731): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) connect$unix(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x7, r3}, 0x38) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000040)=""/4092, 0xffc) 702.659902ms ago: executing program 4 (id=2732): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r6 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f00000013c0)='./file0\x00', 0x420, &(0x7f0000001400)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions}, {@allow_other}], [{@subj_role={'subj_role', 0x3d, '\xff\xff'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/proc/stat\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '-/]'}}, {@flag='lazytime'}, {@smackfsroot={'smackfsroot', 0x3d, '\xff\xff'}}, {@appraise}]}}, 0x0, 0x0, &(0x7f0000001600)="fc4fa211b4ab1356408d202cee287ef09b1fc772e535458d7ee7e6c65f90ec63a8abf69f0f8102197e2d5801aac7bd690c74e37dd2ad3505a3bde40042f6fdd2ebecf7aa834a5b69ccbf2919ec0b7b4ec5731f00ac1365f00657108853") mkdirat(r6, &(0x7f0000001680)='./file0\x00', 0x46) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) chown(&(0x7f0000000000)='./file0\x00', 0x0, r9) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0xffff7fff, 0x7fffffff, 0x32314d54, 0x55595659, 0x3, [{0x0, 0x7fffffff}, {0x67, 0xc0000000}, {0x86, 0x101}, {0xa, 0x3ff}, {0x101, 0x6}, {0x6, 0x579}, {0x5, 0xb}, {0x7, 0x9}], 0x4, 0x6c, 0x3, 0x1, 0x3}}) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_GET_FROZEN_INFO(r10, 0xc00c620f, &(0x7f00000001c0)) sendmsg$nl_xfrm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=@acquire={0x168, 0x17, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in=@dev, {@in=@broadcast, @in=@multicast2}, {{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0x6, 0xfff}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x33}, 0x2, @in=@multicast2}]}]}, 0x168}}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r10, 0x4038ae7a, &(0x7f0000000180)={0xeb, 0x148, &(0x7f00000003c0)="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", &(0x7f0000000080)="48214b3aa4c12145ed94cbc185aeebd69c0426117da0c8939e72ed3673bc822eb27cfb3e667690fc2c8287a6230aef5cfab583f4208ffab21e4898b51055475360cd2ad455dc98abc947fba62e0a6a3cc0641d17e561064b28cbe1a9e1078bac69402999cb56afe7a8dffb5b2483f9813a1c639df67a6d975ca91e080451d449d3d6f17a94b7e89a56db504344281c507971505234876487a16ae87f1e10e4d0b399a827305983dd3d6b972c1f5adaf0c6d405791acfd2d4b9e7f4f9224853b97cbd25490f", 0x1000, 0xc5}) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000010401040000000000000000050000000800044000002044"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) 427.505121ms ago: executing program 2 (id=2733): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@any, 0xffffffff}, @any, 0x7, 0x4, 0x40000, 0x7ffffffffffffffe, 0x7ffffffffffffffc, 0x0, 0x9}) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$inet6(0x10, 0x6, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x2, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="5b8d7acda0b2", 0x0, 0x1, 0x1, 0x0, 0x0}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) socket(0x1e, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) unshare(0x22020600) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x3}, 0x0, 0x0) 0s ago: executing program 1 (id=2734): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000100003040161", @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) kernel console output (not intermixed with test programs): d [ 832.988273][ T5893] usb 3-1: USB disconnect, device number 11 [ 833.310788][ T2154] usb 5-1: config 0 has an invalid descriptor of length 151, skipping remainder of the config [ 833.335396][ T2154] usb 5-1: config 0 has no interfaces? [ 833.341075][ T2154] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 833.623214][ T2154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.082889][ T2154] usb 5-1: config 0 descriptor?? [ 834.122245][ T5893] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 834.282101][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 834.302638][ T5893] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 834.310990][ T5893] usb 3-1: config 0 has no interface number 0 [ 834.317380][ T5893] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 834.332098][ T5893] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 834.340580][T14047] netlink: 'syz.4.2336': attribute type 13 has an invalid length. [ 834.343992][ T5893] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 834.363369][ T5893] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 834.451379][ T5893] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 834.971139][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.047365][ T5893] usb 3-1: Product: syz [ 835.069882][ T5893] usb 3-1: Manufacturer: syz [ 835.089341][ T5893] usb 3-1: SerialNumber: syz [ 835.108901][ T6550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.119538][ T2154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.132232][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.142703][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.153018][ T5893] usb 3-1: config 0 descriptor?? [ 835.159595][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.173043][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.184314][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.192706][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.386052][T14048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.438182][ T5893] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 835.779532][T14047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 835.838745][T14070] netlink: 'syz.2.2337': attribute type 10 has an invalid length. [ 835.947787][ C0] iowarrior 3-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 835.958838][ T5893] usb 3-1: USB disconnect, device number 12 [ 836.080923][ T9] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 836.190777][T14072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2345'. [ 836.230615][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.289983][T14074] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 836.303648][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.325115][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.353892][ T9] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 836.373378][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.417272][ T9] usb 1-1: config 0 descriptor?? [ 836.578326][ T43] usb 5-1: USB disconnect, device number 8 [ 836.632194][ T5893] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 836.688970][T14078] ALSA: seq fatal error: cannot create timer (-22) [ 836.772622][T14080] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2347'. [ 836.792266][T14080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2347'. [ 836.832485][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 836.849333][ T5893] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 836.868860][ T9] hid-steam 0003:28DE:1142.0066: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 836.905085][ T5893] usb 4-1: config 0 has no interface number 0 [ 836.926177][ T5893] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 836.952704][ T5893] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 836.991630][ T5893] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 837.000991][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.001759][ T9] hid-steam 0003:28DE:1142.0066: Steam wireless receiver connected [ 837.042317][ T5893] usb 4-1: Product: syz [ 837.046578][ T5893] usb 4-1: Manufacturer: syz [ 837.051228][ T5893] usb 4-1: SerialNumber: syz [ 837.080147][ T5893] usb 4-1: config 0 descriptor?? [ 837.106721][T14074] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 837.136905][ T9] hid-steam 0003:28DE:1142.0067: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 837.137166][T14074] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 837.188099][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2349'. [ 837.292002][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 837.452224][T12401] usb 1-1: USB disconnect, device number 127 [ 837.467402][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 837.476370][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 837.516533][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2351'. [ 837.520709][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 837.537868][ T5893] asix 4-1:0.251: probe with driver asix failed with error -71 [ 837.547685][T12401] hid-steam 0003:28DE:1142.0066: Steam wireless receiver disconnected [ 837.559047][T14086] fido_id[14086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 837.605988][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.620996][ T5893] usb 4-1: USB disconnect, device number 27 [ 837.675050][ T43] usb 3-1: Product: syz [ 837.854021][ T43] usb 3-1: Manufacturer: syz [ 837.858748][ T43] usb 3-1: SerialNumber: syz [ 837.917417][ T43] usb 3-1: config 0 descriptor?? [ 837.954554][ T43] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 837.997257][ T43] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 838.246551][T14108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2352'. [ 838.394676][T14083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.441268][T14083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.745591][ T43] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 839.150185][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2356'. [ 839.184942][ T43] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 839.193608][ T43] em28xx 3-1:0.0: board has no eeprom [ 840.400862][T12401] net_ratelimit: 3 callbacks suppressed [ 840.400947][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.415623][T14083] em28xx 3-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 840.472496][ T43] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 840.481326][ T43] em28xx 3-1:0.0: dvb set to bulk mode. [ 840.490563][T12401] em28xx 3-1:0.0: Binding DVB extension [ 840.526703][ T43] usb 3-1: USB disconnect, device number 13 [ 840.666134][ T43] em28xx 3-1:0.0: Disconnecting em28xx [ 840.777208][T12401] em28xx 3-1:0.0: Registering input extension [ 840.798131][ T43] em28xx 3-1:0.0: Closing input extension [ 840.854621][ T43] em28xx 3-1:0.0: Freeing device [ 840.874938][ T6580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.890766][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.905334][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.436679][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.485613][T14043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.549950][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2362'. [ 841.581570][T14184] lo: entered promiscuous mode [ 841.618001][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2361'. [ 841.780261][T14116] delete_channel: no stack [ 842.131008][T14194] netlink: 'syz.4.2365': attribute type 10 has an invalid length. [ 842.462186][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.501082][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 842.501105][ T31] audit: type=1326 audit(1748566740.050:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.3.2366" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x0 [ 842.782181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.792095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.807873][ T6550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.819180][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.507372][T14213] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2370'. [ 844.427963][T14223] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967291 (274877906624 ns) > initial count (30400 ns). Using initial count to start timer. [ 844.607516][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 845.274411][T14289] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 845.433913][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2380'. [ 845.582554][ T43] net_ratelimit: 5 callbacks suppressed [ 845.582580][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.601874][ T5893] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 845.765054][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.788209][T14296] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2381'. [ 845.816735][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.849075][ T5893] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 845.901426][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.962348][ T5893] usb 5-1: config 0 descriptor?? [ 846.393434][ T5893] hid-steam 0003:28DE:1142.0068: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 846.512074][ T5893] hid-steam 0003:28DE:1142.0068: Steam wireless receiver connected [ 846.541307][ T5893] hid-steam 0003:28DE:1142.0069: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 846.625089][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.633402][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.643369][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.654254][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.956275][ T5893] usb 5-1: USB disconnect, device number 9 [ 847.056860][ T5893] hid-steam 0003:28DE:1142.0068: Steam wireless receiver disconnected [ 847.342025][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 847.512398][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 847.541044][ T43] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 847.553934][ T43] usb 1-1: config 0 has no interface number 0 [ 847.562891][ T43] usb 1-1: config 0 interface 184 has no altsetting 0 [ 847.582658][ T43] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 847.592213][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.641844][ T43] usb 1-1: Product: syz [ 847.641877][ T43] usb 1-1: Manufacturer: syz [ 847.641897][ T43] usb 1-1: SerialNumber: syz [ 847.655884][ T43] usb 1-1: config 0 descriptor?? [ 847.663976][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.765017][ T43] smsc75xx v1.0.0 [ 847.769292][ T43] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 847.780554][ T43] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 848.395822][T14313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2386'. [ 848.605526][T14318] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 848.635692][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2388'. [ 848.661876][ T5893] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 848.702747][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.892389][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 849.072287][ T5893] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 849.084743][ T5893] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 849.108791][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 849.213441][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 849.233536][ T5893] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.417360][ T5893] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 849.557600][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.691511][T12401] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 849.742332][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.831941][ T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 850.041427][ T5893] usb 2-1: usb_control_msg returned -32 [ 850.056137][ T5893] usbtmc 2-1:16.0: can't read capabilities [ 850.122868][T12401] usb 5-1: Using ep0 maxpacket: 32 [ 850.124913][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 850.141319][T12401] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 850.148132][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.166901][T12401] usb 5-1: config 0 has no interface number 0 [ 850.176675][T12401] usb 5-1: config 0 interface 184 has no altsetting 0 [ 850.195082][T12401] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 850.216280][T12401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.231360][T12401] usb 5-1: Product: syz [ 850.242658][T12401] usb 5-1: Manufacturer: syz [ 850.251575][T12401] usb 5-1: SerialNumber: syz [ 850.291720][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 850.294318][T12401] usb 5-1: config 0 descriptor?? [ 850.315430][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 850.326263][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.334672][ T9] usb 4-1: Product: syz [ 850.348145][ T9] usb 4-1: Manufacturer: syz [ 850.358793][ T9] usb 4-1: SerialNumber: syz [ 850.442430][T12401] smsc75xx v1.0.0 [ 850.446168][T12401] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 850.490628][ T5893] usb 1-1: USB disconnect, device number 2 [ 850.560429][T12401] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 850.782641][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.814264][ T9] usb 4-1: 0:2 : does not exist [ 850.874335][ T9] usb 4-1: USB disconnect, device number 28 [ 851.178546][T14335] netlink: 'syz.0.2393': attribute type 10 has an invalid length. [ 851.311169][T12401] usb 2-1: USB disconnect, device number 126 [ 851.396318][T14340] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 851.822302][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.862058][T12401] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 852.044365][T12401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.130921][ T9] usb 5-1: USB disconnect, device number 10 [ 852.203887][T12401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.226041][T12401] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 852.245888][T12401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.255939][T14353] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2399'. [ 852.264083][T12401] usb 2-1: config 0 descriptor?? [ 852.664131][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 853.069927][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.111810][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 853.117787][T12401] hid-steam 0003:28DE:1142.006A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 853.119277][ T9] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 853.149503][ T9] usb 5-1: config 0 has no interface number 0 [ 853.180036][ T9] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 853.208585][T12401] hid-steam 0003:28DE:1142.006A: Steam wireless receiver connected [ 853.221958][ T9] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 853.252459][ T9] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 853.275386][T12401] hid-steam 0003:28DE:1142.006B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 853.291268][ T9] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.330746][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 853.350736][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.387843][ T9] usb 5-1: Product: syz [ 853.396776][ T9] usb 5-1: Manufacturer: syz [ 853.411363][ T9] usb 5-1: SerialNumber: syz [ 853.437303][ T9] usb 5-1: config 0 descriptor?? [ 853.454265][ T5815] usb 2-1: USB disconnect, device number 127 [ 853.613749][ T5815] hid-steam 0003:28DE:1142.006A: Steam wireless receiver disconnected [ 853.750281][ T9] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 854.007291][T14369] fido_id[14369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 854.142371][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.153967][T14356] netlink: 'syz.4.2400': attribute type 10 has an invalid length. [ 854.285620][T14356] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.337750][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2404'. [ 854.355836][T14356] bond0: (slave team0): Enslaving as an active interface with an up link [ 854.469731][ T5815] usb 5-1: USB disconnect, device number 11 [ 855.115485][ T5815] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 855.648693][T14361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.013064][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.204751][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.236478][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.314945][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.351782][ T5815] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 856.409106][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.432246][T12401] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 856.478748][ T5815] usb 4-1: config 0 descriptor?? [ 856.584240][T12401] usb 1-1: device descriptor read/64, error -71 [ 856.731588][ T5815] usbhid 4-1:0.0: can't add hid device: -71 [ 856.763002][ T5815] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 856.811887][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 856.851865][T12401] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 856.865562][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.886874][ T5815] usb 4-1: USB disconnect, device number 29 [ 857.009041][T12401] usb 1-1: device descriptor read/64, error -71 [ 857.027626][ T9] usb 2-1: device descriptor read/64, error -71 [ 857.104514][T14394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2411'. [ 857.124122][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.232788][T12401] usb usb1-port1: attempt power cycle [ 857.281945][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 857.442780][ T9] usb 2-1: device descriptor read/64, error -71 [ 857.552795][ T9] usb usb2-port1: attempt power cycle [ 857.602008][T12401] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 857.622150][ T5893] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 857.656738][T12401] usb 1-1: device descriptor read/8, error -71 [ 857.784062][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.799254][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.810047][ T5893] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 857.820519][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.837117][ T5893] usb 5-1: config 0 descriptor?? [ 857.881897][ T5815] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 857.901864][T12401] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 857.911844][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 857.925038][T12401] usb 1-1: device descriptor read/8, error -71 [ 857.932620][ T9] usb 2-1: device descriptor read/8, error -71 [ 858.035073][ T5815] usb 4-1: config 0 has no interfaces? [ 858.052466][T12401] usb usb1-port1: unable to enumerate USB device [ 858.074419][ T5815] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 858.155231][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.163834][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.172989][ T5815] usb 4-1: Product: syz [ 858.177250][ T5815] usb 4-1: Manufacturer: syz [ 858.187512][ T5815] usb 4-1: SerialNumber: syz [ 858.192342][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 858.220927][ T5815] usb 4-1: config 0 descriptor?? [ 858.234845][ T9] usb 2-1: device descriptor read/8, error -71 [ 858.259139][ T5893] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 858.272829][ T5893] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 858.292405][ T5893] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 858.313866][ T5893] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 858.320941][ T5893] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 858.336919][ T5893] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 858.344802][ T5893] cp2112 0003:10C4:EA90.006C: unknown main item tag 0x0 [ 858.355473][ T5893] cp2112 0003:10C4:EA90.006C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 858.362319][ T9] usb usb2-port1: unable to enumerate USB device [ 858.454317][ T5893] cp2112 0003:10C4:EA90.006C: Part Number: 0x82 Device Version: 0x01 [ 858.463725][ T5932] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 858.523375][T14403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.546793][T14403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.632010][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 858.648604][T14409] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2418'. [ 858.659521][ T5893] cp2112 0003:10C4:EA90.006C: error requesting SMBus config [ 858.672875][ T5932] usb 3-1: unable to get BOS descriptor or descriptor too short [ 858.689591][ T5893] cp2112 0003:10C4:EA90.006C: probe with driver cp2112 failed with error -5 [ 858.700291][ T5932] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 858.714670][ T5932] usb 3-1: can't read configurations, error -71 [ 859.183023][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.192065][ T5815] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 860.222332][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.352056][ T5815] usb 2-1: Using ep0 maxpacket: 16 [ 860.368842][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 860.403560][ T5815] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 860.407990][ T43] usb 5-1: USB disconnect, device number 12 [ 860.413187][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.413224][ T5815] usb 2-1: Product: syz [ 860.413243][ T5815] usb 2-1: Manufacturer: syz [ 860.413261][ T5815] usb 2-1: SerialNumber: syz [ 860.450498][ T5815] usb 2-1: config 0 descriptor?? [ 860.593372][ T5815] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 860.619593][ T5815] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 860.651220][T14446] loop6: detected capacity change from 0 to 7 [ 860.679049][T14446] Dev loop6: unable to read RDB block 7 [ 860.686541][ T9] usb 4-1: USB disconnect, device number 30 [ 860.712113][T14446] loop6: AHDI p1 p2 [ 860.724331][T14446] loop6: partition table partially beyond EOD, truncated [ 860.741040][T14446] loop6: p1 start 926365495 is beyond EOD, truncated [ 860.828918][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2429'. [ 861.120075][ T5815] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 861.263296][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.527136][T14454] netlink: 392 bytes leftover after parsing attributes in process `syz.4.2432'. [ 861.581812][ T5815] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 861.589886][ T5815] em28xx 2-1:0.0: board has no eeprom [ 861.671856][ T5815] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 861.708900][ T5815] em28xx 2-1:0.0: dvb set to bulk mode. [ 861.738912][ T9] em28xx 2-1:0.0: Binding DVB extension [ 861.766733][ T5815] usb 2-1: USB disconnect, device number 6 [ 861.787271][T14458] vimc link validate: Sensor B:src:16x16 (0x33424752, 0, 0, 0, 0) Raw Capture 1:snk:3318x2160 (0x33424752, 8, 0, 0, 0) [ 861.797536][ T5815] em28xx 2-1:0.0: Disconnecting em28xx [ 861.962637][ T9] em28xx 2-1:0.0: Registering input extension [ 861.978643][ T5815] em28xx 2-1:0.0: Closing input extension [ 862.024541][ T5815] em28xx 2-1:0.0: Freeing device [ 862.302982][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.410688][T14469] input: syz0 as /devices/virtual/input/input53 [ 862.470220][T14469] hub 9-0:1.0: USB hub found [ 862.479051][T14469] hub 9-0:1.0: 1 port detected [ 863.363939][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.054469][T14485] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 864.382294][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.802138][T14506] Cannot find add_set index 0 as target [ 865.026831][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 865.112284][ T43] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 865.276679][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 865.302005][ T43] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 865.311935][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 865.416809][ T43] usb 3-1: config 0 has no interface number 0 [ 865.423708][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.434530][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.440422][ T43] usb 3-1: config 0 interface 184 has no altsetting 0 [ 865.484129][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 865.731880][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 865.734589][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.744553][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.810185][ T9] usb 5-1: config 0 descriptor?? [ 865.828937][ T43] usb 3-1: Product: syz [ 865.834760][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.859653][ T43] usb 3-1: Manufacturer: syz [ 865.890724][ T43] usb 3-1: SerialNumber: syz [ 866.079992][ T5893] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 866.182340][ T43] usb 3-1: config 0 descriptor?? [ 866.446387][ T43] smsc75xx v1.0.0 [ 866.463807][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.518794][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 866.532629][ T43] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 866.553112][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 866.561939][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 866.575879][ T5893] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 866.592051][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.609420][ T5893] usb 4-1: Product: syz [ 866.622057][ T5893] usb 4-1: Manufacturer: syz [ 866.629774][ T5893] usb 4-1: SerialNumber: syz [ 866.840712][T14502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.870409][T14502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.999020][ T5893] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 867.060224][ T5893] usb 4-1: USB disconnect, device number 31 [ 867.166648][ T6060] udevd[6060]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.231914][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 867.247413][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 867.287324][ T9] usb 5-1: USB disconnect, device number 13 [ 867.512664][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.572511][T14522] syz_tun: left promiscuous mode [ 867.716625][T14522] team0: Port device syz_tun removed [ 868.048568][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2452'. [ 868.294629][T14526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.304192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.547509][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.712131][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 868.851760][ T5891] usb 3-1: USB disconnect, device number 16 [ 868.909985][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 868.931846][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 869.012376][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 869.021476][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 869.066704][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 869.139206][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 869.164180][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 869.173413][ T9] usb 4-1: Product: syz [ 869.177797][ T9] usb 4-1: Manufacturer: syz [ 869.205810][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 869.211147][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 869.253729][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 869.259772][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 869.372456][ T5893] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 869.522270][ T5893] usb 3-1: device descriptor read/64, error -71 [ 869.593045][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.831873][ T5893] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 869.992953][T14555] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2461'. [ 870.005662][ T5893] usb 3-1: device descriptor read/64, error -71 [ 870.235979][ T5893] usb usb3-port1: attempt power cycle [ 870.613246][ T5893] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 870.634091][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.644650][ T5893] usb 3-1: device descriptor read/8, error -71 [ 870.932371][ T5893] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 870.942704][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.954426][ T5893] usb 3-1: device descriptor read/8, error -71 [ 871.001040][T14561] qrtr: Invalid version 10 [ 871.112204][ T5893] usb usb3-port1: unable to enumerate USB device [ 871.663327][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.742331][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.290383][ T9] usb 4-1: USB disconnect, device number 32 [ 873.822456][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.873238][ T5891] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 874.141766][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 874.168875][ T5891] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 874.209264][ T5891] usb 3-1: config 0 has no interface number 0 [ 874.222854][ T5891] usb 3-1: config 0 interface 184 has no altsetting 0 [ 874.281336][ T5891] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 874.294262][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.302634][ T5891] usb 3-1: Product: syz [ 874.306811][ T5891] usb 3-1: Manufacturer: syz [ 874.311422][ T5891] usb 3-1: SerialNumber: syz [ 874.326710][ T5891] usb 3-1: config 0 descriptor?? [ 874.340587][ T5891] smsc75xx v1.0.0 [ 874.345433][ T5891] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 874.356509][ T5891] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 874.382446][ T5893] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 874.599548][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 874.620662][ T5893] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 874.750906][ T5893] usb 5-1: config 0 has no interface number 0 [ 874.778541][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2471'. [ 874.798516][ T5893] usb 5-1: config 0 interface 184 has no altsetting 0 [ 874.826451][ T5893] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 874.836771][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.852314][ T5893] usb 5-1: Product: syz [ 874.858785][ T5893] usb 5-1: Manufacturer: syz [ 874.865403][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.874499][ T5893] usb 5-1: SerialNumber: syz [ 874.900557][ T5893] usb 5-1: config 0 descriptor?? [ 874.920705][ T5893] smsc75xx v1.0.0 [ 874.926297][ T5893] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 874.940856][ T5893] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 875.487316][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.602496][T14517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.752300][ T43] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 876.005704][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.165622][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 876.243573][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 876.309363][ T43] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 876.326058][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.347784][ T43] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 876.369913][ T43] usb 4-1: config 1 has no interface number 1 [ 876.390439][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 876.433565][ T43] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE [ 876.481905][ T43] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 876.549579][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 876.559570][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.582265][ T43] usb 4-1: Product: syz [ 876.596938][ T43] usb 4-1: Manufacturer: syz [ 876.610767][ T43] usb 4-1: SerialNumber: syz [ 876.733124][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.742237][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.027980][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.107927][ T5815] usb 3-1: USB disconnect, device number 21 [ 877.139286][ T43] usb 4-1: USB disconnect, device number 33 [ 877.327664][T14650] udevd[14650]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 877.619956][ T43] usb 5-1: USB disconnect, device number 14 [ 877.626053][T14656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2475'. [ 877.911958][ T883] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 878.071795][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.087276][ T883] usb 3-1: Using ep0 maxpacket: 32 [ 878.125203][T14662] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967291 (274877906624 ns) > initial count (30400 ns). Using initial count to start timer. [ 878.222968][ T883] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 878.251778][ T883] usb 3-1: config 0 has no interface number 0 [ 878.258288][ T883] usb 3-1: config 0 interface 184 has no altsetting 0 [ 878.298516][ T883] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 878.308484][ T883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.322860][ T883] usb 3-1: Product: syz [ 878.344391][T14662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2477'. [ 878.353970][ T883] usb 3-1: Manufacturer: syz [ 878.372174][ T883] usb 3-1: SerialNumber: syz [ 878.382825][ T883] usb 3-1: config 0 descriptor?? [ 878.393095][ T883] smsc75xx v1.0.0 [ 878.396825][ T883] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 878.407653][ T883] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 878.671933][ T883] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 879.110793][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.126710][ T883] usb 1-1: config 0 has no interfaces? [ 879.170062][ T883] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 879.230066][ T883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.259118][ T883] usb 1-1: Product: syz [ 879.277401][ T883] usb 1-1: Manufacturer: syz [ 879.300099][ T883] usb 1-1: SerialNumber: syz [ 879.332639][ T883] usb 1-1: config 0 descriptor?? [ 879.541935][T14681] wireguard0: entered promiscuous mode [ 879.552194][T14681] wireguard0: entered allmulticast mode [ 879.714797][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.726047][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.893847][T14671] 8021q: adding VLAN 0 to HW filter on device bond2 [ 880.153663][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.388174][T14690] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2483' sets config #1 [ 880.464822][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2482'. [ 880.991900][ T5891] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 881.081913][ T5815] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 881.161815][ T5891] usb 5-1: device descriptor read/64, error -71 [ 881.416315][ T5891] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 881.442549][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.471746][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 881.500069][ T5815] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 881.515862][ T883] usb 3-1: USB disconnect, device number 22 [ 881.580131][ T5815] usb 2-1: config 0 has no interface number 0 [ 881.586695][ T5891] usb 5-1: device descriptor read/64, error -71 [ 881.639498][ T5815] usb 2-1: config 0 interface 184 has no altsetting 0 [ 881.699736][ T5815] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 881.712910][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.721333][ T5815] usb 2-1: Product: syz [ 881.722463][T14703] tipc: Enabling of bearer rejected, failed to enable media [ 881.742576][ T5891] usb usb5-port1: attempt power cycle [ 881.753733][ T5815] usb 2-1: Manufacturer: syz [ 881.771392][ T5815] usb 2-1: SerialNumber: syz [ 881.779982][ T883] usb 1-1: USB disconnect, device number 7 [ 881.828572][ T5815] usb 2-1: config 0 descriptor?? [ 881.851351][ T5815] smsc75xx v1.0.0 [ 881.868746][ T5815] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 881.911966][ T5815] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 882.111797][ T5891] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 882.152869][ T5891] usb 5-1: device descriptor read/8, error -71 [ 882.351786][ T5815] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 882.435583][ T5891] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 882.462566][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.484433][ T5891] usb 5-1: device descriptor read/8, error -71 [ 882.524557][ T5815] usb 1-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.538037][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 882.553045][ T5815] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 882.572690][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.630564][ T5891] usb usb5-port1: unable to enumerate USB device [ 882.699316][ T5815] usb 1-1: config 0 descriptor?? [ 883.415218][T14705] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 883.502629][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.885797][T14705] input: syz1 as /devices/virtual/input/input54 [ 883.915078][ T5815] a4tech 0003:09DA:001A.006D: unbalanced collection at end of report description [ 883.942577][ T5815] a4tech 0003:09DA:001A.006D: parse failed [ 883.948597][ T5815] a4tech 0003:09DA:001A.006D: probe with driver a4tech failed with error -22 [ 884.190862][ T5815] usb 1-1: USB disconnect, device number 8 [ 884.542544][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.590641][ T883] usb 2-1: USB disconnect, device number 7 [ 885.022493][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.032399][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.583021][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.682630][ T5891] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 885.819201][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2501'. [ 885.862014][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 885.877076][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.919773][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.937290][ T5891] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 885.959966][T14754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 885.983369][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.000313][T14754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2504'. [ 886.035534][ T5891] usb 3-1: config 0 descriptor?? [ 886.082389][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 886.272551][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 886.303889][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.553989][ T9] usb 2-1: config 0 descriptor?? [ 886.763775][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.777546][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 886.815655][T14743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.832665][T14743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.898347][T14751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.908939][ T5815] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 886.948253][T14751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.062563][ T43] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 887.105682][ T9] gspca_sn9c20x: Write register 1000 failed -71 [ 887.124387][ T9] gspca_sn9c20x: Device initialization failed [ 887.130646][ T9] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 887.174496][ T9] usb 2-1: USB disconnect, device number 8 [ 887.211503][T14743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2496'. [ 887.252471][ T5815] usb 1-1: Using ep0 maxpacket: 32 [ 887.267453][T14743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2496'. [ 887.269193][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.278702][ T5815] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 887.310506][ T5815] usb 1-1: config 0 has no interface number 0 [ 887.325565][ T5815] usb 1-1: config 0 interface 184 has no altsetting 0 [ 887.338760][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.374866][ T5815] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 887.384847][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.394218][ T5815] usb 1-1: Product: syz [ 887.399473][ T5815] usb 1-1: Manufacturer: syz [ 887.405783][ T43] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 887.415175][ T5815] usb 1-1: SerialNumber: syz [ 887.424872][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.443054][T14767] input: syz1 as /devices/virtual/input/input55 [ 887.475550][ T5815] usb 1-1: config 0 descriptor?? [ 887.502659][ T5815] smsc75xx v1.0.0 [ 887.508127][ T5815] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 887.532681][ T43] usb 4-1: config 0 descriptor?? [ 887.542118][ T5815] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 887.589457][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 887.616859][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 887.670998][ T5891] usb 3-1: USB disconnect, device number 23 [ 887.831211][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.976044][ T43] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 887.988223][ T43] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 887.996638][ T43] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 888.008776][ T43] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 888.027192][ T43] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 888.059575][ T43] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 888.076347][ T43] cp2112 0003:10C4:EA90.006E: unknown main item tag 0x0 [ 888.101778][ T43] cp2112 0003:10C4:EA90.006E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 888.185906][ T43] cp2112 0003:10C4:EA90.006E: Part Number: 0x82 Device Version: 0x01 [ 888.398806][ T43] cp2112 0003:10C4:EA90.006E: error requesting SMBus config [ 888.446401][ T43] cp2112 0003:10C4:EA90.006E: probe with driver cp2112 failed with error -5 [ 888.913394][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.291869][ T5891] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 889.480227][ T5891] usb 5-1: config 0 has no interfaces? [ 889.495308][ T5891] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 889.508890][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.550493][ T5891] usb 5-1: Product: syz [ 889.567625][ T5891] usb 5-1: Manufacturer: syz [ 889.594156][ T5891] usb 5-1: SerialNumber: syz [ 889.625579][ T5891] usb 5-1: config 0 descriptor?? [ 889.779410][ T5891] usb 1-1: USB disconnect, device number 9 [ 889.982098][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.148092][ T43] usb 4-1: USB disconnect, device number 34 [ 890.452153][ T883] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 890.615251][ T883] usb 2-1: Using ep0 maxpacket: 32 [ 890.812916][ T43] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 891.023846][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.122276][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 891.352223][T12401] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 891.518105][ T883] usb 2-1: unable to get BOS descriptor or descriptor too short [ 891.584901][ T883] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 891.593379][T12401] usb 1-1: Using ep0 maxpacket: 16 [ 891.609039][T12401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.627386][ T883] usb 2-1: can't read configurations, error -71 [ 891.649848][T12401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.675794][T12401] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 891.694580][T12401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.846701][ T5932] usb 5-1: USB disconnect, device number 19 [ 891.880075][T12401] usb 1-1: config 0 descriptor?? [ 891.941229][ T43] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 891.994933][T14715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.065421][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.101135][ T43] usb 3-1: config 0 has no interface number 0 [ 892.150599][T14816] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2522'. [ 892.228589][ T43] usb 3-1: config 0 interface 184 has no altsetting 0 [ 892.337137][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 892.402392][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.424696][ T43] usb 3-1: Product: syz [ 892.428974][ T43] usb 3-1: Manufacturer: syz [ 892.459892][T14812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.490193][ T43] usb 3-1: SerialNumber: syz [ 892.501287][ T43] usb 3-1: config 0 descriptor?? [ 892.509977][T14812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.555918][ T43] smsc75xx v1.0.0 [ 892.559709][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 892.697573][ T43] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 892.766096][T14812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2521'. [ 892.780949][T14812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2521'. [ 892.823713][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2526'. [ 892.859545][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2526'. [ 893.012305][T14830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2527'. [ 893.104023][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.120286][T12401] usbhid 1-1:0.0: can't add hid device: -71 [ 893.127627][T12401] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 893.217768][T12401] usb 1-1: USB disconnect, device number 10 [ 893.681915][ T883] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 893.945834][ T883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.972729][ T883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.089629][ T883] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 894.119581][ T883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.154330][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.167103][ T883] usb 2-1: config 0 descriptor?? [ 894.615951][ T883] cp2112 0003:10C4:EA90.006F: unknown main item tag 0x0 [ 894.638201][ T883] cp2112 0003:10C4:EA90.006F: unknown main item tag 0x0 [ 894.638298][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.739773][ T883] cp2112 0003:10C4:EA90.006F: unknown main item tag 0x0 [ 894.793909][ T883] cp2112 0003:10C4:EA90.006F: unknown main item tag 0x0 [ 894.842132][ T883] cp2112 0003:10C4:EA90.006F: unknown main item tag 0x0 [ 894.910037][ T883] cp2112 0003:10C4:EA90.006F: unknown main item tag 0x0 [ 894.961873][ T5891] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 894.979629][ T5815] usb 3-1: USB disconnect, device number 24 [ 895.009820][ T883] cp2112 0003:10C4:EA90.006F: unknown main item tag 0x0 [ 895.076356][ T883] cp2112 0003:10C4:EA90.006F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 895.163249][ T883] cp2112 0003:10C4:EA90.006F: Part Number: 0x82 Device Version: 0x01 [ 895.165480][ T5891] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 895.188146][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.215712][ T5891] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 895.216323][ T883] cp2112 0003:10C4:EA90.006F: error requesting SMBus config [ 895.270270][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 895.308979][ T883] cp2112 0003:10C4:EA90.006F: probe with driver cp2112 failed with error -5 [ 895.320180][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 895.368002][ T5891] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 895.428673][ T5891] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 895.449952][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 895.477779][ T5891] usb 4-1: Product: syz [ 895.489156][ T5891] usb 4-1: Manufacturer: syz [ 895.548263][ T5891] cdc_wdm 4-1:1.0: skipping garbage [ 895.569790][ T5891] cdc_wdm 4-1:1.0: skipping garbage [ 895.590204][ T5891] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 895.602684][ T5891] cdc_wdm 4-1:1.0: Unknown control protocol [ 895.717412][T14852] netlink: 'syz.0.2533': attribute type 3 has an invalid length. [ 895.727521][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2533'. [ 895.951338][T14847] IPv6: Can't replace route, no match found [ 896.225730][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.762286][ T883] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 896.895111][ T5891] usb 2-1: USB disconnect, device number 11 [ 896.928381][ T883] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 896.986489][ T883] usb 1-1: config 0 has no interface number 0 [ 897.057457][ T883] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 897.100610][ T883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.157876][ T883] usb 1-1: Product: syz [ 897.226676][ T883] usb 1-1: Manufacturer: syz [ 897.250348][ T883] usb 1-1: SerialNumber: syz [ 897.269222][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.300419][ T883] usb 1-1: config 0 descriptor?? [ 897.534662][ T883] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 897.706112][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'. [ 898.275477][ T883] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 898.302656][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.327158][ T883] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 898.342524][ T883] usb 1-1: media controller created [ 898.438175][ T883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 898.927127][ T883] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 898.955446][T14896] netlink: 'syz.1.2545': attribute type 16 has an invalid length. [ 899.062064][T14896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'. [ 899.108397][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.227915][ T883] usb 1-1: USB disconnect, device number 11 [ 899.344924][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.283445][ T5815] usb 4-1: USB disconnect, device number 35 [ 900.382697][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.345566][ T5815] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 901.422270][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.552895][ T5815] usb 4-1: device descriptor read/64, error -71 [ 901.831789][ T5815] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 901.854349][T14930] 8021q: VLANs not supported on vxcan1 [ 901.982188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.991235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.013786][ T5815] usb 4-1: device descriptor read/64, error -71 [ 902.192294][ T5815] usb usb4-port1: attempt power cycle [ 902.474961][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.671782][ T5815] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 902.692671][ T5815] usb 4-1: device descriptor read/8, error -71 [ 902.943782][T14924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.042024][ T5815] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 903.105179][ T5815] usb 4-1: device descriptor read/8, error -71 [ 903.222760][ T5815] usb usb4-port1: unable to enumerate USB device [ 903.292231][ T883] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 903.295970][T14945] netlink: 'syz.4.2557': attribute type 16 has an invalid length. [ 903.320620][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2557'. [ 903.514827][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.544736][ T883] usb 1-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 903.557147][ T883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.572051][ T5815] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 903.747762][ T883] usb 1-1: config 0 descriptor?? [ 903.789710][ T883] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 903.804484][ T5815] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 903.818634][ T5815] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 903.836453][ T5815] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 903.849434][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 903.865581][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 903.893381][ T5815] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 903.906220][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 903.928172][ T5815] usb 3-1: Product: syz [ 903.946166][ T5815] usb 3-1: Manufacturer: syz [ 903.975238][ T5815] cdc_wdm 3-1:1.0: skipping garbage [ 903.982124][ T5815] cdc_wdm 3-1:1.0: skipping garbage [ 904.000648][ T5815] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 904.024444][ T5815] cdc_wdm 3-1:1.0: Unknown control protocol [ 904.099346][ T883] gspca_sn9c20x: Write register 1000 failed -71 [ 904.155713][ T883] gspca_sn9c20x: Device initialization failed [ 904.210780][ T883] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 904.223354][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.495590][ T883] usb 1-1: USB disconnect, device number 12 [ 904.614716][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.679011][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.644727][ T5891] usb 3-1: USB disconnect, device number 25 [ 906.707947][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.136074][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2567'. [ 907.173333][T14984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 907.227051][T14984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2567'. [ 907.289032][T14984] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 907.752959][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.767123][T15000] netlink: 'syz.1.2570': attribute type 16 has an invalid length. [ 907.791927][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 908.092014][ T43] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 908.303419][ T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 908.314228][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.389104][ T43] usb 3-1: config 0 descriptor?? [ 908.414006][ T43] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 908.787380][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.949772][ T43] gspca_sn9c20x: Write register 1000 failed -110 [ 908.962952][ T43] gspca_sn9c20x: Device initialization failed [ 908.969707][ T43] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 908.990570][ T5891] usb 3-1: USB disconnect, device number 26 [ 909.694961][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 909.734126][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2578'. [ 909.831250][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.432384][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2581'. [ 910.849656][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2586'. [ 910.872530][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.030690][T15035] ptrace attach of ""[15038] was attempted by "./syz-executor exec"[15035] [ 911.036108][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2585'. [ 911.208861][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2583'. [ 911.371775][ T5891] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 911.545649][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 911.653897][ T5891] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 911.681893][ T5891] usb 3-1: config 0 has no interface number 0 [ 911.710708][ T5891] usb 3-1: config 0 interface 184 has no altsetting 0 [ 911.797997][ T5891] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 911.809296][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.830071][ T5891] usb 3-1: Product: syz [ 911.836331][ T5891] usb 3-1: Manufacturer: syz [ 911.868443][T15057] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 911.875542][ T5891] usb 3-1: SerialNumber: syz [ 911.904219][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.922536][ T5891] usb 3-1: config 0 descriptor?? [ 911.993121][ T5891] smsc75xx v1.0.0 [ 911.996858][ T5891] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 912.073353][ T5891] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 912.162050][ T5932] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 912.426084][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.478282][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.503803][ T5932] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 912.647531][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.691493][ T5932] usb 5-1: config 0 descriptor?? [ 912.792859][ T43] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 912.942615][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.052635][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 913.182010][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.212739][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 913.225080][ T5932] hid-steam 0003:28DE:1142.0070: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 913.268317][ T43] usb 1-1: config 248 has an invalid interface number: 51 but max is 0 [ 913.310068][ T43] usb 1-1: config 248 has no interface number 0 [ 913.352312][ T5932] hid-steam 0003:28DE:1142.0070: Steam wireless receiver connected [ 913.433789][ T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice=39.f0 [ 913.445890][ T5932] hid-steam 0003:28DE:1142.0071: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 913.480454][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.514717][ T43] usb 1-1: Product: syz [ 913.540546][ T43] usb 1-1: Manufacturer: syz [ 913.556980][ T43] usb 1-1: SerialNumber: syz [ 913.824369][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.857956][ T883] usb 5-1: USB disconnect, device number 20 [ 913.921381][ T883] hid-steam 0003:28DE:1142.0070: Steam wireless receiver disconnected [ 914.122681][T12401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.131932][ T5932] usb 3-1: USB disconnect, device number 27 [ 914.267577][T15068] fido_id[15068]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 914.622115][T15061] input: syz0 as /devices/virtual/input/input56 [ 914.754364][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.903364][T15062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.086208][ T5932] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 915.182356][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.327758][ T5932] usb 5-1: config 0 has no interfaces? [ 915.338361][ T5932] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 915.353138][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.412323][ T5932] usb 5-1: Product: syz [ 915.416883][ T5932] usb 5-1: Manufacturer: syz [ 915.438712][ T5932] usb 5-1: SerialNumber: syz [ 915.471135][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2594'. [ 915.521684][ T5932] usb 5-1: config 0 descriptor?? [ 915.636386][ T43] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:248.51/input/input57 [ 915.676749][ T5185] bcm5974 1-1:248.51: could not read from device [ 915.765147][ T43] usb 1-1: USB disconnect, device number 13 [ 915.871311][ T5185] bcm5974 1-1:248.51: could not read from device [ 916.123672][ T883] usb 5-1: USB disconnect, device number 21 [ 916.224461][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.055872][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'. [ 917.277856][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.460201][T15092] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 917.467733][T15092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 917.503915][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2599'. [ 917.577038][T15092] vhci_hcd vhci_hcd.0: Device attached [ 917.611413][T15101] [U]  [ 917.614241][T15101] [U] K{ [ 917.628064][T15101] [U] t 1ŠFfˊ`GJgo/mC [ 917.639111][ C1] vkms_vblank_simulate: vblank timer overrun [ 917.670108][T15101] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 917.711547][T15101] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 917.725636][T15093] vhci_hcd: connection closed [ 917.732686][T15101] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 917.842130][ T5891] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 917.872101][T15101] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 917.911921][ T5815] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 917.970977][ T6580] vhci_hcd: stop threads [ 918.015604][ T6580] vhci_hcd: release socket [ 918.026729][T15101] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 918.042307][ T6580] vhci_hcd: disconnect device [ 918.092293][T15101] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 918.142184][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 918.162108][ T43] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 918.176262][ T5815] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 918.187041][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.198292][ T5815] usb 1-1: Product: syz [ 918.204641][ T5815] usb 1-1: Manufacturer: syz [ 918.209717][ T5815] usb 1-1: SerialNumber: syz [ 918.232332][T15101] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/< [ 945.052986][T15403] dump_stack_lvl+0x189/0x250 [ 945.053067][T15403] ? __pfx____ratelimit+0x10/0x10 [ 945.053113][T15403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 945.053140][T15403] ? __pfx__printk+0x10/0x10 [ 945.053164][T15403] ? __might_fault+0xb0/0x130 [ 945.053219][T15403] should_fail_ex+0x414/0x560 [ 945.053269][T15403] _copy_from_user+0x2d/0xb0 [ 945.053290][T15403] scsi_ioctl+0xc59/0x1fb0 [ 945.053392][T15403] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 945.053429][T15403] ? __pfx_scsi_ioctl+0x10/0x10 [ 945.053478][T15403] ? __pfx___might_resched+0x10/0x10 [ 945.053519][T15403] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 945.053557][T15403] ? scsi_block_when_processing_errors+0x390/0x470 [ 945.053581][T15403] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 945.053601][T15403] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 945.053641][T15403] sg_ioctl+0x1886/0x2230 [ 945.053703][T15403] ? __pfx_sg_ioctl+0x10/0x10 [ 945.053720][T15403] ? __fget_files+0x2a/0x420 [ 945.053758][T15403] ? __fget_files+0x3a0/0x420 [ 945.053784][T15403] ? __fget_files+0x2a/0x420 [ 945.053821][T15403] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 945.053862][T15403] __ia32_compat_sys_ioctl+0x540/0x840 [ 945.053893][T15403] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 945.053916][T15403] ? __fget_files+0x3a0/0x420 [ 945.053957][T15403] ? fput+0xa0/0xd0 [ 945.053975][T15403] ? ksys_write+0x22a/0x250 [ 945.054005][T15403] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 945.054029][T15403] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.054051][T15403] __do_fast_syscall_32+0xb6/0x2b0 [ 945.054076][T15403] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.054100][T15403] do_fast_syscall_32+0x34/0x80 [ 945.054122][T15403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 945.054144][T15403] RIP: 0023:0xf702e539 [ 945.054168][T15403] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 945.054190][T15403] RSP: 002b:00000000f501e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 945.054210][T15403] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005393 [ 945.054222][T15403] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 945.054254][T15403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 945.054264][T15403] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 945.054274][T15403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 945.054299][T15403] [ 946.064996][T15410] netlink: 'syz.2.2683': attribute type 10 has an invalid length. [ 946.353863][T15421] netlink: 'syz.3.2684': attribute type 4 has an invalid length. [ 946.362781][T15421] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2684'. [ 946.461327][T15423] [U]  [ 946.465061][T15423] [U] K{ [ 946.468731][T15423] [U] T 1ŠFFˊ`GJǘGO/MC [ 946.558759][T15423] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 946.644196][ T883] net_ratelimit: 4 callbacks suppressed [ 946.644287][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.732321][T15423] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 946.748488][T15423] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 946.784278][ C0] vkms_vblank_simulate: vblank timer overrun [ 946.861941][T15423] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 946.902329][T15423] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 946.931267][T15423] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 946.957810][T15423] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 947.066526][ C0] vkms_vblank_simulate: vblank timer overrun [ 947.105233][T15423] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 947.115247][ T6572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.127160][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.129516][T15423] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 947.233541][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.267856][T15423] [U] 22Ʃ۩X?0;3U [ 947.387112][T15423] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 947.620489][T15423] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 947.672208][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.749231][T14920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.759366][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.771196][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.792647][T15423] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 947.843801][T15423] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 948.074748][T15423] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 948.162248][T15423] [U] EC [ 948.213287][T15423] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 948.395637][T15423] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 948.492256][ T24] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 948.681995][ T5891] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 948.774137][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.851377][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 948.877289][ T24] usb 3-1: config 0 has no interface number 0 [ 948.906902][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 948.923924][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.948420][ T5891] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 948.971760][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.007959][ T5891] usb 5-1: config 0 descriptor?? [ 949.021416][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 949.022714][ T6550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.063661][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 949.147862][ T883] usb 2-1: USB disconnect, device number 18 [ 949.159909][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 949.285009][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 949.314692][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 949.353415][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 949.429416][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 949.468265][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00 [ 949.474676][T15440] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2690'. [ 949.496355][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.510685][ T5891] pwc: recv_control_msg error -32 req 02 val 2700 [ 949.549749][ T24] usb 3-1: config 0 descriptor?? [ 949.562694][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 949.577015][T15429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 949.596585][T15429] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 949.603258][ T5891] pwc: recv_control_msg error -32 req 04 val 1000 [ 949.624699][ T5891] pwc: recv_control_msg error -32 req 04 val 1300 [ 949.697608][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 949.890217][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'. [ 950.026824][ T24] usb 3-1: USB disconnect, device number 34 [ 950.063818][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 950.305525][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2693'. [ 950.425355][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2697'. [ 951.083508][T15463] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 951.555345][ T5891] pwc: recv_control_msg error -71 req 04 val 1400 [ 951.580753][ T5891] pwc: recv_control_msg error -71 req 02 val 2000 [ 951.590732][ T5891] pwc: recv_control_msg error -71 req 02 val 2100 [ 951.642640][ T5891] pwc: recv_control_msg error -71 req 04 val 1500 [ 951.650611][ T5891] pwc: recv_control_msg error -71 req 02 val 2500 [ 951.657809][ T5891] pwc: recv_control_msg error -71 req 02 val 2400 [ 951.669808][ T5891] pwc: recv_control_msg error -71 req 02 val 2600 [ 951.678150][ T5891] pwc: recv_control_msg error -71 req 02 val 2900 [ 951.685488][ T5891] pwc: recv_control_msg error -71 req 02 val 2800 [ 951.693136][ T5891] pwc: recv_control_msg error -71 req 04 val 1100 [ 951.701336][ T5891] pwc: recv_control_msg error -71 req 04 val 1200 [ 951.732662][ T5891] pwc: Registered as video103. [ 951.784955][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input59 [ 951.850676][ T5891] usb 5-1: USB disconnect, device number 25 [ 952.161269][ T24] net_ratelimit: 4 callbacks suppressed [ 952.161295][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.358475][T15473] netlink: 'syz.2.2701': attribute type 16 has an invalid length. [ 952.416673][T15473] netlink: 'syz.2.2701': attribute type 17 has an invalid length. [ 952.703797][ T5891] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 952.805332][T15465] netlink: 'syz.1.2695': attribute type 12 has an invalid length. [ 952.815319][T15465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2695'. [ 952.869899][ T5891] usb 5-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 952.883962][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.902189][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 952.940661][ T5891] usb 5-1: config 0 descriptor?? [ 952.986124][ T5891] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 953.064483][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 94, changing to 10 [ 953.106232][ T24] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 953.146370][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.185309][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.199393][T15472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.222610][ T24] usb 3-1: config 0 descriptor?? [ 953.232681][T15472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.314765][ T5891] gspca_sn9c20x: Write register 1000 failed -71 [ 953.355044][ T5891] gspca_sn9c20x: Device initialization failed [ 953.361318][ T5891] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 953.430686][ T5891] usb 5-1: USB disconnect, device number 26 [ 953.512426][ T6574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.523971][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.601196][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.642352][ T883] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 953.834837][ T883] usb 4-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 953.844959][ T883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.883356][ T883] usb 4-1: config 0 descriptor?? [ 953.927558][ T883] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 954.159602][T15477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.178078][T15477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.211231][T15486] FAULT_INJECTION: forcing a failure. [ 954.211231][T15486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.234127][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.259133][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 954.282513][T15486] CPU: 0 UID: 0 PID: 15486 Comm: syz.4.2706 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 954.282551][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 954.282565][T15486] Call Trace: [ 954.282575][T15486] [ 954.282586][T15486] dump_stack_lvl+0x189/0x250 [ 954.282629][T15486] ? __pfx____ratelimit+0x10/0x10 [ 954.282657][T15486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 954.282693][T15486] ? __pfx__printk+0x10/0x10 [ 954.282717][T15486] ? __might_fault+0xb0/0x130 [ 954.282763][T15486] should_fail_ex+0x414/0x560 [ 954.282800][T15486] _copy_from_iter+0x1db/0x16f0 [ 954.282848][T15486] ? __pfx__copy_from_iter+0x10/0x10 [ 954.282877][T15486] ? file_tty_write+0x2a6/0x990 [ 954.283008][T15486] ? file_tty_write+0x2e6/0x990 [ 954.283039][T15486] ? rcu_is_watching+0x15/0xb0 [ 954.283078][T15486] ? kfree+0x4d/0x440 [ 954.283118][T15486] file_tty_write+0x484/0x990 [ 954.283161][T15486] vfs_write+0x54b/0xa90 [ 954.283192][T15486] ? __pfx_tty_write+0x10/0x10 [ 954.283223][T15486] ? __pfx_vfs_write+0x10/0x10 [ 954.283262][T15486] ? __fget_files+0x2a/0x420 [ 954.283303][T15486] ksys_write+0x145/0x250 [ 954.283364][T15486] ? __pfx_ksys_write+0x10/0x10 [ 954.283393][T15486] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 954.283424][T15486] ? lockdep_hardirqs_on+0x9c/0x150 [ 954.283451][T15486] __do_fast_syscall_32+0xb6/0x2b0 [ 954.283484][T15486] do_fast_syscall_32+0x34/0x80 [ 954.283511][T15486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 954.283538][T15486] RIP: 0023:0xf70be539 [ 954.283560][T15486] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 954.283578][T15486] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 954.283602][T15486] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002080 [ 954.283617][T15486] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 954.283629][T15486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 954.283641][T15486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 954.283653][T15486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 954.283685][T15486] [ 954.295489][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 954.318259][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2707'. [ 954.323078][ T883] gspca_sn9c20x: Write register 1000 failed -71 [ 954.565326][ T24] usb 3-1: USB disconnect, device number 35 [ 954.599853][ T883] gspca_sn9c20x: Device initialization failed [ 954.638850][ T883] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 954.687119][ T883] usb 4-1: USB disconnect, device number 43 [ 954.782392][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.793376][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.804194][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.411908][ T5815] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 955.617566][ T5815] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 955.712475][ T5815] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 955.723805][ T5815] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 955.742337][ T5815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 955.762338][ T5815] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 955.777468][ T5815] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 955.820626][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 955.840668][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.902113][ T5815] usb 2-1: Product: syz [ 955.906462][ T5815] usb 2-1: Manufacturer: syz [ 955.924991][T15501] ptrace attach of ""[15502] was attempted by "./syz-executor exec"[15501] [ 955.984717][ T5815] cdc_wdm 2-1:1.0: skipping garbage [ 955.990053][ T5815] cdc_wdm 2-1:1.0: skipping garbage [ 956.038541][ T5815] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 956.076319][ T5815] cdc_wdm 2-1:1.0: Unknown control protocol [ 956.182700][ T883] usb 2-1: USB disconnect, device number 19 [ 956.735555][T15517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 957.068706][ T883] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 957.381958][ T883] usb 3-1: Using ep0 maxpacket: 16 [ 957.385299][ T883] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 957.385337][ T883] usb 3-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 957.385356][ T883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 957.389552][ T883] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 957.389599][ T883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.389625][ T883] usb 3-1: Product: syz [ 957.389645][ T883] usb 3-1: Manufacturer: syz [ 957.389666][ T883] usb 3-1: SerialNumber: syz [ 958.091288][ T43] net_ratelimit: 1 callbacks suppressed [ 958.091316][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.102390][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.283720][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.302977][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.318487][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.367882][T15530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2716'. [ 960.053945][T15537] program syz.4.2717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 960.142590][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.298523][T15540] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 961.212145][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.481749][ T5815] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 961.644474][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.724523][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.771857][ T883] usb 3-1: 0:2 : does not exist [ 961.795771][ T883] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 961.821762][ T5815] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 961.832005][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.872777][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.942546][ T5815] usb 2-1: config 0 descriptor?? [ 961.990639][ T883] usb 3-1: USB disconnect, device number 36 [ 962.126804][T15463] syz.0.2699 (15463): drop_caches: 1 [ 962.222372][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.611760][ T5815] hid-steam 0003:28DE:1142.0073: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 962.761939][ T5815] hid-steam 0003:28DE:1142.0073: Steam wireless receiver connected [ 962.832823][ T5815] hid-steam 0003:28DE:1142.0074: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 962.866990][T15577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2722'. [ 963.115706][ T883] usb 2-1: USB disconnect, device number 20 [ 963.268136][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.314767][ T883] hid-steam 0003:28DE:1142.0073: Steam wireless receiver disconnected [ 963.611279][T15581] fido_id[15581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 964.043077][T15589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.135937][T15590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.272987][T15589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.383199][ T6574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.417239][T15550] syz.2.2720 (15550): drop_caches: 1 [ 964.450986][T15552] syz.2.2720 (15552): drop_caches: 1 [ 964.465362][T15589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.475936][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.484342][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.504640][T15589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.506887][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.524055][T15589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.538603][T15589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.596590][T15589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.718128][T15590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.950528][T15593] input: syz0 as /devices/virtual/input/input60 [ 964.966274][T15593] input: failed to attach handler leds to device input60, error: -6 [ 965.031947][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 965.207324][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 965.322677][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.363069][ T9] usb 2-1: Product: syz [ 965.386359][ T9] usb 2-1: Manufacturer: syz [ 965.418679][ T9] usb 2-1: SerialNumber: syz [ 965.502350][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.595223][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 965.824077][ T5891] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 966.362238][ T883] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 966.544464][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.570617][ T883] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 966.662124][T15590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 966.765912][ T883] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 966.830064][ C1] vkms_vblank_simulate: vblank timer overrun [ 966.875828][T15590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.888084][ T883] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 966.902531][T15606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 966.952162][ T883] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 966.972181][ T883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.019332][T15590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.028389][ T5891] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 967.062539][ T883] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 967.087862][ T883] usb 4-1: invalid MIDI out EP 0 [ 967.132341][ T5891] ath9k_htc: Failed to initialize the device [ 967.161108][T15590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.200293][ T5891] usb 2-1: ath9k_htc: USB layer deinitialized [ 967.231406][T15606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.407555][ T883] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 967.456584][T15601] delete_channel: no stack [ 967.472138][T14581] udevd[14581]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 967.489037][ T883] usb 4-1: USB disconnect, device number 44 [ 967.583047][T15527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.597393][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.694702][ T24] usb 2-1: USB disconnect, device number 21 [ 967.897324][T15617] macvlan1: entered promiscuous mode [ 967.955490][T15617] ipvlan0: entered promiscuous mode [ 967.973380][T15617] ipvlan0: left promiscuous mode [ 967.983908][T15617] macvlan1: left promiscuous mode [ 967.991995][ T5891] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 968.145161][ T5891] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 968.155518][ T5891] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 968.215337][ T5891] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 968.470765][ T5891] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 968.497766][ T5891] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 968.542718][ T5891] usb 1-1: config 0 interface 0 has no altsetting 0 [ 968.564057][ T5891] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 968.574490][ T5891] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 968.609018][ T5891] usb 1-1: Product: syz [ 968.622590][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.678443][ T5891] usb 1-1: Manufacturer: syz [ 968.691501][T15617] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI [ 968.707064][T15617] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 968.716870][T15617] CPU: 0 UID: 0 PID: 15617 Comm: syz.4.2732 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 968.730217][T15617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 968.743187][T15617] RIP: 0010:do_move_mount+0x27d/0xb10 [ 968.749962][T15617] Code: e8 c8 c8 81 ff 41 be ea ff ff ff 49 bd 00 00 00 00 00 fc ff df 48 8b 6c 24 18 4c 8b 7c 24 08 48 8d 5d 48 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 34 e6 e4 ff 48 8b 1b 31 ff 48 89 [ 968.771540][T15617] RSP: 0000:ffffc9001becfd30 EFLAGS: 00010206 [ 968.777859][T15617] RAX: 0000000000000009 RBX: 0000000000000048 RCX: 0000000000080000 [ 968.786696][T15617] RDX: ffffc9000cdec000 RSI: 0000000000000177 RDI: 0000000000000178 [ 968.795769][T15617] RBP: 0000000000000000 R08: ffffffff8de1683b R09: 1ffffffff1bc2d07 [ 968.804680][T15617] R10: dffffc0000000000 R11: fffffbfff1bc2d08 R12: ffff88801dac95c8 [ 968.812882][T15617] R13: dffffc0000000000 R14: 00000000ffffffea R15: ffff88802d386500 [ 968.821001][T15617] FS: 0000000000000000(0000) GS:ffff888125c66000(0063) knlGS:00000000f50aeb40 [ 968.830878][T15617] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 968.837866][T15617] CR2: 00000000f6d08000 CR3: 0000000022706000 CR4: 00000000003526f0 [ 968.845986][T15617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 968.854253][T15617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 968.862527][T15617] Call Trace: [ 968.866006][T15617] [ 968.869051][T15617] __se_sys_move_mount+0x49f/0x590 [ 968.874383][T15617] ? __pfx___se_sys_move_mount+0x10/0x10 [ 968.880438][T15617] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 968.887297][T15617] ? __ia32_sys_move_mount+0x20/0xc0 [ 968.892958][T15617] __do_fast_syscall_32+0xb6/0x2b0 [ 968.898160][T15617] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.903482][T15617] do_fast_syscall_32+0x34/0x80 [ 968.909036][T15617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 968.915592][T15617] RIP: 0023:0xf70be539 [ 968.920142][T15617] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 968.940773][T15617] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 00000000000001ad [ 968.949775][T15617] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000140 [ 968.958554][T15617] RDX: 00000000ffffff9c RSI: 0000000080000180 RDI: 0000000000000000 [ 968.966726][T15617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 968.976954][T15617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 968.986125][T15617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 968.994492][T15617] [ 968.997705][T15617] Modules linked in: [ 969.002644][T15617] ---[ end trace 0000000000000000 ]--- [ 969.009419][ T5891] usb 1-1: SerialNumber: syz [ 969.045923][ T5891] usb 1-1: config 0 descriptor?? [ 969.054762][T15615] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 969.062298][T15617] RIP: 0010:do_move_mount+0x27d/0xb10 [ 969.068724][T15617] Code: e8 c8 c8 81 ff 41 be ea ff ff ff 49 bd 00 00 00 00 00 fc ff df 48 8b 6c 24 18 4c 8b 7c 24 08 48 8d 5d 48 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 34 e6 e4 ff 48 8b 1b 31 ff 48 89 [ 969.097222][T15617] RSP: 0000:ffffc9001becfd30 EFLAGS: 00010206 [ 969.106965][T15624] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2734'. [ 969.149993][T15617] RAX: 0000000000000009 RBX: 0000000000000048 RCX: 0000000000080000 [ 969.163339][T15617] RDX: ffffc9000cdec000 RSI: 0000000000000177 RDI: 0000000000000178 [ 969.172184][T15617] RBP: 0000000000000000 R08: ffffffff8de1683b R09: 1ffffffff1bc2d07 [ 969.184949][T15617] R10: dffffc0000000000 R11: fffffbfff1bc2d08 R12: ffff88801dac95c8 [ 969.217631][T15617] R13: dffffc0000000000 R14: 00000000ffffffea R15: ffff88802d386500 [ 969.262325][T15617] FS: 0000000000000000(0000) GS:ffff888125d66000(0063) knlGS:00000000f50aeb40 [ 969.263742][ T5891] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 969.286047][T15617] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 969.300249][ T5891] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 969.332364][T15617] CR2: 0000000080202018 CR3: 0000000022706000 CR4: 00000000003526f0 [ 969.379891][T15617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 969.393778][T15617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 969.429362][T15617] Kernel panic - not syncing: Fatal exception [ 969.436103][T15617] Kernel Offset: disabled [ 969.441445][T15617] Rebooting in 86400 seconds..