last executing test programs: 23.597914261s ago: executing program 4 (id=1860): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x1100, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0xfa4, 0xfb, 0x0, 0x1, [@nested={0xf91, 0x13, 0x0, 0x1, [@generic="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", @typed={0x8, 0x122, 0x0, 0x0, @fd}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028aa284f8f626392a21d31e5e06fe98065e0246d46b7fe927a881c18c044e5c139e", @typed={0x8, 0x63, 0x0, 0x0, @uid}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0x3d, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x4f}, @generic="f01254c8a325874b7a364f60eb18eb3e374838d32bfdcf", @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a5fa1bc096f7"]}]}, 0x1100}], 0x1, 0x0, 0x0, 0x10004800}, 0xc000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x400, 0x4, 0x24b2c7d9, 0x0, 0x400, 0x8001000, 0xc59f, 0x4}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r2) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x8c, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x7}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x7fff, r6, 0x0, 0x0, 0xffffffff, 0x0, 0x2}]) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x7, 0x4e20, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x80, 0x8, 0xffffffffffffffff}, {0xf6, 0x1, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "7a7721427b16add9e6b50c9917d0e0684cb2e6"}}]}, 0x150}}, 0x804) rt_sigaction(0x1f, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_XCRS(r6, 0x8188aea6, &(0x7f0000000380)) rseq(&(0x7f0000002280)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002480)={0x77359400}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f000000db80)={0x1, &(0x7f000000db40)=[{0xdd9, 0x1, 0x0, 0x3}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x60b42, 0x0) 21.455506187s ago: executing program 4 (id=1867): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x6576, 0xd}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000004c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x6, 0x4, 0x4, 0x0, r5}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 18.769346133s ago: executing program 4 (id=1876): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, &(0x7f0000000600)={0x0, 0x0, 0x9}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x38) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f00000000c0)={0xf000, 0x210000}) connect$unix(r5, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0xffffffffffffff74, 0x0}, 0x2000d000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, 0x0) syz_usb_disconnect(r0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'pim6reg0\x00', {0x2, 0x0, @remote}}) r10 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) syz_usb_disconnect(r0) close_range(r10, 0xffffffffffffffff, 0x0) 10.716088839s ago: executing program 4 (id=1902): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f00000001c0)) munlock(&(0x7f0000ddc000/0x4000)=nil, 0x4000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 9.223644609s ago: executing program 3 (id=1909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000200025a727bd7000fddbdf250a0000cdff00000102000100080006000000000014000300776c616e0000000800"], 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x45, 0x0, 0x0, 0x7fff0000}]}) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000063c0)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000040)="f01fd163334a3cb8a57e5b33d3e4eab5", 0x10}, {&(0x7f0000000400)="835c65ee122ea57127a09cd971059dec838c9d885fbe87c5306127700a1309ffb4e50c561b28bf69e92b68c7fcce11c65aa734cc57ca9ac00967befd0ba9c40615f1fd8b3b63ad8ae53c713e2e9397b9d69eb1bdb7de9da78f293164a7060c65f03bdc1889", 0x65}, {&(0x7f0000000180)="5552dc325a6608219b0a1b98c6f47a8310cdd9fd1b53485ae9ec687ea062edbcf5ec97138eb9004b8ecf5ea481454585fbc967372a98bddcfd2548ecc7fc74", 0x3f}, {&(0x7f00000004c0)="b523d11b1f68dc39623188432d64c905f938d7d6945f4703fef84fa4744c6987acdab055adf09114c3d04919", 0x2c}], 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000300000001000000", @ANYRES32=r4, @ANYRES32=r5], 0x18, 0x4}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="02f557acb390dca243d9283797b0f84a086bc9dec46b9ffc1162be35be0a24e8efd5186a9bcfb0fc6ed1c1675c78bc0bbb8cc7a2c60164460c0126fbe11a60a51cff79a1ce6868d1289366288823d4a4bbd49cf91c36e39be7984543688ca4e70f37c05abbc9555ae3b5a42d958f887a1c57454bfdbb5e5cb49de3141b501912d83159a529586b15f71da96eb9216a367305d5651996f5fcce67b27c927e91c913b979297324cbe5fdb33d4ffd47053f5a7a0c3f5d066519912224fe331c0a47379c5fc0f78deaf44e0adb334298cf86093fd2aecfb98a", 0xd7}], 0x1, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000007c0)="c90f7970244f139f4b22acdbb3b4135a5ff4b729e69bf5210a87bcc3c3f33dfb588712adb6d435b53afc8d772fe8c43e8a1ffac351c849195e449155e51380a2e91fc6dccd499c8c7006a07089802b6b7c66dadfb12f75a6ef549c477fd7427f514ad5b4acf36e5c4f8120538c16a0763c708e9c1a5526dd172e446d115a1554362c61eb21f432cf8a59e7bb7325a8457d778a1ceb3a595a0f64c13120dd1358e489323241169bc0c0cbc15499027386f93c8ed4bd7d7f3f652156206060c83439b9446eed12c515fcb823d06fc0cb8d5c4d6eef3ea9c5b13269037ee6761b89957402e07048", 0xe6}, {&(0x7f00000008c0)="d522806e7b4bfadb934df0ea2ba3069cf6fd0a349b88dfbd6b8130145042c9c32920b5aa6f7749b03147a309e22b10c5940f74d728e21386151788440604d25a6db94507f057070051bfe9834a337cb939f5dc1ba4342ec537f9ab19feb9da2d2214db6ffef70ce016a0389e61b070f630d1f773bd1340c75469cf365de306839198756fb66ff3779c53407e8bb8d9fc4c928212c2d5ab9a246064b584f0f68e149d152e79b78d1142e7eeb3c3bb3433d165e8e26e07c3a5229489968c09c1c3e18d54984865362c884507cf3a33d2a35bb25a9adc6bff2ae1", 0xd9}, {&(0x7f00000009c0)="17384894bf040cc48ef657bdb4d59bb3390f8074586cc0b484dc1ca76f25a049e3d31d1d4861212855303cf4cbe707b6d5618a3fd6a38a33eb0dca8ba4a6066a139fc8d181f4b1488398d0e4fdc5fc3c54ae492edcba43d9a9a29353f869e403cad9b9fbbae219500b6b7be30c1f575bf3d5bd5d14e7ba0df1fe1257d6e8a332a0fbc2fb230aa2a90575089c679249a154f2845661", 0x95}, {&(0x7f0000000a80)="bde5c11c5987c488b101fb93a20b85ac871873357e7d4f6b2c7fed8e3f555b69acb2c77a89490a15b340f2d68ac3c26bd7005fca95e8b22dff9d4f3a1f698229af1ba1acd71eb4374f4f2c3ad341ef680dda842a7f0245b90b33f81660290c2cdac7b781013df2fb3d978353c4af3f703b52a76fb97e651bbbf45077d92c1667dae22c831f9ff68fe5089ad95b14e0e65dc95994318c11dba23ee382de7981fe3bad14c627fd281e52952155012b3c8da67107061a796484e95304e928a2551110b8d289286bb30e0169ab0151", 0xcd}, {&(0x7f0000000b80)="a536ff", 0x3}, {&(0x7f0000000bc0)="a78ec87c0b22ff38c98f6b9500efe5ed8f9f4e3daf927f94563559ebdaa5a4c6d2cfd6a797b8f92d3e3e31e432741e98a69ae41db6ad771632ae440795f263fc90a7b4c2c68fa217e3ad8e9a9e884d07c2566ffed95a47855d4cc0b3b2183a73cd554930f92ccb67df66a005c596c34001b1e6dacb714ffad98121bbfbb74d10bc16e8bf465c0bcbb4ac7b4ea1d8934f38a39c12b68aaed698c39bce3e53d542bc7db31794cfe646c10145e6edccd01d33e90bb2826514ee5b8f1e68f36e6a0d52ba4b193c6b3e43f74eed206f7c28ba229ee46401c50f3312ca6371da9d0b2ecd635125397d085bc519f9a59ce851e00e7bbc32e8c3ee3467e3076776865fc31fed1e82dd036e1262aedfc1dd6e0763308b61e599548420601ebfa889ccd6eda36400d97c86360ac7414323777e4cab30e66e9f7819adaa76c1d602c930391bd4fa482d4c9267baefdb51d85b8d5b47ff5b806dbe8172bc67ef18097daba7a462b52b2d5bee4201924e4ad20b8900dea56e500b2c1d366e10e4dba8a22d280de256a46a312cf98ec79766e2d8543f12986e17e352e96891773cc5ee842056e3ba642289a0f6df0a3f45766249c89cdf576fbea6ed1e93a8b29801a5b082b4824a32875aeda2ce97170aabc015cb8d1f45a10a775410ad2dac0429714bef7e6d742ed1dd7a62ee1c5fed921af3dcdbfe290afad479fd2c47cc006ca1155566b7fbca700da9c1f0049b42c534eb9526565304f6b85b39184ef8bf7838550ffb183ed3c9456778cd051e9bccd46fb1caff0bf6fa222f7eb173986eb34b2991f8b02f1a397288a1bc02bc867aa88bf29bed2ad664f32f9d4092bd941250b91e7502d5c7d78c90bdb93b4cd28419f963983743b1f2dbc0db839837eb3a2478af4fd2ad7c15e8c4254b75ac42c90e1cc1c5cfa7c6735a18a8432c3d0c9efbd53b51d0b94d31de73f5004b3e06d66377d12719392a63fce4e77b3c5600f9287b843b6a34a1a0b7d2b885720e529ec73c74c3b634310d52cc3c9da81838c6a67762db4a352d6151d35fdb61da2753cb4ade3eb61110408867293886e0fbbbd16ec81e977bdd218ea45f44ed4812e7596de6739aa1067cf372bdaf4b94baaab9a355a378109f1e32249a7d0f9de6e0e8b47dca1db72337cb0a77abe0d0810da6727bdf97625d1b339f37d9768c91134f347b71062bec4d213677d623e5c4eef02febb6bbda485942f79db0a2409d56f0bfc081a68d37ad70e014dd1a590c7b0ee5d0503c9c448a6f61f6e64bda7b0fb2a3c45b80b91c1b8d0171d0c1368244923e56dd9acaeff4bfed806333088ee4fa893183502b39bbf060e5b1673b5710540e1f758acf6558bfea26e90e8ba0d304b17c62e1d884acccd509279556e9fb41f46581a50cd89c3e7fc6cb643f7e1b9efbb77474b94d11b43a3cf0539d9f16d7eba1c2f91b339ae07f473377cc565e05990ba7760739840fac3707f6864ab897dc2268becd286169954155c7563f7abf843175e91a1b167242d1c72914c7572bd733eb3e4b8900b22df8940bcd629c00824e7909a25d329530cc7ea677f93229a59b326cd09cf9f6e3277b7165abf9d98655410ac0d001b47b10eca962b9d6acffbad9bf79577c15e9ae1afbb626e0eabfafcf5b329667baed126a7eb98ec638439b758a9bf28fa42fbe738d48b12bd085da4307712fe3235d2d1221c71ade9e18fe34591803c64bad1920fd3abf7109b7a756b93bc240189b6ebf20fac6c54bb4014f0f5eed6c70f2207ed3d71ff71803ba35286c8033b4e7c2f20871dd79f0da4d872ec1eb2c84a93a882f5974038da813bafb247f2f7ec8fb848977c57fd989d575db17a7f156c732aa16482511f40ca0d89df0da7b2da633e96d001ce6f222607bab167b6cead21e33a2516892a20a15e9fd4e8c1168db657f740789330ac9a1e6f4e7c4ebd6f474bac6b85e52a00f1936d4734d8f6cb49272102c10649c2f29ce52a9de02254ef91f8a8f42a18b2ac9d890e2b022868d948eea7dc4cc53669f4732b84ec906f1c789f710cdddfab4b5a1a176e814c51b05e2585136a25abb3b951e4fca71dbc00dd052be1e0a9e5f99a4c290c674a6608b347a0ab6ce56da07e3f2fec631a20f81b99a9b097868100f82082c797b6ee1c2e1b5561bb2366ee0540018603f20344af5fa9756d802225d9db2677cdb8c6a5ba2c38769c812ac1e9d89607c3f1aa5b109102a4aca3156ebb64d5fc373c660eec700004367065a8d46e5758c19faf4729828eb1bbae2a997d435f9282fa726c371d142673f7e43cc0f0530e86d91b00fdd4bcb658ecd157017ed2e6bd3980efc6a401170f62fc278d803fdd5b625ad095ac94fa7d0e9cda413e86dbf5145f616223451e76e78be1608231ae363507e22a05b4d1ac54fa2dfa9e990eae4f9d36f6e00f042f68396e622723d70dff7ed977748034a1028b0fc4555ee517fedecadb7320c94ca0a5839591d190ddc5d547b86eaa0eba08d06aa62168865801fb4790072286242bc0485991dfbbb1eaa2c5550296681ec3710b2e7c62ffc839d4e466cbd1575f4f00156b6b6b62dc888a68b59dc82f8737fba03d7d94ba194da8964d203d6ef967e33a5fb143acc3466e6dec29f20f85b6ac08fb6b265a84100bde67a0906650c942f30c5962025add9e2aef3ca4545f5e891fec833856067358c349954114a3f17a28b4c2e951fc29acab813b366226503d09b15c8de78025c5897775ae53699f24a49502a64daaa246329b8749ce489798ea81356af2b4b3fb5fe97a7e481258ef088d490ad7bc1d86e8d36275f43e3059cccbb95bfccdc938a5fa7a35868e740527e4eef34f176cde60c374675ad1ff4d430ca3cce3c9369f2e36604af6d3e072d4ddc1b65526c72e73e70103f065df671a62710060f8139af0eada16008dca773a6d03790a0d844ab1e992adb2013548aa518477d2ad42913db066393514f4d869df5d5a07d43a35c42fe6e0d4f58a68db5ae278eb53a1629c89418bbd32eca4b158fcf13a5c9754bb3e1125fde682ef2cde32d13fbb2173484717a340d58a2062f8728afc47b0ce79544c39fdb7b950359d8acf209e6228992b913f6cd29bf9116808a54f773f7cff0bf62759f18438a1f7e49529381d0e7d4fafadbdc62cd469dad433f1dbcfb4e9349620d724f3bff087602fb8014cfd5d8ce47975673a67d75d0b86b76f2899de429f74b2852b5e56566bcae85376de40940892ee326de0adc54e41f318c128b933eb31e74bce0e6d7376c06494c3fe1553e60533689f3dd93196480e5076ed12656b1ec70318da4b9fbbf890f8dc4f16250a5bfa52a6c8de3c33254598829a49ac6a64e34de56f7e9b47e3a219df81d5db527d04f0b5c2c27d3a9e3ac60676b79f2fa9aa70b3f7d33dcbecc964317bcb770f68754cf6985a9839a5bdc8459a38d61f473a88d12a5de09d3ca449f0471ba991bb33559ae3bfe6d1378266fcd014b31da0b5238ea4f47c9e63395f830dd4af9c6c8823447744fb59e6eff6d647edb9f4040d1c5f3cb0ed133a4a7524930e7e75aad4c8af1c64b360c22bd1bde88e88c346afd594341923dae306ed34a20143e0e2de51b9dff358fca9758a99a979c7ddd6db75cb4861d33040f6b704210223a23354402ad69ba67e4e8c722bacc187c9ea3363b26c09829d9315d7991ce78caaf1ad4b1830bf3a830b100dd74d029a9c553df9afe9d5720916fe8c27a0c0a9f75148c3b0ca3d40519d0a79384368d6df42d2d457d035338d9b864e61075191b5303774e7ee54d6a6d5fa4dbee3555e24c179ba8590e9df001c52f059834a9f1f445c2f514b09ab4a9500de7fc476f28a76a0bdce764e926fcc9b23c98969564edae391d8300df17dc8bfc0b43e3bf5c59a530b12614587cc99a2117a1e9f055d34e9873cb23523780f720b33adf75ab873529e28d4b9ff7291508e0a57141fb830193bdea59c21d92a6a365a23ae077b4ae4528a5bc7d7ee25e1929916e929759b9d085a35234617321cc67bfd55a854896847f01b5dfbc6365fc97f7939a5f14f516dcb99b9050944f23e71675f77015d86d8996e972af57b6e86dc17d11b3d7a979bda4dbf13c3fc3fbfb4e0d4abebee9d06d21e3db410b631ce675da75eec12ab72123101cb8b9bfbfd2b736ccca07c43504f338e10df47cec69cd5186fba1f24107363dd2d0455a4d58aa32fa503f282418edfd6418eecaee060459fc97f8f67668090f379209a92919a8118890fe94b9789ab6dc9ee373ce13c7fb54b5e3ae749936cf98f2d8a51e7aba2f4ae5c97cdbab18aa2c2601c4972424f479905ebd8fd81d8cb9b26f5085d6e1f1a21c06d53a7d0d3223a851289ed442ec34a73f36e28d9df5721cede1cc7da86c0ed2d82a7ec450b12367061a741697a7bdb532952075464decebdf2180db1fe01fceca124f5a1e4cd93e8102226d072bb4059dfaf30a89cb793d47b05f82045efbee218f062e44c20ef64caa343e0c71486ef302eb7ed7db4bbf29d385d7b28d571391f866dde1bb3af5ea163851a030017ce5db75b80fe6e011bef45a613af6fa4c4e818c40a58e5d643f2e1cc764b4d16f64cc6331bcc2037ee9955e733c92c7f1c4263cf36c5c47114b6d90398fc12cdb9375e3385ee82149fd874ebd491ddda0cc7f57cea8d4c099b708abb6ae64203f2b8c72f05bb25ed5760fac936b941c20fa6a99763c06b3b57b228c1e6c77558fca40f3bd7eec49ff344d34e2b801488e4c6fe709a2f5723bb70ef96d6699c2e120719d4ae7a2e8a35f26cdaef50c5245eb5b77aec1e5441501e701264d61dca2d05dd039b3e0696ce42568c5a8e8a268b3e32399c607495b9b61d9f1f197f654a8f114a980782381171812f41466f691047782ed33b698ae25266a7d6a4dec6c09a8d51f79710ccf450dfd4fc697a0175452650ba2819638c7a6611cde4baad2f6c83f311b96ca9d273b296bd5af739058353a851498030ee1057cd34db180881c7b486004881501d10a4047705c8b349fc87ad67040f515c6eaf11c0ed0197f920e878d0c7aa406f4056155e9a8b5606850a55feebfcb4da06515b1ec682b151771d3a2867499bc5ea53c3530f507542483b98d735a8a2d730261fcde0cb72c3cc1081ed93be84ae1d589b39db17e8b5efc1cb6f414c9ea68f64bf2a36e9db1027a34953a7a97b46587bee317f07de3780adbdd6cd689bb9483f9aab2dd90e29f9671c08e3823373c67de825eff69ce7f27b6645aa3df299b8b2fa99bd21b292625edc83a1fa277d0a6028a5d8a1bb67f5802f36b53b08dd2687b057b7a9c3e11475ceed61bbedde82729667ad93acb62fcf683f32a8c16485c7a35dc1e1e669244b4116160582de266dc2e60a5c512818259291b3f7eff17095be07871d8711014818abc5152b309204b2b12091c68001f4f2c1b6adee43410cdc50abb171a2ccc816122f13db4e3ffd85143b359f03c54643fffcd86e42aeedfccf65dd19bca07bc187594a388b4c1c0ab19bbac84ab938fb1f299d5a0528c8c3718bef1aa17d0ec776853ea40fa1589b787bf8e971b9bf1709bee2f13d7f2a52a5a6c8047236bc759c9b6d6bd09c866b1acfb6bdc51879f13b60074db4635d5451b21e18a401c719d0743473e4f693a24b6ee1706859dd4aead7f35a45fd2cc4feb3a2dec144f92b6d4d5bf95b33a2d24ee1de3502235e123f520765a3ec2191afd712ee2bd76a676fb17aba42f5a508e9cd3af22de1431e7c8f90f7d544de4477b4d12ceba56a2d29b280ec30d", 0x1000}, {&(0x7f0000001bc0)="7819892dc37620240b52891a5a6a3c2977bcdb13303f506bc3e607061f5d7ca2757d", 0x22}], 0x7, &(0x7f0000001e40)=[@rights={{0x30, 0x1, 0x1, [r7, r6, r1, r0, r4, r4, r0, r1]}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r7, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c}}], 0xd8, 0x4}}, {{&(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001fc0)="db011adb4047305e04ec61b8fcd548cbdc6c076b71df2356d742d197049126bd4a0e264cb6e12b881bd49d15589a752064f63fca30714183d1b703b1883e0f27c343954ffc5063999358c193e4ddb40477b2f65252e286968e33cbc8d6bdf8c4aed0a74614e6604b4bafc101f3a285e5ce9a7e", 0x73}, {&(0x7f0000002040)="8bbdd2f0d7989b3b5de25f3d060a7bd4da7279ec31f8e84a257b1e51cc74e8838a7d610a2978a311fa6d2e3d456b18d57d98e01d33f1fc8aac87f56ed058dc980b8016deff6ae8d33c2e0b9712233f9ee23d060231e844c50f73d33bb99c1028c5bd52e39d21ebbbb57229cefd58580a8dd149104fbfaf4111bf49f6b4641b9a1c7f5e91da6d5b510986a7ad70d0f49de998635f99fcf180ca7b11e344621990b06b82badb78be82731c7a89eb3c0fd1b1ef", 0xb2}, {&(0x7f0000002100)="fe8418e0b8741ee4e5e1691b59ac09f280657ad056435a16b6256e345b9dcf28329445b5b59ebe5a41f42caab428302c71b6c2f2e6ec3fac05cfa72f6ade0a80de9691149a974af8b60922fbba6dc3c84a2eb718a509daed07c4781dc8e749adb3abcc7bae4d22230e109a315615ef6a7c6838b177111977cc94a3e3", 0x7c}], 0x3, &(0x7f0000002240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, r4, r2]}}, @rights={{0x34, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r4, r5, r6, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @cred={{0xffffffffffffffe1}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r0, r3, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r5, r1]}}], 0x150, 0x80}}, {{&(0x7f00000023c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000002440)="ffd6c412a6fa2b43c68fe660f429cf40efdb488c37fe95cd4f874c5fb60d30fec5c839bae93ca61ffce8dbdb7baa925cb109493bffdff9f6ce727b276f3084adec2ffbe191a0bf22389450ab5aa003de79e62848e59c9602d5c93a7cd3a559", 0x5f}, {&(0x7f00000024c0)="cc4eb13fed07eafd42a769e89db9156ac8706379a141a2c3fd347cc72ca4b42bcdd939d02f11920bfdae8241a65e51405ed6cb7daa32b8d1843a45c17e6115a3382ee808219fd7c93e66ed82151d4b3e38b722b459858771fd44691774acdee4d3f16868ba105cadfcb5a0ea", 0x6c}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="f9eff8700f5596691d3e9c5d3b69c6dc843406753c70c552f74038151ae5df5e62517d200daf7f1b6261038de2550027538c585dc0d6296437f1fc785a7cec89fa10de986ac21c8ff670d3b937be9aef48b5bdc10e507f0e975c3979ed7b7d2587d777618f2adff79661a4b9990064d59e6cd4afef6538833f2109580f78e43f714d4f9e3d96549c2bc4cc8f5928e944806206a93993bf3379d4e29dd8a0baa39e0acbefadc7646439b415aca7c8257f1a7eeb99c44ecf8aa59016e44070c0db0375cd1870252b21d0f9780cba4ded2e2d21353ff18743ba3af0c0d3", 0xdc}, {&(0x7f0000003640)="92dc8466d30a986f2c98bcc54e198c1cf85cab38216274286c6800b1cd3c54440c833495a4e444b1748b2f095db4cf3c4c", 0x31}, {&(0x7f0000003680)="08b23646fd5add746a58fb8cedb930b549f6519eb9ccee6ad2e4dc6f2ab68d65059aecb7bfbf2ad219c9741671ff690370dc7053e08b9aaeed04901be2aeb19212b84c1ed5492a180a6af2e68e9f4d45e4aec5c970a9944e6ca02896e6a55fbe3bb6c04b48026f246947ae74344b379e17579d2dc658f620f1217a7b722ba39dd4a94d4b7c59c99dfd3f18bf337b5fa34823c301252edde9ee7364d5b87e5e9964fcfd5104834ab116fde5c575db5f640f0fa946e2e71a223b94ccbe74db76af7793bd614fa3c9cc97b06397ba09d807535927a4c99f7bb84cdfb966b0a016e33b18ba9f13cff84ac00794d991d1deaa", 0xf0}, {&(0x7f0000003780)="676900fc1d0f77b026", 0x9}, {&(0x7f00000037c0)="759bcd48905a56acfb920de42ba0d2d3b1ac626dd015154c6e97aef07f9884cff7d5a7216ab050a3b436659bb1323e02a6636fdf34b1100a0f53203ff337f62493d05ae61676b9a0d9e9695d6d15d1a621a2674fb63c14e687537330cf6ac3a5c282557318c0b1e1a968527f86f83823", 0x70}, {&(0x7f0000003840)="35dcada906fd07be48d5c7c0a3955eed800164b7556f7b6d0d037583093b0796c6dd42ec2c82d5bbd90807e93820b299a2d199816756d669f18a5d8ff5bf288fdbf4e86527044a1662ba64e1b00f5375472d8503f17331b4780b30c12b15ed0de85a8d13705826c09aa7171c0f8241e6185a1d9e811991ec995c04bb6c0591037d1fd9c8e4a4f2892d13f30fbc786e0959930df917e15e80378c2a9a5e88e6c0f9696054ceb9b5dffa1359c10813a233a6280a06d61f34f5df835b1ceaa2016e174d026c16f1cec281940ede762309d8984c9db2c2d74ca8644b766c8bc878150b5ba1a5c3fe8eb8a6a9d5", 0xeb}, {&(0x7f0000003940)="d3d8ad4d10198951df4f001e889b78efb9d3f42ce4ae1cb48e44c1aa3d859e2819b7a2f59bd87c20c67cd5b9d530c31471ce40618cfe6542730b88f0b126161bf454b59b266c0537edc8a268a7542f1dcf7762137b2dd0d4f6ffffd82fbc4d3076e9da23f7578a904cf98a96069c7fc767f1a20e857c24e295ab2feb37d35fffbe3a5964b356b16e983e7fcd2376bf58a504e83d89fa88708df5c252da6355d0018f5581a32479fba2d74ea2ee5373", 0xaf}], 0xa, &(0x7f0000003c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e600000028000000000000004400000001000900000000000000ca00146c8478c04862f6c454e939d2790000000000000000000000000000009e8f55b9b6ca3376263fcb7268659c75b5a45031fe8373d2891fa9f66fb1e4dc4be88c8c8c59a8d1819efeef0c8d3373e5", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x20049844}}], 0x5, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, 0x0, 0x0, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r11, 0x84, 0x82, &(0x7f0000000200), 0x8) socket$netlink(0x10, 0x3, 0x0) 8.136276903s ago: executing program 3 (id=1912): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000018a2bae000824020100020000092402020000000000090585dadb"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.767537566s ago: executing program 0 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4d9, 0xa070, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="401007000044af5e6c6d0a611d"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf250300000008000600ac1414bb06000a004e21000008000b00", @ANYRES32=0x0, @ANYBLOB="060001004e"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x24040024) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40041}, 0x40844) 6.783175982s ago: executing program 2 (id=1918): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1e8301, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x3, 0x41}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x2400, &(0x7f0000000240)={0x0, 0xbe44, 0x10000, 0xffffffff, 0x2be, 0x0, r0}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 6.602614358s ago: executing program 2 (id=1919): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) syz_usb_connect(0x4, 0x24, 0x0, 0x0) io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0x1ff, 0x2000, 0x2, 0x228}) 6.100045278s ago: executing program 1 (id=1920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf250b0000000f0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0f0000000000000700000000794650000000020003000700000009030000380000007cffffff0e00000000002000000006000000000000"], 0x38) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 5.336527237s ago: executing program 1 (id=1921): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4f}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0x48}, @timestamp={0x44, 0x4, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x89901) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x40800000000000, 0x7, 0x48}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4f}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) inotify_init() (async) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0x48}, @timestamp={0x44, 0x4, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) open_tree(0xffffffffffffff9c, 0x0, 0x89901) (async) open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x89901) (async) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x40800000000000, 0x7, 0x48}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) 4.823039754s ago: executing program 3 (id=1922): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r2, &(0x7f00000002c0)=""/124, 0x7c, 0x7) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000380)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000200)=0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) unshare(0x42000000) r7 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, 0x0) 4.559969854s ago: executing program 0 (id=1923): r0 = socket$packet(0x11, 0x3, 0x300) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) msgsnd(0x0, &(0x7f0000000040)=ANY=[], 0x8, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) (async) r3 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) fcntl$setlease(r3, 0x400, 0x0) open(&(0x7f0000000140)='./file0/file0\x00', 0x40000, 0x40) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001e00010d040000000000000007000000", @ANYRES32=0x0, @ANYBLOB="01a000000150040008000a"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2717, 0x0, 0x0) (async) syz_emit_ethernet(0x104, &(0x7f00000007c0)=ANY=[], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000002c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0x7c}) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) fcntl$getown(r2, 0x9) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'ip6gre0\x00'}) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x10000}, 0x1c) 3.882652544s ago: executing program 4 (id=1924): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000004c0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @initial, {0x3, 0x40}}, 0x18, 0x5, @random=0xa9, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x6f, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x0, 0xc0}}}, 0x3a) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff0600ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x486, 0x185, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4e, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0xc3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x9, 0x6}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x3, 0x9, 0x5, 0x8, 0x10}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x500a}}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x1, 0x9, 0x8, 0x4, 0x5, 0x6}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRESDEC=r2, @ANYRES64=r2]) 3.726883358s ago: executing program 1 (id=1925): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6fc9}}, './file0\x00'}) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1, 0x9, 0x101, 0x0, 0x0, {0xb, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfb}, @NFCTH_STATUS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040004}, 0x40024) r1 = socket$can_j1939(0x1d, 0x2, 0x7) lseek(0xffffffffffffffff, 0x7, 0x0) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1, &(0x7f00000002c0)=""/224, 0xe0}, 0x8001}, {{&(0x7f00000003c0)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000500)=""/158, 0x9e}], 0x2, &(0x7f0000000600)=""/105, 0x69}, 0x2}, {{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=""/157, 0x9d}, 0x48dbe9d}], 0x3, 0x2120, &(0x7f0000000840)={0x0, 0x989680}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000008c0)={'nat\x00', 0x0, 0x0, 0x0, [0xa3, 0x4, 0x97, 0x4, 0x401, 0xe], 0x1, &(0x7f0000000880), 0x0, [{}]}, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000980)=0xa888, 0x4) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f00000009c0), 0xa2440, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r3, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000a00)={0x0, 0x6, {0x7, @usage=0xc, 0x0, 0x82, 0x4, 0x18, 0xfffffffffffffffb, 0x6, 0xc0, @struct={0x7ff, 0xfffffe00}, 0x8000, 0x4, [0x23, 0xff, 0x7, 0x400, 0x8000, 0x5]}, {0x508, @struct={0x8, 0x4}, 0x0, 0x22, 0x5, 0x0, 0x10000, 0x6, 0xe0, @usage=0x7, 0x338, 0x5, [0x5c84, 0xa0, 0x100000001, 0x2af4, 0x21be, 0x400]}, {0xc, @usage=0x4, 0x0, 0x6, 0xd26, 0x7, 0x1, 0xc, 0x50, @usage=0x6, 0x3, 0xdd3f, [0x4, 0x2c5, 0x80000001, 0x400, 0xebdc, 0x3151]}, {0x7fff, 0xdf08, 0x6}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000e00)={r4, "9b394875c7661a2c6b456aea97ce3682"}) ioctl$KVM_GET_TSC_KHZ_cpu(r0, 0xaea3) getsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000001e00), &(0x7f0000001e40)=0x4) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$nl_generic(r0, &(0x7f0000002040)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002000)={&(0x7f0000001ec0)={0x138, 0x25, 0x0, 0x70bd29, 0x25dfdbff, {0x11}, [@typed={0x4, 0xce}, @nested={0x120, 0x38, 0x0, 0x1, [@typed={0x4, 0x32, 0x0, 0x0, @binary}, @generic="5fd85aa2ae8b20f26fe690a6dd4a2648efcdaf635f92b4c49a42f610e018cbe9367d1ccbe7368808341e6660f0133560020aec477adf48eb7c1ce0a85adc5c29c03c62a4a63f2e61ca1e54f96b9536b8a3bb9836ccd0882ede5a40865ffefcb75c16b739b57e2d2d63d0d8471427d96932afe30d1f5a24320dd0255c2928c7429882c3c82b6f9c9797008ed8cf0af09adffe271f2fbfe6b3", @nested={0x4, 0xff}, @nested={0x4, 0x29}, @nested={0x4, 0x6a}, @typed={0x73, 0x38, 0x0, 0x0, @binary="4d6c680270e40c3478feccf0c8b37a2112627d5983b34fa94c165c9c731c58786513a78c3a2eca55c73f3b8ebfc67de9174d68afc405f6bb1dbd52eae37f0e07fd068911ccb9583851cf97b76bf63d886ea2b0de89a79d68cf30dbf049c25b08a1f227b8ac962723aa4cc769b500ef"}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x80000}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) getpeername$inet6(r0, &(0x7f0000002080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000020c0)=0x1c) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002100), 0x200101, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x811, r5, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000002140)=0x6, 0x1, 0x1) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000002180)={0x5, 0x5, 0x8000}, 0x10) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f00000021c0)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000002200)=0xff, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000002240)={0x0, 0x101}, 0x8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000002280)={0x8, 0x59, {0x0}, {0xee00}, 0x80, 0x7}) prlimit64(r6, 0x0, &(0x7f00000022c0)={0x8000, 0x8}, &(0x7f0000002300)) getsockname$packet(r0, &(0x7f0000002340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002380)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000023c0)={@loopback, 0x36, r7}) 3.440048038s ago: executing program 1 (id=1926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000010100118008000100307f00000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2804c015}, 0x240c8800) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x7, 0xffe0}, {0xfff3, 0xfff1}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) 3.322904028s ago: executing program 2 (id=1927): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000f44000/0x1000)=nil, 0x1000, 0x2, 0x100010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 3.195969066s ago: executing program 3 (id=1928): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008a61d000000", 0x24) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB='fd='], 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r6, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) name_to_handle_at(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="2000000062000000008000000000000008000000000000005cf600000900000005000000000000002d3242904ae172932b614772208c5e2a3567907878622b314bcbac6103658b6c2dfbbb0d452fd69e224ded8268a12077448f361392ae4b93c5767f73cc833d3a27f7b6d6dd98346b26994d447c4e73e10d22da1fa70294b56766c67d03563131f849c98beb20f0547b2e07123a1a47f583f37188b8ad855727b0aa396b017b79c129bab6020c9b1c83c7267df4fb3d"], &(0x7f0000000380), 0x1000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xa}}, './file0\x00'}) syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2) r10 = getuid() syz_open_dev$vbi(&(0x7f0000000280), 0x2, 0x2) setsockopt$inet6_tcp_int(r9, 0x6, 0x24, &(0x7f00000003c0)=0xfffffff4, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r10, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) 2.972018284s ago: executing program 0 (id=1929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in6=@remote, 0x0, 0x8, 0xffff, 0x0, 0xa, 0x50, 0x0, 0x87}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2}, {0x0, 0x3, 0x8000000}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xff}, 0xa, @in6=@loopback, 0x0, 0x6, 0x2}}, 0xe8) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000ac0)={0x1d}) r2 = getpgid(0x0) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x0, &(0x7f0000000000)) 2.968742842s ago: executing program 1 (id=1930): openat(0xffffffffffffffff, &(0x7f0000004280)='./file0\x00', 0x610140, 0x40) (async) r0 = openat(0xffffffffffffffff, &(0x7f0000004280)='./file0\x00', 0x610140, 0x40) getdents64(r0, 0x0, 0x0) (async) getdents64(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000340)={0x0, &(0x7f0000000300)=[&(0x7f0000000240)="2e399161e187ff58f4feaef5c3716659bbab958c722168411a8519d36de2381d6651345a359d47f5bc2b8e5101162072a299652dd6c70fc823d0e4a252799c050ef19b16f6080dcd3cef6604335a773d78cb1aa6232de9986ff3508c3c17606aee2279acfe"]}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x4, 0x3}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x2, 0x0, 0x3}, 0x2}, 0x18) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x5) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xffeffffe, 0x2, 0x2, 0x4000000}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x80, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0xca326ba43a6172b1}, 0x4) syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) (async) r9 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) ioctl$VIDIOC_LOG_STATUS(r9, 0x5646, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r10, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x1008, 0x10000001, 0xfffffff8, 0x7]}, &(0x7f0000000080)=0x54) 2.794177255s ago: executing program 0 (id=1931): openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x20) 2.613131808s ago: executing program 0 (id=1932): openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x6, 0x141101) socket$inet_smc(0x2b, 0x1, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async, rerun: 64) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) (rerun: 64) preadv(r6, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') (rerun: 64) preadv(r7, 0x0, 0x0, 0xc9, 0x1) (async) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pread64(r5, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) set_mempolicy(0x3, 0x0, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, 0x0) 2.416019895s ago: executing program 3 (id=1933): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(r1, &(0x7f00000000c0)=0x3, r0, &(0x7f0000000140)=0x2b4d, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93", 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r5) 1.883464426s ago: executing program 2 (id=1934): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) rmdir(&(0x7f00000002c0)='./cgroup/../file0\x00') r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) getsockname$unix(r2, &(0x7f0000000080), &(0x7f0000000140)=0x6e) 1.477556432s ago: executing program 2 (id=1935): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1e8301, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x3, 0x41}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x2400, &(0x7f0000000240)={0x0, 0xbe44, 0x10000, 0xffffffff, 0x2be, 0x0, r1}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) 1.374207233s ago: executing program 0 (id=1936): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0xa, 0x6, '\x00', 0x80001f8630ad}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000340)={0x1e0003, 0x0, [0x800, 0xff, 0xfffffffffffffff7, 0x3e00000000000000, 0x10004, 0x46a9, 0x9, 0x8]}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r10, 0x1) kcmp(r9, r8, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r11, 0x4018aebd, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0xffffffff}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x1a, 0x0}, 0x4040095) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYRES32=r12, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x4001}, 0x90dcd2ef3c7140bc) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) 1.211067922s ago: executing program 2 (id=1937): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) faccessat(0xffffffffffffffff, 0x0, 0x0) munlockall() munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) fsopen(0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB]) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x4, 0x1, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x2, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0xfe, 0x9, 0x0, "6a77ec24"}, 0x0, 0x1, {0x0}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c000140"], 0x92fc}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 435.792858ms ago: executing program 4 (id=1938): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x1d0}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, 0x0, 0x18}) io_uring_enter(r3, 0x6f58, 0x0, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111, 0x2}}, 0x20) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, 0x0, &(0x7f0000000240)=0x54) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r8, &(0x7f0000000100)='./file0\x00', 0x245) r9 = open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$TIOCGSOFTCAR(r9, 0x5419, &(0x7f00000000c0)) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') pread64(r10, &(0x7f0000001600)=""/4103, 0x1007, 0x99) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x40020, 0x5002}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0xa}}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd7b7}, @IFLA_PHYS_PORT_ID={0x16, 0x22, "3268346a3eaebbc6f1fecd23e2d9c613a919"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip6gre0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 284.440589ms ago: executing program 3 (id=1939): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000140)={r6, 0x0, 0x0, 0x9, 0xc, 0x8, 0x2, 0x80000001, 0x3a, 0x5, 0xfffffff9, 0x80000000}) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0x6}, 0xc) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f3, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r7, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x40000) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0x8) preadv(r1, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1, 0x8, 0x10) 0s ago: executing program 1 (id=1940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x44, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6afbc267e1742fa0baeb3a05c", 0x1d}, {&(0x7f0000000540)="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", 0x224}], 0x2}}], 0x1, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x20, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1001) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3e, 0xd1, 0x14, 0x10, 0x16ca, 0x1502, 0x5c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x2, 0x0, 0xd2, 0x2c, 0xa3}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): g 0 has no interface number 0 [ 574.656652][ T5941] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 574.669115][ T5941] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 574.701921][ T5941] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 574.721994][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.736727][ T5941] usb 4-1: Product: syz [ 574.741035][ T5941] usb 4-1: Manufacturer: syz [ 574.745801][ T5941] usb 4-1: SerialNumber: syz [ 574.767045][ T5941] usb 4-1: config 0 descriptor?? [ 574.789741][ T5941] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 574.867535][ T5941] usb 5-1: USB disconnect, device number 78 [ 575.284866][ T5941] usb 4-1: USB disconnect, device number 100 [ 575.766705][T12060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1526'. [ 576.101110][ T5957] usb 2-1: USB disconnect, device number 113 [ 576.167207][T12067] IPVS: set_ctl: invalid protocol: 448 0.32.0.0:1280 [ 576.295288][T12075] kvm: pic: non byte write [ 576.300045][ T24] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 576.467540][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 576.490952][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 576.508673][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 576.515816][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.526784][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.534600][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 576.560224][ T24] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 576.573613][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.582041][ T24] usb 4-1: Product: syz [ 576.592328][ T24] usb 4-1: Manufacturer: syz [ 576.602482][ T24] usb 4-1: SerialNumber: syz [ 576.628738][ T24] usb 4-1: config 0 descriptor?? [ 576.744603][ T30] audit: type=1326 audit(1755210453.783:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd78ebe9 code=0x7ffc0000 [ 576.782465][ T30] audit: type=1326 audit(1755210453.823:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd78ebe9 code=0x7ffc0000 [ 576.822144][ T30] audit: type=1326 audit(1755210453.863:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbabd78d457 code=0x7ffc0000 [ 576.855556][ T30] audit: type=1326 audit(1755210453.863:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd78ebe9 code=0x7ffc0000 [ 576.878418][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 576.912042][ T24] usb 4-1: USB disconnect, device number 101 [ 576.977810][ T30] audit: type=1326 audit(1755210453.863:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd78ebe9 code=0x7ffc0000 [ 577.003935][ T30] audit: type=1326 audit(1755210453.893:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fbabd78ebe9 code=0x7ffc0000 [ 577.035837][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 577.049953][ T30] audit: type=1326 audit(1755210453.893:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd78ebe9 code=0x7ffc0000 [ 577.053144][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 577.083195][ T30] audit: type=1326 audit(1755210453.893:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbabd78ebe9 code=0x7ffc0000 [ 577.113858][ T30] audit: type=1326 audit(1755210453.893:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd78ebe9 code=0x7ffc0000 [ 577.126549][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.145015][ T30] audit: type=1326 audit(1755210453.893:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbabd78ebe9 code=0x7ffc0000 [ 577.195627][ T10] usb 2-1: Product: syz [ 577.199862][ T10] usb 2-1: Manufacturer: syz [ 577.204588][ T10] usb 2-1: SerialNumber: syz [ 577.222472][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 577.229474][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 577.412426][T12098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.435323][ T24] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 577.435827][T12098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.604996][ T24] usb 1-1: device descriptor read/64, error -71 [ 577.667898][T12085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.678110][T12085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.699240][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 577.706402][ T10] r8152-cfgselector 2-1: bad CDC descriptors [ 577.722672][ T10] r8152-cfgselector 2-1: USB disconnect, device number 114 [ 577.855050][ T24] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 577.985020][ T24] usb 1-1: device descriptor read/64, error -71 [ 578.106462][T12119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.109824][ T24] usb usb1-port1: attempt power cycle [ 578.136138][T12119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.168911][T12123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1543'. [ 578.475064][ T24] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 578.505960][ T24] usb 1-1: device descriptor read/8, error -71 [ 578.608978][T12135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.635533][T12135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.725045][ T9902] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 578.745051][ T24] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 578.765839][ T24] usb 1-1: device descriptor read/8, error -71 [ 578.875601][ T24] usb usb1-port1: unable to enumerate USB device [ 578.888061][ T9902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 578.910102][ T9902] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 578.922564][ T9902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.934997][ T9902] usb 4-1: Product: syz [ 578.939299][ T9902] usb 4-1: Manufacturer: syz [ 578.944218][ T9902] usb 4-1: SerialNumber: syz [ 578.960567][ T9902] usb 4-1: config 0 descriptor?? [ 579.187035][T12145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.196331][T12145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.502257][T12151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.514216][T12151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.717042][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.833441][ T9902] usb 4-1: USB disconnect, device number 102 [ 580.197443][T12162] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1553'. [ 580.198343][T12163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.235464][T12163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.345089][ T9902] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 580.615396][ T9902] usb 4-1: Using ep0 maxpacket: 8 [ 580.646646][ T9902] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 580.677047][ T9902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.710020][ T9902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.749831][ T9902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 580.806042][ T9902] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 580.825065][ T9902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.981090][ T9902] usb 4-1: config 0 descriptor?? [ 580.981402][T12171] bridge0: entered promiscuous mode [ 581.041625][T12171] vlan2: entered promiscuous mode [ 581.116201][T12173] FAULT_INJECTION: forcing a failure. [ 581.116201][T12173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.186034][T12173] CPU: 1 UID: 0 PID: 12173 Comm: syz.1.1557 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 581.186068][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.186080][T12173] Call Trace: [ 581.186088][T12173] [ 581.186097][T12173] dump_stack_lvl+0x189/0x250 [ 581.186126][T12173] ? __pfx____ratelimit+0x10/0x10 [ 581.186153][T12173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.186173][T12173] ? __pfx__printk+0x10/0x10 [ 581.186198][T12173] ? __might_fault+0xb0/0x130 [ 581.186239][T12173] should_fail_ex+0x414/0x560 [ 581.186272][T12173] _copy_from_user+0x2d/0xb0 [ 581.186297][T12173] ___sys_sendmsg+0x158/0x2a0 [ 581.186324][T12173] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.186383][T12173] ? __fget_files+0x2a/0x420 [ 581.186409][T12173] ? __fget_files+0x3a0/0x420 [ 581.186438][T12173] __x64_sys_sendmsg+0x19b/0x260 [ 581.186463][T12173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 581.186504][T12173] ? do_syscall_64+0xbe/0x3b0 [ 581.186538][T12173] do_syscall_64+0xfa/0x3b0 [ 581.186570][T12173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.186591][T12173] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 581.186613][T12173] ? clear_bhb_loop+0x60/0xb0 [ 581.186638][T12173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.186659][T12173] RIP: 0033:0x7fb36158ebe9 [ 581.186678][T12173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.186697][T12173] RSP: 002b:00007fb3623e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.186720][T12173] RAX: ffffffffffffffda RBX: 00007fb3617b5fa0 RCX: 00007fb36158ebe9 [ 581.186735][T12173] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 581.186749][T12173] RBP: 00007fb3623e9090 R08: 0000000000000000 R09: 0000000000000000 [ 581.186762][T12173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.186774][T12173] R13: 00007fb3617b6038 R14: 00007fb3617b5fa0 R15: 00007fb3618dfa28 [ 581.186807][T12173] [ 581.419482][T12153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.860739][T12153] netlink: 42 bytes leftover after parsing attributes in process `syz.3.1551'. [ 582.006826][ T9902] usbhid 4-1:0.0: can't add hid device: -71 [ 582.012911][ T9902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 582.032754][ T9902] usb 4-1: USB disconnect, device number 103 [ 582.163000][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 582.275652][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.286277][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.560458][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.569290][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.171161][T12184] delete_channel: no stack [ 583.578886][T12211] bond0: entered promiscuous mode [ 583.860479][T12211] bond_slave_0: entered promiscuous mode [ 583.879678][T12211] bond_slave_1: entered promiscuous mode [ 583.893181][T12211] bond0: entered allmulticast mode [ 583.901007][T12211] bond_slave_0: entered allmulticast mode [ 583.978034][T12211] bond_slave_1: entered allmulticast mode [ 584.009852][T12211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.065158][ T24] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 584.265414][ T24] usb 1-1: config 0 has no interfaces? [ 584.299055][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 584.308775][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.317056][ T24] usb 1-1: Product: syz [ 584.321819][ T24] usb 1-1: Manufacturer: syz [ 584.338010][ T24] usb 1-1: SerialNumber: syz [ 584.359797][ T24] usb 1-1: config 0 descriptor?? [ 584.659381][T12214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.673648][T12214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.829005][T12224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.895478][T12224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.946323][T12224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.978402][T12224] netlink: 42 bytes leftover after parsing attributes in process `syz.2.1571'. [ 585.478125][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.001972][ T9902] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 587.027205][ T24] usb 1-1: USB disconnect, device number 92 [ 587.104800][T12257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1579'. [ 587.164243][ T9902] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 587.173947][ T9902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.304039][ T9902] usb 4-1: config 0 descriptor?? [ 587.552233][ T9902] usb 4-1: USB disconnect, device number 104 [ 588.008001][T12264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.017853][T12264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.037263][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.053265][ T2961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.263262][T12270] syzkaller1: entered promiscuous mode [ 588.274956][T12270] syzkaller1: entered allmulticast mode [ 588.673731][T12275] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 588.684143][T12275] team0: Port device batadv1 added [ 589.135498][T12279] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1584'. [ 590.215045][ T24] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 590.369504][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 590.386781][ T24] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 590.404074][ T24] usb 2-1: config 0 has no interface number 0 [ 590.433235][ T24] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.518965][ T24] usb 2-1: config 0 interface 85 has no altsetting 0 [ 590.530621][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 590.542234][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.552938][ T24] usb 2-1: Product: syz [ 590.562269][ T24] usb 2-1: Manufacturer: syz [ 590.583396][ T24] usb 2-1: SerialNumber: syz [ 590.603355][ T24] usb 2-1: config 0 descriptor?? [ 590.876528][ T24] appletouch 2-1:0.85: Failed to request geyser raw mode [ 590.901575][ T24] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 590.968440][ T24] usb 2-1: USB disconnect, device number 115 [ 591.059646][T12298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1590'. [ 591.105084][ T10] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 591.238981][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.510967][ T10] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 591.522125][ T10] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.539350][ T10] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 591.555791][ T10] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 591.754136][T12308] netlink: 372 bytes leftover after parsing attributes in process `syz.2.1591'. [ 591.798742][ T10] usb 1-1: Manufacturer: syz [ 591.839111][T12308] netlink: 'syz.2.1591': attribute type 10 has an invalid length. [ 591.853365][ T10] usb 1-1: SerialNumber: syz [ 591.943838][T12308] dummy0: entered promiscuous mode [ 591.949883][T12308] dummy0: entered allmulticast mode [ 591.956184][T12308] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 592.166635][T12315] use of bytesused == 0 is deprecated and will be removed in the future, [ 592.176729][T12315] use the actual size instead. [ 592.840469][ T10] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 592.872126][ T10] usb 1-1: USB disconnect, device number 93 [ 592.960555][T12317] netlink: 'syz.0.1593': attribute type 3 has an invalid length. [ 592.994957][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 593.352288][T12322] tipc: Enabled bearer , priority 0 [ 593.415906][T12323] tipc: Enabling of bearer rejected, already enabled [ 593.447941][T12327] syzkaller0: entered promiscuous mode [ 593.468536][T12327] syzkaller0: entered allmulticast mode [ 593.550299][T12322] tipc: Resetting bearer [ 593.860780][T12333] QAT: failed to copy from user cfg_data. [ 593.872954][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.884975][ T2961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.123326][ T5957] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 594.246512][T12321] tipc: Resetting bearer [ 594.324596][T12321] tipc: Disabling bearer [ 594.340727][ T5957] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 594.349339][ T5957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.366781][ T5957] usb 5-1: config 0 has no interface number 0 [ 594.392952][ T9902] tipc: Node number set to 2156979182 [ 594.417342][ T5957] usb 5-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 594.459080][ T5957] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 594.718959][ T5957] usb 5-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 594.748537][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.771236][ T5957] usb 5-1: Product: syz [ 594.797129][ T5957] usb 5-1: Manufacturer: syz [ 594.817144][ T5957] usb 5-1: SerialNumber: syz [ 594.846934][ T5957] usb 5-1: config 0 descriptor?? [ 594.870597][ T5957] HFC-S_USB 5-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 595.213944][ T5957] usb 5-1: USB disconnect, device number 79 [ 595.390042][T12347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.695024][ T9902] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 595.733726][T12358] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 595.876069][ T9902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 595.917564][ T9902] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 596.021713][ T9902] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.047451][ T9902] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 596.061194][ T9902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.077331][ T9902] usb 2-1: Product: syz [ 596.087746][ T9902] usb 2-1: Manufacturer: syz [ 596.140856][ T9902] usb 2-1: SerialNumber: syz [ 596.353010][ T9902] hub 2-1:1.0: bad descriptor, ignoring hub [ 596.360307][ T9902] hub 2-1:1.0: probe with driver hub failed with error -5 [ 596.541542][T12371] program syz.3.1605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 596.859172][ T9902] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 116 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 597.005499][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.145648][ T10] usb 2-1: USB disconnect, device number 116 [ 598.157206][ T10] usblp0: removed [ 598.290791][T12385] netlink: 4177 bytes leftover after parsing attributes in process `syz.0.1607'. [ 598.302707][T12385] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 598.916373][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.933878][ T9902] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 599.145238][ T9902] usb 2-1: device descriptor read/64, error -71 [ 599.425071][ T9902] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 599.555225][ T9902] usb 2-1: device descriptor read/64, error -71 [ 599.555784][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.606022][ T5957] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 599.667391][ T9902] usb usb2-port1: attempt power cycle [ 599.765522][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 599.790570][ T5957] usb 1-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 599.835491][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.900554][ T5957] usb 1-1: config 0 descriptor?? [ 599.921146][ T5957] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 600.035159][ T9902] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 600.086291][ T9902] usb 2-1: device descriptor read/8, error -71 [ 600.189367][T12393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.244569][T12393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.325157][ T9902] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 600.376283][ T9902] usb 2-1: device descriptor read/8, error -71 [ 600.525431][T12411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.539581][ T9902] usb usb2-port1: unable to enumerate USB device [ 600.553947][T12411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.923916][ T5957] usb 1-1: qt2_attach - failed to power on unit: -71 [ 601.989351][ T5957] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 602.027751][ T5957] usb 1-1: USB disconnect, device number 94 [ 602.120773][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.234981][ T9902] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 603.475026][ T9902] usb 4-1: Using ep0 maxpacket: 16 [ 603.496791][ T9902] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 603.528648][ T9902] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 603.584945][ T9902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 603.624958][ T9902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 603.654969][ T9902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 603.674967][ T9902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 603.695216][ T9902] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 603.723682][ T9902] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 603.733810][ T9902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.775021][ T9902] usb 4-1: Product: syz [ 603.779300][ T9902] usb 4-1: Manufacturer: syz [ 603.795058][ T9902] usb 4-1: SerialNumber: syz [ 603.825640][ T9902] usb 4-1: config 0 descriptor?? [ 603.844576][T12453] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 603.854516][ T9902] iuu_phoenix 4-1:0.0: iuu_phoenix converter detected [ 603.893198][ T9902] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 603.944352][T12464] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1627'. [ 604.445191][ T9902] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 604.621399][ T9902] usb 1-1: config 0 has an invalid interface number: 248 but max is 0 [ 604.632927][ T9902] usb 1-1: config 0 has no interface number 0 [ 604.648454][ T9902] usb 1-1: config 0 interface 248 has no altsetting 0 [ 604.667614][ T9902] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=10.98 [ 604.677440][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.692469][ T9902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.702479][ T9902] usb 1-1: Product: syz [ 604.707370][ T9902] usb 1-1: Manufacturer: syz [ 604.712080][ T9902] usb 1-1: SerialNumber: syz [ 604.723286][ T9902] usb 1-1: config 0 descriptor?? [ 604.958186][ T9902] usb 1-1: USB disconnect, device number 95 [ 605.011578][ T24] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 605.177837][ T24] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 605.186724][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.198827][ T24] usb 2-1: config 0 has no interface number 0 [ 605.206495][ T24] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 605.217230][ T24] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.233577][ T24] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 605.243050][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.251963][ T24] usb 2-1: Product: syz [ 605.256351][ T24] usb 2-1: Manufacturer: syz [ 605.261143][ T24] usb 2-1: SerialNumber: syz [ 605.269480][ T24] usb 2-1: config 0 descriptor?? [ 605.320336][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.521391][T12476] kvm: pic: non byte write [ 605.686444][ T24] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 605.703253][ T24] usb 2-1: USB disconnect, device number 121 [ 605.765441][ T10] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 605.930133][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.959980][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.986802][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 606.002221][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 606.027228][ T10] usb 1-1: SerialNumber: syz [ 606.258123][ T10] usb 1-1: 0:2 : does not exist [ 606.281816][ T10] usb 1-1: unit 5: unexpected type 0x09 [ 606.301619][T12485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1634'. [ 606.326062][ T10] usb 1-1: USB disconnect, device number 96 [ 606.403520][ T7436] udevd[7436]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.595635][ T2153] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 606.755643][ T2153] usb 2-1: Using ep0 maxpacket: 8 [ 606.763866][ T2153] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 606.780649][ T2153] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 606.800778][ T2153] usb 2-1: config 1 has no interface number 1 [ 606.809622][ T2153] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 606.847246][ T2153] usb 2-1: string descriptor 0 read error: -22 [ 606.858011][ T2153] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.892356][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.942973][T12489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.959303][ T2153] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 606.972757][T12488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.994115][T12489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.025650][T12488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.210983][T12496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.226650][T12496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.281728][ T2153] usb 4-1: USB disconnect, device number 105 [ 607.316525][ T2153] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 607.340234][ T2153] iuu_phoenix 4-1:0.0: device disconnected [ 607.465242][ T9902] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 607.641956][ T9902] usb 1-1: Using ep0 maxpacket: 16 [ 607.653835][ T9902] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 607.674024][ T9902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.687065][T12485] gretap0: left allmulticast mode [ 607.695897][T12485] bridge0: port 3(gretap0) entered disabled state [ 607.717214][ T9902] usb 1-1: Product: syz [ 607.721883][ T9902] usb 1-1: Manufacturer: syz [ 607.731301][ T9902] usb 1-1: SerialNumber: syz [ 607.763486][ T9902] r8152-cfgselector 1-1: Unknown version 0x0000 [ 607.786584][ T9902] r8152-cfgselector 1-1: config 0 descriptor?? [ 607.881044][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.465326][ T2153] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 608.655062][ T2153] usb 4-1: Using ep0 maxpacket: 16 [ 608.674604][ T2153] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.691623][T12508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.693641][ T2153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 608.748105][ T2153] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.785164][ T2153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 608.797660][T12508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.861361][ T2153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 608.912421][T12510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.921180][ T2153] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.925979][T12510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.959615][ T2153] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 608.970056][ T2153] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 608.983363][ T2153] usb 4-1: Manufacturer: syz [ 608.992877][ T2153] usb 4-1: config 0 descriptor?? [ 609.234295][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.243434][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.253840][ T2153] usb 4-1: USB disconnect, device number 106 [ 609.327961][ T5957] usb 2-1: USB disconnect, device number 122 [ 609.473593][T12517] tipc: Enabled bearer , priority 0 [ 609.487332][T12517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.291892][ T5957] r8152-cfgselector 1-1: USB disconnect, device number 97 [ 610.363277][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 610.363298][ T30] audit: type=1326 audit(1755210487.403:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed5d8ebe9 code=0x7ffc0000 [ 610.391998][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.460373][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.495159][ T30] audit: type=1326 audit(1755210487.443:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed5d8ebe9 code=0x7ffc0000 [ 610.536554][ T24] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 610.603927][ T30] audit: type=1326 audit(1755210487.443:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7efed5d8ebe9 code=0x7ffc0000 [ 610.626422][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.345069][ T5957] tipc: Node number set to 4294246401 [ 611.378721][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.445006][ T30] audit: type=1326 audit(1755210487.443:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed5d8ebe9 code=0x7ffc0000 [ 611.477246][ T24] usb 4-1: config 0 has no interfaces? [ 611.675879][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 611.675948][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.675974][ T24] usb 4-1: Product: syz [ 611.675992][ T24] usb 4-1: Manufacturer: syz [ 611.676019][ T24] usb 4-1: SerialNumber: syz [ 611.679048][ T24] usb 4-1: config 0 descriptor?? [ 611.889005][ T30] audit: type=1326 audit(1755210487.443:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed5d8ebe9 code=0x7ffc0000 [ 611.889072][ T30] audit: type=1326 audit(1755210487.443:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efed5d8ebe9 code=0x7ffc0000 [ 611.889123][ T30] audit: type=1326 audit(1755210487.443:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed5d8ebe9 code=0x7ffc0000 [ 611.889169][ T30] audit: type=1326 audit(1755210487.443:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed5d8ebe9 code=0x7ffc0000 [ 611.889216][ T30] audit: type=1326 audit(1755210487.453:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efed5d8ebe9 code=0x7ffc0000 [ 611.889262][ T30] audit: type=1326 audit(1755210487.453:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12536 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed5d8ebe9 code=0x7ffc0000 [ 612.165876][T12533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.166175][T12533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.484800][ T24] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 612.521462][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.538502][T12554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.546768][T12554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.549407][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'. [ 612.637573][ T24] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 612.637599][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.637614][ T24] usb 2-1: config 0 has no interface number 0 [ 612.637636][ T24] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 612.637696][ T24] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 612.640385][ T24] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 612.640409][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.640425][ T24] usb 2-1: Product: syz [ 612.640437][ T24] usb 2-1: Manufacturer: syz [ 612.640450][ T24] usb 2-1: SerialNumber: syz [ 612.642639][ T24] usb 2-1: config 0 descriptor?? [ 612.650974][ T24] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 613.006387][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.088571][ T2153] usb 2-1: USB disconnect, device number 123 [ 613.295900][ T5957] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 613.421705][ T2153] usb 4-1: USB disconnect, device number 107 [ 613.466547][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 613.478279][ T5957] usb 1-1: no configurations [ 613.486556][ T5957] usb 1-1: can't read configurations, error -22 [ 613.625355][ T5957] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 613.775455][ T2153] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 613.795154][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 613.801583][ T5957] usb 1-1: no configurations [ 613.835111][T12572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.984507][ T5957] usb 1-1: can't read configurations, error -22 [ 614.015725][ T5957] usb usb1-port1: attempt power cycle [ 614.085319][ T2153] usb 4-1: Using ep0 maxpacket: 32 [ 614.093364][ T2153] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 614.109729][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.148722][ T2153] usb 4-1: config 0 descriptor?? [ 614.207406][ T2153] gspca_main: sq930x-2.14.0 probing 041e:403c [ 614.365039][ T5957] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 614.396094][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 614.402037][ T5957] usb 1-1: no configurations [ 614.407476][ T5957] usb 1-1: can't read configurations, error -22 [ 614.555315][ T5957] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 614.605991][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 614.611878][ T5957] usb 1-1: no configurations [ 614.617074][ T5957] usb 1-1: can't read configurations, error -22 [ 614.635590][ T5957] usb usb1-port1: unable to enumerate USB device [ 614.824990][ T2153] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 614.831367][ T2153] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 614.858454][ T2153] usb 4-1: USB disconnect, device number 108 [ 615.265857][T12586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.303737][T12586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.342824][T12586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.365597][T12586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.485117][ T2153] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 615.559221][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.615543][ T2153] usb 2-1: device descriptor read/64, error -71 [ 615.636020][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 615.695109][ T9902] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 615.805006][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 615.812282][ T24] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 615.822206][ T24] usb 5-1: config 2 has no interface number 0 [ 615.828717][ T24] usb 5-1: config 2 interface 31 has no altsetting 0 [ 615.838785][ T24] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 615.848156][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.855623][ T2153] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 615.856475][ T24] usb 5-1: Product: syz [ 615.868934][ T24] usb 5-1: Manufacturer: syz [ 615.873758][ T24] usb 5-1: SerialNumber: syz [ 615.879534][ T9902] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 615.890901][ T9902] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 615.899726][ T9902] usb 4-1: config 0 has no interface number 0 [ 615.906766][ T9902] usb 4-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 615.922961][ T9902] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 615.937249][ T9902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.949715][ T9902] usb 4-1: config 0 descriptor?? [ 615.995131][ T2153] usb 2-1: device descriptor read/64, error -71 [ 616.105507][ T2153] usb usb2-port1: attempt power cycle [ 616.334863][T12598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.350528][T12598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.445221][ T2153] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 616.455973][ T5957] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 616.469199][ T2153] usb 2-1: device descriptor read/8, error -71 [ 616.530180][ T24] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 616.545545][ T24] usb 5-1: USB disconnect, device number 80 [ 616.625704][ T5957] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 616.639084][ T5957] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 616.646990][ T5957] usb 1-1: can't read configurations, error -61 [ 616.715349][ T2153] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 616.735653][ T2153] usb 2-1: device descriptor read/8, error -71 [ 616.775177][ T5957] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 616.836567][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.846349][ T2153] usb usb2-port1: unable to enumerate USB device [ 616.931455][ T5957] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 616.941914][ T5957] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 616.958473][ T5957] usb 1-1: can't read configurations, error -61 [ 616.967306][ T5957] usb usb1-port1: attempt power cycle [ 617.116712][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.136744][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.209269][T12606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.224819][T12606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.304994][ T5957] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 617.345586][ T2153] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 617.388586][ T5957] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 617.400051][ T5957] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 617.410044][ T5957] usb 1-1: can't read configurations, error -61 [ 617.545398][ T5957] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 617.572360][ T5957] usb 1-1: too many configurations: 36, using maximum allowed: 8 [ 617.582083][ T2153] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 617.592230][ T2153] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.603540][ T2153] usb 5-1: config 0 has no interface number 0 [ 617.610403][ T5957] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 617.618704][ T5957] usb 1-1: can't read configurations, error -61 [ 617.625799][ T5957] usb usb1-port1: unable to enumerate USB device [ 617.632741][ T2153] usb 5-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 617.647185][ T2153] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 617.668676][ T2153] usb 5-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 617.684049][ T2153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.693298][ T2153] usb 5-1: Product: syz [ 617.704499][ T2153] usb 5-1: Manufacturer: syz [ 617.710003][ T2153] usb 5-1: SerialNumber: syz [ 617.727074][ T2153] usb 5-1: config 0 descriptor?? [ 617.750263][ T2153] HFC-S_USB 5-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 618.037772][ T24] usb 5-1: USB disconnect, device number 81 [ 618.290943][T12608] syzkaller1: entered promiscuous mode [ 618.297401][T12608] syzkaller1: entered allmulticast mode [ 618.404507][ T24] usb 4-1: USB disconnect, device number 109 [ 618.773115][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.825251][T12616] hsr0: entered promiscuous mode [ 618.830650][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 618.848479][T12616] hsr_slave_0: left promiscuous mode [ 618.864774][T12616] hsr_slave_1: left promiscuous mode [ 618.887912][T12616] hsr0 (unregistering): left promiscuous mode [ 619.434724][T12633] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1677'. [ 619.465158][ T5991] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 619.525346][ T2153] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 619.615083][ T5991] usb 5-1: Using ep0 maxpacket: 32 [ 619.622569][ T5991] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 619.632479][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.650362][ T5991] usb 5-1: config 0 descriptor?? [ 619.661726][ T2153] usb 1-1: device descriptor read/64, error -71 [ 619.673163][ T5991] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 619.785473][ T24] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 619.873544][T12629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1674'. [ 619.884446][T12629] openvswitch: netlink: Flow key attr not present in new flow. [ 619.905081][ T2153] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 619.954525][ T5991] gspca_nw80x: reg_w err -71 [ 619.967796][ T5991] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 619.979947][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 619.994505][ T5991] usb 5-1: USB disconnect, device number 82 [ 620.003366][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 620.016580][ T24] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.40 [ 620.073274][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.073314][ T2153] usb 1-1: device descriptor read/64, error -71 [ 620.082343][ T24] usb 4-1: Product: я [ 620.092575][ T24] usb 4-1: Manufacturer: Ф [ 620.110616][ T24] usb 4-1: SerialNumber: Л [ 620.205610][ T2153] usb usb1-port1: attempt power cycle [ 620.415589][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 620.421792][ T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 620.441190][ T24] usb 4-1: USB disconnect, device number 110 [ 620.575352][ T2153] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 620.599365][ T2153] usb 1-1: device descriptor read/8, error -71 [ 620.995400][ T2153] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 621.034387][ T2153] usb 1-1: device descriptor read/8, error -71 [ 621.146204][ T2153] usb usb1-port1: unable to enumerate USB device [ 621.316734][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.497604][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1681'. [ 621.633989][ T24] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 621.703733][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 621.703752][ T30] audit: type=1326 audit(1755210498.743:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12661 comm="syz.4.1685" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbabd78ebe9 code=0x0 [ 621.806880][ T24] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 621.820345][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.831249][ T24] usb 4-1: config 0 has no interface number 0 [ 621.838935][ T24] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 621.850170][ T24] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 621.894543][ T24] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 621.904123][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.912523][ T24] usb 4-1: Product: syz [ 621.916797][ T24] usb 4-1: Manufacturer: syz [ 621.921524][ T24] usb 4-1: SerialNumber: syz [ 621.931407][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.942867][ T30] audit: type=1326 audit(1755210498.973:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12667 comm="syz.2.1688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60c938ebe9 code=0x0 [ 621.968421][ T24] usb 4-1: config 0 descriptor?? [ 621.985158][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.017268][ T24] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 622.035352][ T2153] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 622.242629][ T2153] usb 2-1: config 0 has no interfaces? [ 622.307629][ T24] usb 4-1: USB disconnect, device number 111 [ 622.348710][ T2153] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 622.369866][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.387477][ T2153] usb 2-1: Product: syz [ 622.394792][ T2153] usb 2-1: Manufacturer: syz [ 622.406933][ T2153] usb 2-1: SerialNumber: syz [ 622.417479][ T2153] usb 2-1: config 0 descriptor?? [ 622.596739][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.645765][T12666] input: syz1 as /devices/virtual/input/input37 [ 622.755153][ T9902] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 622.952586][ T9902] usb 1-1: config 0 has no interfaces? [ 622.965523][ T9902] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 623.006600][ T9902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.065730][ T9902] usb 1-1: Product: syz [ 623.086990][ T9902] usb 1-1: Manufacturer: syz [ 623.100972][ T9902] usb 1-1: SerialNumber: syz [ 623.125961][ T9902] usb 1-1: config 0 descriptor?? [ 623.349966][T12675] usb usb8: usbfs: process 12675 (syz.4.1690) did not claim interface 3 before use [ 623.365025][ T24] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 623.431586][T12679] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[12679] [ 623.458719][T12680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.472718][T12680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.546751][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.558980][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.573262][ T24] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 623.584616][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.668889][ T24] usb 4-1: config 0 descriptor?? [ 624.095266][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 624.104254][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 624.133164][ T24] usb 4-1: USB disconnect, device number 112 [ 624.526901][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.905870][ T24] usb 2-1: USB disconnect, device number 2 [ 624.965792][T12691] batadv_slave_1: entered promiscuous mode [ 625.224371][T12695] fuse: Bad value for 'group_id' [ 625.265582][T12695] fuse: Bad value for 'group_id' [ 625.495353][ T5957] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 625.509199][ T2153] usb 1-1: USB disconnect, device number 110 [ 625.703566][ T5957] usb 2-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config [ 625.788309][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.872173][ T5957] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 625.936408][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.945587][T12716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.954498][T12716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.004477][ T5957] usb 2-1: config 0 descriptor?? [ 626.046506][T12718] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 626.046506][T12718] program syz.0.1699 not setting count and/or reply_len properly [ 626.073211][ T5957] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 626.108045][T12716] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 626.108045][T12716] program syz.0.1699 not setting count and/or reply_len properly [ 626.165009][ T2153] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 626.557611][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.112763][T12727] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1702'. [ 627.496258][T12730] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1702'. [ 627.776261][T12733] syz.1.1694 (12733): drop_caches: 2 [ 628.365882][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.395489][ T24] usb 2-1: USB disconnect, device number 3 [ 629.640501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.661276][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.667856][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.286424][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.965119][ T2153] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 631.117040][ T2153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.149181][ T2153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.187687][ T2153] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 631.235242][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.254318][ T2153] usb 2-1: Product: syz [ 631.259147][ T2153] usb 2-1: Manufacturer: syz [ 631.263796][ T2153] usb 2-1: SerialNumber: syz [ 631.288220][ T2153] usb 2-1: config 0 descriptor?? [ 631.326837][ T2153] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 631.349956][ T2153] usb 2-1: No valid video chain found. [ 631.927315][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.938576][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.006050][ T2153] usb 2-1: USB disconnect, device number 4 [ 632.112813][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.134322][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.225156][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.293064][T12778] ptrace attach of "./syz-executor exec"[5881] was attempted by "./syz-executor exec"[12778] [ 632.405017][ T24] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 632.458797][ T5957] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 632.500914][T12778] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1710'. [ 632.575128][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 632.582986][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 632.592225][ T24] usb 4-1: config 0 has no interface number 0 [ 632.602902][ T24] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 632.614970][ T5957] usb 1-1: Using ep0 maxpacket: 16 [ 632.632382][ T5957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.647851][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 632.670239][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 632.686751][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 632.719109][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.819816][ T24] usb 4-1: Product: syz [ 632.824217][ T24] usb 4-1: Manufacturer: syz [ 632.832118][ T24] usb 4-1: SerialNumber: syz [ 632.854108][ T5957] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 632.886455][ T24] usb 4-1: config 0 descriptor?? [ 632.929230][ T24] smsc95xx v2.0.0 [ 632.941159][ T5957] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.948112][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 632.988160][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 633.039528][ T5957] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 633.110067][ T24] usb 4-1: USB disconnect, device number 113 [ 633.147639][ T5957] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 633.233514][ T5957] usb 1-1: Manufacturer: syz [ 633.304544][ T5957] usb 1-1: config 0 descriptor?? [ 633.819909][ T5957] rc_core: IR keymap rc-hauppauge not found [ 633.828151][ T5957] Registered IR keymap rc-empty [ 633.862222][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.915461][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.975194][ T5991] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 633.984463][ T5957] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 634.041137][ T5957] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 634.200450][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.267133][ T5991] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 634.277250][ T5991] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 634.304012][ T5991] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 634.323362][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.334245][ T5991] usb 4-1: Product: syz [ 634.343500][ T5991] usb 4-1: Manufacturer: syz [ 634.349533][ T5991] usb 4-1: SerialNumber: syz [ 634.423316][ T5991] usb 4-1: config 0 descriptor?? [ 634.439664][T12809] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 634.458088][T12809] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 634.580294][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 634.683630][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 634.778503][T12809] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 634.875120][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 634.910777][T12809] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 634.946572][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 634.972735][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 635.006128][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 635.035466][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 635.065465][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 635.099643][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 635.145262][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 635.165204][ T5957] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 635.249271][ T5957] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version c8 [ 635.452866][ T5957] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 635.636472][ T5957] usb 1-1: USB disconnect, device number 112 [ 635.878100][T12809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.890996][T12809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.035876][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.263553][ T5957] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 636.566435][ T5957] usb 1-1: config 0 has no interfaces? [ 636.725219][ T5957] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 636.869144][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.101755][ T5957] usb 1-1: Product: syz [ 637.121604][ T5991] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 637.195387][ T5957] usb 1-1: Manufacturer: syz [ 637.211019][ T5991] usb 4-1: USB disconnect, device number 114 [ 637.292120][ T5957] usb 1-1: SerialNumber: syz [ 637.316346][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.342351][ T5957] usb 1-1: config 0 descriptor?? [ 637.656856][ T5991] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 637.940265][ T5991] usb 4-1: Using ep0 maxpacket: 16 [ 638.016235][ T5991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.071948][ T5991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.125190][ T5991] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 638.341157][ T5991] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 638.353983][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.418811][ T5991] usb 4-1: config 0 descriptor?? [ 638.532068][T12849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.555768][T12849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.647851][T12837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.668144][T12837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.779452][ T5991] usbhid 4-1:0.0: can't add hid device: -71 [ 638.788001][T12849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.849974][ T5991] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 638.906290][T12849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.956702][ T5991] usb 4-1: USB disconnect, device number 115 [ 639.364993][ T5991] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 639.384556][ T9902] usb 1-1: USB disconnect, device number 113 [ 639.477878][T12849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.496808][T12849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.506511][ T5991] usb 4-1: device descriptor read/64, error -71 [ 639.575193][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 639.727251][ T24] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 639.739207][ T24] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 112, changing to 10 [ 639.755010][ T5991] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 639.773251][ T24] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 639.826091][ T24] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 639.840145][ T24] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 639.860525][ T24] usb 2-1: Manufacturer: syz [ 639.866430][ T24] usb 2-1: SerialNumber: syz [ 639.880644][T12858] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 639.889634][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.915036][ T5991] usb 4-1: device descriptor read/64, error -71 [ 639.936179][T12870] netlink: 'syz.4.1733': attribute type 21 has an invalid length. [ 639.944589][T12870] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1733'. [ 640.025646][ T5991] usb usb4-port1: attempt power cycle [ 640.064985][ T5957] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 640.094132][T12858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.135562][T12858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.157994][T12858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.171439][T12858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.198151][ T24] yealink 2-1:36.0: invalid payload size 1024, expected 16 [ 640.205982][ T9902] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 640.235210][ T5957] usb 1-1: Using ep0 maxpacket: 16 [ 640.238552][ T24] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input39 [ 640.247164][ T5957] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 640.270089][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 640.275022][ T5957] usb 1-1: config 0 has no interface number 0 [ 640.277286][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 640.290093][ T5957] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 640.295444][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 640.315114][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 640.325019][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 640.332647][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 640.333919][ T5957] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 640.340252][ T24] usb 2-1: USB disconnect, device number 5 [ 640.350828][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 640.350857][ C1] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 640.379695][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.393267][ T5957] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 640.412148][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 640.415499][ T9902] usb 5-1: Using ep0 maxpacket: 16 [ 640.436130][ T5991] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 640.444522][ T5957] usb 1-1: Product: syz [ 640.451788][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.456338][ T9902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.470495][ T5957] usb 1-1: SerialNumber: syz [ 640.472392][ T5991] usb 4-1: device descriptor read/8, error -71 [ 640.491894][ T9902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 640.495402][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.511190][ T9902] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 640.513242][ T5957] usb 1-1: config 0 descriptor?? [ 640.532912][ T9902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.550171][ T9902] usb 5-1: Product: syz [ 640.554708][ T9902] usb 5-1: Manufacturer: syz [ 640.559686][ T9902] usb 5-1: SerialNumber: syz [ 640.586341][ T5957] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 640.593419][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.603795][ T5957] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input40 [ 640.618827][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.637253][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.647951][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'. [ 640.724995][ T5991] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 640.748370][ T5991] usb 4-1: device descriptor read/8, error -71 [ 640.767049][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 640.874749][ T5991] usb usb4-port1: unable to enumerate USB device [ 641.208046][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 641.214780][ T30] audit: type=1326 audit(1755210518.253:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.4.1733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbabd78ebe9 code=0x0 [ 641.357288][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 641.357690][ T5991] usb 1-1: USB disconnect, device number 114 [ 641.364396][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 641.380370][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.430345][ T5991] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 641.470611][T12882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.796726][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.094310][T12893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.953316][T12912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1745'. [ 642.967898][T12912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1745'. [ 643.075491][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.323669][ T9902] usb 5-1: unknown interface protocol 0xdc, assuming v1 [ 643.352405][ T9902] usb 5-1: cannot find UAC_HEADER [ 643.478089][ T9902] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 643.522185][ T9902] usb 5-1: USB disconnect, device number 83 [ 643.568858][ T7436] udevd[7436]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.625472][ T5957] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 643.646299][ T10] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 643.773845][T12936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.783392][T12936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.794580][ T5957] usb 4-1: device descriptor read/64, error -71 [ 643.827626][ T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 643.836516][ T10] usb 1-1: config 0 has no interface number 0 [ 643.842683][ T10] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 643.854735][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=fc.88 [ 643.864158][ T10] usb 1-1: New USB device strings: Mfr=255, Product=1, SerialNumber=3 [ 643.872638][ T10] usb 1-1: Product: syz [ 643.877208][ T10] usb 1-1: Manufacturer: syz [ 643.881838][ T10] usb 1-1: SerialNumber: syz [ 643.889843][ T10] usb 1-1: config 0 descriptor?? [ 643.895299][ T5920] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 643.965195][ T9902] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 644.056662][ T5957] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 644.067741][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.078079][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 644.090155][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 644.100554][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.117261][ T9902] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 644.118182][ T5920] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 644.131845][ T9902] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 644.137583][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.154801][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 644.163837][ T9902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 644.163888][ T9902] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 644.163929][ T9902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 644.163954][ T9902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 644.170190][ T9902] usb 5-1: string descriptor 0 read error: -22 [ 644.175303][T12926] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1749'. [ 644.190650][ T9902] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 644.195411][ T5920] usb 2-1: Product: syz [ 644.215873][ T9902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.229168][ T5957] usb 4-1: device descriptor read/64, error -71 [ 644.253224][ T9902] usb 5-1: config 0 descriptor?? [ 644.257422][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 644.268282][ T5920] usb 2-1: Manufacturer: syz [ 644.273070][ T5920] usb 2-1: SerialNumber: syz [ 644.283992][T12934] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 644.289910][ T5920] usb 2-1: config 0 descriptor?? [ 644.312289][ T5920] xbox_remote_probe: Unexpected endpoint_in [ 644.313783][ T9902] hub 5-1:0.0: bad descriptor, ignoring hub [ 644.344217][ T9902] hub 5-1:0.0: probe with driver hub failed with error -5 [ 644.377538][ T10] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 644.388438][ T5957] usb usb4-port1: attempt power cycle [ 644.396669][ T9902] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 644.426807][ T10] usb 1-1: USB disconnect, device number 115 [ 644.434680][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.458267][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.491665][ T7988] udevd[7988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.522602][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.544369][ T9902] usb 2-1: USB disconnect, device number 6 [ 644.552731][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.761016][ T5957] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 644.796373][ T5957] usb 4-1: device descriptor read/8, error -71 [ 644.997169][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.045052][ T5957] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 645.092014][ T5957] usb 4-1: device descriptor read/8, error -71 [ 645.100176][ T10] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 645.169033][T12945] FAULT_INJECTION: forcing a failure. [ 645.169033][T12945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.184289][T12945] CPU: 1 UID: 0 PID: 12945 Comm: syz.2.1756 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 645.184321][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.184336][T12945] Call Trace: [ 645.184346][T12945] [ 645.184356][T12945] dump_stack_lvl+0x189/0x250 [ 645.184390][T12945] ? __pfx____ratelimit+0x10/0x10 [ 645.184420][T12945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.184447][T12945] ? __pfx__printk+0x10/0x10 [ 645.184492][T12945] should_fail_ex+0x414/0x560 [ 645.184528][T12945] _copy_to_user+0x31/0xb0 [ 645.184555][T12945] simple_read_from_buffer+0xe1/0x170 [ 645.184593][T12945] proc_fail_nth_read+0x1b3/0x220 [ 645.184622][T12945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 645.184652][T12945] ? rw_verify_area+0x2a6/0x4d0 [ 645.184680][T12945] ? __lock_acquire+0xab9/0xd20 [ 645.184711][T12945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 645.184738][T12945] vfs_read+0x1fd/0xa30 [ 645.184765][T12945] ? fdget_pos+0x247/0x320 [ 645.184790][T12945] ? __pfx___mutex_lock+0x10/0x10 [ 645.184822][T12945] ? __pfx_vfs_read+0x10/0x10 [ 645.184854][T12945] ? __fget_files+0x2a/0x420 [ 645.184881][T12945] ? __fget_files+0x3a0/0x420 [ 645.184899][T12945] ? __fget_files+0x2a/0x420 [ 645.184927][T12945] ksys_read+0x145/0x250 [ 645.184958][T12945] ? __pfx_ksys_read+0x10/0x10 [ 645.184984][T12945] ? rcu_is_watching+0x15/0xb0 [ 645.185014][T12945] ? do_syscall_64+0xbe/0x3b0 [ 645.185059][T12945] do_syscall_64+0xfa/0x3b0 [ 645.185089][T12945] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.185117][T12945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.185140][T12945] ? clear_bhb_loop+0x60/0xb0 [ 645.185168][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.185190][T12945] RIP: 0033:0x7f60c938d5fc [ 645.185210][T12945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 645.185228][T12945] RSP: 002b:00007f60ca17b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 645.185252][T12945] RAX: ffffffffffffffda RBX: 00007f60c95b5fa0 RCX: 00007f60c938d5fc [ 645.185268][T12945] RDX: 000000000000000f RSI: 00007f60ca17b0a0 RDI: 0000000000000004 [ 645.185283][T12945] RBP: 00007f60ca17b090 R08: 0000000000000000 R09: 0000000000000000 [ 645.185297][T12945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.185310][T12945] R13: 00007f60c95b6038 R14: 00007f60c95b5fa0 R15: 00007f60c96dfa28 [ 645.185346][T12945] [ 645.452401][ T5957] usb usb4-port1: unable to enumerate USB device [ 645.463845][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 645.608101][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 645.704164][ T10] usb 1-1: string descriptor 0 read error: -22 [ 645.716268][ T10] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.40 [ 645.736730][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.989883][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 645.996430][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 646.195977][ T10] usb 1-1: USB disconnect, device number 116 [ 646.565154][ T5957] usb 5-1: USB disconnect, device number 84 [ 646.680661][T12958] netlink: 'syz.3.1758': attribute type 10 has an invalid length. [ 647.565333][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.716963][T12981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.758588][T12981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.994053][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.463042][T12992] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 649.469911][T12992] PKCS7: Only support pkcs7_signedData type [ 649.602820][T12996] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 649.662711][T12999] netlink: 'syz.2.1767': attribute type 10 has an invalid length. [ 649.774336][T13000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1767'. [ 649.786865][T13000] 8021q: adding VLAN 0 to HW filter on device bond6 [ 649.981937][T13004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.995199][T13004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.121821][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.876311][ T5957] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 650.977253][T13022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.998345][T13022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.049343][ T5957] usb 4-1: not running at top speed; connect to a high speed hub [ 651.082594][ T5957] usb 4-1: config 1 interface 0 has no altsetting 0 [ 651.102446][ T5957] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.40 [ 651.120410][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.135089][ T5957] usb 4-1: Product: Ф [ 651.139394][ T5957] usb 4-1: Manufacturer: ⠉ [ 651.144041][ T5957] usb 4-1: SerialNumber: я [ 651.205428][ T5991] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 651.429356][ T5957] usbhid 4-1:1.0: can't add hid device: -71 [ 651.435612][ T5957] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 651.445800][ T5991] usb 2-1: Invalid ep0 maxpacket: 16 [ 651.449224][ T5957] usb 4-1: USB disconnect, device number 124 [ 651.570419][T13034] netlink: 'syz.2.1779': attribute type 1 has an invalid length. [ 651.585641][ T5991] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 651.622118][T13035] netlink: 'syz.2.1779': attribute type 10 has an invalid length. [ 651.678221][T13037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1779'. [ 651.710864][T13037] 8021q: adding VLAN 0 to HW filter on device bond7 [ 651.745004][ T5991] usb 2-1: Invalid ep0 maxpacket: 16 [ 651.750833][ T5991] usb usb2-port1: attempt power cycle [ 652.135090][ T5991] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 652.204737][ T5991] usb 2-1: Invalid ep0 maxpacket: 16 [ 652.365017][ T5991] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 652.407350][ T5991] usb 2-1: Invalid ep0 maxpacket: 16 [ 652.423548][ T5991] usb usb2-port1: unable to enumerate USB device [ 652.864720][ T5957] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 652.920573][T13052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.929869][T13052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.052773][ T5957] usb 1-1: Using ep0 maxpacket: 32 [ 653.083020][ T5957] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.113761][ T5957] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 653.150347][ T5957] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.160690][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 653.169448][ T5957] usb 1-1: SerialNumber: syz [ 653.199427][ T5957] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 653.210174][ T5957] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 653.218394][ T5957] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 653.346807][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.414046][ T24] usb 1-1: USB disconnect, device number 117 [ 654.195208][T13064] program syz.3.1786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.326866][T13069] gtp0: entered promiscuous mode [ 654.599199][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.623114][T13080] netlink: 'syz.0.1790': attribute type 1 has an invalid length. [ 654.679228][T13082] netlink: 'syz.0.1790': attribute type 10 has an invalid length. [ 654.687438][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'. [ 654.735179][T13080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1790'. [ 654.761529][T13080] 8021q: adding VLAN 0 to HW filter on device bond5 [ 654.806479][ T5957] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 655.028918][ T5957] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 655.037276][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.054921][ T5957] usb 4-1: config 0 has no interface number 0 [ 655.073545][ T5957] usb 4-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 655.135871][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 655.166502][ T5957] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 655.185219][ T5957] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 655.199574][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.213131][ T5957] usb 4-1: Product: syz [ 655.219920][ T5957] usb 4-1: Manufacturer: syz [ 655.224816][ T5957] usb 4-1: SerialNumber: syz [ 655.233496][ T5957] usb 4-1: config 0 descriptor?? [ 655.257477][ T5957] HFC-S_USB 4-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 655.326724][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 655.389288][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 655.461372][ T5957] usb 4-1: USB disconnect, device number 125 [ 655.472924][ T10] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.40 [ 655.496208][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.516346][ T10] usb 2-1: Product: Ф [ 655.520546][ T10] usb 2-1: Manufacturer: ⠉ [ 655.529393][ T10] usb 2-1: SerialNumber: я [ 655.854526][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 655.864199][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 655.877417][ T3023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.912218][ T10] usb 2-1: USB disconnect, device number 11 [ 656.315128][ T24] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 656.375034][ T5991] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 656.505211][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 656.520777][ T24] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 656.543644][ T24] usb 4-1: config 0 has no interface number 0 [ 656.550201][ T5991] usb 5-1: Using ep0 maxpacket: 32 [ 656.581010][ T5991] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 656.623661][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 656.662724][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.684321][T13111] tipc: Enabled bearer , priority 0 [ 656.693910][T13111] syzkaller0: entered promiscuous mode [ 656.702723][T13111] syzkaller0: entered allmulticast mode [ 656.708512][ T24] usb 4-1: Product: syz [ 656.708539][ T24] usb 4-1: Manufacturer: syz [ 656.708558][ T24] usb 4-1: SerialNumber: syz [ 656.726429][ T5991] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 656.750417][ T24] usb 4-1: config 0 descriptor?? [ 656.765062][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.795489][ T5991] usb 5-1: Product: syz [ 656.799710][ T5991] usb 5-1: Manufacturer: syz [ 656.833451][ T5991] usb 5-1: SerialNumber: syz [ 656.906958][ T5991] usb 5-1: config 0 descriptor?? [ 656.922803][ T24] msi2500 4-1:0.246: Registered as swradio24 [ 656.932973][T13099] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 656.950070][ T24] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 656.993218][ T5991] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 657.002419][T13115] tipc: Resetting bearer [ 657.144490][T13108] tipc: Resetting bearer [ 657.382089][T13108] tipc: Disabling bearer [ 657.475289][ T24] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 657.676256][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 657.692374][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.737899][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 657.752959][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.015941][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 658.021605][ T24] usbtmc 1-1:16.0: can't read capabilities [ 658.228632][T13137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.247675][T13137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.367716][ T24] usb 1-1: USB disconnect, device number 118 [ 659.075455][ T2961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.083343][ T5991] usb 5-1: USB disconnect, device number 85 [ 659.179589][ T7988] udevd[7988]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.296490][ T10] psmouse serio2: Failed to reset mouse on : -5 [ 659.319425][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.389997][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.673986][ T5957] usb 4-1: USB disconnect, device number 126 [ 659.718584][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.985686][ T5941] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 660.197369][ T5941] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 660.253150][ T5941] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 660.328962][ T5941] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 660.402854][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.441844][T13160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'. [ 660.476091][T13148] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 660.500257][T13160] vlan2: entered promiscuous mode [ 660.508856][T13160] gretap0: entered promiscuous mode [ 660.549746][ T5941] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 661.057235][T13167] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 661.223816][ T5957] usb 1-1: USB disconnect, device number 119 [ 661.595501][ T5991] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 661.635953][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.895075][ T5991] usb 4-1: device descriptor read/64, error -71 [ 662.175355][ T5991] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 662.315765][ T5991] usb 4-1: device descriptor read/64, error -71 [ 662.425113][ T5957] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 662.458858][ T5991] usb usb4-port1: attempt power cycle [ 662.595622][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 662.603083][ T5957] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 662.673104][ T5957] usb 5-1: config 179 has no interface number 0 [ 662.685474][ T5957] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 662.700507][ T5957] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 662.713890][ T5957] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 662.729681][ T5957] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 662.748304][ T5957] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 662.761769][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.781631][T13173] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 662.836005][ T5991] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 662.904843][ T5991] usb 4-1: device descriptor read/8, error -71 [ 663.001829][T13173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.046312][T13173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.092630][T13173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.107714][T13173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.127760][T13173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.139912][T13173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.150959][T13190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.161340][T13190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.165251][ T5991] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 663.172129][T13173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.190088][T13173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.203692][T13173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.217480][T13190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.226771][T13190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.238874][ T5991] usb 4-1: device descriptor read/8, error -71 [ 663.253129][T13173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.306190][ T5941] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 663.326274][ T10] misc userio: Buffer overflowed, userio client isn't keeping up [ 663.336532][ T5957] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input43 [ 663.355501][ T5991] usb usb4-port1: unable to enumerate USB device [ 663.481648][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 663.505551][ T5941] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 663.516576][ T5991] usb 5-1: USB disconnect, device number 86 [ 663.516960][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 663.530416][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 663.532556][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 663.542854][ T5941] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 663.565400][ T5941] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 663.580130][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.598593][ T5941] usb 1-1: Product: syz [ 663.603979][ T5941] usb 1-1: Manufacturer: syz [ 663.628956][ T5941] usb 1-1: SerialNumber: syz [ 663.637510][ T5941] usb 1-1: config 0 descriptor?? [ 663.651042][ T5941] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 663.900600][ T5941] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 664.085736][T13188] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 664.109437][T13188] 8021q: VLANs not supported on ip6_vti0 [ 664.124671][ T5941] usb 1-1: USB disconnect, device number 120 [ 664.197287][ T2961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.398315][ T10] input: PS/2 Generic Mouse as /devices/serio2/input/input42 [ 664.566465][ T5957] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 664.675951][ T10] psmouse serio2: Failed to enable mouse on [ 664.875351][ T5920] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 664.915690][ T5957] usb 5-1: config 0 has no interfaces? [ 664.923158][ T5957] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 664.933690][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.943382][ T5957] usb 5-1: Product: syz [ 664.952371][ T5957] usb 5-1: Manufacturer: syz [ 664.966389][ T5957] usb 5-1: SerialNumber: syz [ 664.992673][ T5957] usb 5-1: config 0 descriptor?? [ 665.054379][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 665.070845][ T5920] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 665.089501][ T5920] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 665.476625][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.287231][T13219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.303224][T13219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.455018][ T5991] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 666.491081][T13223] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 666.500761][T13223] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 666.670325][T13217] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 666.792316][ T5991] usb 2-1: unable to get BOS descriptor or descriptor too short [ 666.805918][ T5991] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 666.814588][ T5991] usb 2-1: can't read configurations, error -71 [ 667.408202][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.538769][ T5957] usb 5-1: USB disconnect, device number 87 [ 667.563563][ T5920] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 667.583576][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.618358][ T5920] usb 4-1: Product: 鶞洬㬩⶛폇モ筬䓑뾵ནﺪᄠ廳ᇓ⚚節㢮ꐟ橊韷˭妴咡ᮥ㌋뢑㕲ᾏ쾂迂幣굋ⱴ䉟⤻莵옾꣆唰⇗傽ㆡ梞ኲ밺ケ䰛꾤茠ꔬ쭊鈾￐䔭횇்푻௓붗懞㶧䛟謹釺曁䁁對忲並퓧뫽隻욾෹鮚൙臾껁弡쯎酜蠸켕株跒 [ 667.698979][ T5920] usb 4-1: Manufacturer: 虇䉟䙬䞎ڇൾ쉇쯺˳ [ 667.725219][ T5941] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 667.744626][ T5920] usb 4-1: can't set config #1, error -71 [ 667.786622][ T5920] usb 4-1: USB disconnect, device number 5 [ 667.898242][ T5941] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 667.910805][T13245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1835'. [ 667.917150][ T5941] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 667.933588][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.965431][ T5941] usb 1-1: config 0 descriptor?? [ 668.044998][ T5991] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 668.133175][T13244] wireguard0: entered promiscuous mode [ 668.170029][T13244] wireguard0: entered allmulticast mode [ 668.295266][ T5991] usb 2-1: Using ep0 maxpacket: 16 [ 668.312665][ T5991] usb 2-1: config 0 has an invalid interface number: 206 but max is 0 [ 668.336579][ T5991] usb 2-1: config 0 has no interface number 0 [ 668.364248][ T5991] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 668.386470][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.401967][ T5991] usb 2-1: Product: syz [ 668.407582][ T5991] usb 2-1: Manufacturer: syz [ 668.412556][ T5991] usb 2-1: SerialNumber: syz [ 668.451015][ T5991] usb 2-1: config 0 descriptor?? [ 668.478669][ T5991] radioshark2 2-1:0.206: Invalid radioSHARK2 device [ 668.486013][ T5991] radioshark2 2-1:0.206: probe with driver radioshark2 failed with error -22 [ 668.504032][ T5991] usbhid 2-1:0.206: couldn't find an input interrupt endpoint [ 669.973836][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.759121][ T5941] usb 2-1: USB disconnect, device number 14 [ 671.214988][ T5941] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 671.235613][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.425060][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 671.443619][ T5941] usb 2-1: config 6 has an invalid interface number: 170 but max is 0 [ 671.486750][ T5941] usb 2-1: config 6 has no interface number 0 [ 671.535634][ T5941] usb 2-1: New USB device found, idVendor=a168, idProduct=0611, bcdDevice=81.2f [ 671.589576][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.654375][ T5941] usb 2-1: Product: syz [ 671.679367][ T5957] usb 1-1: USB disconnect, device number 121 [ 671.693675][ T5941] usb 2-1: Manufacturer: syz [ 671.734354][ T5941] usb 2-1: SerialNumber: syz [ 672.000701][ T5941] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0611 [ 672.045505][ T5941] gspca_sn9c20x: Write register 1000 failed -71 [ 672.089568][ T5941] gspca_sn9c20x: Device initialization failed [ 672.151743][ T5941] gspca_sn9c20x 2-1:6.170: probe with driver gspca_sn9c20x failed with error -71 [ 672.282833][ T5941] usb 2-1: USB disconnect, device number 15 [ 672.537809][T13314] kvm: kvm [13313]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x52 [ 672.582008][T13314] kvm: kvm [13313]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8ed [ 672.612036][T13314] kvm: kvm [13313]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x13a [ 672.644402][T13314] kvm: kvm [13313]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x13e [ 672.663363][T13314] kvm: kvm [13313]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x94d [ 672.673764][T13314] kvm: kvm [13313]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x955 [ 672.725066][T13314] kvm: kvm [13313]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x172 [ 672.736821][T13314] kvm_intel: kvm [13313]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x983 [ 672.768043][T13314] kvm: kvm [13313]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x98b [ 672.808848][T13314] kvm: kvm [13313]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa07 [ 672.825061][ T5941] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 672.925598][ T5957] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 672.984985][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 673.000758][ T5941] usb 4-1: config index 0 descriptor too short (expected 1810, got 18) [ 673.013914][ T5941] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 673.036490][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.057690][ T5941] usb 4-1: config 0 descriptor?? [ 673.068103][ T5941] gspca_main: etoms-2.14.0 probing 102c:6151 [ 673.075415][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 673.083786][ T5957] usb 2-1: config 250 has an invalid interface number: 203 but max is 0 [ 673.096087][ T5957] usb 2-1: config 250 has no interface number 0 [ 673.102514][ T5957] usb 2-1: config 250 interface 203 altsetting 128 endpoint 0x4 has invalid maxpacket 1032, setting to 1024 [ 673.125429][ T5957] usb 2-1: config 250 interface 203 has no altsetting 0 [ 673.142341][ T5957] usb 2-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=a5.e1 [ 673.156755][T13312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.164600][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.189660][ T5957] usb 2-1: Product: syz [ 673.194540][ T5957] usb 2-1: Manufacturer: syz [ 673.200302][ T5957] usb 2-1: SerialNumber: syz [ 673.220299][T13323] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 673.415354][ T5941] usb 4-1: USB disconnect, device number 6 [ 673.437792][ T5957] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 673.616630][ T5957] snd-usb-audio 2-1:250.203: probe with driver snd-usb-audio failed with error -2 [ 673.648686][ T5957] usb 2-1: USB disconnect, device number 16 [ 673.734755][T10219] udevd[10219]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:250.203/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.862325][T13337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.871454][T13337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.917224][T13338] loop5: detected capacity change from 0 to 1 [ 674.225776][ T5957] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 674.355005][ T5941] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 674.393324][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 674.440859][ T5957] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 674.459759][ T5957] usb 4-1: config 0 has no interface number 1 [ 674.487747][ T5957] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 674.515452][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.517596][ T5941] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 674.535550][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.555077][ T5941] usb 2-1: config 0 has no interface number 0 [ 674.570552][ T5941] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 674.582080][ T5957] usb 4-1: Product: syz [ 674.596317][ T5957] usb 4-1: Manufacturer: syz [ 674.611502][ T5957] usb 4-1: SerialNumber: syz [ 674.634364][ T5957] usb 4-1: config 0 descriptor?? [ 674.637710][ T5941] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 674.698854][ T5941] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 674.710035][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.718869][ T5941] usb 2-1: Product: syz [ 674.723522][ T5941] usb 2-1: Manufacturer: syz [ 674.730014][ T5941] usb 2-1: SerialNumber: syz [ 674.748711][ T5941] usb 2-1: config 0 descriptor?? [ 674.759235][ T5957] snd-usb-audio 4-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 674.775995][ T5941] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 674.869785][ T7436] udevd[7436]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 674.882603][ T5957] usb 4-1: USB disconnect, device number 7 [ 675.064028][ T10] usb 2-1: USB disconnect, device number 17 [ 675.145100][ T5920] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 675.301377][ T5920] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 675.311434][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.323150][ T5920] usb 1-1: config 0 descriptor?? [ 675.727438][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.751451][ T5920] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 675.770797][ T5920] [drm:udl_init] *ERROR* Selecting channel failed [ 675.813065][ T5920] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 675.829409][ T5920] [drm] Initialized udl on minor 2 [ 675.842324][ T5920] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 675.861757][ T5920] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 675.883007][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 675.892483][ T5920] usb 1-1: USB disconnect, device number 122 [ 675.912807][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 676.395069][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 676.578524][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 676.663534][ T24] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 676.671896][ T24] usb 2-1: config 0 has no interface number 0 [ 676.678258][ T24] usb 2-1: config 0 interface 39 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 676.690159][ T24] usb 2-1: config 0 interface 39 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 676.743792][ T24] usb 2-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice= 1.ca [ 676.780797][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.813157][ T24] usb 2-1: Product: syz [ 676.852329][T13384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1862'. [ 676.864325][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 676.874182][T13384] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 676.920693][ T24] usb 2-1: Manufacturer: syz [ 676.960735][ T24] usb 2-1: SerialNumber: syz [ 677.035143][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.047413][ T24] usb 2-1: config 0 descriptor?? [ 677.083928][T13372] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 677.093964][ T24] ftdi_sio 2-1:0.39: FTDI USB Serial Device converter detected [ 677.133731][ T24] usb 2-1: Detected SIO [ 677.152545][ T24] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 677.257766][ T30] audit: type=1326 audit(1755210554.303:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.2.1865" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60c938ebe9 code=0x0 [ 678.915466][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.958994][ T5941] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 679.003117][ T5920] usb 2-1: USB disconnect, device number 18 [ 679.049847][ T5920] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 679.091283][ T5920] ftdi_sio 2-1:0.39: device disconnected [ 679.143306][ T5941] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 679.235638][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 679.243698][ T5941] usb 1-1: Product: syz [ 679.292197][ T5941] usb 1-1: Manufacturer: syz [ 679.297289][ T5941] usb 1-1: SerialNumber: syz [ 679.305517][ T5941] usb 1-1: config 0 descriptor?? [ 679.319217][ T5941] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 679.445332][ T5920] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 679.584618][ T5941] gspca_sunplus: reg_r err -71 [ 679.614584][ T5941] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 679.628696][ T5920] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 679.637720][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.658450][ T5941] usb 1-1: USB disconnect, device number 123 [ 679.678544][ T5920] usb 2-1: config 0 has no interface number 0 [ 679.701896][ T5920] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 679.730944][ T5920] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 679.767623][ T5920] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 679.796634][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.847959][ T5920] usb 2-1: Product: syz [ 679.876037][ T5920] usb 2-1: Manufacturer: syz [ 679.890393][ T5920] usb 2-1: SerialNumber: syz [ 679.920076][ T5920] usb 2-1: config 0 descriptor?? [ 679.938493][ T5920] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 680.093851][T13422] all (unregistering): Released all slaves [ 680.260584][T13429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.279500][T13429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.323716][T13429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.353199][T13429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.455150][ T5941] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 680.489833][ T5920] usb 2-1: USB disconnect, device number 19 [ 680.613952][ T5941] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 680.634217][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.667047][ T5941] usb 4-1: config 0 descriptor?? [ 680.703958][ T5941] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 680.915092][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 681.067530][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 681.099325][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 681.132178][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 681.144825][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 681.160337][ T10] usb 5-1: Product: syz [ 681.164665][ T10] usb 5-1: Manufacturer: syz [ 681.173146][ T10] usb 5-1: SerialNumber: syz [ 681.190825][ T10] usb 5-1: config 0 descriptor?? [ 681.213194][ T10] usb 5-1: selecting invalid altsetting 0 [ 681.433269][T13454] input: syz1 as /devices/virtual/input/input44 [ 681.468094][T13454] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 681.587143][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.665608][T13454] bond8: entered promiscuous mode [ 681.809127][T13454] 8021q: adding VLAN 0 to HW filter on device bond8 [ 681.962002][ T5941] gspca_cpia1: usb_control_msg 03, error -110 [ 681.973955][ T10] usb 5-1: USB disconnect, device number 88 [ 682.090623][ T5941] gspca_cpia1: usb_control_msg 01, error -32 [ 682.101520][ T5941] gspca_cpia1: usb_control_msg 01, error -32 [ 682.112858][ T5941] gspca_cpia1: usb_control_msg 01, error -32 [ 682.232574][ T5941] gspca_cpia1: usb_control_msg 01, error -32 [ 682.245066][ T5941] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 682.445456][ T5957] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 682.759321][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.810475][T13470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.855924][T13470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.915168][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 682.928587][ T5957] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 682.937850][ T5957] usb 1-1: config 0 has no interface number 0 [ 682.965693][ T5957] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 682.984964][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.037505][ T5957] usb 1-1: Product: syz [ 683.044752][ T5957] usb 1-1: Manufacturer: syz [ 683.055323][ T5957] usb 1-1: SerialNumber: syz [ 683.088952][ T5957] usb 1-1: config 0 descriptor?? [ 683.160022][ T5957] redrat3 1-1:0.31: Couldn't find all endpoints [ 683.201086][ T5941] usb 4-1: USB disconnect, device number 8 [ 683.283126][T13475] netlink: 'syz.1.1885': attribute type 1 has an invalid length. [ 683.304929][T13475] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1885'. [ 683.373377][T13478] vlan2: entered promiscuous mode [ 684.195432][ T5941] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 684.229152][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.261796][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.405057][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 684.615047][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.649518][ T5941] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 684.676687][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.765736][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.829531][ T5941] usb 2-1: config 0 descriptor?? [ 685.281084][ T5941] aquacomputer_d5next 0003:0C70:F003.001E: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.1-1/input0 [ 685.592950][ T10] usb 1-1: USB disconnect, device number 124 [ 686.059694][T13503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1892'. [ 686.836444][T13520] loop7: detected capacity change from 0 to 16384 [ 687.274723][ T2961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.795358][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1896'. [ 687.881578][T13526] vlan2: entered promiscuous mode [ 688.082997][ T10] usb 2-1: USB disconnect, device number 20 [ 688.527741][T13312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.580338][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 688.808000][T13537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.856475][T13537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.968012][ T10] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.012719][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 689.041709][ T10] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.40 [ 689.063969][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.088079][T13545] geneve4: entered promiscuous mode [ 689.102866][ T10] usb 2-1: Product: Ф [ 689.113513][ T10] usb 2-1: Manufacturer: 霞幉犊ㆫ욿კ鳌ㄤ툟풁扞ꎞ翧爭俗ഒ獩쭣禯儌蘋⽈Ţ篃穡귂钜࢝晭ⲻ縑‪ԭ⣐퍅ঠﾽҭ⫬콢廿噤ꅧ韧쎝쯀薥棟듻퀳電薧꩞ퟴ⭜䶕泄⩋ꆷȥ䮞搭ᕝ藝䫢嬗⍳薌鋢梇ẹ㻅錁趼㞾〽귚붨㱍ⷄ☲⎸࿕랸軇뽥黯 [ 689.152075][T13545] geneve4: entered allmulticast mode [ 689.227240][ T10] usb 2-1: SerialNumber: ы [ 689.566317][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 689.572696][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 689.595319][ T10] usb 2-1: USB disconnect, device number 21 [ 689.841898][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1907'. [ 689.911619][T13555] vlan2: entered promiscuous mode [ 689.937811][T13555] gretap0: entered promiscuous mode [ 690.500543][T13564] netlink: 'syz.3.1909': attribute type 27 has an invalid length. [ 690.550718][T13564] bond0: left allmulticast mode [ 690.562673][T13564] batadv_slave_1: left promiscuous mode [ 690.632236][ T5941] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 690.700439][T13564] syzkaller1: left promiscuous mode [ 690.719670][T13564] syzkaller1: left allmulticast mode [ 690.856590][ T5941] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.874730][ T5941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 690.881743][ T5941] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 690.891046][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.902749][ T5941] usb 2-1: config 0 descriptor?? [ 691.088881][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.096188][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.117185][ T5941] usb 2-1: string descriptor 0 read error: -71 [ 691.157098][ T5941] usbhid 2-1:0.0: can't add hid device: -71 [ 691.175471][ T5941] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 691.194977][ T5941] usb 2-1: USB disconnect, device number 22 [ 691.646573][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 691.870033][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 691.883119][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 691.896679][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 691.896705][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.896721][ T10] usb 4-1: Product: syz [ 691.896733][ T10] usb 4-1: Manufacturer: syz [ 691.896745][ T10] usb 4-1: SerialNumber: syz [ 691.938023][ T10] usb 4-1: config 0 descriptor?? [ 691.944350][T13572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 691.962081][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 692.269708][ T5957] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 692.475077][ T5957] usb 1-1: device descriptor read/64, error -71 [ 692.715150][ T5957] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 692.875386][ T5957] usb 1-1: device descriptor read/64, error -71 [ 693.024966][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.045578][ T5957] usb usb1-port1: attempt power cycle [ 693.167876][ T10] usb 4-1: USB disconnect, device number 9 [ 693.816704][ T5957] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 693.836046][ T5957] usb 1-1: device descriptor read/8, error -71 [ 693.843160][ T7355] udevd[7355]: setting owner of /dev/midi3 to uid=0, gid=29 failed: No such file or directory [ 693.861555][ T7988] udevd[7988]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 693.928861][T13600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1920'. [ 694.075098][ T5957] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 694.275534][ T5957] usb 1-1: device descriptor read/8, error -71 [ 694.275994][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.455393][ T5957] usb usb1-port1: unable to enumerate USB device [ 695.168193][T13602] netlink: 'syz.1.1921': attribute type 11 has an invalid length. [ 695.224075][ T30] audit: type=1326 audit(1755210572.263:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13601 comm="syz.1.1921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb36158ebe9 code=0x0 [ 696.195699][ T5957] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 696.308720][T13625] fuse: Unknown parameter '00000000000000000000' [ 696.355181][ T5957] usb 5-1: Using ep0 maxpacket: 16 [ 696.366653][ T5957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.405890][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 696.436858][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 696.465565][ T5957] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 696.494791][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 696.540952][ T5957] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 696.562494][ T5957] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 696.603394][ T5957] usb 5-1: Manufacturer: syz [ 696.640673][ T5957] usb 5-1: config 0 descriptor?? [ 696.901253][T13619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.087735][ T5957] rc_core: IR keymap rc-hauppauge not found [ 697.107307][T13644] program syz.3.1933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 697.119165][ T5957] Registered IR keymap rc-empty [ 697.124222][ T5957] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.195214][ T5957] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.231452][ T5957] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 697.309905][ T5957] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input45 [ 697.362218][ T5957] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.405203][ T5991] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 697.415997][ T5957] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.460547][ T5957] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.505483][ T5957] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.535043][ T5957] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.690060][ T5991] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 697.698494][ T5991] usb 4-1: config 0 has no interface number 0 [ 697.704626][ T5991] usb 4-1: config 0 interface 98 has no altsetting 0 [ 697.719148][ T5991] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 697.729251][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.738533][ T5991] usb 4-1: Product: syz [ 697.742751][ T5991] usb 4-1: Manufacturer: syz [ 697.754964][ T5991] usb 4-1: SerialNumber: syz [ 697.765395][ T5991] usb 4-1: config 0 descriptor?? [ 697.795848][ T5957] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.829210][ T5957] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.879794][ T5957] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.931583][ T5957] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.992822][ T5957] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 697.997750][ T5991] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 698.049314][ T5957] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 698.091231][ T5957] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 698.127068][ T5957] usb 5-1: USB disconnect, device number 89 [ 698.886572][ T5991] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 698.906962][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.915849][T13312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.933534][ T5991] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 699.068985][ T24] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 699.316123][ T5991] usb 4-1: USB disconnect, device number 10 [ 699.331917][ T24] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 699.441617][ T24] ------------[ cut here ]------------ [ 699.441771][ T24] WARNING: CPU: 1 PID: 24 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90 [ 699.441814][ T24] Modules linked in: [ 699.441894][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 699.441922][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 699.441947][ T24] Workqueue: events request_firmware_work_func [ 699.441985][ T24] RIP: 0010:kernfs_get+0x72/0x90 [ 699.442012][ T24] Code: e8 33 65 62 ff 48 89 df be 04 00 00 00 e8 16 d1 c5 ff f0 ff 03 eb 05 e8 1c 65 62 ff 5b 5d c3 cc cc cc cc cc e8 0f 65 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 15 [ 699.442034][ T24] RSP: 0018:ffffc900001e75e0 EFLAGS: 00010293 [ 699.442056][ T24] RAX: ffffffff825d4681 RBX: ffff8880782b2870 RCX: ffff88801d690000 [ 699.442075][ T24] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.442091][ T24] RBP: 0000000000000000 R08: ffff8880782b2873 R09: 1ffff1100f05650e [ 699.442108][ T24] R10: dffffc0000000000 R11: ffffed100f05650f R12: ffff8880320575a8 [ 699.442127][ T24] R13: 1ffff1100640aeb6 R14: ffff8880320575b0 R15: 1ffff1100640aeb5 [ 699.442146][ T24] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 699.442166][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.442182][ T24] CR2: 0000000000000000 CR3: 00000000559ca000 CR4: 00000000003526f0 [ 699.442202][ T24] Call Trace: [ 699.442213][ T24] [ 699.442226][ T24] kobject_add_internal+0x632/0xb40 [ 699.442274][ T24] kobject_add+0x155/0x220 [ 699.442315][ T24] ? __pfx_kobject_add+0x10/0x10 [ 699.442357][ T24] ? kobject_init+0x83/0x1e0 [ 699.442401][ T24] get_device_parent+0x316/0x3a0 [ 699.442432][ T24] device_add+0x2e1/0xb50 [ 699.442462][ T24] firmware_fallback_sysfs+0x2e4/0x9b0 [ 699.442511][ T24] _request_firmware+0xf83/0x15b0 [ 699.442568][ T24] ? __pfx__request_firmware+0x10/0x10 [ 699.442627][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 699.442657][ T24] request_firmware_work_func+0xaf/0x1c0 [ 699.442694][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 699.442720][ T24] process_scheduled_works+0xade/0x17b0 [ 699.442778][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 699.442823][ T24] worker_thread+0x8a0/0xda0 [ 699.442879][ T24] kthread+0x70e/0x8a0 [ 699.442913][ T24] ? __pfx_worker_thread+0x10/0x10 [ 699.442943][ T24] ? __pfx_kthread+0x10/0x10 [ 699.442975][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 699.443004][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.443033][ T24] ? __pfx_kthread+0x10/0x10 [ 699.443064][ T24] ret_from_fork+0x3f9/0x770 [ 699.443092][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 699.443124][ T24] ? __switch_to_asm+0x39/0x70 [ 699.443154][ T24] ? __switch_to_asm+0x33/0x70 [ 699.443183][ T24] ? __pfx_kthread+0x10/0x10 [ 699.443214][ T24] ret_from_fork_asm+0x1a/0x30 [ 699.443263][ T24] [ 699.443276][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 699.443296][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 699.443323][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 699.443338][ T24] Workqueue: events request_firmware_work_func [ 699.443370][ T24] Call Trace: [ 699.443379][ T24] [ 699.443389][ T24] dump_stack_lvl+0x99/0x250 [ 699.443417][ T24] ? __asan_memcpy+0x40/0x70 [ 699.443444][ T24] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.443472][ T24] ? __pfx__printk+0x10/0x10 [ 699.443531][ T24] vpanic+0x281/0x750 [ 699.443558][ T24] ? __pfx__printk+0x10/0x10 [ 699.443588][ T24] ? __pfx_vpanic+0x10/0x10 [ 699.443615][ T24] ? is_bpf_text_address+0x26/0x2b0 [ 699.443661][ T24] panic+0xb9/0xc0 [ 699.443686][ T24] ? __pfx_panic+0x10/0x10 [ 699.443730][ T24] __warn+0x31b/0x4b0 [ 699.443754][ T24] ? kernfs_get+0x72/0x90 [ 699.443781][ T24] ? kernfs_get+0x72/0x90 [ 699.443805][ T24] report_bug+0x2be/0x4f0 [ 699.443833][ T24] ? kernfs_get+0x72/0x90 [ 699.443858][ T24] ? kernfs_get+0x72/0x90 [ 699.443882][ T24] ? kernfs_get+0x74/0x90 [ 699.443905][ T24] handle_bug+0x84/0x160 [ 699.443927][ T24] exc_invalid_op+0x1a/0x50 [ 699.443953][ T24] asm_exc_invalid_op+0x1a/0x20 [ 699.443974][ T24] RIP: 0010:kernfs_get+0x72/0x90 [ 699.443998][ T24] Code: e8 33 65 62 ff 48 89 df be 04 00 00 00 e8 16 d1 c5 ff f0 ff 03 eb 05 e8 1c 65 62 ff 5b 5d c3 cc cc cc cc cc e8 0f 65 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 15 [ 699.444018][ T24] RSP: 0018:ffffc900001e75e0 EFLAGS: 00010293 [ 699.444038][ T24] RAX: ffffffff825d4681 RBX: ffff8880782b2870 RCX: ffff88801d690000 [ 699.444056][ T24] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.444070][ T24] RBP: 0000000000000000 R08: ffff8880782b2873 R09: 1ffff1100f05650e [ 699.444086][ T24] R10: dffffc0000000000 R11: ffffed100f05650f R12: ffff8880320575a8 [ 699.444104][ T24] R13: 1ffff1100640aeb6 R14: ffff8880320575b0 R15: 1ffff1100640aeb5 [ 699.444130][ T24] ? kernfs_get+0x71/0x90 [ 699.444164][ T24] kobject_add_internal+0x632/0xb40 [ 699.444207][ T24] kobject_add+0x155/0x220 [ 699.444246][ T24] ? __pfx_kobject_add+0x10/0x10 [ 699.444285][ T24] ? kobject_init+0x83/0x1e0 [ 699.444320][ T24] get_device_parent+0x316/0x3a0 [ 699.444346][ T24] device_add+0x2e1/0xb50 [ 699.444373][ T24] firmware_fallback_sysfs+0x2e4/0x9b0 [ 699.444415][ T24] _request_firmware+0xf83/0x15b0 [ 699.444468][ T24] ? __pfx__request_firmware+0x10/0x10 [ 699.444508][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 699.444538][ T24] request_firmware_work_func+0xaf/0x1c0 [ 699.444585][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 699.444611][ T24] process_scheduled_works+0xade/0x17b0 [ 699.444666][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 699.444707][ T24] worker_thread+0x8a0/0xda0 [ 699.444760][ T24] kthread+0x70e/0x8a0 [ 699.444789][ T24] ? __pfx_worker_thread+0x10/0x10 [ 699.444810][ T24] ? __pfx_kthread+0x10/0x10 [ 699.444841][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 699.444867][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.444893][ T24] ? __pfx_kthread+0x10/0x10 [ 699.444921][ T24] ret_from_fork+0x3f9/0x770 [ 699.444956][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 699.444987][ T24] ? __switch_to_asm+0x39/0x70 [ 699.445014][ T24] ? __switch_to_asm+0x33/0x70 [ 699.445041][ T24] ? __pfx_kthread+0x10/0x10 [ 699.445069][ T24] ret_from_fork_asm+0x1a/0x30 [ 699.445115][ T24] [ 699.445453][ T24] Kernel Offset: disabled