last executing test programs: 13.585194385s ago: executing program 1 (id=1109): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x42640, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = memfd_secret(0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000180)) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000080)=0x28) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x5, 0x2) 12.443094319s ago: executing program 1 (id=1113): syz_usb_connect$cdc_ncm(0x1, 0x83, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES8, @ANYRESDEC], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000100)=0x2c0000) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = eventfd(0x5f0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x5b5af000) readv(0xffffffffffffffff, &(0x7f0000002740)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x7e4d2000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001240)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x200400c5}, 0x4000800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000150043d629bd7000fddbdf250101000000000000000000000000640101000000000000000000000000004e2100004e2100080200a0802c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ba6b6e0001000000"], 0x50}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f00000002c0)={r3, &(0x7f0000000140)='%\x00', 0x0, &(0x7f0000000180)={@align=0x7fffffffffffffff, {0x6, 0x8e70, 0x9, 0x4}}, 0x2c, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x3}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000300)=0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r4}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000000)={0x0, 0x300000, 0x8}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') fsopen(&(0x7f0000000000)='udf\x00', 0x0) pread64(r8, &(0x7f0000000480)=""/144, 0xfffffffffffffe7f, 0xa) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) bind$rds(r9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.731489176s ago: executing program 0 (id=1126): unshare(0x64000600) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x35, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x400000ca}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x48000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000840)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0}}, 0x20) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffffc, 0xfffffff2, 0x57, 0xa, 0x2, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x5, 0xe661, 0x4, 0x3ef, 0x3, 0x7fff, 0x4c76, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x3, 0x80, 0x8000, 0x0, 0x8, 0x129032e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x87, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x315, 0x78, 0x62, 0x73b, 0xfffffe00, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x4, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x1, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x10000007, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x3, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x10000008, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x13, 0x7, 0x4, 0x6d01, 0x5, 0x3b, 0x1, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d3, 0xc2, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x800003, 0xfffffffb, 0x120000, 0x9, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0x5, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x10000, 0x6, 0x1, 0x10000, 0x2, 0xfffffffd, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0x8001, 0xfff]}, 0x45c) unshare(0x2a020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r9, 0x407, 0x0) write$FUSE_INIT(r9, &(0x7f0000000240)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x100}}, 0x50) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r11, 0x0) landlock_restrict_self(r11, 0x4) landlock_restrict_self(r11, 0xd) socket$unix(0x1, 0x1, 0x0) 9.331028092s ago: executing program 1 (id=1128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x240301, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5821}) socket$unix(0x1, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x2c8c03, 0x94) r4 = open_tree(r3, &(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', 0x89101) move_mount(r4, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) socket(0x2b, 0x3, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd2b, 0x4, {0x0, 0x0, 0x0, r8, {}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x44810) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x2008084) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 8.770482932s ago: executing program 0 (id=1129): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="e0b1009dafa77d0c07fdff9f4969714847a0cf50fe600c398ed0e88e7c5726401faf"}, {&(0x7f0000000300)="efe45c1adb1106d1700d353228155aa42b6ca8cc864918c7e24b86c0d8ef0fa09b07047d902717ab92b085eb82832b9b863e09c1620dddbded6a85f0a78709cf288a999b7534eb82c94de3d7c29f4c09"}], 0x0, 0x0, 0x0, 0x48841}}, {{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000002700)=[{&(0x7f0000001280)="372a58d69349c97d206976118b461253bae93c56431d6701fb80afd25df2361698ca72ccbde81c8279d2141710eee04876559e7c4740a5b89843508d0d5a74e9601fc161a8a308ff1d72edf21235a430c98a00438cc3a716c2e15c796a225933846eb6e6672a63e258ee6c662d628089017bf6322f163c92faa22e642b66ec0bd06e1a5d584c1d7231f2e0fb6729bc4c18e3222093d7df5f20bea285d34efc2d418bf398cf98090f798a5d986187baf10a57ee83f7989fe4ee3749a8a8bd42cd8609dea5f25d11c2a0aa224fa271c7645995755d0177f6c9b790c0a9eca62f1ca4ae5eb67abc1034d1f530e3beb0984b0ee4084472e2c124ac3b46ced8221b8524ba99db0b4848289624c44367fd452a7be8690f0151f368af9ec6dc29fea0856b557f55e7bbf3e42a1545acb51696bbfdb8ae80c6ed0e647f9f8d17d8f02961af43298f91d780b4b607dc4450db2ec88cfde4fc0f3f925c724f94d3e172356d4f4b0e84944e891a40bbff41846329b5e01c1234fbc55d22d7a24e504f25e31b5da978f5d095d8e001ece7affd127bb105f5da0cc7ca64ede339889397aae0e63ee7c81bd4c0c7caa69769dd989ec756d70fb3c987b41920ac3c166dc4e58e63b1ea02c70194e5c3600a712b53049dfb555bcb0086a45dae7248272f579f7166adc207bda4a24747c8189cfa37bc8ebd98fbd49fd529b18385c1da8dfd9ac19f1d7ef13e779bf81bc9d7a7ee9b5f6c334c07051f9be43757c9312bc9c1f8255dd50e98effa83d41e0335ddd09e8b0b7d4358bf04468e43fdb453a0df472a4a823ec6069157898c5a6d4fe7828d4f9dc4de7be504cbe0e79b280f7a3228b42c66f3e4d37846d9bdb2c5e9601f19f4c6ef568ba252a2fc50849bef8e5c33ba79c28052e8d01d1747d6f5ecba5e3e2f6d5a70fc25bf35764d7124527af40a71fcdbd0c75782b0d0c98160d12b9bc83cdaa9703f2b55df7bd689ab0210d300f1d14bc48df61bf3eb96710e18a243cf446f90dfa81d32de3d27df658f6e9c9240106e696fb9244ca3178fa052438e5814ec894ad0e39b95830167056a9d6f4834eacf488b94a438df392b0de25a3c14b88bcbf70b02e8d61680e652138050acdd2df23d2aadf87daca7d801eb81cd3b885c7ef34b6b9967f14d8bafc4dec976cda7b02ca20f39c156c314f2e4365e8fe0765966460b797418ae3996b31dbfa5a8d4c17f7756f14d14087dbfec52e2306ddfa74e5df3d5c939416c508cc5891db97a3145d6e0890d96e17a99e19c4472c976777b2ed3afbd2b7bc7758304924f67911d9e9a8bb797b52a03780096cbd0393988d8b5c367c2422c3cd0f4a40d0dfea92af57ec4bfa368961745ab4394362aa7b268d7c2f1e0510e6e145c69f169b360cc39579eeec7b61e29cc4c3f6caf0df11563447c81eeb191fac829e6da3838fa2b7112ecb85b5c4ea7fe6f47350e108ac1dffc541c5952ffe667244f1e21a31b3db6f9d3037dbbd9e1f0c33ed45449d9824e092b339dda5a1920291bd96dacee0a41fa08103bae3815a44bbe1685058b3fac0141e56372d948d6cc7134f9517f93d8588482156c3477113da2b81f11dc21c88597f1d6856bd1afebb614da55cbb5b6e74cee599d5845a12d5c64142937bd8a05db2618519395cd39c0e36ebd4cb43e82c02a394a86e9165d0691e2ec2c7099849e57977f515312f232be80fc9f2c6dac2d0a407ff4f1253114be01d4ee00b597d066bcf3ec3207d407764fb0ec270551a7df092728035bcebba821d70ed1c95f17d3641528427b474149ddabe8c2dcbbc62c51b833f2cbf3c4af1613e26b6b9c67cb3432e6faaa0f424727e05b4f4fd6174807efc30dff09671f639033fae6d32cb140a59b3e705f5fd11464b843f1082d78d7b46afb6c63b873ed593639da25959e943d163e7f41bb074a6fd5d4cb40a67ac49d9ee72b300986ec841d779fda405a989552878b928e4e964c04194c757d149d7d5d6dbd31b8f29d37d4be002181b4dfa62908097ff6d332bcda6460993f9c7cdc66857a049850c4e516b2fb49fb3443e7841c9d341dab3ab7adabe7ef76ec6b9ffc103f65d4632c5fa4ee896182f64482eb457eebba32787b0633d69621defc9d6d8513a3187a40c5276856d801650b85ef9e8760610a0fb3f4ac6b5517ae898f18a042121211831634c177a022886e7df504e77001d2adc03ed7ea2f5c0a33ca492ca5eea37971ce92c42611c8f79a165ed86a68fbd0d3c35d6d5284c1f3685ecf688bb0cb0ede067a1b876e891c2968ae3325523ef1ace885a74bc7ddf1fae2e515adc676ca17d531b5d0205dffccc483060b7a4f2a2a08c1d37072debe167276434bc967e2986fce522277a91aeff8977d96d80a259e8c4115b90931bc6217bbcd54c8967cd9befc8665a27fa30f56253c52ec3891a24479ef0a7fcc10a1785f965a3fed3cbd16d876307fe14c71d771acfbf67aafb9f7145ad5d64fdb939dc88d72db4fcf5cb0399039b1bc3a308f333bbed48787378c7965ea16023aaf916e06fb8df244f63c238e310aacae2ddae22b9375d1920e2243a26da4aa6308636f1a35fb2f02a69bc0f36fba9518fe1ffc5000ac64f2295ef69715cef1d11fc21ab9a726111da7e29427cc6957250890a14bafcdf9a8bac7c856d74d9adad55d5b7a27ea0255048e53f043b2921123e0dc9024f00e9eaa7324818be86965ef90d28210729ab2ba5d03a8a69c241e64b2b1e7a2aa9a7b4750b2c05a50ef80cf59f403e14e4cf87fd4c51c3b4ea7c5fa79563a0e10cfe0ecae92c7c70c1c4440ad3d506d5b732515bfbb18c94bda64a6f3ffea28e88d8388c13025ecae937fcace442fddb4e817e78db6147c568a2f82bda5d10d69ae828c36149a2a784e39179615ad3f57254b6c4e3f74afe54a462134ad0b3a18392cfba4e70b7da7f6184e2aeb229168d8fef1b210cd03f09befe6f4a8ed05f02ea77eadcf978a909992b66ca410f31827a5b851c64c6f1633fc560e60a11a083020d09c8f007ce317e0b42131e35ec2de7dbfef8840f7f9d60958ca6142eb28bcaf1542653d1f9fbdc5db6d0c827ec869806c3d374b9253df037b4d683deb0b436e7618cb552c68908c7d341a3c976eb97981c26b392ee46c19e97d8c19561f40f8e1047c10e31840a2a8e08e030185dae7b61e6363e8240be808c3b348cbbc869d2dd7932c8aa70af1d71c374ab48fcb25f35714539c95c98377624bdb08e7da87a329a36f1dae13ed463d8af999a3e5884088bc7a3caa1b5d903cd2689a78e8c78fe53e4af47bf6ebbe81ca084b2854f743d41a188b5ff467efc0d6e6180b1892f5050de6a352cb2e8cae811bc955c08a58b83d084946cbc922e9a763e47aa05f3231b7b1627250e38ec5155b2e0c4c275df42ac00a299245bb964dc4582f54ec9f0291f6e5a25dde6cc7e5973e1a2b634bd636d4f8b5b8bbe5d8be0d2fe3bb93de62d44d198425ffc595070f63fc28eb500a3f97be838d991c1e7fca09911774404a194287c8be427644f8b3035874458635f4bfc3762964828570b2f40f23855bdb9fef4b5189fb78da46c4bb666e40fb317f39c8afc66fa38804daf54f0b1375a6176fa38c1698dd6c652d2a54e05a5c6845debec5740e669d7899096984d236d350838658ee5b0bcd8d3fc30d9dfe874afd0795cfe09cdfbd6cf3f0d8acddb873f907c61fdebe3634efb39b0123ff1fac1a8a3d2e814eec31808f8478d84dc16c5268809780e25f3797e6ba09c60cae71a66697adb872173bd14f74683847cc4400a8670142e06fa6b8df2d312d469fb0d094e6809144d314b5eb886cc2a9101b6dc06592486e278ae8b126568873e5a5af44644d807b0e26362118941df988df0bbb7bd66442ba4e02dd8ce80ed663c88b103c5ed2160cd887e3dcc0088a88eb73145f813c05d18f07ee7b5d9090c2932631432b540449e11732cfffd4e458c686aba2593b44a3bec49c48afc88dd5e1e0465310a600166986bc4c6a4cc15ed87929f6fe671ceef4a07a1fe3513af09a3638a79241f61fbf1658fb49abcbd51a7788afa0c0b7b916082083bbfd9f34cdc6959d90a256208110f79b7588c628c21b3838501cc88c762a19326a0019d57de78e129cf5101f329f325fa3d056f2ecbb9be18d9976f4e2431c77c95f7b1ce75c8b075c6832a1458cd1ea45c3234cad9674e7b2af1df3542f7e4148f71a614e23b607315c6a58cfedcd2cc6b5baa59c5611b6b5300e412382652d64bb7aeeb2a016e50d1b20d908125b0de1d5aed9f4be70b39a3d3edef26fc5fe07235460bec06bca183c21de8f9d36d236f16ef397e140b6692a1a9a50f07b2ff8ea25ef985e452f2ff258632289ce2e5f2308d7ee24680f11521c450e1d8915c1afd2f653983ca02062eaa25ea7948a4269ac158f8a8289318dbad16683d2be6a8aa6fc55543f38750f643fbef1fd6f8ece73464b3c6922b3287fc286af3b4c7bcfe42f6ea1d9fdac5e826605103483b73c37ec26016ee700f700deac71633ffda158a1f0f3516ac12a783460d534f423a618ef15ee23aae61b9e6690f928d20e45e3cf6637d3a269009b4f73e3b4f71995b887b4b6a44d8813bba1f0b5a8d6f3d3632c4b03edbf6f28484a1273f6cd66ac88bfee5b081727ee8bc691e7408d3b27745ea988a5f044df105394ddf731c1b0346fce7f26fe128664abc641c38d5baad714a2db458e37e43940d172080f4df27205fb53d91b9472ada6650016b73d3686d162ff61c6e1285ff5ccf2fa4a1e4b37be6968f7bddc26337aaa4d23f21ad22b403cc1ceadde36d79be99953d1934fe36d8301f69973bab223045a39ac381ba45426928f7ac8b43fe94843fba5983c2ebca89898d764c94d77067f2f18d4f12dd2225ea90029f717c0f5056dadeac876721879a3f12b79e48f3c8059eff2c3dae5b5ab8bb34d3c3c207788949d5ad46da6ea9e6f24be328c127a8c161ef7326b366f42c940439933ed4122144ba749c550e7e7e57b58e61c2b8e2eeabf2de2c86f1c7a636480598fd05362d286505e7321f51e7057a062d26583121e4029db1282938587575a7cdf3499946e8a43164f746ab492fabf46265cc337a06dcbc7e025a51139e737b44bb5b9c10ef78ceb107b90d3b2fb031f07516591f0016e72acf67fd5320ffafd04c317e12059e489c6c2217d7837d8f9d0288c64c84cbcb83f7bcbc831268bcb1dd5acd28899d041f392788fa1a1cce5fa4e07d258bc556b328254e438b83a4e6cac1f9b0972818107bd5ca4e8da8ee3c97d44c7c4d73791c5ccc657b1190090b8a2803af0e7be650a26221fcd3fdcccfec2d0b2d40f6d3e03db47c49b1c8341989223ae10cd5b2e1e9137dd2ac9384478df5fa46211ecffeab5433851a7a6d01b7c00c3220e6545d1de5d3f25497f1fc020c97b35e0cb342eda59c9c0d9583bb14549370a37d6e163c63938d30f6a161dd0e9426a615da6429b7758730222079138cfba0407195387cf81ad2960d6c27bdd9cf94e491f014ab90435c4f6da14739b2e5cc3b1b1a2e17b76a5d344965fa8cb04da6e7b03bc9d689e660baf1c113aa19a9574153e2ebd3acfa5e4c598387283d6c389c5cf56125692d95582ca2cdac640011c77088d2a9bea4ca114de6ec816f9428e2445acc1447e2a52c610657fb216979958261bfe49cdbcf024d3b3b3bcfdbae7280363b931b8b19995f31cb64706cb586d4b9cfbab74df9c00e5d0b89f1152c6e4bf890041f0e0de53c150046de5cc514cda6372022ee72a"}, {&(0x7f0000002280)="6057fd5ab315d2402b8789e9f37385bb4038a95d198fb439da1979c8ee7f0be54e2bd25f55016a4217d209027816a99d035ff2fe8d12aa22f62a825cd3cbe83e321f66ba7a32e9e2c3a34ae412a9ba6593ce3f6f809fa8932340d8748d6459ac79f6ae4c9dec8dc4257500fdfc2dc17693425f7365b1915330081c3061caf5426efdd83b023fdd1f5463"}, {&(0x7f0000002340)="1c7ae3ee2b45e4ba16b1dfd2a32944d559a2d17d3f5831028ae9b584a9701d5c9c11e331e0f71a9c73ad0b6fe2c1f6622bc0e18d0c17dfe455106596c912fee37cf0f188608f8653b769f7f632c05a53667aee6abd195f88add97e1e5090ac98d64f517cd83b1bc44866c6465de6d8ba6d378acd4835a9a388dda030385adf002a0dd82de092ed41717adc66"}, {&(0x7f0000002480)="28d03f847e10ea7d6d87ceb81522dd15e471c1a47771dae22db13089d34eb034ccb15a217d630354107a1195d73a62d3037a9c03bb33e289c9e077bbc020e3702e91c97b865d4a754f4bd3d66d7c09984ee5a00af2c22d"}, {&(0x7f0000002500)="cdf18b5fadd30d6743df467d84cad4c258d4eea760903283d2867a3db7dd421c9364eed510756963def6c08a25932eda17fb99d6d9ed3bb06d156cab9c1be3b42ccb30fa4f4461f2fbbaae36bb66959f2f4b730d48cda67e3dfa8228a18cf42284cea0666ff7c47bb562755e24194b230e7c4d88"}, {&(0x7f0000002580)="1d9255b4abbe35d6903b031a099c32c077451768761aca3f0af4270bc588399fcbd3b73de4e0cf01caa3dceafdf54b04d4dec1952a9a791645d5340d1ffe40ec1cedf5cc85dc42ebb923c96389027a15ca42794388c4a1c7ed3a31cac32f8e888e015e8e622f54a1ebde839706228d512304fc5bb88d969e9c20a2424a09d6e3b44d0ab32fbb64040484aeefe644f81859caee36c42283b9eeb6e5c4956226eab604473e397c12dc7fe44ffe7004345b1bc205a6e1f8310f2cff560839b9231f23c872c500f9a533d66d3a3b714a6651945ce60b1af83a087179524031"}, {&(0x7f0000002680)="22698efd0ea9201727f35f53903da9979bc1abf75b64a4cbd241d831ec6efc133f5ea38dba43de2ffd03e01f76cce16f7fee10940ddcc0c0bf46bfad8a26f8ced25a76f85f90b63ded156309ccbcea645fac60c355c4c52412303aa5fcfcd8c7f4c5662224b1ee307f3ccb67cd7952a767"}], 0x0, &(0x7f0000006b80)=[@cred, @cred, @cred, @cred], 0x0, 0x20002010}}, {{&(0x7f0000008340)=@file={0x0, './file0\x00'}, 0x0, &(0x7f00000087c0)=[{&(0x7f00000083c0)="283b85e00dee07f08880174f0d4bf6ff0440b3d40cf664708709db99d027882f9e837916f8fa868c70b3d70f46d411b0e1446345d8aa341952ad3afc6718edf14c77587744f93336d7a0c517a114f2a905b5d9"}, {&(0x7f0000008440)="a941f1fd44783ad69c653b3107fc06b9b2ed66cfafca86b57a6b1cef2b49d5e75d6aaf794c170f3f956b286e061589ace7ae2f9700b0a3a151f074f71a5c0d567fb6205ab7f68d4ed6689566796148eec4501d811c887dbcc6f2cb30bbe97d40bd4cbda55b08ee720011c2b123f14f2cf5fe5cb3"}, {&(0x7f00000084c0)="ba04df3a3b5a1a73289a3a2467817fb329afd2b1b9c3cc9145390160cabb1a6f9ec5d9269b07b3889e3209a8db5ad2b26e6cfc138f725dff7e8a74abe42c7e4e8af434cebcaf677f356d1f61fae12b33f6ebe4221a5bc2f4ddb1a127d63bda9fe89eb832efe630a9634d27e47899deea2aa30635892e0d7cc2a3d6bb722c22f8a271991ffb587fe3c9c934423628912648c7077a1e61528a6f4507eae83062216f669d9755af60890be395"}, {&(0x7f0000008580)="3830920d49a5ffe24ad3d2d170937ea4f3c6ec845e0c0ac13bd43553e91948593c6e5bbde10fd79e3f5ae5a2da056033bc5d35b8126410556e54f9ecd3190fff71876dc8bbcc637c68d19d66245ff4551da4d1fb14e7b2bb88b6e3c174978a7f663bd14e8e513945"}, {&(0x7f0000008600)="d4c4a86f55479c8b4defeb54005f4e5861bee1486e3de2f874bcba829f1d19429996e8ba3f6770e0c3e563b205ebb445191c5ed9425fe3f3f4bf07366bffa658842b7f0cbb6f761f7325d6dfc17ce8b132184831fdb50924e6c2d279948e8db1140fded1dc409553acdfcdb45c0cee5762df924836dbcea3f59ad5a5dc656eeab952b5598535dd1d48cc482ef26d49ee"}, {&(0x7f00000086c0)="c682008aaa9e0421106ba75b10985348"}, {&(0x7f0000008700)="0d4243ef8d0945bbf407eb241ece7b0b0cb3ddd0d664810534086b2b8ade5ffb516005c296e9f669b3032693d849d96e93f99af4436b0c5b2807e652a2c9da852602d9e4aaf7ad52502f07169dab0b655d393c2483eec845349d91f10b983a22078cc1c2856b9652839d47f51f5f65e29572f3e35564b5494d12a97f40fdd1ebf9a8ea3fec766b1c5dd68e563b44c32dd970f1869687a35517aa4376d019a5ee1ae8d32efa6150de274093a99301"}], 0x0, &(0x7f0000008a80)=[@cred, @rights={{0x0, 0x1, 0x1, [r0, r4, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @cred, @rights, @rights={{0x0, 0x1, 0x1, [r1, r0, r4, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r2, r4, r2, r4, r1, r2, r0]}}, @rights={{0x0, 0x1, 0x1, [r3, r2, r0, r2, r4]}}, @rights={{0x0, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [r4, r2, 0xffffffffffffffff, r3, r1, r3]}}], 0x0, 0x8840}}, {{&(0x7f0000008c00)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000008c80)="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"}, {&(0x7f0000008d80)="08824d337151d3c3ba2e20be6280ec013f45939985babb08dddf13c9c784e6be5e25e3920acc78ce5eea833c467b8d5a6678d45829fb25588897a04e82caef20d09b5a311e8bf2fb8c623f0a1c97a80dd31e9d6e17365f4de483c1fb23feaebf03d54a9beefbd720c4f7e61d9b20a119c180271d25576a5739a1e1"}, {&(0x7f0000008e00)="e91a0fd34d63a4d95dbc922325a17b44885cfacd08d9bbdeb1ab75dc1acd5187e3fe25a3695d1254178a50b11b7f06f5cce41c6f143b83b0c11fd00e5f17f3da34ae5979ae402037d60d511403d06e286c6ab683f1cdfa3775639c02473925d3456f8aa07d9b914765b0d056f3dedae7d17991f711202694bcaa74244fd946da71bc9a5a02f35817f1aed5edd1d3019ffcbca9ead53aec936ef641084a4738d12b71"}], 0x0, &(0x7f0000008f40)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [r3]}}, @rights={{0x0, 0x1, 0x1, [r1]}}, @rights={{0x0, 0x1, 0x1, [r1, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x0, 0x404c810}}], 0x2a7, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1acf9bd7, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r8, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r8}}, 0x1c) rmdir(&(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0x0, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x4}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff707900082402ff200126ff09058503"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 8.212341453s ago: executing program 4 (id=1131): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000009040000090300000009210000000122220009058103000000000000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002c06000000960100060100b31c0800002a90a08538b3c83e626f45d96d5fead5a54983ce9abc16a39ac1263ec3c5fb156aed0c5523db5e9bef0acb17bcefc9709aeb878f951085b4bc42a495d1c106f4cc925296d109870e7000fd66be4fca88d7299f49e3a040b8a0c7489be0979d92ab7908d5f865b79d6decc613a7d633a4e2c5a131ae5ff698409b56d722b02ddf2f699a388ef50e862d3666dd4d51b57378f1419a52f22927aa71f47f54469e6aff2fcc627f3eb38e801eed10c6804d8c23c1d03bab9b06ce2ba0f40a8b807510da4c1fb4b6be1b"], 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}}, 0x1c}}, 0xa890) ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, &(0x7f0000000180)={0xc5, 0x0, 0x2}) 7.452694997s ago: executing program 1 (id=1135): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c2000040042801c0001800600060088470000100015"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5.61889338s ago: executing program 0 (id=1140): syz_clone(0x22029400, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004cb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000067c000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000778000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ba1000/0x1000)=nil, &(0x7f0000eb4000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000dc1000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 5.194786854s ago: executing program 3 (id=1142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, r9, 0x3}}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x2c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x200}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x40}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.995906975s ago: executing program 4 (id=1143): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x6}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4805) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x7, 0x13, r7, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd86) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f0000000080)={{&(0x7f000000b000/0x3000)=nil, 0x3000}, 0x1}) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000500)) sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0xff, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 4.836196316s ago: executing program 3 (id=1144): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000180)=@req={0x0, &(0x7f0000000200)={'geneve0\x00', @ifru_ivalue=0x3}}) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001300050000000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000400030000001400030064756d6d793000000000000000000000050021000000000024002b8008000100", @ANYRES32, @ANYBLOB="080003"], 0x60}}, 0x8084) 4.598511618s ago: executing program 3 (id=1146): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x4e1d, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in=@broadcast, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffff53, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7ffffffffffffffe}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in=@private=0xa010100}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4.548222526s ago: executing program 0 (id=1147): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003f01f00810d00007f000000018fc11b4f1224df1b65a6181ecef5a6491b121e96173dc96c306408bd09752cbe1eb1207b00000000b90d6804000000000000"], 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604110, &(0x7f0000000d40)={0xfffffffc, [[0x9, 0x5, 0x0, 0x9, 0x3, 0x0, 0x0, 0xb36], [0x9, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x3], [0xfffffffd, 0x7ffffffe, 0xfffffffe, 0xd84, 0xffffffff, 0x0, 0xfffffff8]], '\x00', [{}, {}, {0x0, 0x3}, {}, {0x0, 0x2}, {0x5}, {0x9, 0x1}, {0xf60a, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) gettid() sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000000000422000300000a"], 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000600), 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x5802, 0x294, 0x288, 0x294, 0x380, 0x325, 0x378, 0x380, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0xffffffff], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x0, 0x4}, 0x0, 0x240, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x8000004, 0x0, 0x20, 0x0, 0x1, 0x7fb7ffff, 0x0, 0x8}, {0x20000000000}}}, @common=@dst={{0x48}, {0x3, 0x0, 0x1, [0x420, 0x2, 0x1, 0x80, 0x1, 0xfffb, 0x5, 0x7, 0x7, 0x401, 0x8, 0x1000, 0x2, 0x8, 0x4], 0xc}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000003c0)={0x0, "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"}) 4.319727386s ago: executing program 3 (id=1148): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000206d0403ca9d000000000109022d1a010000700109040001010300010009210000020122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r3 = dup2(r2, r2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) read$char_usb(r3, &(0x7f00000000c0)=""/192, 0xc0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004810) 3.959332301s ago: executing program 2 (id=1150): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) connect$packet(r0, &(0x7f0000000200)={0x11, 0x10, r2, 0x1, 0x53, 0x6, @random="b110db031abc"}, 0x14) r3 = syz_ublk_setup_io_uring(0x3cf0, &(0x7f0000000240)={0x0, 0x390b, 0x4000, 0x2, 0xf7, 0x0, r0}, &(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_modify_offsets$generic(r4, 0x0, 0x5c, 0x500000) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', r2, 0x7800, 0x80, 0xc, 0x40d, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x67, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_prespec={0x44, 0x34, 0x98, 0x3, 0x8, [{@broadcast, 0x10000}, {@remote, 0xfffffffe}, {@rand_addr=0x64010101, 0xa1cc4d2a}, {@remote, 0x81}, {@multicast2, 0x5}, {@multicast2, 0x5}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000002040)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000000500)=@delchain={0x1af8, 0x65, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0xc}, {0xe, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x91c, 0x2, [@TCA_ROUTE4_POLICE={0x910, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x2, 0x9, 0xc, {0x4, 0x0, 0x14, 0xb4, 0x6, 0x5}, {0xaa, 0x1, 0x0, 0x9, 0x4, 0x10001}, 0x10, 0xfffffbff, 0x80000000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x8, 0x8, 0x3, 0x7, {0x74, 0x1, 0xa, 0xffff, 0x100, 0x64}, {0x3b, 0x2, 0x7, 0x8000, 0x8, 0x900}, 0x1ff, 0x0, 0x40}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0xa, 0x8, 0x4, {0x38, 0x1, 0x1, 0x8, 0x261, 0x1}, {0x7, 0x0, 0x645a, 0x6, 0x80}, 0x80000000, 0x1000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd3, 0x8, 0x2397, 0x400, 0x8e, {0x2, 0x1, 0x9, 0x1, 0x3ff, 0x2}, {0xc, 0x1, 0x10, 0x5b, 0x7, 0xfffffffd}, 0x1000, 0xfffffff9, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x2ba, 0x7fffffff, 0x4, 0x2, 0x1, 0x0, 0x4, 0x2, 0x9, 0x5, 0xffff, 0x4, 0x882, 0x8001, 0xfffffb87, 0x81, 0x3, 0x2, 0x4, 0x6, 0x6, 0x3df5, 0x10, 0x2, 0xa0, 0x572c, 0xa, 0x4080000, 0x5aca, 0xd1, 0x3, 0x4, 0x101, 0xd8, 0xa99, 0x0, 0x200, 0xc, 0xb, 0x6, 0x3, 0x7f, 0x800, 0x3, 0x3, 0x5, 0x1, 0x0, 0x4, 0xdde, 0xffff, 0x0, 0x3, 0x2, 0xd09, 0x10000, 0x40, 0x8, 0x400, 0x7, 0x7f, 0xa70a, 0xf5, 0x7, 0x5, 0x0, 0x2d99, 0x2, 0x80000000, 0x5, 0x7, 0xff, 0x800, 0x8, 0x8, 0x3, 0x6, 0x4, 0x0, 0xc000000, 0x8001, 0x3, 0x5, 0x5, 0xcc, 0x0, 0xd79a, 0x5, 0x8, 0x2, 0x1, 0x2, 0xffffffff, 0x3, 0xd6, 0x1, 0x5, 0x9, 0x3, 0xe3d0, 0x4, 0xe, 0x8, 0x4, 0x200, 0xb, 0x934, 0x1000, 0x10, 0x2, 0x1, 0x5c47, 0x8a, 0x5f, 0x118, 0x4, 0x1, 0x7, 0x72ac, 0x7, 0x4, 0x7fffffff, 0x3, 0xfffffff4, 0x1, 0x0, 0x40, 0xee, 0x5, 0x1, 0x6, 0xd6, 0x7c000000, 0x4, 0x1, 0x7, 0x7f, 0x4, 0xad5d, 0x2, 0x10, 0x3, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7d, 0x5, 0x7da, 0x40000, 0x5, 0x2, 0xfffffff8, 0x6, 0x7c, 0x200, 0x10, 0x0, 0x9, 0x4, 0x8, 0x7, 0x9, 0x3ff, 0x0, 0x2, 0x2, 0x6, 0x2, 0x6, 0xffffffff, 0x95, 0x10001, 0xfffffff3, 0x7, 0x6, 0x8000, 0x7, 0x8, 0x1, 0x6, 0x1, 0x5, 0x3, 0x8, 0x1ff, 0x5, 0xa, 0xffffffff, 0x4, 0x2, 0x1ff, 0x9, 0x9, 0xff, 0x3d8, 0x3, 0x6, 0x0, 0x2, 0x30, 0x9, 0x0, 0xcb, 0x1, 0x1, 0x4, 0xffff0001, 0x5, 0x3, 0x1, 0x6, 0x8, 0x2, 0x2, 0x1, 0x7ff, 0x5, 0x38, 0x800, 0x5, 0xf, 0x5, 0x4, 0x2, 0x5, 0x8, 0x1, 0x2, 0x0, 0x3, 0xf, 0x9, 0x8, 0x6, 0x6, 0x6, 0x0, 0x0, 0x5, 0x1, 0x5, 0x9, 0x9f, 0xfffffffa, 0x0, 0x4, 0x5, 0x401, 0x7fff, 0x9, 0x7, 0x9, 0x4, 0x10]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9cf, 0x9, 0xf0, 0xffffffff, 0x80000001, 0xffff221c, 0x5, 0x10001, 0x6b3d9a17, 0xffff4b51, 0x7, 0x3, 0x7, 0x4, 0x40fff513, 0x9, 0x7, 0x4, 0x0, 0x2, 0x8, 0x79e, 0x17, 0xf, 0x5, 0x800, 0xaf, 0x0, 0x55, 0x0, 0x1, 0x0, 0x2, 0x3, 0xfffffffb, 0xfffffffe, 0x5, 0xfffffffc, 0x0, 0xb, 0x100, 0x1ff, 0xb, 0xa, 0x3, 0x9, 0x5, 0x3, 0x0, 0x75, 0x8, 0x1, 0x81, 0x8, 0x8, 0x7, 0x8, 0x4, 0x1000, 0x3, 0x4, 0x1d77, 0x2, 0x8, 0x9, 0x10, 0xe, 0x1, 0x5, 0x5, 0x7, 0x0, 0x7, 0xfffffffb, 0x7, 0x2, 0x6, 0xef9, 0xffffffff, 0x7, 0xe, 0x80000000, 0x3, 0x1, 0x8, 0x3ff, 0xe450, 0x4, 0x8, 0x10001, 0x10, 0xd, 0x401, 0x24, 0x4, 0x8, 0x2ac7, 0x2, 0x5, 0x3, 0x9, 0xfffff808, 0xfffffff7, 0x8, 0x7, 0x2, 0x800, 0x2, 0x0, 0x4, 0x0, 0x9, 0xffffc413, 0x7fff, 0xfffffffe, 0x0, 0xc, 0x6, 0x80000001, 0x1000, 0x1, 0xffff9cd4, 0x80, 0x4, 0x7ff, 0xed, 0x8, 0x2, 0x7, 0x7fffffff, 0x8, 0xfffffffd, 0x3, 0x1, 0x6, 0x1, 0x2daa, 0x0, 0x0, 0x6, 0x4bb5, 0x280, 0x10, 0x1, 0x8, 0x8, 0x9, 0xd3, 0xfffffffc, 0x4, 0x81, 0x6, 0x8, 0x495a, 0x5, 0x3, 0x6, 0x9, 0x0, 0x2dcc, 0x80, 0xc, 0x3, 0x101, 0x8, 0xf, 0xfffff33c, 0x8, 0xe, 0x144, 0x0, 0x9, 0xaa, 0x7, 0x7fffffff, 0x1, 0x7, 0x7, 0x2, 0x9, 0x1440, 0x7ff, 0x7fff, 0x6e83, 0x354, 0x3, 0x2179, 0x1, 0x7, 0x8, 0x13ca, 0x0, 0x1, 0x5, 0xe, 0x7fffffff, 0x87, 0x9, 0x78, 0x0, 0x5, 0x1, 0x793, 0x81, 0x2, 0x9, 0x10000, 0x8, 0x71f, 0x6, 0x1acf2cab, 0x101, 0x0, 0x7, 0x8, 0x5, 0x5, 0x4, 0xffff, 0xa, 0x2, 0xa32, 0x7fff, 0x8001, 0xbd, 0x2d, 0xc5, 0x9, 0xab60, 0x1, 0x8, 0x7, 0xd, 0x43, 0x1, 0xeaf3, 0x9, 0x8, 0x7fffffff, 0x2, 0x8, 0x7, 0x4, 0x6, 0xcb, 0x6, 0x2, 0xffffff71, 0x3, 0x8, 0x2, 0x9, 0x3, 0x34, 0x7]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xad}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0xf0}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_cgroup={{0xb}, {0x1188, 0x2, [@TCA_CGROUP_ACT={0x1184, 0x1, [@m_nat={0xb0, 0x5, 0x0, 0x0, {{0x8}, {0x4}, {0x86, 0x6, "3368e46e4eb98c9e7d5487c84efe33ea3363a580c45ee67dab9cdbce281996df96c22b7fcf3ee92c32b3d262c4e087d4ba2aebfe41515b62246dce1fccfd1b64ac3b77bd2429c9c83e0b76468d79e61db03510c20b421214e8c915099b908c950c60e61af11b764f31e83f363a5877c708054061a2c126a5db7dbf6976b588d63e12"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_mirred={0x10d0, 0xf, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x573, 0x10, 0x0, 0x6, 0x1000}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0xffffffffcffffff2, 0x9}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x8e3, 0x6, 0x6, 0x8}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xfffffffc, 0x8, 0xc471, 0x62}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x2f, 0x6, 0x74, 0x7}, 0x3, r2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}]}, 0x1af8}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r5) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x14, r8, 0x700, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x80) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), r5) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000002340)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0x9c, r9, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0xc000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x40, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x80) r10 = io_uring_setup(0x61e5, &(0x7f0000002480)={0x0, 0xdcff, 0x800, 0x1, 0x371, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x4010, r10, 0x8000000) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r11, 0x4b2f, 0x3) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000003500)={0x2, 0x12, 0x9, 0x1, 0x1000, 0x1, &(0x7f0000002500)="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"}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000003540)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000003600)={{0x6, 0x6, 0x400, 0x3, 'syz0\x00', 0x5}, 0x2, 0x200, 0xd, r12, 0x1, 0x8, 'syz0\x00', &(0x7f00000035c0)=['{&.%-!]\x00'], 0x8}) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000003800)={&(0x7f0000003740)=""/160, 0x1222000, 0x1000}, 0x20) fadvise64(r3, 0xfffffffffffffffd, 0x2, 0x4) r13 = openat$cgroup_ro(r0, &(0x7f0000003840)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r14 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000003940)={0x0, &(0x7f0000003880)=[@set_irq_handler={0xc8, 0x20, {0xa4, 0x1}}, @in_dx={0x69, 0x20, {0xb38d, 0x4}}, @wr_drn={0x68, 0x20, {0x0, 0x8}}, @nested_vmresume={0x130, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0xea8a, 0x6, 0x5}}], 0xa0}) syz_kvm_setup_cpu$x86(r13, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000003a00)=[@text32={0x20, &(0x7f0000003980)="f77598666726f30fc77200b940080000b8e3a5d462ba9d33ab650f30f30f090f30f20f017d75f466b85f000f00d866baf80cb8221da984ef66bafc0c66b88dc666ef660f1ade", 0x46}], 0x1, 0x1e, &(0x7f0000003a40)=[@efer={0x2, 0x8900}, @cr4={0x1, 0x20000}], 0x2) ioctl$UI_END_FF_ERASE(r13, 0x400c55cb, &(0x7f0000003a80)={0x10, 0x8, 0xa00}) ioctl$XFS_IOC_BULKSTAT(r13, 0x8040587f, &(0x7f0000003f40)={{0x0, 0x1, 0x3, 0x5, 0x3}, &(0x7f0000003ac0)=[{}, {}, {}, {}, {}, {}]}) 3.918678431s ago: executing program 4 (id=1151): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400010000b00009040000080300000009210000000122460009058103"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002020000ff2505a1a4405fe002030109025c0002018940000904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000002904810000020d00000904010102020d0000090582020000000000090503020000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0000460000004300a7ea3163fdfa964e2c8d955275"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.824015171s ago: executing program 2 (id=1152): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f0000000000), 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="0a0a00010600"/24], 0x54}}, 0x40000) 3.655480895s ago: executing program 2 (id=1153): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x800}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6003000000082c00fe8000000000000010000000000000bbfed1"], 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0040000001, 0x892, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @pix_mp={0xffffffff, 0xf, 0x31363553, 0x7, 0xd, [{0x9, 0x5}, {0x22955b83, 0x7f68}, {0x5, 0x4}, {0x28, 0x3}, {0x6, 0x5}, {0x800, 0x3}, {0x5, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x1}}, 0x9}) close(0xffffffffffffffff) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 3.558556784s ago: executing program 0 (id=1154): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0xffe0, 0xb}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) 2.430479294s ago: executing program 3 (id=1155): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x60, 0x10, 0x1, 0x70bd2a, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xfffc}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x80) 1.74713616s ago: executing program 4 (id=1156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000005140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@sndrcv={0x30, 0x84, 0x1, {0x7b06, 0x1ff, 0x4, 0x80, 0xd, 0x8, 0x88, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}], 0x48, 0x4000000}], 0x1, 0x20000000) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYRES32=r2], 0x19c}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4010880) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 1.740898658s ago: executing program 1 (id=1157): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x11, 0x2, 0x0) bind$packet(r3, &(0x7f0000000500)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x4000, 0x28, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f0000000640)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x80000001}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x37, 0x39, 0x39, 0x38, 0x64, 0x32, 0x33], 0x2d, [0x30, 0x30, 0x0, 0x62], 0x2d, [0x31, 0x39, 0x36, 0x53], 0x2d, [0x32, 0x63, 0x32, 0x64], 0x2d, [0x37, 0x53, 0x65, 0x65, 0x61, 0x65, 0x33, 0x30]}}}, {@obj_type={'obj_type', 0x3d, '{/(.)'}}, {@uid_lt={'uid<', r7}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lo\x00'}}]}}, 0x0, 0x0, &(0x7f0000000800)="faf612a2084743e53ee9165ac8d0225b82c539c8455e01f24314687d21f0a73e2bd562fe3242c437b1b9b38b32537cfc5ca0fcdf169d57e11bdfa5e7749128945714577c4a1dab4f64665c4691f24b9e9d787cce9c6a79a5678473c3424865cf2870b9d32110cceb2acef85b0e2b9d4192cb844454c66faa55bfbda5a5b4151bc66af3895fd58e4c31379f5636116f01e04564e96d5dfea442cb4a4681131b9e395f9fb6755a60daa96ed0d2a386feb35cc9273cff857241049cc371dc7f96ec24cc8e7d48307ed0c0bb00e494691952aba884b110a3c7") 1.14411978s ago: executing program 4 (id=1158): r0 = socket(0x2, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001140)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0x0, 0x0, 0xfeffffff, 0x1e8, 0xa8, 0x2e0, 0x2e0, 0xffffffff, 0x2e0, 0x2e0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'dummy0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x89, 0x1, 0xa}, 0xff000000, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id=0x67, @gre_key=0x4}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x2, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 1.052212534s ago: executing program 4 (id=1159): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x7, 0x0, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010000c800c0022"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) timer_getoverrun(r1) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) 903.74367ms ago: executing program 3 (id=1160): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c1251000000000001090224000100000000090400071903000000092100020301432d0009058103000400ff03624a751dff15ac8606b47ba537581eefaa8c3f9ba5dad47b259a5df89b9b0e32e7cad678044750eed100ccaaa1080a931537886da3ed142a8f0a47032aa315faf8baa6a2f2c73276250c2ad51f097c1523bfe5f230dc5336a60596"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000300)='./file1\x00', 0x10000200) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4e2603, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) set_mempolicy(0x6005, &(0x7f0000000080)=0x5, 0x7) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x5000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r1, 0xffffffffffffffff, 0x0) 822.613295ms ago: executing program 2 (id=1161): r0 = socket(0x2, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x0, 0x140, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x6, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@ip={@private=0xa010100, @empty, 0xff, 0xffffff00, 'veth1_to_team\x00', 'team0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0xff00, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x89, 0x3, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xb, @rand_addr=0x64010100, @remote, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@rand_addr=0x64010100, @multicast2, 0x0, 0x0, 'veth1\x00', 'veth1_vlan\x00', {}, {}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @empty, @multicast1, @port=0x4e21, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) 771.548493ms ago: executing program 1 (id=1162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x800, 0x2, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') setns(r4, 0x4000000) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000126000/0x4000)=nil, 0x4000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x800, 0x2, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) setns(r4, 0x4000000) (async) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000940)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) madvise(&(0x7f0000126000/0x4000)=nil, 0x4000, 0x9) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 616.153156ms ago: executing program 2 (id=1163): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)='7', 0x1}], 0x1, 0x0) unshare(0x8040480) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@delqdisc={0x2b0, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0x5}, {0x5, 0xfff9}, {0xb, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_RATE={0x6, 0x5, {0x67, 0x5}}, @TCA_STAB={0x1b8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x80, 0x4829, 0x6, 0x2, 0x7f, 0x5, 0x9}}, {0x16, 0x2, [0xb45, 0x4, 0x101, 0x4, 0xffc0, 0x6, 0x1, 0x5, 0x0]}}, {{0x1c, 0x1, {0x21, 0x9, 0x163, 0x80000001, 0x1, 0x0, 0x731e, 0xa}}, {0x18, 0x2, [0x3, 0x5, 0xb, 0x4, 0x9, 0x1, 0x9, 0x2, 0x7fff, 0x9]}}, {{0x1c, 0x1, {0x10, 0x5, 0x80, 0x1, 0x2, 0x9e, 0x6, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x6, 0x1, 0x6, 0xffffffff, 0x1, 0x2, 0x0, 0x7}}, {0x12, 0x2, [0x3, 0xff, 0xc100, 0x385, 0x33, 0xdf, 0x3]}}, {{0x1c, 0x1, {0x2, 0xed, 0x800, 0x5, 0x1, 0x4, 0x7fff, 0x4}}, {0xc, 0x2, [0x2, 0x7fa9, 0x5, 0x2]}}, {{0x1c, 0x1, {0x8, 0x80, 0x3, 0x7, 0x0, 0x1, 0xfffffffe, 0x4}}, {0xc, 0x2, [0x6, 0x401, 0xe57, 0x5]}}, {{0x1c, 0x1, {0x80, 0x6, 0x9, 0x5, 0x1, 0x97a4, 0xfffffffd, 0x3}}, {0xa, 0x2, [0x2, 0x5, 0x4]}}, {{0x1c, 0x1, {0x81, 0x9, 0x0, 0x2, 0x1bfe12a1ba9bab9, 0x6, 0x9, 0x4}}, {0xc, 0x2, [0xffc0, 0x3, 0x8, 0x3]}}, {{0x1c, 0x1, {0x40, 0xf2, 0xfffe, 0x4, 0x3, 0x8, 0x3, 0x8}}, {0x14, 0x2, [0x9, 0x400, 0x5, 0x101, 0x600, 0x2, 0xfffe, 0x1]}}, {{0x1c, 0x1, {0xa8, 0x7, 0x1, 0x2, 0x0, 0x9, 0x2b, 0x3}}, {0xa, 0x2, [0x5, 0x1, 0xc825]}}]}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x94, 0x2, {{0xc, [0x5, 0x10, 0x8, 0x6, 0x0, 0x9, 0x3, 0x10, 0xd, 0x1, 0xf, 0x1, 0x10, 0xb, 0xf, 0x7], 0x0, [0xaad, 0x8, 0x3, 0x5, 0x2, 0xc58, 0x7ffd, 0x0, 0x5, 0x3, 0xfffd, 0x5, 0x7, 0xfbff, 0x2, 0x9], [0x9, 0x5, 0x1, 0x3, 0x7, 0x3, 0x3, 0x1, 0x1, 0x1, 0xffff, 0x7fff, 0x5, 0x10, 0x2, 0xfffe]}, [@TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8}, {0xc, 0x3, 0x7f}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x405, "cc855adf249ac40164eca8c1ee863638"}}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000000700)='./file1\x00', 0x2000775) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xfffffffffffffde9, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff3}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000140)={0x10003, 0x0, {[0x0, 0x3ff, 0x5, 0x8001a, 0x80000002, 0x4, 0x4, 0x3]}}) 583.350718ms ago: executing program 0 (id=1164): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003f01f00810d00007f000000018fc11b4f1224df1b65a6181ecef5a6491b121e96173dc96c306408bd09752cbe1eb1207b00000000b90d6804000000000000"], 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604110, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) gettid() sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000000000422000300000a"], 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000540)={0x0, 0x3416, 0x13100, 0x1}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000600), 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x5802, 0x294, 0x288, 0x294, 0x380, 0x325, 0x378, 0x380, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0xffffffff], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x0, 0x4}, 0x0, 0x240, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x8000004, 0x0, 0x20, 0x0, 0x1, 0x7fb7ffff, 0x0, 0x8}, {0x20000000000}}}, @common=@dst={{0x48}, {0x3, 0x0, 0x1, [0x420, 0x2, 0x1, 0x80, 0x1, 0xfffb, 0x5, 0x7, 0x7, 0x401, 0x8, 0x1000, 0x2, 0x8, 0x4], 0xc}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000003c0)={0x0, "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"}) 0s ago: executing program 2 (id=1165): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000206d0403ca9d000000000109022d1a010000700109040001010300010009210000020122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r3 = dup2(r2, r2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) read$char_usb(r3, &(0x7f00000000c0)=""/192, 0xc0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004810) kernel console output (not intermixed with test programs): ware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.969178][ T9135] Call Trace: [ 280.969186][ T9135] [ 280.969192][ T9135] dump_stack_lvl+0xe8/0x150 [ 280.969218][ T9135] should_fail_ex+0x412/0x560 [ 280.969243][ T9135] ? __d_alloc+0x37/0x6f0 [ 280.969267][ T9135] should_failslab+0xa8/0x100 [ 280.969295][ T9135] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 280.969328][ T9135] __d_alloc+0x37/0x6f0 [ 280.969357][ T9135] d_alloc+0x4b/0x190 [ 280.969378][ T9135] ? lookup_one_qstr_excl+0xc4/0x360 [ 280.969408][ T9135] lookup_one_qstr_excl+0xd8/0x360 [ 280.969432][ T9135] ? lookup_noperm_common+0x245/0x430 [ 280.969458][ T9135] start_dirop+0x5c/0x90 [ 280.969489][ T9135] simple_start_creating+0xcc/0x110 [ 280.969512][ T9135] ? __pfx_simple_start_creating+0x10/0x10 [ 280.969527][ T9135] ? do_raw_spin_unlock+0xf5/0x210 [ 280.969543][ T9135] ? mntput+0x65/0xc0 [ 280.969561][ T9135] debugfs_start_creating+0xdb/0x1a0 [ 280.969583][ T9135] __debugfs_create_file+0x6f/0x400 [ 280.969615][ T9135] debugfs_create_file_full+0x3f/0x60 [ 280.969646][ T9135] ref_tracker_dir_debugfs+0x197/0x360 [ 280.969670][ T9135] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 280.969696][ T9135] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 280.969711][ T9135] ? alloc_netdev_mqs+0xa8/0x1210 [ 280.969732][ T9135] ? __raw_spin_lock_init+0x45/0x100 [ 280.969760][ T9135] alloc_netdev_mqs+0x274/0x1210 [ 280.969786][ T9135] ? __pfx_vti6_dev_setup+0x10/0x10 [ 280.969812][ T9135] rtnl_create_link+0x31f/0xd70 [ 280.969828][ T9135] rtnl_newlink_create+0x277/0xb70 [ 280.969842][ T9135] ? __pfx___nla_validate_parse+0x10/0x10 [ 280.969861][ T9135] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 280.969876][ T9135] ? __pfx___mutex_lock+0x10/0x10 [ 280.969911][ T9135] ? ns_capable+0x89/0xe0 [ 280.969935][ T9135] rtnl_newlink+0x166a/0x1bb0 [ 280.969970][ T9135] ? __pfx_rtnl_newlink+0x10/0x10 [ 280.969981][ T9135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.970010][ T9135] ? kasan_quarantine_put+0xbb/0x1f0 [ 280.970022][ T9135] ? lockdep_hardirqs_on+0x7a/0x110 [ 280.970047][ T9135] ? nlmon_xmit+0xb0/0x100 [ 280.970067][ T9135] ? kmem_cache_free+0x182/0x650 [ 280.970104][ T9135] ? __lock_acquire+0x6b5/0x2cf0 [ 280.970123][ T9135] ? __dev_queue_xmit+0x2b6/0x3950 [ 280.970139][ T9135] ? __local_bh_enable_ip+0xd0/0x130 [ 280.970150][ T9135] ? lockdep_hardirqs_on+0x7a/0x110 [ 280.970162][ T9135] ? __dev_queue_xmit+0x2b6/0x3950 [ 280.970175][ T9135] ? __local_bh_enable_ip+0xd0/0x130 [ 280.970191][ T9135] ? __dev_queue_xmit+0x2b6/0x3950 [ 280.970225][ T9135] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 280.970262][ T9135] ? __pfx_rtnl_newlink+0x10/0x10 [ 280.970274][ T9135] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 280.970289][ T9135] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 280.970300][ T9135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.970311][ T9135] ? ref_tracker_free+0x693/0x840 [ 280.970334][ T9135] ? __pfx_ref_tracker_free+0x10/0x10 [ 280.970367][ T9135] netlink_rcv_skb+0x232/0x4b0 [ 280.970392][ T9135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.970416][ T9135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.970451][ T9135] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.970473][ T9135] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.970508][ T9135] netlink_unicast+0x75c/0x8e0 [ 280.970542][ T9135] netlink_sendmsg+0x813/0xb40 [ 280.970567][ T9135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.970582][ T9135] ? aa_sock_msg_perm+0xf1/0x1b0 [ 280.970596][ T9135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.970611][ T9135] ____sys_sendmsg+0x972/0x9f0 [ 280.970632][ T9135] ? __might_fault+0xaf/0x130 [ 280.970662][ T9135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.970697][ T9135] ? import_iovec+0x73/0xa0 [ 280.970725][ T9135] ___sys_sendmsg+0x2a5/0x360 [ 280.970749][ T9135] ? __lock_acquire+0x6b5/0x2cf0 [ 280.970773][ T9135] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.970830][ T9135] ? __fget_files+0x2a/0x420 [ 280.970852][ T9135] ? __fget_files+0x3a0/0x420 [ 280.970885][ T9135] __x64_sys_sendmsg+0x1bd/0x2a0 [ 280.970907][ T9135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.970933][ T9135] ? __pfx_ksys_write+0x10/0x10 [ 280.970969][ T9135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.970989][ T9135] do_syscall_64+0x15f/0xf80 [ 280.971010][ T9135] ? trace_irq_disable+0x3b/0x140 [ 280.971026][ T9135] ? clear_bhb_loop+0x40/0x90 [ 280.971038][ T9135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.971048][ T9135] RIP: 0033:0x7f97ad99cdd9 [ 280.971058][ T9135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.971067][ T9135] RSP: 002b:00007f97ae8ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.971085][ T9135] RAX: ffffffffffffffda RBX: 00007f97adc15fa0 RCX: 00007f97ad99cdd9 [ 280.971099][ T9135] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 280.971110][ T9135] RBP: 00007f97ae8ce090 R08: 0000000000000000 R09: 0000000000000000 [ 280.971121][ T9135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.971132][ T9135] R13: 00007f97adc16038 R14: 00007f97adc15fa0 R15: 00007f97add3fa48 [ 280.971161][ T9135] [ 280.974684][ T5692] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 281.489579][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.564633][ T9136] fuse: Bad value for 'fd' [ 281.570759][ T5692] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 281.584026][ T5692] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 281.614932][ T5692] usb 3-1: Product: syz [ 281.656329][ T5692] usb 3-1: Manufacturer: syz [ 281.669422][ T5692] usb 3-1: SerialNumber: syz [ 281.757137][ T5677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.802978][ T9148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.871'. [ 281.903660][ T5692] usb 3-1: palm_os_3_probe - error -71 getting connection information [ 281.922795][ T5692] visor 3-1:1.0: probe with driver visor failed with error -71 [ 281.945330][ T9119] usblp0: removed [ 281.958361][ T5692] usb 3-1: USB disconnect, device number 62 [ 282.106599][ T5677] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 282.256676][ T5714] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 282.275404][ T5677] usb 1-1: unable to get BOS descriptor or descriptor too short [ 282.309053][ T5677] usb 1-1: config 3 has no interfaces? [ 282.324705][ T5677] usb 1-1: New USB device found, idVendor=19d2, idProduct=1177, bcdDevice=e3.67 [ 282.349399][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.363665][ T5677] usb 1-1: Product: syz [ 282.371742][ T5677] usb 1-1: Manufacturer: syz [ 282.376928][ T5677] usb 1-1: SerialNumber: syz [ 282.418555][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 282.440834][ T5714] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 282.452519][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.489445][ T5714] usb 4-1: config 0 descriptor?? [ 282.512867][ T9154] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 282.607364][ T5677] usb 1-1: USB disconnect, device number 52 [ 282.660792][ T9162] raw_sendmsg: syz.1.876 forgot to set AF_INET. Fix it! [ 282.670696][ T9162] lo: entered promiscuous mode [ 282.691266][ T9162] tunl0: entered promiscuous mode [ 282.717315][ T9162] gre0: entered promiscuous mode [ 282.742453][ T9162] gretap0: entered promiscuous mode [ 282.760729][ T9162] erspan0: entered promiscuous mode [ 282.784054][ T9162] ip_vti0: entered promiscuous mode [ 282.804149][ T9162] ip6_vti0: entered promiscuous mode [ 282.821409][ T9162] sit0: entered promiscuous mode [ 282.837149][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 282.847722][ T9162] ip6tnl0: entered promiscuous mode [ 282.869360][ T9162] ip6gre0: entered promiscuous mode [ 282.893698][ T9162] syz_tun: entered promiscuous mode [ 282.922687][ T9162] ip6gretap0: entered promiscuous mode [ 282.945095][ T9162] vcan0: entered promiscuous mode [ 282.957765][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.984646][ T9162] bond0: entered promiscuous mode [ 283.000789][ T9162] team0: entered promiscuous mode [ 283.015538][ T9162] dummy0: entered promiscuous mode [ 283.027106][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 283.041408][ T24] usb 3-1: string descriptor 0 read error: -22 [ 283.049984][ T9162] nlmon0: entered promiscuous mode [ 283.050117][ T5714] hid_parser_main: 4002 callbacks suppressed [ 283.050133][ T5714] hid-picolcd 0003:04D8:C002.0013: unknown main item tag 0x0 [ 283.060263][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.40 [ 283.082993][ T9162] batadv0: entered promiscuous mode [ 283.103337][ T9162] vxcan0: entered promiscuous mode [ 283.116202][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.127526][ T9162] vxcan1: entered promiscuous mode [ 283.145047][ T5714] hid-picolcd 0003:04D8:C002.0013: unknown main item tag 0x0 [ 283.163462][ T9162] veth0: entered promiscuous mode [ 283.182132][ T5714] hid-picolcd 0003:04D8:C002.0013: unknown main item tag 0x0 [ 283.208042][ T9162] veth1: entered promiscuous mode [ 283.219304][ T5714] hid-picolcd 0003:04D8:C002.0013: unknown main item tag 0x0 [ 283.253397][ T9162] wg0: entered promiscuous mode [ 283.261568][ T5714] hid-picolcd 0003:04D8:C002.0013: unknown main item tag 0x0 [ 283.284987][ T9162] wg1: entered promiscuous mode [ 283.290978][ T5714] hid-picolcd 0003:04D8:C002.0013: unknown main item tag 0x0 [ 283.316021][ T9162] wg2: entered promiscuous mode [ 283.321909][ T5714] hid-picolcd 0003:04D8:C002.0013: unknown main item tag 0x0 [ 283.339376][ T9162] veth0_to_bridge: entered promiscuous mode [ 283.348997][ T5714] hid-picolcd 0003:04D8:C002.0013: unknown main item tag 0x0 [ 283.373134][ T9162] bridge_slave_0: entered promiscuous mode [ 283.382940][ T5714] hid-picolcd 0003:04D8:C002.0013: unknown main item tag 0x0 [ 283.408684][ T9162] veth1_to_bridge: entered promiscuous mode [ 283.418788][ T5714] hid-picolcd 0003:04D8:C002.0013: unknown main item tag 0x0 [ 283.445019][ T9162] bridge_slave_1: entered promiscuous mode [ 283.458412][ T5714] hid-picolcd 0003:04D8:C002.0013: reserved main item tag 0xd [ 283.506980][ T9162] veth0_to_bond: entered promiscuous mode [ 283.526895][ T5714] hid-picolcd 0003:04D8:C002.0013: No report with id 0x11 found [ 283.534495][ T9162] bond_slave_0: entered promiscuous mode [ 283.540013][ T5714] usb 4-1: USB disconnect, device number 56 [ 283.548363][ T9162] veth1_to_bond: entered promiscuous mode [ 283.557363][ T9162] bond_slave_1: entered promiscuous mode [ 283.569704][ T9162] veth0_to_team: entered promiscuous mode [ 283.580352][ T9162] team_slave_0: entered promiscuous mode [ 283.590778][ T9162] veth1_to_team: entered promiscuous mode [ 283.621679][ T9162] team_slave_1: entered promiscuous mode [ 283.636924][ T9162] veth0_to_batadv: entered promiscuous mode [ 283.650223][ T9162] batadv_slave_0: entered promiscuous mode [ 283.667367][ T9162] veth1_to_batadv: entered promiscuous mode [ 283.681583][ T9162] batadv_slave_1: entered promiscuous mode [ 283.690123][ T9162] xfrm0: entered promiscuous mode [ 283.696669][ T42] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 283.698797][ T9162] veth0_to_hsr: entered promiscuous mode [ 283.715092][ T9162] veth1_to_hsr: entered promiscuous mode [ 283.728530][ T9162] hsr0: entered promiscuous mode [ 283.742284][ T9162] veth1_virt_wifi: entered promiscuous mode [ 283.752772][ T24] sony 0003:054C:0374.0014: hiddev0,hidraw0: USB HID v0.05 Device [HID 054c:0374] on usb-dummy_hcd.2-1/input0 [ 283.760840][ T9162] veth0_virt_wifi: entered promiscuous mode [ 283.783341][ T24] sony 0003:054C:0374.0014: failed to claim input [ 283.795288][ T9162] virt_wifi0: entered promiscuous mode [ 283.860985][ T9162] vlan0: entered promiscuous mode [ 283.880690][ T42] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 283.888998][ T9162] vlan1: entered promiscuous mode [ 283.912124][ T9162] macvlan0: entered promiscuous mode [ 283.913417][ T42] usb 1-1: config 0 has no interface number 0 [ 283.940255][ T42] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 283.941553][ T9162] macvlan1: entered promiscuous mode [ 283.951459][ T42] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 283.968827][ T42] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 283.995424][ T42] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 284.007610][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.018787][ T9162] ipvlan0: entered promiscuous mode [ 284.034744][ T9162] ipvlan1: entered promiscuous mode [ 284.040561][ T42] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 284.060084][ T9162] macvtap0: entered promiscuous mode [ 284.071809][ T42] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 284.087931][ T9162] macsec0: entered promiscuous mode [ 284.098921][ T42] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 284.109082][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.117352][ T9162] geneve0: entered promiscuous mode [ 284.134721][ T9162] geneve1: entered promiscuous mode [ 284.149530][ T9162] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 284.173916][ T9162] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 284.174151][ T42] usb 1-1: config 0 descriptor?? [ 284.192556][ T9173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 284.202018][ T9173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 284.220995][ T9162] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 284.251372][ T9162] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 284.255293][ T42] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 284.268092][ T9162] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 284.281303][ T9162] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 284.297329][ T9162] geneve2: entered promiscuous mode [ 284.308631][ T9162] veth1_to_team.1: entered promiscuous mode [ 284.323899][ T9162] bridge2: entered promiscuous mode [ 284.337734][ T9162] syztnl0: entered promiscuous mode [ 284.361818][ T9162] bond1: entered promiscuous mode [ 284.376830][ T9162] bridge4: entered promiscuous mode [ 284.454584][ T9173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.480333][ T9173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.494956][ T9180] usb 3-1: USB disconnect, device number 63 [ 284.508678][ T9173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.530838][ T9173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.548887][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.558503][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.567239][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.579991][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.589184][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.658335][ T9190] syz_tun: entered allmulticast mode [ 284.669062][ T9190] loop5: detected capacity change from 0 to 7 [ 284.681269][ T9190] loop5: p1 p3 p4 [ 284.688935][ T9190] loop5: partition table partially beyond EOD, truncated [ 284.698919][ T9190] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 284.859204][ T9189] syz_tun: left allmulticast mode [ 284.904655][ T9196] netlink: 104 bytes leftover after parsing attributes in process `syz.4.881'. [ 285.037724][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.068385][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.077764][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.091640][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.110291][ T9180] usb 1-1: USB disconnect, device number 53 [ 285.158739][ T9180] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 285.246880][ T807] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 285.408185][ T807] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 285.438813][ T807] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 285.468129][ T807] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 285.487784][ T807] usb 5-1: config 220 has no interface number 2 [ 285.494292][ T807] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 285.508438][ T807] usb 5-1: config 220 interface 0 has no altsetting 0 [ 285.515234][ T807] usb 5-1: config 220 interface 76 has no altsetting 0 [ 285.523261][ T807] usb 5-1: config 220 interface 1 has no altsetting 0 [ 285.533519][ T807] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 285.543222][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.551530][ T807] usb 5-1: Product: syz [ 285.555758][ T807] usb 5-1: Manufacturer: syz [ 285.560726][ T807] usb 5-1: SerialNumber: syz [ 285.791534][ T807] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 285.798997][ T807] uvcvideo 5-1:220.0: No valid video chain found. [ 285.805484][ T807] usb 5-1: selecting invalid altsetting 0 [ 285.827357][ T9180] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 285.830919][ T807] usb 5-1: selecting invalid altsetting 0 [ 285.842392][ T807] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 285.853873][ T807] usb 5-1: USB disconnect, device number 72 [ 285.976650][ T9180] usb 2-1: device descriptor read/64, error -71 [ 286.156934][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.215658][ T9221] syzkaller0: entered promiscuous mode [ 286.221254][ T9221] syzkaller0: entered allmulticast mode [ 286.236895][ T9180] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 286.386565][ T9180] usb 2-1: device descriptor read/64, error -71 [ 286.476554][ T5685] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 286.496970][ T9180] usb usb2-port1: attempt power cycle [ 286.636587][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 286.644188][ T5685] usb 1-1: Using ep0 maxpacket: 16 [ 286.651096][ T5685] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 286.660349][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.671090][ T5685] usb 1-1: config 0 descriptor?? [ 286.679075][ T5685] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 286.834126][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.845922][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.857538][ T9180] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 286.866876][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 286.879848][ T9238] syzkaller1: entered promiscuous mode [ 286.886080][ T9238] syzkaller1: entered allmulticast mode [ 286.891830][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 286.891852][ T24] usb 5-1: Manufacturer: syz [ 286.896404][ T24] usb 5-1: config 0 descriptor?? [ 286.910781][ T9180] usb 2-1: device descriptor read/8, error -71 [ 286.957399][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.132528][ T29] audit: type=1326 audit(1778065071.003:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.3.893" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 287.158038][ T29] audit: type=1326 audit(1778065071.033:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.3.893" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 287.182546][ T9180] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 287.191645][ T29] audit: type=1326 audit(1778065071.063:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.3.893" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 287.216520][ T9163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.224868][ T9180] usb 2-1: device descriptor read/8, error -71 [ 287.233209][ T29] audit: type=1326 audit(1778065071.073:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.3.893" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 287.257969][ T29] audit: type=1326 audit(1778065071.133:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.3.893" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 287.282905][ T29] audit: type=1326 audit(1778065071.153:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.3.893" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 287.317667][ T5685] gspca_sonixj: reg_w1 err -71 [ 287.323327][ T5685] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 287.352527][ T9180] usb usb2-port1: unable to enumerate USB device [ 287.361698][ T29] audit: type=1326 audit(1778065071.153:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.3.893" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 287.366746][ T807] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 287.390651][ T5685] usb 1-1: USB disconnect, device number 54 [ 287.425690][ T24] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 287.438873][ T29] audit: type=1326 audit(1778065071.213:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.3.893" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 287.493964][ T29] audit: type=1326 audit(1778065071.273:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.3.893" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 287.547604][ T29] audit: type=1326 audit(1778065071.273:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.3.893" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 287.556630][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 287.596757][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.616751][ T807] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.640322][ T807] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 287.665556][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 287.690051][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 287.710471][ T807] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.739719][ T807] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 287.761023][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.778559][ T807] usb 3-1: Product: syz [ 287.788069][ T807] usb 3-1: Manufacturer: syz [ 287.798473][ T807] usb 3-1: SerialNumber: syz [ 287.813152][ T807] usb 3-1: config 0 descriptor?? [ 288.238376][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.258442][ T807] iowarrior 3-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 288.279379][ T807] usb 3-1: USB disconnect, device number 64 [ 288.365459][ T9252] syzkaller0: entered promiscuous mode [ 288.377406][ T9252] syzkaller0: entered allmulticast mode [ 288.688050][ T9257] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 288.758952][ T9257] bridge6: entered promiscuous mode [ 288.767530][ T9257] bridge6: entered allmulticast mode [ 288.838403][ T24] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 288.848623][ T24] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 288.892809][ T24] pyra 0003:1E7D:2CF6.0015: probe with driver pyra failed with error -71 [ 288.927284][ T24] usb 5-1: USB disconnect, device number 73 [ 289.179093][ T9259] fido_id[9259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 289.236408][ T9265] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 289.278134][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.506570][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 289.681054][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 289.709145][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 289.751920][ T24] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.778347][ T9275] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 289.796702][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 71, changing to 10 [ 289.858950][ T24] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 289.868203][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.881962][ T24] usb 4-1: Product: syz [ 289.886145][ T24] usb 4-1: Manufacturer: syz [ 289.891681][ T24] usb 4-1: SerialNumber: syz [ 290.057195][ T9275] bridge2: entered promiscuous mode [ 290.062965][ T9275] bridge2: entered allmulticast mode [ 290.226603][ T5685] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 290.316714][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.387047][ T5685] usb 2-1: Using ep0 maxpacket: 8 [ 290.426979][ T5685] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.476851][ T5685] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 290.512115][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.543519][ T5685] usb 2-1: config 0 descriptor?? [ 290.577881][ T5685] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 290.647255][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.242804][ T9303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.908'. [ 291.359404][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.503293][ T9305] syz_tun: entered allmulticast mode [ 291.517721][ T9305] loop5: detected capacity change from 0 to 7 [ 291.528327][ T9305] loop5: p1 p3 p4 [ 291.533383][ T9305] loop5: partition table partially beyond EOD, truncated [ 291.544737][ T9305] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 291.586496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 291.604570][ T5685] gspca_vc032x: reg_r err -71 [ 291.620478][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 291.631248][ T5685] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 291.646183][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.909'. [ 291.695800][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 291.705262][ T5685] usb 2-1: USB disconnect, device number 67 [ 291.735961][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.909'. [ 291.769837][ T9304] syz_tun: left allmulticast mode [ 292.040337][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 292.052193][ T9316] netem: incorrect ge model size [ 292.139361][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 292.156721][ T24] usb 4-1: MIDIStreaming interface descriptor not found [ 292.196559][ T5712] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 292.369389][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 292.376675][ T24] usb 4-1: USB disconnect, device number 57 [ 292.391062][ T5712] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 292.404942][ T5712] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 292.406586][ T5685] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 292.414713][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.431957][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.444835][ T5712] usb 5-1: config 0 descriptor?? [ 292.455974][ T9314] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 292.596641][ T5685] usb 1-1: device descriptor read/64, error -71 [ 292.651331][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 292.651352][ T29] audit: type=1326 audit(1778065076.523:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.1.918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b70f9cdd9 code=0x0 [ 292.783637][ T9338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.919'. [ 292.793173][ T9338] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 292.869003][ T5685] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 292.890678][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 292.912410][ T9314] program syz.4.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.924791][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 292.944522][ T5712] hid-multitouch 0003:0457:07DA.0016: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 293.006599][ T5685] usb 1-1: device descriptor read/64, error -71 [ 293.117338][ T5685] usb usb1-port1: attempt power cycle [ 293.136559][ T5692] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 293.210396][ T5712] usb 5-1: USB disconnect, device number 74 [ 293.288423][ T5692] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.297359][ T5692] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 293.308300][ T5692] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 293.319538][ T5692] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.328828][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.336883][ T5692] usb 3-1: Product: syz [ 293.341121][ T5692] usb 3-1: Manufacturer: syz [ 293.436704][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.456607][ T5685] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 293.487250][ T5685] usb 1-1: device descriptor read/8, error -71 [ 293.622591][ T9349] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 293.644674][ T9349] bridge7: entered promiscuous mode [ 293.650546][ T9349] bridge7: entered allmulticast mode [ 293.677123][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.694465][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.703331][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.712779][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.736639][ T5685] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 293.779059][ T5685] usb 1-1: device descriptor read/8, error -71 [ 293.843934][ T9351] netlink: 'syz.4.924': attribute type 10 has an invalid length. [ 293.871077][ T9351] dummy0: entered promiscuous mode [ 293.881739][ T9351] `: Port device dummy0 added [ 293.907082][ T5685] usb usb1-port1: unable to enumerate USB device [ 294.039161][ T9356] netlink: 'syz.4.925': attribute type 2 has an invalid length. [ 294.058318][ T9356] netlink: 'syz.4.925': attribute type 2 has an invalid length. [ 294.215589][ T5692] usb 3-1: USB disconnect, device number 65 [ 294.476720][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.856781][ T5685] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 294.929396][ T9379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.056823][ T5692] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 295.156584][ T5712] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 295.218278][ T5692] usb 2-1: Using ep0 maxpacket: 16 [ 295.237128][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.252441][ T9387] netlink: 148 bytes leftover after parsing attributes in process `syz.0.934'. [ 295.273407][ T5692] usb 2-1: config 7 has an invalid interface number: 118 but max is 0 [ 295.300073][ T5692] usb 2-1: config 7 has no interface number 0 [ 295.321812][ T5692] usb 2-1: config 7 interface 118 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 16 [ 295.358359][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 295.374703][ T5692] usb 2-1: config 7 interface 118 has no altsetting 0 [ 295.387737][ T5712] usb 4-1: config 6 has an invalid interface number: 132 but max is 0 [ 295.406090][ T5712] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 295.419994][ T5692] usb 2-1: New USB device found, idVendor=07ca, idProduct=f800, bcdDevice=22.09 [ 295.435906][ T5712] usb 4-1: config 6 has no interface number 0 [ 295.446608][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.455442][ T5712] usb 4-1: config 6 interface 132 altsetting 6 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 295.466566][ T5692] usb 2-1: Product: syz [ 295.470760][ T5692] usb 2-1: Manufacturer: syz [ 295.475353][ T5692] usb 2-1: SerialNumber: syz [ 295.480160][ T5712] usb 4-1: config 6 interface 132 altsetting 6 endpoint 0xA has invalid wMaxPacketSize 0 [ 295.491815][ T5712] usb 4-1: config 6 interface 132 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.509897][ T9377] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 295.510522][ T5712] usb 4-1: config 6 interface 132 has no altsetting 0 [ 295.513709][ T5712] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 295.513735][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.513755][ T5712] usb 4-1: Product: syz [ 295.513770][ T5712] usb 4-1: Manufacturer: syz [ 295.513783][ T5712] usb 4-1: SerialNumber: syz [ 295.534200][ T9163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.556594][ T9164] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 295.669971][ T5685] usb 3-1: unable to get BOS descriptor or descriptor too short [ 295.680658][ T5685] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 295.688433][ T5685] usb 3-1: can't read configurations, error -71 [ 295.706571][ T9164] usb 5-1: Using ep0 maxpacket: 16 [ 295.715334][ T9164] usb 5-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 295.738173][ T9164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.749409][ T9164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 19703, setting to 1024 [ 295.750024][ T9382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.762162][ T9164] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 295.772697][ T9382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.780657][ T9164] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 295.814794][ T5692] usbhid 2-1:7.118: couldn't find an input interrupt endpoint [ 295.828880][ T5692] usb 2-1: USB disconnect, device number 68 [ 295.840754][ T9164] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 295.852935][ T9164] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 295.864295][ T9164] usb 5-1: Manufacturer: syz [ 295.871562][ T9164] usb 5-1: config 0 descriptor?? [ 296.126587][ T9164] rc_core: IR keymap rc-hauppauge not found [ 296.132658][ T9164] Registered IR keymap rc-empty [ 296.138336][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.158333][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.177697][ T9164] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 296.202284][ T9164] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 296.248011][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.278752][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.327333][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.328374][ T5712] usbtest 4-1:6.132: couldn't get endpoints, -22 [ 296.357395][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.371057][ T5712] usbtest 4-1:6.132: probe with driver usbtest failed with error -22 [ 296.376754][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.399706][ T5712] usb 4-1: USB disconnect, device number 58 [ 296.436960][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.469079][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.500766][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.518074][ T5685] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 296.532647][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.557503][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.568003][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.571133][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.598430][ T9164] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 296.627084][ T5692] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 296.629386][ T9164] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 296.643980][ T9164] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 296.665491][ T9164] usb 5-1: USB disconnect, device number 75 [ 296.680594][ T5685] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.713739][ T5685] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.728411][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.732634][ T5685] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 296.737918][ T807] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 296.770387][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.780557][ T5685] usb 3-1: Product: syz [ 296.784759][ T5685] usb 3-1: Manufacturer: syz [ 296.789659][ T5685] usb 3-1: SerialNumber: syz [ 296.817377][ T5692] usb 1-1: Using ep0 maxpacket: 16 [ 296.824761][ T5692] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.837099][ T5692] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34 [ 296.846277][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.854303][ T5692] usb 1-1: Product: syz [ 296.858952][ T5692] usb 1-1: Manufacturer: syz [ 296.863562][ T5692] usb 1-1: SerialNumber: syz [ 296.910761][ T807] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 296.919942][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.928001][ T807] usb 2-1: Product: syz [ 296.932176][ T807] usb 2-1: Manufacturer: syz [ 296.936873][ T807] usb 2-1: SerialNumber: syz [ 296.944651][ T807] usb 2-1: config 0 descriptor?? [ 296.949712][ T5712] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 297.013864][ T5685] usb 3-1: unit 132 not found! [ 297.048219][ T5685] usb 3-1: USB disconnect, device number 67 [ 297.070545][ T6611] udevd[6611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.108990][ T5712] usb 4-1: Using ep0 maxpacket: 8 [ 297.131219][ T5712] usb 4-1: unable to get BOS descriptor or descriptor too short [ 297.145581][ T5692] usb 1-1: USB disconnect, device number 59 [ 297.166978][ T5712] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 17, changing to 7 [ 297.182421][ T807] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 297.195032][ T5712] usb 4-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 297.204305][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.215591][ T5712] usb 4-1: Product: syz [ 297.220090][ T5712] usb 4-1: Manufacturer: syz [ 297.224937][ T5712] usb 4-1: SerialNumber: syz [ 297.457694][ T5712] usb 4-1: interface 3 not found [ 297.470292][ T5712] usb 4-1: USB disconnect, device number 59 [ 297.596672][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.814894][ T9427] __nla_validate_parse: 1 callbacks suppressed [ 297.814906][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 297.987213][ T5692] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 298.068613][ T5712] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 298.147689][ T5692] usb 1-1: Using ep0 maxpacket: 8 [ 298.162394][ T5692] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 298.177836][ T5692] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.179307][ T29] audit: type=1326 audit(1778065082.053:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="syz.3.948" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 298.188591][ T5692] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.251256][ T5712] usb 3-1: config 5 has an invalid interface number: 230 but max is 0 [ 298.261356][ T807] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 298.272647][ T5712] usb 3-1: config 5 has no interface number 0 [ 298.284389][ T5712] usb 3-1: config 5 interface 230 has no altsetting 0 [ 298.291669][ T5692] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.302624][ T5692] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.320812][ T807] usb 2-1: USB disconnect, device number 69 [ 298.328446][ T5712] usb 3-1: New USB device found, idVendor=eb24, idProduct=7801, bcdDevice=e0.9e [ 298.344880][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.366293][ T5692] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.389153][ T5712] usb 3-1: Product: syz [ 298.389188][ T29] audit: type=1326 audit(1778065082.053:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="syz.3.948" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 298.394028][ T5712] usb 3-1: Manufacturer: syz [ 298.426229][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.466290][ T5712] usb 3-1: SerialNumber: syz [ 298.496852][ T29] audit: type=1326 audit(1778065082.093:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="syz.3.948" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 298.524423][ T29] audit: type=1326 audit(1778065082.093:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="syz.3.948" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 298.550480][ T29] audit: type=1326 audit(1778065082.093:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9430 comm="syz.3.948" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 298.636758][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.691537][ T5692] usb 1-1: GET_CAPABILITIES returned 0 [ 298.701740][ T5692] usbtmc 1-1:16.0: can't read capabilities [ 298.760956][ T5712] usb 3-1: USB disconnect, device number 68 [ 298.893379][ T5692] usb 1-1: USB disconnect, device number 60 [ 299.117795][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.127518][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.138972][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.285041][ T9453] xt_hashlimit: size too large, truncated to 1048576 [ 299.374338][ T9456] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.953'. [ 299.474857][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 299.676684][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.711339][ T9469] loop6: detected capacity change from 0 to 2640 [ 299.737770][ T9469] buffer_io_error: 324 callbacks suppressed [ 299.737785][ T9469] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.800788][ T9469] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.822684][ T9469] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.835884][ T9469] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.844459][ T9469] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.854668][ T9469] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.863012][ T9469] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.871416][ T9469] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.891176][ T9469] ldm_validate_partition_table(): Disk read failed. [ 299.908848][ T9469] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.932586][ T9469] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.949548][ T9469] Dev loop6: unable to read RDB block 0 [ 299.973984][ T9469] loop6: unable to read partition table [ 299.990218][ T9469] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 300.517708][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.960'. [ 300.716683][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.528226][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 301.683949][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.757022][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.316284][ T29] audit: type=1326 audit(1778065086.183:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9508 comm="syz.1.966" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b70f9cdd9 code=0x7ffc0000 [ 302.420971][ T29] audit: type=1326 audit(1778065086.233:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9508 comm="syz.1.966" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b70f9e647 code=0x7ffc0000 [ 302.501212][ T29] audit: type=1326 audit(1778065086.233:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9508 comm="syz.1.966" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1b70f5d60e code=0x7ffc0000 [ 302.609915][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.619970][ T29] audit: type=1326 audit(1778065086.233:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9508 comm="syz.1.966" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1b70f5d60e code=0x7ffc0000 [ 302.622052][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.678970][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.692090][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.700397][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.729140][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.747506][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.759687][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.768295][ T29] audit: type=1326 audit(1778065086.233:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9508 comm="syz.1.966" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1b70f5d60e code=0x7ffc0000 [ 302.798996][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.821059][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.835274][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.946552][ T9164] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 303.118326][ T9164] usb 2-1: Using ep0 maxpacket: 32 [ 303.137994][ T9164] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 303.187914][ T9164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.200182][ T9164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.227814][ T9164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.244061][ T9164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.257803][ T9164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.278748][ T9164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.297358][ T9164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.310076][ T9164] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.323378][ T9164] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 303.332902][ T9164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.340968][ T9164] usb 2-1: Product: syz [ 303.345138][ T9164] usb 2-1: Manufacturer: syz [ 303.349903][ T9164] usb 2-1: SerialNumber: syz [ 303.356387][ T9164] usb 2-1: config 0 descriptor?? [ 303.365987][ T9164] etas_es58x 2-1:0.0: Starting syz syz (Serial Number syz) [ 303.589763][ T9164] usb 2-1: USB disconnect, device number 70 [ 303.843046][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.992205][ T9515] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.013670][ T9515] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.026851][ T9515] bridge_slave_0: entered allmulticast mode [ 304.034815][ T9515] bridge_slave_0: entered promiscuous mode [ 304.080966][ T12] bridge_slave_0: left allmulticast mode [ 304.097013][ T12] bridge_slave_0: left promiscuous mode [ 304.104773][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.115615][ T5712] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 304.307289][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.332444][ T5712] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 304.341985][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.370154][ T5712] usb 1-1: config 0 descriptor?? [ 304.381359][ T12] gretap0 (unregistering): left promiscuous mode [ 304.387576][ T9164] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 304.410088][ T5712] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 304.566543][ T9164] usb 2-1: Using ep0 maxpacket: 32 [ 304.573540][ T9164] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 304.582090][ T9164] usb 2-1: config 0 has no interface number 0 [ 304.592566][ T9164] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 304.603003][ T12] bond0 (unregistering): left promiscuous mode [ 304.614250][ T12] bond_slave_0: left promiscuous mode [ 304.620396][ T9164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.631542][ T12] bond_slave_1: left promiscuous mode [ 304.637013][ T9164] usb 2-1: Product: syz [ 304.645264][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.653925][ T9164] usb 2-1: Manufacturer: syz [ 304.658636][ T9164] usb 2-1: SerialNumber: syz [ 304.676573][ T5685] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 304.684756][ T9164] usb 2-1: config 0 descriptor?? [ 304.696198][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.713158][ T12] bond0 (unregistering): Released all slaves [ 304.728536][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.732618][ T12] bond1 (unregistering): Released all slaves [ 304.765673][ T9515] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.774145][ T9515] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.782894][ T9515] bridge_slave_1: entered allmulticast mode [ 304.819886][ T9515] bridge_slave_1: entered promiscuous mode [ 304.856793][ T5685] usb 4-1: Using ep0 maxpacket: 8 [ 304.869026][ T5685] usb 4-1: config 64 has an invalid interface number: 19 but max is 0 [ 304.884055][ T5685] usb 4-1: config 64 has no interface number 0 [ 304.891885][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.911431][ T5685] usb 4-1: config 64 interface 19 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 304.944295][ T12] tipc: Left network mode [ 304.945733][ T5685] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 304.956923][ T9515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.970843][ T5622] Bluetooth: hci1: command tx timeout [ 304.979597][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.995424][ T9562] loop6: detected capacity change from 0 to 2640 [ 305.012881][ T9515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.022672][ T5685] usb 4-1: probing VID:PID(2201:012C) [ 305.022888][ T9562] buffer_io_error: 11 callbacks suppressed [ 305.022901][ T9562] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.097472][ T9562] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.112403][ T5685] usb 4-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 305.135195][ T9562] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.151163][ T5685] usb 4-1: vub300 ignoring EndPoint(0) 02 [ 305.167156][ T9562] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.180195][ T9562] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.180278][ T5685] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 305.189196][ T9562] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.207023][ T9562] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.252125][ T9562] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.261057][ T9562] ldm_validate_partition_table(): Disk read failed. [ 305.265573][ T5685] vub300 4-1:64.19: probe with driver vub300 failed with error -22 [ 305.268972][ T9562] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.294980][ T9562] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.307712][ T9562] Dev loop6: unable to read RDB block 0 [ 305.317403][ T5685] usb 4-1: USB disconnect, device number 60 [ 305.319194][ T9562] loop6: unable to read partition table [ 305.330878][ T9562] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 305.389136][ T9515] team0: Port device team_slave_0 added [ 305.400288][ T9515] team0: Port device team_slave_1 added [ 305.466988][ T9515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.474156][ T9515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.507085][ T5712] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 305.511707][ T9515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.552647][ T9515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.559867][ T9515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.589197][ T9515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.690741][ T5712] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 305.705805][ T9515] hsr_slave_0: entered promiscuous mode [ 305.716566][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.719371][ T9515] hsr_slave_1: entered promiscuous mode [ 305.730234][ T5712] usb 3-1: Product: syz [ 305.738836][ T5712] usb 3-1: Manufacturer: syz [ 305.752395][ T5712] usb 3-1: SerialNumber: syz [ 305.776302][ T9515] debugfs: 'hsr0' already exists in 'hsr' [ 305.778859][ T5712] usb 3-1: config 0 descriptor?? [ 305.797498][ T9515] Cannot create hsr debugfs directory [ 305.922016][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.944119][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 306.004205][ T5712] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 306.042451][ T12] `: left promiscuous mode [ 306.048895][ T12] team_slave_0: left promiscuous mode [ 306.054484][ T12] team_slave_1: left promiscuous mode [ 306.060460][ T12] dummy0: left promiscuous mode [ 306.081031][ T12] hsr_slave_0: left promiscuous mode [ 306.087691][ T12] hsr_slave_1: left promiscuous mode [ 306.093839][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.101767][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.110310][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.118135][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.156836][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.215422][ T12] pim6reg (unregistering): left allmulticast mode [ 306.286024][ T9164] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 306.313304][ T9164] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 306.357268][ T9164] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 306.384108][ T9164] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 306.415021][ T9164] usb 2-1: USB disconnect, device number 71 [ 306.575025][ T12] ` (unregistering): Port device team_slave_1 removed [ 306.597704][ T12] ` (unregistering): Port device team_slave_0 removed [ 306.742856][ T12] ` (unregistering): Port device dummy0 removed [ 306.797630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.885022][ T9164] usb 1-1: USB disconnect, device number 61 [ 306.957107][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.034042][ T5712] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 307.043655][ T5622] Bluetooth: hci1: command tx timeout [ 307.479367][ T9164] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 307.637281][ T9164] usb 4-1: device descriptor read/64, error -71 [ 307.767074][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.906577][ T9164] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 307.996660][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.097182][ T9164] usb 4-1: device descriptor read/64, error -71 [ 308.169305][ T5712] usb 3-1: USB disconnect, device number 69 [ 308.219215][ T9164] usb usb4-port1: attempt power cycle [ 308.489626][ T9624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.987'. [ 308.572404][ T9626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.596939][ T9164] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 308.627360][ T9626] netlink: 148 bytes leftover after parsing attributes in process `syz.2.987'. [ 308.647555][ T9164] usb 4-1: device descriptor read/8, error -71 [ 308.678237][ T9515] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.692024][ T9515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.702829][ T9515] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 308.719408][ T9515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.733787][ T9515] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 308.774595][ T9515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 308.806094][ T9515] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 308.827853][ T9515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 308.886576][ T9164] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 308.937375][ T9164] usb 4-1: device descriptor read/8, error -71 [ 309.037412][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.056913][ T9164] usb usb4-port1: unable to enumerate USB device [ 309.119724][ T5622] Bluetooth: hci1: command tx timeout [ 309.155218][ T9515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.227939][ T9515] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.271886][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.279041][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.340808][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.347918][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.586008][ T9515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.593012][ T807] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 309.661591][ T9515] veth0_vlan: entered promiscuous mode [ 309.676633][ T9515] veth1_vlan: entered promiscuous mode [ 309.766241][ T9515] veth0_macvtap: entered promiscuous mode [ 309.776764][ T807] usb 2-1: Using ep0 maxpacket: 32 [ 309.790786][ T9515] veth1_macvtap: entered promiscuous mode [ 309.811245][ T807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.832927][ T9515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.840288][ T807] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 309.864023][ T807] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 309.895846][ T9515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.932101][ T807] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 309.945671][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.955746][ T807] usb 2-1: Product: syz [ 309.959989][ T580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.976880][ T580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.986641][ T807] usb 2-1: Manufacturer: syz [ 309.998172][ T807] usb 2-1: SerialNumber: syz [ 310.014064][ T580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.049353][ T807] usb 2-1: interface 2 not found [ 310.076737][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.189552][ T580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.514493][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.536433][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.598318][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.607482][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.808644][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.857290][ T9180] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 311.024120][ T9180] usb 4-1: Using ep0 maxpacket: 8 [ 311.046170][ T9180] usb 4-1: config 4 has an invalid interface number: 38 but max is 0 [ 311.074726][ T9180] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 311.100040][ T9180] usb 4-1: config 4 has no interface number 0 [ 311.108192][ T9180] usb 4-1: config 4 interface 38 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 311.118327][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.126930][ T9180] usb 4-1: config 4 interface 38 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.153566][ T9180] usb 4-1: config 4 interface 38 has no altsetting 0 [ 311.170718][ T9180] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=55.58 [ 311.180172][ T9180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.190449][ T9180] usb 4-1: Product: syz [ 311.194660][ T9180] usb 4-1: Manufacturer: syz [ 311.202854][ T5622] Bluetooth: hci1: command tx timeout [ 311.213483][ T9180] usb 4-1: SerialNumber: syz [ 311.280737][ T9702] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 311.346700][ T5692] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 311.454994][ T9180] usb 4-1: USB disconnect, device number 65 [ 311.506127][ T9702] bridge8: entered promiscuous mode [ 311.518459][ T5692] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.529219][ T9702] bridge8: entered allmulticast mode [ 311.546716][ T5692] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 311.582510][ T5692] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 311.621845][ T5692] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 311.654612][ T5692] usb 3-1: New USB device found, idVendor=0525, idProduct=aea1, bcdDevice= 0.1c [ 311.671233][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.691722][ T5692] usb 3-1: Product: syz [ 311.699696][ T5692] usb 3-1: Manufacturer: syz [ 311.705450][ T5692] usb 3-1: SerialNumber: syz [ 311.720854][ T9696] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 311.742957][ T5692] cdc_mbim 3-1:1.0: skipping garbage [ 311.748919][ T5692] usb 3-1: selecting invalid altsetting 1 [ 311.921204][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.015213][ T9706] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 312.040813][ T9706] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 312.117329][ T9706] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 312.157138][ T3331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.168935][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.177644][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.396691][ T9180] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 312.566583][ T9180] usb 4-1: Using ep0 maxpacket: 32 [ 312.588708][ T9180] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.627937][ T9180] usb 4-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 312.654735][ T9180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.680777][ T9180] usb 4-1: Product: syz [ 312.688737][ T9180] usb 4-1: Manufacturer: syz [ 312.693581][ T9180] usb 4-1: SerialNumber: syz [ 312.706096][ T9180] usb 4-1: config 0 descriptor?? [ 312.833135][ T9706] cifs: Unknown parameter 'fd' [ 312.930956][ T5712] usb 4-1: USB disconnect, device number 66 [ 313.000935][ T9169] usb 2-1: USB disconnect, device number 72 [ 313.208231][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.296800][ T9180] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 313.309255][ T9731] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 313.338138][ T9731] bridge1: entered promiscuous mode [ 313.343548][ T9731] bridge1: entered allmulticast mode [ 313.473014][ T9180] usb 1-1: unable to get BOS descriptor or descriptor too short [ 313.495680][ T9180] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 313.505437][ T9180] usb 1-1: can't read configurations, error -71 [ 314.076879][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 314.225075][ T5692] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 314.243652][ T5692] cdc_mbim 3-1:1.0: bind() failure [ 314.244540][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.283333][ T5692] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 314.302856][ T9748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.313135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.329744][ T5692] cdc_ncm 3-1:1.1: bind() failure [ 314.336975][ T9169] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 314.361070][ T5692] usb 3-1: USB disconnect, device number 70 [ 314.516794][ T9169] usb 4-1: Using ep0 maxpacket: 8 [ 314.537712][ T9169] usb 4-1: unable to get BOS descriptor or descriptor too short [ 314.560823][ T9169] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 314.582001][ T9169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.608550][ T9169] usb 4-1: Product: syz [ 314.621253][ T9169] usb 4-1: Manufacturer: syz [ 314.635448][ T9169] usb 4-1: SerialNumber: syz [ 314.806589][ T5692] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 314.959650][ T3331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.968441][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.996689][ T5692] usb 3-1: too many configurations: 125, using maximum allowed: 8 [ 315.028381][ T5692] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 315.040540][ T9756] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[9515] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[9756] [ 315.080788][ T5692] usb 3-1: can't read configurations, error -61 [ 315.256567][ T5692] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 315.448399][ T5692] usb 3-1: too many configurations: 125, using maximum allowed: 8 [ 315.485680][ T5692] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 315.511869][ T5692] usb 3-1: can't read configurations, error -61 [ 315.526572][ T9180] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 315.546247][ T5692] usb usb3-port1: attempt power cycle [ 315.729777][ T9180] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.797414][ T9180] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 315.837062][ T9180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.864634][ T9180] usb 5-1: Product: syz [ 315.878678][ T9180] usb 5-1: Manufacturer: syz [ 315.897495][ T9180] usb 5-1: SerialNumber: syz [ 315.917954][ T9180] usb 5-1: config 0 descriptor?? [ 315.926676][ T5692] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 315.969055][ T5692] usb 3-1: too many configurations: 125, using maximum allowed: 8 [ 316.000735][ T5692] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 316.025942][ T5692] usb 3-1: can't read configurations, error -61 [ 316.157270][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 316.166629][ T5692] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 316.196220][ T9762] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 316.202961][ T9762] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 316.223978][ T5692] usb 3-1: too many configurations: 125, using maximum allowed: 8 [ 316.266752][ T5692] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 316.274770][ T9762] vhci_hcd vhci_hcd.0: Device attached [ 316.309869][ T5692] usb 3-1: can't read configurations, error -61 [ 316.355521][ T5692] usb usb3-port1: unable to enumerate USB device [ 316.479731][ T9782] vhci_hcd: connection closed [ 316.484873][ T9180] cdc_subset 5-1:0.0: probe with driver cdc_subset failed with error -71 [ 316.517507][ T5712] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 316.526345][ T580] vhci_hcd vhci_hcd.4: stop threads [ 316.533391][ T580] vhci_hcd vhci_hcd.4: release socket [ 316.543258][ T580] vhci_hcd vhci_hcd.4: disconnect device [ 316.554084][ T9180] usb 5-1: USB disconnect, device number 76 [ 316.843052][ T9169] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.002431][ T9169] usb 4-1: USB disconnect, device number 67 [ 317.039546][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.046013][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.138867][ T6609] udevd[6609]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.358909][ T9180] net_ratelimit: 8 callbacks suppressed [ 317.358926][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.383075][ T9801] netlink: 'syz.0.1022': attribute type 9 has an invalid length. [ 317.405917][ T9801] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.1022'. [ 317.680329][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.690739][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.703966][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.750077][ T9817] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 317.997225][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.078226][ T5714] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 318.216770][ T5714] usb 1-1: device descriptor read/64, error -71 [ 318.236597][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 318.279159][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1035'. [ 318.356772][ T5692] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 318.448102][ T9853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1037'. [ 318.465131][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 318.474679][ T5714] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 318.496621][ T5692] usb 3-1: device descriptor read/64, error -71 [ 318.624635][ T9180] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 318.626545][ T5714] usb 1-1: device descriptor read/64, error -71 [ 318.733724][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.746705][ T5692] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 318.809090][ T5714] usb usb1-port1: attempt power cycle [ 318.934960][ T5692] usb 3-1: device descriptor read/64, error -71 [ 318.968852][ T9180] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.986412][ T9180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.003489][ T9180] usb 5-1: Product: syz [ 319.011356][ T9180] usb 5-1: Manufacturer: syz [ 319.025222][ T9180] usb 5-1: SerialNumber: syz [ 319.073889][ T9180] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 319.130087][ T5692] usb usb3-port1: attempt power cycle [ 319.171412][ T5714] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 319.260267][ T5685] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 319.328649][ T5714] usb 1-1: device descriptor read/8, error -71 [ 319.626991][ T5692] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 319.647518][ T5692] usb 3-1: device descriptor read/8, error -71 [ 319.696531][ T5714] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 319.717757][ T5714] usb 1-1: device descriptor read/8, error -71 [ 319.740482][ T9861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1039'. [ 319.779193][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.836782][ T5714] usb usb1-port1: unable to enumerate USB device [ 319.886531][ T5692] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 319.920534][ T5692] usb 3-1: device descriptor read/8, error -71 [ 320.016606][ T9164] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 320.040596][ T5692] usb usb3-port1: unable to enumerate USB device [ 320.146595][ T9164] usb 2-1: device descriptor read/64, error -71 [ 320.237850][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.246430][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.260263][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.316629][ T5685] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 320.323796][ T5685] ath9k_htc: Failed to initialize the device [ 320.385221][ T5685] usb 5-1: ath9k_htc: USB layer deinitialized [ 320.392024][ T9164] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 320.536588][ T9164] usb 2-1: device descriptor read/64, error -71 [ 320.646756][ T9164] usb usb2-port1: attempt power cycle [ 320.995919][ T9867] ip6tnl0: Caught tx_queue_len zero misconfig [ 320.996563][ T9164] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 321.044799][ T9164] usb 2-1: device descriptor read/8, error -71 [ 321.216569][ T9180] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 321.298670][ T9164] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 321.321656][ T5705] usb 5-1: USB disconnect, device number 77 [ 321.335099][ T9164] usb 2-1: device descriptor read/8, error -71 [ 321.371047][ T9875] netlink: 'syz.4.1045': attribute type 5 has an invalid length. [ 321.371477][ T9180] usb 1-1: Using ep0 maxpacket: 32 [ 321.387457][ T9180] usb 1-1: config index 0 descriptor too short (expected 6701, got 45) [ 321.396011][ T9180] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.406333][ T9180] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.417577][ T9180] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.427859][ T9180] usb 1-1: config 0 interface 0 has no altsetting 0 [ 321.434539][ T9180] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 321.447876][ T9164] usb usb2-port1: unable to enumerate USB device [ 321.457080][ T9180] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.480078][ T9180] usb 1-1: config 0 descriptor?? [ 321.496992][ T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 321.543591][ T9879] Invalid argument reading file caps for ./file0 [ 321.649382][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.660564][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.670431][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 321.676942][ T5712] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 321.679746][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.697879][ T24] usb 3-1: config 0 descriptor?? [ 321.910885][ T9865] vivid-000: ================= START STATUS ================= [ 321.919819][ T9865] vivid-000: Radio HW Seek Mode: Bounded [ 321.925653][ T9865] vivid-000: Radio Programmable HW Seek: false [ 321.932908][ T9865] vivid-000: RDS Rx I/O Mode: Block I/O [ 321.941058][ T9865] vivid-000: Generate RBDS Instead of RDS: false [ 321.947611][ T9865] vivid-000: RDS Reception: true [ 321.952716][ T9865] vivid-000: RDS Program Type: 0 inactive [ 321.959018][ T9865] vivid-000: RDS PS Name: inactive [ 321.964408][ T9865] vivid-000: RDS Radio Text: inactive [ 321.971196][ T9865] vivid-000: RDS Traffic Announcement: false inactive [ 321.979526][ T9865] vivid-000: RDS Traffic Program: false inactive [ 321.985909][ T9865] vivid-000: RDS Music: false inactive [ 321.991608][ T9865] vivid-000: ================== END STATUS ================== [ 322.006139][ T9180] usbhid 1-1:0.0: can't add hid device: -71 [ 322.012930][ T9180] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 322.025128][ T9180] usb 1-1: USB disconnect, device number 68 [ 322.083251][ T9882] netlink: 'syz.3.1048': attribute type 3 has an invalid length. [ 322.092593][ T9882] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1048'. [ 322.205904][ T24] hid_parser_main: 4473 callbacks suppressed [ 322.205925][ T24] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 322.234863][ T24] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 322.243494][ T24] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 322.254794][ T24] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 322.263883][ T24] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 322.288626][ T24] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 322.455510][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1052'. [ 322.604202][ T24] playstation 0003:054C:0DF2.0017: Failed to retrieve feature with reportID 32: -71 [ 322.624142][ T24] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense firmware info: -71 [ 322.637787][ T9180] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 322.662688][ T24] playstation 0003:054C:0DF2.0017: Failed to get firmware info from DualSense [ 322.673174][ T24] playstation 0003:054C:0DF2.0017: Failed to create dualsense. [ 322.685058][ T24] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -71 [ 322.699243][ T24] usb 3-1: USB disconnect, device number 79 [ 322.756647][ T5692] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 322.806580][ T9180] usb 5-1: Using ep0 maxpacket: 8 [ 322.813253][ T9180] usb 5-1: config 1 has an invalid interface number: 126 but max is 0 [ 322.822183][ T9180] usb 5-1: config 1 has no interface number 0 [ 322.829097][ T9180] usb 5-1: config 1 interface 126 has no altsetting 0 [ 322.837691][ T9180] usb 5-1: New USB device found, idVendor=19d2, idProduct=0481, bcdDevice= 0.00 [ 322.847453][ T9180] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 322.855439][ T9180] usb 5-1: Product: syz [ 322.860154][ T9180] usb 5-1: SerialNumber: syz [ 322.876803][ T5705] net_ratelimit: 3 callbacks suppressed [ 322.876814][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.906536][ T9164] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 322.906553][ T5692] usb 4-1: device descriptor read/64, error -71 [ 323.026567][ T5712] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 323.068713][ T9164] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.080391][ T9164] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.085912][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1051'. [ 323.090948][ T9164] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 323.107906][ T9164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 323.116218][ T9164] usb 2-1: SerialNumber: syz [ 323.123005][ T9180] cdc_ether 5-1:1.126: invalid descriptor buffer length [ 323.134598][ T9180] usb 5-1: No union descriptors [ 323.149088][ T9180] usb 5-1: USB disconnect, device number 78 [ 323.157900][ T5692] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 323.278916][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.294080][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 323.304194][ T5692] usb 4-1: device descriptor read/64, error -71 [ 323.312610][ T5712] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 323.323735][ T5712] usb 1-1: can't read configurations, error -71 [ 323.354602][ T9899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.365822][ T9899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.409919][ T9898] [U] ¦ [ 323.416969][ T5692] usb usb4-port1: attempt power cycle [ 323.429478][ T9164] usb 2-1: 0:2 : does not exist [ 323.439705][ T78] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.449659][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.461729][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.471774][ T9164] usb 2-1: unit 5: unexpected type 0x09 [ 323.510735][ T9164] usb 2-1: USB disconnect, device number 77 [ 323.540441][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.658276][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1059'. [ 323.667269][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'. [ 323.689674][ T9916] snd_dummy snd_dummy.0: control 4:5:128:syz0:2097152 is already present [ 323.766615][ T5692] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 323.787057][ T5692] usb 4-1: device descriptor read/8, error -71 [ 323.946631][ T5714] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 324.026952][ T5692] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 324.057814][ T5692] usb 4-1: device descriptor read/8, error -71 [ 324.078113][ T5714] usb 5-1: device descriptor read/64, error -71 [ 324.122091][ T9922] syzkaller0: entered promiscuous mode [ 324.127692][ T9922] syzkaller0: entered allmulticast mode [ 324.166656][ T5712] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 324.174596][ T5692] usb usb4-port1: unable to enumerate USB device [ 324.317534][ T5714] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 324.336568][ T5712] usb 1-1: Using ep0 maxpacket: 32 [ 324.344673][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 324.356699][ T5712] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 324.368544][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 324.381731][ T5712] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 324.391173][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.400645][ T5712] usb 1-1: Product: syz [ 324.405016][ T5712] usb 1-1: Manufacturer: syz [ 324.410020][ T5712] usb 1-1: SerialNumber: syz [ 324.417481][ T5712] usb 1-1: config 0 descriptor?? [ 324.427646][ T5712] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input36 [ 324.456673][ T5714] usb 5-1: device descriptor read/64, error -71 [ 324.479034][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.566875][ T5714] usb usb5-port1: attempt power cycle [ 324.674268][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 324.906534][ T5714] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 324.927163][ T5714] usb 5-1: device descriptor read/8, error -71 [ 324.988538][ T9929] dummy0: left promiscuous mode [ 324.993636][ T9929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1063'. [ 325.046342][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 325.056761][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 325.067105][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 325.171843][ T9936] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 325.177233][ T5714] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 325.217171][ T5714] usb 5-1: device descriptor read/8, error -71 [ 325.336874][ T5714] usb usb5-port1: unable to enumerate USB device [ 325.357691][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.365840][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.374905][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.395251][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.409303][ T9949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.424506][ T9949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.476542][ T5714] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 325.638799][ T5714] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.647312][ T5714] usb 2-1: config 0 has no interface number 0 [ 325.653496][ T5714] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.665734][ T5714] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.683164][ T5714] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.702955][ T9954] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.713269][ T5714] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 325.722947][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.740978][ T5714] usb 2-1: config 0 descriptor?? [ 326.278120][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.291890][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.493018][ T5714] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.0018/input/input38 [ 326.576171][ T5714] uclogic 0003:28BD:0042.0018: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 326.618536][ T9940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.644689][ T9940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.758028][ C1] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 326.771466][ T5692] usb 2-1: USB disconnect, device number 78 [ 327.286551][ T5692] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 327.323531][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1082'. [ 327.448987][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short [ 327.458163][ T5692] usb 2-1: config 13 has an invalid interface number: 147 but max is 0 [ 327.468122][ T5692] usb 2-1: config 13 has no interface number 0 [ 327.474633][ T5692] usb 2-1: config 13 interface 147 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 327.495624][ T5692] usb 2-1: config 13 interface 147 altsetting 2 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 327.509632][ T5692] usb 2-1: config 13 interface 147 altsetting 2 endpoint 0x85 has invalid maxpacket 19262, setting to 64 [ 327.535604][ T5692] usb 2-1: config 13 interface 147 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 327.562186][ T5692] usb 2-1: config 13 interface 147 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 8 [ 327.592797][ T5692] usb 2-1: config 13 interface 147 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.623800][ T5692] usb 2-1: config 13 interface 147 has no altsetting 0 [ 327.646584][ T5692] usb 2-1: New USB device found, idVendor=093b, idProduct=a003, bcdDevice=ee.49 [ 327.656601][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.681490][ T5692] usb 2-1: Product: syz [ 327.707378][ T5692] usb 2-1: Manufacturer: syz [ 327.725076][ T5692] usb 2-1: SerialNumber: syz [ 327.739761][ T9998] netlink: 'syz.3.1084': attribute type 303 has an invalid length. [ 327.755606][ T9981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 327.778280][ T9987] syzkaller0: entered promiscuous mode [ 327.785304][ T9987] syzkaller0: entered allmulticast mode [ 328.048791][ T9981] sctp: [Deprecated]: syz.1.1079 (pid 9981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.048791][ T9981] Use struct sctp_sack_info instead [ 328.133377][ T5692] usb 2-1: USB disconnect, device number 79 [ 328.396902][ T5692] net_ratelimit: 17 callbacks suppressed [ 328.396923][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.637807][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.146638][ T5692] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 329.317411][ T5692] usb 3-1: Using ep0 maxpacket: 32 [ 329.330225][ T5692] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.343044][T10009] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 329.353859][ T5692] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 329.373174][ T5692] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 329.382808][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.394399][ T5692] usb 3-1: Product: syz [ 329.402092][ T5692] usb 3-1: Manufacturer: syz [ 329.408368][ T5692] usb 3-1: SerialNumber: syz [ 329.424857][ T5692] usb 3-1: config 0 descriptor?? [ 329.436963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.677039][ T5685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.976684][ T5692] snd-usb-6fire 3-1:0.0: unable to receive device firmware state. [ 329.986472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 329.996987][ T5692] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 330.139744][T10027] binder: BINDER_SET_CONTEXT_MGR already set [ 330.151154][T10027] binder: 10026:10027 ioctl 40046207 0 returned -16 [ 330.259078][ T5714] usb 3-1: USB disconnect, device number 80 [ 330.328697][T10030] vim2m vim2m.0: vidioc_s_fmt queue busy [ 330.337411][ T5692] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 330.355226][T10021] syz_tun: entered allmulticast mode [ 330.387428][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 330.443769][T10021] syz_tun (unregistering): left allmulticast mode [ 330.472609][T10033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1093'. [ 330.486814][T10033] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 330.506523][ T5692] usb 2-1: Using ep0 maxpacket: 16 [ 330.516992][ T5692] usb 2-1: config index 0 descriptor too short (expected 8192, got 27) [ 330.525523][ T5692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.538526][ T5692] usb 2-1: config 0 has no interfaces? [ 330.547628][ T5692] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 330.556920][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.565342][ T5692] usb 2-1: Product: syz [ 330.586271][ T5692] usb 2-1: Manufacturer: syz [ 330.601260][ T5692] usb 2-1: SerialNumber: syz [ 330.628640][ T5692] usb 2-1: config 0 descriptor?? [ 330.716829][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.777138][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.801143][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.869946][T10023] syzkaller1: entered promiscuous mode [ 330.875651][T10023] syzkaller1: entered allmulticast mode [ 331.001217][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 331.027049][ T5692] usb 2-1: USB disconnect, device number 80 [ 331.376613][ T9164] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 331.438034][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.465470][T10063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.475322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.539760][ T9164] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 331.574559][ T9164] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 331.623064][ T9164] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 331.654015][ T9164] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 331.690167][ T9164] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 331.713847][ T9164] usb 4-1: Product: syz [ 331.730543][ T9164] usb 4-1: Manufacturer: syz [ 331.757564][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.777243][T10073] SET target dimension over the limit! [ 332.047991][ T9164] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 332.127396][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.147313][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.182387][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.198563][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.211976][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.221992][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.237500][ T9164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 332.251586][ T9164] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 332.263182][ T9164] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.278018][ T9164] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 332.288000][ T9164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.301256][ T9164] usb 5-1: config 0 descriptor?? [ 332.307712][T10076] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 332.309053][ T5714] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 332.506512][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 332.519193][ T5714] usb 3-1: config index 0 descriptor too short (expected 6701, got 45) [ 332.527519][ T5714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.537662][ T5714] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.548571][ T5714] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.561330][ T5714] usb 3-1: config 0 interface 0 has no altsetting 0 [ 332.568045][ T5714] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 332.578533][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.589909][ T5714] usb 3-1: config 0 descriptor?? [ 332.726273][ T9164] gt683r_led 0003:1770:FF00.0019: unknown main item tag 0x1 [ 332.737443][ T9164] gt683r_led 0003:1770:FF00.0019: collection stack underflow [ 332.750943][ T9164] gt683r_led 0003:1770:FF00.0019: item 0 0 0 12 parsing failed [ 332.770228][ T9164] gt683r_led 0003:1770:FF00.0019: hid parsing failed [ 332.787996][ T9164] gt683r_led 0003:1770:FF00.0019: probe with driver gt683r_led failed with error -22 [ 332.931130][ T9164] usb 5-1: USB disconnect, device number 83 [ 332.946727][T10092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.982343][T10092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.995913][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 332.995927][ T29] audit: type=1400 audit(1778065116.863:1455): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=10091 comm="syz.0.1112" [ 333.038123][T10092] loop6: detected capacity change from 0 to 524288000 [ 333.119951][T10093] Invalid logical block size (255) [ 333.138274][T10086] vivid-004: ================= START STATUS ================= [ 333.148945][T10086] vivid-004: Radio HW Seek Mode: Bounded [ 333.159119][T10086] vivid-004: Radio Programmable HW Seek: false [ 333.181110][T10086] vivid-004: RDS Rx I/O Mode: Block I/O [ 333.193149][T10086] vivid-004: Generate RBDS Instead of RDS: false [ 333.203715][T10086] vivid-004: RDS Reception: true [ 333.210669][T10086] vivid-004: RDS Program Type: 0 inactive [ 333.231038][T10086] vivid-004: RDS PS Name: inactive [ 333.243009][T10086] vivid-004: RDS Radio Text: inactive [ 333.260228][T10086] vivid-004: RDS Traffic Announcement: false inactive [ 333.282622][T10086] vivid-004: RDS Traffic Program: false inactive [ 333.297628][T10086] vivid-004: RDS Music: false inactive [ 333.313398][T10086] vivid-004: ================== END STATUS ================== [ 333.339180][ T5714] usbhid 3-1:0.0: can't add hid device: -71 [ 333.357499][ T5714] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 333.385505][ T5714] usb 3-1: USB disconnect, device number 81 [ 333.413848][ T9169] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 333.546548][ T9169] usb 2-1: device descriptor read/64, error -71 [ 333.799091][ T9169] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 333.837225][ T5705] net_ratelimit: 2 callbacks suppressed [ 333.837251][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.957246][ T9169] usb 2-1: device descriptor read/64, error -71 [ 334.078370][ T9169] usb usb2-port1: attempt power cycle [ 334.291270][ T5705] usb 4-1: USB disconnect, device number 72 [ 334.436861][ T9169] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 334.477404][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.496235][ T9169] usb 2-1: device descriptor read/8, error -71 [ 334.776655][ T9169] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 334.830294][ T9169] usb 2-1: device descriptor read/8, error -71 [ 334.886692][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.970571][ T9169] usb usb2-port1: unable to enumerate USB device [ 335.073727][T10133] xt_cgroup: xt_cgroup: no path or classid specified [ 335.513968][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.528843][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.564557][T10142] vivid-000: ================= START STATUS ================= [ 335.585502][T10142] vivid-000: Radio HW Seek Mode: Bounded [ 335.598797][T10142] vivid-000: Radio Programmable HW Seek: false [ 335.608690][T10142] vivid-000: RDS Rx I/O Mode: Block I/O [ 335.628883][T10142] vivid-000: Generate RBDS Instead of RDS: false [ 335.640480][T10142] vivid-000: RDS Reception: true [ 335.646668][T10142] vivid-000: RDS Program Type: 0 inactive [ 335.652653][T10142] vivid-000: RDS PS Name: inactive [ 335.672877][T10142] vivid-000: RDS Radio Text: inactive [ 335.681377][T10142] vivid-000: RDS Traffic Announcement: false inactive [ 335.688638][T10142] vivid-000: RDS Traffic Program: false inactive [ 335.705800][T10142] vivid-000: RDS Music: false inactive [ 335.716659][T10142] vivid-000: ================== END STATUS ================== [ 335.808622][ T9169] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 335.902657][T10150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.917241][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.920166][T10150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.976558][ T9169] usb 5-1: Using ep0 maxpacket: 32 [ 335.987778][ T9169] usb 5-1: config 0 has an invalid interface number: 97 but max is 0 [ 336.002099][ T9169] usb 5-1: config 0 has no interface number 0 [ 336.034493][ T9169] usb 5-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 336.045839][ T9169] usb 5-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 336.076595][ T5692] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 336.102152][ T9169] usb 5-1: config 0 interface 97 has no altsetting 0 [ 336.119234][ T9169] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 336.128755][ T9169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.137747][ T9169] usb 5-1: Product: syz [ 336.141984][ T9169] usb 5-1: Manufacturer: syz [ 336.147021][ T9169] usb 5-1: SerialNumber: syz [ 336.154411][ T9169] usb 5-1: config 0 descriptor?? [ 336.248549][ T5692] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 336.257096][ T5692] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 336.268487][ T5692] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 336.278925][ T5692] usb 3-1: config 150 has no interface number 0 [ 336.285233][ T5692] usb 3-1: config 150 interface 204 has no altsetting 0 [ 336.298168][ T5692] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 336.307335][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.315363][ T5692] usb 3-1: Product: syz [ 336.320376][ T5692] usb 3-1: Manufacturer: syz [ 336.325024][ T5692] usb 3-1: SerialNumber: syz [ 336.353157][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 336.403294][ T9169] peak_usb 5-1:0.97 can0: unable to request usb[type=0 value=1] err=-71 [ 336.422020][ T9169] peak_usb 5-1:0.97: unable to read PCAN-USB Pro firmware info (err -71) [ 336.436584][ T9180] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 336.498896][ T9169] peak_usb 5-1:0.97: probe with driver peak_usb failed with error -71 [ 336.520548][ T9169] usb 5-1: USB disconnect, device number 84 [ 336.620079][ T9180] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 336.638207][ T9180] usb 4-1: config 0 has no interface number 0 [ 336.656277][ T9180] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 336.677706][ T9180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.696543][ T9180] usb 4-1: Product: syz [ 336.710792][ T9180] usb 4-1: Manufacturer: syz [ 336.739799][ T9180] usb 4-1: SerialNumber: syz [ 336.782392][ T9180] usb 4-1: config 0 descriptor?? [ 336.877367][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.957651][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.033774][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 337.159720][ T9180] usb 4-1: Firmware version (0.0) predates our first public release. [ 337.177001][ T9180] usb 4-1: Please update to version 0.2 or newer [ 337.186830][T10164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.232359][T10164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.406408][ T9180] usb 4-1: USB disconnect, device number 73 [ 337.524064][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.532416][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.710159][ T5692] xr_serial 3-1:150.204: skipping garbage [ 337.726223][ T5692] xr_serial 3-1:150.204: invalid descriptor buffer length [ 337.741302][ T5692] usb 3-1: USB disconnect, device number 82 [ 337.821134][T10178] dummy0: entered promiscuous mode [ 337.826373][T10178] dummy0: entered allmulticast mode [ 337.833565][T10178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1133'. [ 337.845156][T10178] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 337.956936][ T5712] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 337.996734][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.107919][ T5712] usb 5-1: no configurations [ 338.115975][ T5712] usb 5-1: can't read configurations, error -22 [ 338.256549][ T5712] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 338.376679][ T5705] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 338.407278][ T5712] usb 5-1: no configurations [ 338.412083][ T5712] usb 5-1: can't read configurations, error -22 [ 338.420222][ T5712] usb usb5-port1: attempt power cycle [ 338.539778][ T5705] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 338.550913][ T5705] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 338.562690][ T5705] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 338.575010][ T5705] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 338.587872][ T5705] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.597029][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.605173][ T5705] usb 2-1: Product: syz [ 338.606530][ T5692] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 338.609446][ T5705] usb 2-1: Manufacturer: syz [ 338.621616][ T5705] usb 2-1: SerialNumber: syz [ 338.632643][T10185] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 338.643146][ T5705] cdc_mbim 2-1:1.0: skipping garbage [ 338.766578][ T5712] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 338.776913][ T5692] usb 3-1: Using ep0 maxpacket: 32 [ 338.783860][ T5692] usb 3-1: config index 0 descriptor too short (expected 6701, got 45) [ 338.792565][ T5692] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.805227][ T5712] usb 5-1: no configurations [ 338.810015][ T5712] usb 5-1: can't read configurations, error -22 [ 338.817492][ T5692] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.830094][ T5692] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.841191][ T5692] usb 3-1: config 0 interface 0 has no altsetting 0 [ 338.848372][ T5692] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 338.852180][T10185] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 338.857730][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.888823][T10185] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 338.900433][ T5692] usb 3-1: config 0 descriptor?? [ 338.956883][ T5712] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 338.990909][ T5712] usb 5-1: no configurations [ 338.995541][ T5712] usb 5-1: can't read configurations, error -22 [ 339.002589][ T5712] usb usb5-port1: unable to enumerate USB device [ 339.036786][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.103085][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 339.353837][T10187] vivid-004: ================= START STATUS ================= [ 339.365989][T10187] vivid-004: Radio HW Seek Mode: Bounded [ 339.376397][T10187] vivid-004: Radio Programmable HW Seek: false [ 339.389989][T10187] vivid-004: RDS Rx I/O Mode: Block I/O [ 339.409164][T10187] vivid-004: Generate RBDS Instead of RDS: false [ 339.424160][T10187] vivid-004: RDS Reception: true [ 339.440223][T10187] vivid-004: RDS Program Type: 0 inactive [ 339.453706][T10187] vivid-004: RDS PS Name: inactive [ 339.475571][T10187] vivid-004: RDS Radio Text: inactive [ 339.490324][T10187] vivid-004: RDS Traffic Announcement: false inactive [ 339.508705][T10187] vivid-004: RDS Traffic Program: false inactive [ 339.525848][T10187] vivid-004: RDS Music: false inactive [ 339.539588][T10187] vivid-004: ================== END STATUS ================== [ 339.584202][ T5692] usbhid 3-1:0.0: can't add hid device: -71 [ 339.607298][ T5692] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 339.637156][T10194] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 339.651624][T10194] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 339.653517][ T5692] usb 3-1: USB disconnect, device number 83 [ 339.691552][ T5705] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 339.710339][ T5705] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 340.077901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.087831][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.100697][ T29] audit: type=1326 audit(1778065123.973:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.3.1141" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 340.135653][ T29] audit: type=1326 audit(1778065123.973:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.3.1141" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 340.160917][ T29] audit: type=1326 audit(1778065123.973:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.3.1141" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f454b99cdd9 code=0x7ffc0000 [ 340.186362][ T29] audit: type=1326 audit(1778065123.973:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10206 comm="syz.3.1141" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f454b99cdd9 code=0x0 [ 340.212205][T10209] syzkaller1: entered promiscuous mode [ 340.218038][T10209] syzkaller1: entered allmulticast mode [ 340.417227][T10213] tipc: Started in network mode [ 340.423911][T10213] tipc: Node identity 32965a774b7f, cluster identity 4711 [ 340.445195][T10213] tipc: Enabled bearer , priority 0 [ 340.462412][T10213] syzkaller0: entered promiscuous mode [ 340.469610][T10213] syzkaller0: entered allmulticast mode [ 340.527402][T10213] tipc: Resetting bearer [ 340.547003][T10212] tipc: Resetting bearer [ 340.556673][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.589554][T10212] tipc: Disabling bearer [ 340.782816][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1144'. [ 340.817472][T10218] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 341.126737][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.571499][ T9180] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 341.758925][ T9180] usb 4-1: Using ep0 maxpacket: 32 [ 341.769069][ T9180] usb 4-1: config index 0 descriptor too short (expected 6701, got 45) [ 341.779080][ T9180] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.789598][ T9180] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.802020][ T9180] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.813390][ T9180] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.828953][ T9180] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 341.856802][ T9180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.891723][ T9180] usb 4-1: config 0 descriptor?? [ 341.912389][ T5692] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 342.098032][ T5692] usb 5-1: Using ep0 maxpacket: 8 [ 342.114847][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.137322][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.158888][ T5692] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 342.158977][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.200943][ T5692] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 342.226640][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.281437][T10251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.290632][ T5692] usb 5-1: config 0 descriptor?? [ 342.352427][T10230] vivid-001: ================= START STATUS ================= [ 342.379342][T10251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.393029][T10252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.409486][T10230] vivid-001: Radio HW Seek Mode: Bounded [ 342.422806][T10230] vivid-001: Radio Programmable HW Seek: false [ 342.449954][T10230] vivid-001: RDS Rx I/O Mode: Block I/O [ 342.487999][T10230] vivid-001: Generate RBDS Instead of RDS: false [ 342.516526][T10230] vivid-001: RDS Reception: true [ 342.548353][T10230] vivid-001: RDS Program Type: 0 inactive [ 342.554229][T10239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.700925][T10230] vivid-001: RDS PS Name: inactive [ 342.717617][T10239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.879414][T10230] vivid-001: RDS Radio Text: inactive [ 342.893544][T10230] vivid-001: RDS Traffic Announcement: false inactive [ 342.912562][T10230] vivid-001: RDS Traffic Program: false inactive [ 342.927320][T10230] vivid-001: RDS Music: false inactive [ 342.943137][T10230] vivid-001: ================== END STATUS ================== [ 342.954562][ T5692] elecom 0003:056E:00FE.001A: unknown main item tag 0x4 [ 342.980938][ T5692] elecom 0003:056E:00FE.001A: unknown main item tag 0x6 [ 342.997249][ T5692] elecom 0003:056E:00FE.001A: unknown main item tag 0x5 [ 343.016083][ T5692] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 343.050732][ T9180] usbhid 4-1:0.0: can't add hid device: -71 [ 343.063906][ T9180] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 343.065235][ T5692] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 343.123990][ T9180] usb 4-1: USB disconnect, device number 74 [ 343.126591][ T5692] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 343.193446][ T5692] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 343.241647][T10257] netlink: 'syz.3.1155': attribute type 16 has an invalid length. [ 343.242955][ T5692] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 343.281437][ T5692] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 343.310016][ T5692] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 343.339250][ T5692] elecom 0003:056E:00FE.001A: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 343.359544][ T5692] usb 5-1: USB disconnect, device number 89 [ 343.493527][T10259] fido_id[10259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 343.768256][ T5705] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 343.783122][ T5705] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 344.010609][ T29] audit: type=1326 audit(1778065127.883:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz.1.1157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b70f9cdd9 code=0x7ffc0000 [ 344.046061][T10264] netlink: 'syz.1.1157': attribute type 4 has an invalid length. [ 344.095755][ T29] audit: type=1326 audit(1778065127.883:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz.1.1157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b70f9cdd9 code=0x7ffc0000 [ 344.133783][T10265] netlink: 'syz.1.1157': attribute type 4 has an invalid length. [ 344.172247][ T29] audit: type=1326 audit(1778065127.883:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz.1.1157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b70f9cdd9 code=0x7ffc0000 [ 344.203462][ T29] audit: type=1326 audit(1778065127.883:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz.1.1157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b70f9cdd9 code=0x7ffc0000 [ 344.230024][ T29] audit: type=1326 audit(1778065127.883:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz.1.1157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b70f9cb42 code=0x7ffc0000 [ 344.256049][ T29] audit: type=1326 audit(1778065127.883:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz.1.1157" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1b70f9cbd7 code=0x7ffc0000 [ 344.256813][ T9180] net_ratelimit: 8 callbacks suppressed [ 344.256835][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.287836][T10266] fuse: fd is not a fuse device [ 344.331399][ T5705] wwan wwan0: port wwan0mbim0 attached [ 344.427673][T10268] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 344.461051][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.545257][ T5705] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 3a:51:6d:86:70:66 [ 344.646561][ T5705] usb 2-1: USB disconnect, device number 85 [ 344.720710][ T5705] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 344.736175][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.815407][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.959578][ T9164] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 344.967272][ T9180] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 344.991891][ T5705] wwan wwan0: port wwan0mbim0 disconnected [ 345.140690][ T9180] usb 4-1: Using ep0 maxpacket: 16 [ 345.152265][ T9164] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 345.176056][ T9180] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.187387][ T9164] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 345.197833][ T9164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.205941][ T9180] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 345.219509][ T9164] usb 5-1: Product: syz [ 345.225240][ T9164] usb 5-1: Manufacturer: syz [ 345.231084][ T9180] usb 4-1: config 0 interface 0 has no altsetting 0 [ 345.239214][ T9164] usb 5-1: SerialNumber: syz [ 345.249120][ T9180] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 345.269732][ T9164] usb 5-1: config 0 descriptor?? [ 345.277878][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.289010][ T9180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.310075][ T9164] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 345.349708][ T9164] usb 5-1: setting power ON [ 345.364347][ T9164] dvb-usb: bulk message failed: -22 (2/0) [ 345.381742][ T9180] usb 4-1: config 0 descriptor?? [ 345.410776][ T9164] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 345.428332][ T9180] usbhid 4-1:0.0: can't add hid device: -22 [ 345.434279][ T5705] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 345.445415][ T9180] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 345.460111][ T9164] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 345.469813][ T9164] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 345.517022][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.532418][ T9164] usb 5-1: USB disconnect, device number 90 [ 345.610662][ T5705] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 345.651776][ T5705] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 345.709932][ T5705] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 345.740245][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.760326][ T5705] usb 2-1: Product: syz [ 345.779056][ T5705] usb 2-1: Manufacturer: syz [ 345.791990][ T5705] usb 2-1: SerialNumber: syz [ 345.807024][T10299] [ 345.809364][T10299] ============================================ [ 345.815493][T10299] WARNING: possible recursive locking detected [ 345.821629][T10299] syzkaller #0 Tainted: G L [ 345.827585][T10299] -------------------------------------------- [ 345.833711][T10299] syz.3.1160/10299 is trying to acquire lock: [ 345.839749][T10299] ffffffff8f3d1230 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 345.849902][T10299] [ 345.849902][T10299] but task is already holding lock: [ 345.857247][T10299] ffffffff8f3d1230 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 345.867403][T10299] [ 345.867403][T10299] other info that might help us debug this: [ 345.875458][T10299] Possible unsafe locking scenario: [ 345.875458][T10299] [ 345.882890][T10299] CPU0 [ 345.886153][T10299] ---- [ 345.889411][T10299] lock(qp_broker_list.mutex); [ 345.894239][T10299] lock(qp_broker_list.mutex); [ 345.899069][T10299] [ 345.899069][T10299] *** DEADLOCK *** [ 345.899069][T10299] [ 345.907194][T10299] May be due to missing lock nesting notation [ 345.907194][T10299] [ 345.915489][T10299] 1 lock held by syz.3.1160/10299: [ 345.920576][T10299] #0: ffffffff8f3d1230 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 345.931162][T10299] [ 345.931162][T10299] stack backtrace: [ 345.937039][T10299] CPU: 1 UID: 0 PID: 10299 Comm: syz.3.1160 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.937056][T10299] Tainted: [L]=SOFTLOCKUP [ 345.937060][T10299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.937076][T10299] Call Trace: [ 345.937083][T10299] [ 345.937088][T10299] dump_stack_lvl+0xe8/0x150 [ 345.937102][T10299] print_deadlock_bug+0x279/0x290 [ 345.937116][T10299] __lock_acquire+0x253f/0x2cf0 [ 345.937128][T10299] ? is_bpf_text_address+0x292/0x2b0 [ 345.937139][T10299] ? is_bpf_text_address+0x26/0x2b0 [ 345.937149][T10299] ? kernel_text_address+0xa5/0xe0 [ 345.937163][T10299] ? __kernel_text_address+0xd/0x30 [ 345.937177][T10299] ? vmci_qp_broker_detach+0x117/0xf20 [ 345.937187][T10299] lock_acquire+0x106/0x350 [ 345.937197][T10299] ? vmci_qp_broker_detach+0x117/0xf20 [ 345.937209][T10299] __mutex_lock+0x1a3/0x1550 [ 345.937223][T10299] ? vmci_qp_broker_detach+0x117/0xf20 [ 345.937234][T10299] ? kasan_save_track+0x4f/0x80 [ 345.937247][T10299] ? kasan_save_track+0x3e/0x80 [ 345.937259][T10299] ? kasan_save_free_info+0x46/0x50 [ 345.937269][T10299] ? __kasan_slab_free+0x5c/0x80 [ 345.937281][T10299] ? kfree+0x1c5/0x640 [ 345.937291][T10299] ? vmci_ctx_put+0x5ef/0xc40 [ 345.937303][T10299] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 345.937315][T10299] ? vmci_datagram_dispatch+0x450/0xc60 [ 345.937327][T10299] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 345.937337][T10299] ? vmci_host_close+0x98/0x160 [ 345.937345][T10299] ? vmci_qp_broker_detach+0x117/0xf20 [ 345.937354][T10299] ? exit_to_user_mode_loop+0xed/0x480 [ 345.937365][T10299] ? __pfx___mutex_lock+0x10/0x10 [ 345.937380][T10299] vmci_qp_broker_detach+0x117/0xf20 [ 345.937392][T10299] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 345.937402][T10299] ? kasan_quarantine_put+0xbb/0x1f0 [ 345.937414][T10299] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.937426][T10299] ? kfree+0x1c5/0x640 [ 345.937437][T10299] ? vmci_ctx_put+0x5ef/0xc40 [ 345.937448][T10299] ? vmci_ctx_put+0x141/0xc40 [ 345.937460][T10299] vmci_ctx_put+0x64e/0xc40 [ 345.937471][T10299] ? __pfx___schedule+0x10/0x10 [ 345.937481][T10299] ? vmci_ctx_put+0x141/0xc40 [ 345.937493][T10299] ? __pfx_vmci_ctx_put+0x10/0x10 [ 345.937505][T10299] ? preempt_schedule_thunk+0x16/0x30 [ 345.937519][T10299] ? preempt_schedule_common+0x82/0xd0 [ 345.937532][T10299] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 345.937546][T10299] vmci_datagram_dispatch+0x450/0xc60 [ 345.937560][T10299] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 345.937574][T10299] vmci_qp_broker_detach+0x8dd/0xf20 [ 345.937586][T10299] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 345.937595][T10299] ? kasan_quarantine_put+0xbb/0x1f0 [ 345.937608][T10299] ? kfree+0x1c5/0x640 [ 345.937619][T10299] ? vmci_ctx_put+0x5ef/0xc40 [ 345.937631][T10299] vmci_ctx_put+0x64e/0xc40 [ 345.937642][T10299] ? vmci_ctx_put+0x141/0xc40 [ 345.937654][T10299] ? __pfx_vmci_ctx_put+0x10/0x10 [ 345.937668][T10299] vmci_host_close+0x98/0x160 [ 345.937678][T10299] ? __pfx_vmci_host_close+0x10/0x10 [ 345.937687][T10299] __fput+0x44f/0xa60 [ 345.937700][T10299] task_work_run+0x1d9/0x270 [ 345.937713][T10299] ? __pfx_task_work_run+0x10/0x10 [ 345.937727][T10299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.937737][T10299] exit_to_user_mode_loop+0xed/0x480 [ 345.937747][T10299] ? rcu_is_watching+0x15/0xb0 [ 345.937758][T10299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.937768][T10299] do_syscall_64+0x33e/0xf80 [ 345.937780][T10299] ? trace_irq_disable+0x3b/0x140 [ 345.937794][T10299] ? clear_bhb_loop+0x40/0x90 [ 345.937804][T10299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.937815][T10299] RIP: 0033:0x7f454b99cdd9 [ 345.937826][T10299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.937835][T10299] RSP: 002b:00007f454c7ec028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 345.937846][T10299] RAX: 0000000000000000 RBX: 00007f454bc16090 RCX: 00007f454b99cdd9 [ 345.937853][T10299] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008 [ 345.937860][T10299] RBP: 00007f454ba32d69 R08: 0000000000000000 R09: 0000000000000000 [ 345.937866][T10299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.937872][T10299] R13: 00007f454bc16128 R14: 00007f454bc16090 R15: 00007f454bd3fa48 [ 345.937883][T10299] [ 346.480223][ T9180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.496986][ T5705] usb 2-1: config 0 descriptor?? [ 346.505641][ T5705] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 346.556755][ T5692] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 346.636598][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.728248][ T5692] usb 3-1: Using ep0 maxpacket: 32 [ 346.741939][ T5692] usb 3-1: config index 0 descriptor too short (expected 6701, got 45) [ 346.750978][ T5692] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.776509][ T5692] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.792508][ T5692] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.802423][ T5692] usb 3-1: config 0 interface 0 has no altsetting 0 [ 346.814800][ T5692] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 346.827552][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.847985][ T5692] usb 3-1: config 0 descriptor?? [ 347.128254][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.208490][ T5705] gspca_sunplus: reg_r err -71 [ 347.214448][ T5705] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 347.225041][ T5705] usb 2-1: USB disconnect, device number 86 [ 347.265683][T10295] vivid-004: ================= START STATUS ================= [ 347.273633][T10295] vivid-004: Radio HW Seek Mode: Bounded [ 347.286152][T10295] vivid-004: Radio Programmable HW Seek: false [ 347.292413][T10295] vivid-004: RDS Rx I/O Mode: Block I/O [ 347.298031][T10295] vivid-004: Generate RBDS Instead of RDS: false [ 347.304429][T10295] vivid-004: RDS Reception: true [ 347.309470][T10295] vivid-004: RDS Program Type: 0 inactive [ 347.315228][T10295] vivid-004: RDS PS Name: inactive [ 347.320493][T10295] vivid-004: RDS Radio Text: inactive [ 347.325999][T10295] vivid-004: RDS Traffic Announcement: false inactive [ 347.333516][T10295] vivid-004: RDS Traffic Program: false inactive [ 347.339922][T10295] vivid-004: RDS Music: false inactive [ 347.345417][T10295] vivid-004: ================== END STATUS ================== [ 347.355908][ T5692] usbhid 3-1:0.0: can't add hid device: -71 [ 347.363748][ T5692] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 347.376271][ T5692] usb 3-1: USB disconnect, device number 84 [ 347.516832][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.757721][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.558297][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.596836][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.677200][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.636919][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.678069][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.718711][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.727430][ T9164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.756887][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.156678][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.798535][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.756650][ T9169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog