last executing test programs: 10.629374854s ago: executing program 3 (id=5146): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000104feffff7f0300000000001d06", @ANYRES32=r4, @ANYBLOB="600000008008000008000300", @ANYRES32=r1], 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 10.035660497s ago: executing program 3 (id=5150): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000f9b000/0x4000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7a8", 0x2}], 0x1}], 0x1, 0x40800) r2 = socket$netlink(0x10, 0x3, 0xc) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000180), &(0x7f0000000240)=0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) socket$inet6_sctp(0xa, 0x5, 0x84) 8.718427085s ago: executing program 3 (id=5152): socket$inet(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x89ea7932c852543c) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, @loopback, @mcast2, 0x0, 0x20, 0x1, 0x3}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x9, 0x10000, [0x0, 0x1, 0x7, 0x1, 0x5, 0x7aa]}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x20}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r5, &(0x7f0000002000)='`', 0x88020) 7.591715895s ago: executing program 1 (id=5156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x32}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$sock(r6, &(0x7f000000bb00)=[{{&(0x7f0000009fc0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f000000a300)=[@txtime={{0x14, 0x1, 0x41, 0xfff}}], 0x14}}], 0x1, 0x4840) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r8, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x80, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="be86c9ab7bd7"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bec98ee55364"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8077b4a5b3db"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x800) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) io_uring_setup(0x85b, &(0x7f0000000180)={0x0, 0x9933, 0x10, 0x2, 0x383}) r9 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r10 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) r11 = dup3(r9, r10, 0x0) ioctl$MON_IOCG_STATS(r11, 0xc0109207, &(0x7f0000000180)) 6.296263825s ago: executing program 1 (id=5158): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01}) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$unix(0x1, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x220000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 5.761624861s ago: executing program 1 (id=5160): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0xf6}, {0x20, 0x0, 0x2, 0xfffff034}, {0x6, 0xfc, 0x0, 0xd}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r6, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) quotactl_fd$Q_GETFMT(r8, 0xffffffff80000402, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFQA_CFG_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x40084) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 5.388187812s ago: executing program 1 (id=5162): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xd}]}}]}, 0x48}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x2000000}], 0x1, 0x4000800) 5.337102283s ago: executing program 3 (id=5163): execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xac, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x8, 0x2000101}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000000000280012800b00010065727370616e0000180002800400120006000f007f00000006001000"], 0x5c}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) 5.073237255s ago: executing program 1 (id=5164): pipe(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x48212b8952c3aff5, 0x70bd25, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) fsopen(&(0x7f0000000280)='binfmt_misc\x00', 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x200000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0x10cd, 0x4) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) dup3(r8, 0xffffffffffffffff, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r9, &(0x7f0000000000)=[{&(0x7f0000000600)="24ba8d4416ef", 0x6}], 0x1, 0x5e, 0xdc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="fdff00000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990003000000500000000800050008000000"], 0x30}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 4.439727215s ago: executing program 3 (id=5165): socket(0x28, 0x5, 0x0) userfaultfd(0x801) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x2000) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/19, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 4.424831081s ago: executing program 2 (id=5166): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') syz_io_uring_setup(0x279, &(0x7f0000000400)={0x0, 0x37a9, 0x40, 0x1}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001aae6b4d48d4d62700000000000000"], 0x50) syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mount$fuse(0x0, &(0x7f0000000500)='./file1\x00', 0x0, 0x14000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x210}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r5, &(0x7f0000001300)='7', 0x1) r6 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3.150134316s ago: executing program 4 (id=5168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x32}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$sock(r6, &(0x7f000000bb00)=[{{&(0x7f0000009fc0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f000000a300)=[@txtime={{0x14, 0x1, 0x41, 0xfff}}], 0x14}}], 0x1, 0x4840) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r8, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x80, r2, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="be86c9ab7bd7"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bec98ee55364"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8077b4a5b3db"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x800) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) io_uring_setup(0x85b, &(0x7f0000000180)={0x0, 0x9933, 0x10, 0x2, 0x383}) r9 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r10 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) r11 = dup3(r9, r10, 0x0) ioctl$MON_IOCG_STATS(r11, 0xc0109207, &(0x7f0000000180)) 2.598609613s ago: executing program 0 (id=5169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x4, 0x2d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r1 = socket$igmp(0x2, 0x3, 0x2) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000080), 0x9bfffffe) openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000580)="17000000020001000003d68c5ee17688a20033088e030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff591061547a681f009cee4a5acb3da400001fb700674f00c8fdbbf9315033bf79ac2dff06011500390100037d4e5b5ce98f600000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba0000", 0xb8) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r5}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x37, 0x1, 0x70bd25, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r7, @private=0xa010100, @rand_addr=0x64010102}, 0xc) 2.557711394s ago: executing program 1 (id=5170): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xa, 0x148, 0x0, 0x10, 0x368, 0x2a8, 0x2a8, 0x368, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @multicast1, 0x0, 0x0, 'wg0\x00', 'rose0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x220, 0x288, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x4, 0x0, 0x9, 0x0, 0x0, 0xffffffff}}}, @common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x400, 0x1, 0x44, 0x4, 0x4, 0xff, 0xfffffaf9, 0x2, 0x20, 0x8}, {0x9}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0xffd, 0x9, 0x1, 'netbios-ns\x00', 'syz1\x00', {0x1}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x460) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000000000000010203040506072b090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40"], 0x48, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x0, 0x102) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000fcdbdf250400000034000980080002000800000008000100640000000800020003000000080002000700000008000200070000000800020001000000cc32920970a58d37560548848652a375d5ae7ef7bbdaf809f1d8a05510c1a389245aae15a5e31ea4c4044caef8ad2613bae0f1c8e797410700000000000000291df186c95ae9146b5101ef40c44a191ab6759766601ff6380452789928783543618898848059dd13d5ead7db6e2f3547ac512ad5870c92545c35ef1ee6edadd7585cf2fdaba48c9380ca17005bbdff1b032637ee13832c3381b1f0bdf0334d8b3d"], 0x48}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000380600fe880000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e4c20000907800081d12400053e0c9d32076c99dd6cea46c2faa1312be58b864b222bf56e5de595fbe659615"], 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080)) read$FUSE(r5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000002d80), 0x0, 0x80800) 2.443992862s ago: executing program 0 (id=5171): openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x2}], 0x1, 0x20, 0x0) 2.099533903s ago: executing program 4 (id=5172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44010000c98c0100feffffbf000100000000000000000000000000000000020000000000000000100000ffffac1414bb000103944e230005000000003a000000d6add7f350092ba7462eacaf4f56fcf877382e67490441", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350003000000"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x30, 0x19, 0xe0}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0x3000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x9, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0xff, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0xb, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0x2, 0x80, 0xf, 0x1, 0xfd}, {0x3000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42024, 0xb, 0x0, 0x3000, [0x6840000000000000, 0x3, 0x5e, 0xff]}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) 1.759964147s ago: executing program 4 (id=5173): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbdadcd748bb0500004500001c0000000003019078ac1e0001ac1414aa00009078fffd0003"], 0x0) 1.688377571s ago: executing program 4 (id=5174): r0 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102ae299820fc0d0100ac240102030109022b0001fffa10170904510302ffffff01090507100800060808070593ff9b"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x4480) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000c000) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e65766500002000028005000c0001000000140007000000000000000000000000000000000108000a00", @ANYRES32=r7], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) r10 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x1, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5fb2, 0x0, 0x1, {0x22, 0x9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xd6, 0x7e}}}}}]}}]}}, 0x0) unshare(0x2040400) memfd_secret(0x0) 1.335242913s ago: executing program 0 (id=5175): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pipe(&(0x7f0000019480)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty=0xff000000, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.31910287s ago: executing program 3 (id=5176): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb7}, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.286016158s ago: executing program 0 (id=5177): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc010) write(r2, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000140)=0x4, 0x4) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f00000003c0)={0x8000000000000000, 0x4, 0x7, 0xd, 0x9, 0x7ff}) 999.778175ms ago: executing program 2 (id=5178): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1c0000001e00190ffff43fffffffda060200000000e80001dd0008040d", 0x1d}], 0x1) 899.631738ms ago: executing program 2 (id=5179): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@nested={0x4, 0x146}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060008"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0xc3, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x25, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000004c0)=[{0x0}], 0x1, 0x4) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000016c0)=@o_path={&(0x7f0000001680)='./file1\x00', 0x0, 0x8, r0}, 0x18) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001740)=@generic={&(0x7f0000001700)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@bloom_filter={0x1e, 0x3, 0x1c, 0x6, 0x9101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r6 = open(&(0x7f0000001800)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001840)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000400000000000000000000000010000000000000"], 0x50) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) move_mount(r9, 0x0, r10, 0x0, 0x46) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000018c0)={0xffffffffffffffff, 0xde, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x14, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000009000000000000001800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0xff, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0x3, 0xffffffff, 0x7}, 0x10, r1, r2, 0x9, &(0x7f0000001a00)=[r3, r4, r5, 0x1, r6, r7, r8, r10, r11], &(0x7f0000001a40)=[{0x4, 0x4, 0xe, 0xae2da44a605f9b09}, {0x5, 0x5, 0x6, 0xb}, {0x4, 0x3, 0x2, 0xa}, {0x3, 0x4, 0x3, 0x1}, {0x5, 0x4, 0x7, 0xa}, {0x3, 0x3, 0x2, 0x1}, {0x1, 0x2, 0x3, 0x2}, {0x3, 0x2, 0xd, 0xa}, {0x5, 0x2, 0xe, 0x7}], 0x10, 0x8b86}, 0x94) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) r13 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x8280, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r13, 0x4008af14, &(0x7f0000000340)={0x2, 0x11c}) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r12, &(0x7f0000000140)="8365000000000000", 0x5ac) r14 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r15 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r16 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) pwritev(r16, &(0x7f0000001900)=[{&(0x7f0000000180)="240cd03c91976aa422d4f4c1162e2f437c1dae5485ad57b5117b61aaf25dfc0b64f6daea50ac5b29a27c9395a75f0258ec93e746e66b89130abcbb0daaa1dae81d9f23a907a6f1fa485b2bfafc74ffb201be0aa112cfcaa97fdb8d91aac8532174b643c56fe9d465c74dbc9142342d12754cc03e2010c8ec83579e0955d60b8362b9aa427cab0402456994ea7d8caab6864638eab93ee6da08894ed6cd299efa8acbfee8c0d1020ac637e0cd9b12827b1b5b6357e3e531246425f5f816d05f70f0b30ef6816a1ceedf8b070907952851547edc491f7b04e0", 0xd8}, {&(0x7f0000000280)="ff2b19825aa1ab63ce29ab3d1da22a659eb1c44f66fd2f11ccdf224b95fedfc7df94c15c0dabdda7ee43949eda59163a358d65ad14e4422c51bef092c0112748dfeb2f321e674807f23e5a12c512978a89635347f082ec775c92f49cbddec11ebde912eaba1fc1f5db7fbafa64b36f26d15d", 0x72}, {&(0x7f0000000300)="1ef617426b4abf6bc0c22f47e4c8a4c6909fb5c560d9fb6222ebd56c88523e54af27894fd5b48cdefad0678f1c01843aa5135c127eab63a884034197581bbd9c4f67723f44648c534a51badf16dcfddd9b8253be3d7f9b9b798c2ff287cc83228ba70ee9e739195c021badaec7acf03f5220d1b204f8c75eb4d593dfbf153f2fa4b7c66bbd2498abdf0d13a136095c650e449cf0780905855f081ef191261cb7b8be7262780b88dd99", 0xa9}, {&(0x7f0000000480)="e972c05e92ffaf5b5fb97e2f5aa04f5a70e9f92713bc46749bb3b04a736154fed06b1c3a134de3d1f0b04ad40c73c3e66858b429ca5c9febae3f8ae8ca5eb2a075e42a4740", 0x45}, {&(0x7f00000005c0)="6952a225be59d2960db82b57b8c2f1326e5695495d542aea27d2b546b6ee32a8d9d6eee140b4834675130c20e43ef43a73b78f0cdd8395c7ca845ea24b8911d9fc30de2e5a8e650eee1e5a71cd8d59437d08be6e643f10eb393303db3c72117ae5355fd5ae754bb753158fff9ca524668d08291b77071ed9badbedf8d8ce6c7ed2bb9fe1aabfacefe3f4bf658c135ef1c2cce54bb552dee8b6cb98a1e84ffa4317c126de1473f8902ee1c0e3ac462f562e5fe30e0faddfeb1b3021a683b6a733337a16", 0xc3}, {&(0x7f0000000800)="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", 0xd06}], 0x100000000000030e, 0xe, 0x4) ioctl$LOOP_CONFIGURE(r14, 0x4c0a, &(0x7f0000000080)={r15, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$vim2m_VIDIOC_S_FMT(r15, 0xc0d05605, &(0x7f0000000200)={0x0, @pix_mp={0x2, 0x8, 0x0, 0x7, 0x2, [{0x81, 0x1ff}, {0x2, 0x800}, {0x6, 0x62}, {0x0, 0x7}, {0x6, 0x3ff}, {0xfffff366, 0x1}, {0x8}, {0x6, 0x81}], 0x7, 0xd, 0x0, 0x1, 0x4}}) 720.974238ms ago: executing program 0 (id=5180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x44b, 0x70bd2a, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x4c}}, 0x20000004) 606.235338ms ago: executing program 2 (id=5181): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000140)="8265000003e80000", 0x5ac) 525.064299ms ago: executing program 4 (id=5182): socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) userfaultfd(0x80801) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x40c8}, 0x200040c4) 347.849985ms ago: executing program 2 (id=5183): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 343.103168ms ago: executing program 0 (id=5184): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x8800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0xffffffffffffbfff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) socket$unix(0x1, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff1, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r7, 0x6, 0x2, 0x0, 0x0) connect$inet(r7, &(0x7f0000001080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff009}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x30}}], 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000224e0000", 0x58}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 230.075999ms ago: executing program 4 (id=5185): openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x2}], 0x1, 0x20, 0x0) 0s ago: executing program 2 (id=5186): r0 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1251.349364][ T6546] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1251.359613][ T6546] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.384448][ T6546] usb 1-1: config 0 descriptor?? [ 1251.778782][T13102] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1251.941249][T13102] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 1251.959079][T13102] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 1251.971671][T13102] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1251.983585][T13102] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1252.001192][T13102] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1252.010135][T13102] usb 2-1: Product: syz [ 1252.014488][T13102] usb 2-1: Manufacturer: syz [ 1252.019627][T13102] usb 2-1: SerialNumber: syz [ 1252.036531][T13102] usb 2-1: config 0 descriptor?? [ 1252.061155][T13102] usb 2-1: selecting invalid altsetting 0 [ 1252.278097][T22198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4482'. [ 1252.278446][ T5924] usb 2-1: USB disconnect, device number 44 [ 1252.291692][T22198] openvswitch: netlink: Flow actions attr not present in new flow. [ 1253.173504][ T1089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.489712][T22206] pim6reg: entered allmulticast mode [ 1253.558809][T13102] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1253.723301][T13102] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.734604][T13102] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1253.750418][T13102] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1253.769037][T13102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.782128][T13102] usb 2-1: Product: ᰁ [ 1253.786863][T13102] usb 2-1: Manufacturer: 䨌嵝욶ꪔ寵脝吀Ⴟ甂탳좄⓮ᮇ᥮鄍묠숥⑇᠎ꦠ㜘茋陪뿏怷䈊먼ᣵꟕ영Ჹܲ䦡彩㼜꠮㹫疋㳜⭟뎔穴㩏렕롤䩢≵뉶똮픎좈⽝ꪒ粝㯄༃菍⬳孿ᴱ쀯꽇耸뷃曇ᚯ [ 1253.820759][T13102] usb 2-1: SerialNumber: syz [ 1254.248987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.651334][ T5924] usb 1-1: USB disconnect, device number 57 [ 1255.289107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.489825][T22229] delete_channel: no stack [ 1256.500246][T13102] usb 2-1: 0:2 : does not exist [ 1256.587626][T13102] usb 2-1: USB disconnect, device number 45 [ 1256.707734][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1257.050779][T22259] syzkaller0: create flow: hash 3435250284 index 1 [ 1257.314061][ T1089] syzkaller0: tun_net_xmit 76 [ 1257.338956][ T5904] syzkaller0: tun_net_xmit 76 [ 1257.392093][ T1089] syzkaller0: tun_net_xmit 48 [ 1257.409878][ T5904] syzkaller0: tun_net_xmit 76 [ 1257.747176][ T5904] syzkaller0: tun_net_xmit 76 [ 1257.788130][T22259] syzkaller0: delete flow: hash 3435250284 index 1 [ 1258.800052][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.961683][T22268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.973501][T22268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.287115][T22271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.333761][T22271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.839365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.647391][T22281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.659713][T22281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.879086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.972616][T22266] ip6tnl2: entered allmulticast mode [ 1262.980838][T16451] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1262.990649][T16451] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1263.019082][ T5904] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1263.209432][ T5199] Dev loop6: unable to read RDB block 1 [ 1263.216614][ T5199] loop6: unable to read partition table [ 1263.223578][ T5199] loop6: partition table beyond EOD, truncated [ 1263.429377][ T6526] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1263.509312][ T5904] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1263.591228][ T6526] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1263.601394][ T6526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.618016][ T6526] usb 2-1: config 0 descriptor?? [ 1263.722170][T22303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.734689][T22303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.749312][T13102] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 1263.752538][T22303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.769538][T22303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.842619][ T5904] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1263.913963][T13102] usb 1-1: No LPM exit latency info found, disabling LPM. [ 1263.926367][T13102] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1263.941360][T13102] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1263.952526][T13102] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1264.028013][ T6526] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1264.248598][ T6526] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1264.255720][ T6526] [drm] Initialized udl on minor 2 [ 1264.436151][T22307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.447831][ T6526] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffe0 [ 1264.463665][T22307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.479500][ T6526] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1264.506741][T22309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.517441][T22309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.561417][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1264.635071][ T6526] usb 2-1: USB disconnect, device number 46 [ 1264.642523][T17472] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1264.680368][T17472] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1265.598920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1265.629678][T22319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.639432][T22319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.218942][ T5904] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1266.392837][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.414466][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.442649][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1266.462308][T13102] usb 1-1: New USB device found, idVendor=046d, idProduct=c088, bcdDevice= 0.40 [ 1266.469074][ T5904] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1266.481384][T13102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.483054][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.499936][T22327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4520'. [ 1266.499981][T22327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4520'. [ 1266.503253][T13102] usb 1-1: Product: ⠊ [ 1266.517407][T22327] team0: entered promiscuous mode [ 1266.533598][T22327] team_slave_0: entered promiscuous mode [ 1266.541618][T22327] team_slave_1: entered promiscuous mode [ 1266.557328][ T5904] usb 2-1: config 0 descriptor?? [ 1266.557773][T13102] usb 1-1: can't set config #1, error -71 [ 1266.587365][T22327] ip6gretap0: entered promiscuous mode [ 1266.603187][T13102] usb 1-1: USB disconnect, device number 58 [ 1266.616023][T22327] debugfs: 'hsr1' already exists in 'hsr' [ 1266.626061][T22327] Cannot create hsr debugfs directory [ 1266.638925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.638953][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1266.657246][T22327] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 1266.670221][T22327] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1267.004112][ T5904] plantronics 0003:047F:FFFF.0026: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1267.120717][ T6546] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1267.206829][ T5904] usb 2-1: USB disconnect, device number 47 [ 1267.280540][ T6546] usb 1-1: Using ep0 maxpacket: 16 [ 1267.292804][ T6546] usb 1-1: config 1 has an invalid descriptor of length 155, skipping remainder of the config [ 1267.317540][ T6546] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1267.332138][ T6546] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1267.341773][ T6546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.350418][ T6546] usb 1-1: Product: syz [ 1267.354803][ T6546] usb 1-1: Manufacturer: syz [ 1267.360527][ T6546] usb 1-1: SerialNumber: syz [ 1267.528820][ T5904] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 1267.773232][ T6546] usb 1-1: 0:2 : does not exist [ 1267.861373][ T6546] usb 1-1: USB disconnect, device number 59 [ 1268.449707][ T5904] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1268.632771][ T5904] usb 2-1: config 0 has no interfaces? [ 1268.646123][ T5904] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1268.680960][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.702030][ T5904] usb 2-1: config 0 descriptor?? [ 1269.176581][T13102] usb 2-1: USB disconnect, device number 49 [ 1269.915652][T22379] fuse: Unknown parameter 'grou00000000000000000000' [ 1270.258988][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 1270.259013][ T30] audit: type=1326 audit(1764593376.461:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1270.296880][ T30] audit: type=1326 audit(1764593376.501:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1270.366955][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.875120][ T30] audit: type=1326 audit(1764593376.501:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1270.947906][ T30] audit: type=1326 audit(1764593376.501:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1271.046565][T22389] netdevsim netdevsim1: Direct firmware load for . [ 1271.046565][T22389] failed with error -2 [ 1271.079653][T22389] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1271.079653][T22389] [ 1271.156432][ T30] audit: type=1326 audit(1764593376.501:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1271.297055][ T30] audit: type=1326 audit(1764593376.501:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1271.434814][ T30] audit: type=1326 audit(1764593376.501:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1271.457964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.477937][ T30] audit: type=1326 audit(1764593376.501:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1271.502570][ T30] audit: type=1326 audit(1764593376.501:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1271.539563][ T30] audit: type=1326 audit(1764593376.501:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22381 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1271.964161][T22409] openvswitch: netlink: IP tunnel dst address not specified [ 1272.478916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.883613][T22408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4549'. [ 1273.403303][T22425] FAULT_INJECTION: forcing a failure. [ 1273.403303][T22425] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.479181][T22425] CPU: 1 UID: 0 PID: 22425 Comm: syz.1.4553 Not tainted syzkaller #0 PREEMPT(full) [ 1273.479227][T22425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1273.479249][T22425] Call Trace: [ 1273.479259][T22425] [ 1273.479272][T22425] dump_stack_lvl+0x189/0x250 [ 1273.479316][T22425] ? __pfx____ratelimit+0x10/0x10 [ 1273.479351][T22425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1273.479384][T22425] ? __pfx__printk+0x10/0x10 [ 1273.479418][T22425] ? __pfx___might_resched+0x10/0x10 [ 1273.479451][T22425] should_fail_ex+0x414/0x560 [ 1273.479496][T22425] should_failslab+0xa8/0x100 [ 1273.479525][T22425] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1273.479561][T22425] ? ovs_flow_alloc+0x103/0x1f0 [ 1273.479588][T22425] ? ovs_flow_alloc+0x24/0x1f0 [ 1273.479635][T22425] ovs_flow_alloc+0x103/0x1f0 [ 1273.479668][T22425] ovs_flow_cmd_new+0x1ee/0xd80 [ 1273.479714][T22425] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1273.479811][T22425] ? rcu_is_watching+0x15/0xb0 [ 1273.479845][T22425] ? __nla_parse+0x40/0x60 [ 1273.479876][T22425] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1273.479921][T22425] genl_family_rcv_msg_doit+0x215/0x300 [ 1273.479963][T22425] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1273.480011][T22425] ? bpf_lsm_capable+0x9/0x20 [ 1273.480047][T22425] ? security_capable+0x7e/0x2e0 [ 1273.480088][T22425] genl_rcv_msg+0x60e/0x790 [ 1273.480128][T22425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1273.480158][T22425] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1273.480211][T22425] netlink_rcv_skb+0x208/0x470 [ 1273.480232][T22425] ? __lock_acquire+0xab9/0xd20 [ 1273.480256][T22425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1273.480296][T22425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1273.480344][T22425] ? down_read+0x1ad/0x2e0 [ 1273.480372][T22425] genl_rcv+0x28/0x40 [ 1273.480398][T22425] netlink_unicast+0x82f/0x9e0 [ 1273.480444][T22425] ? __pfx_netlink_unicast+0x10/0x10 [ 1273.480484][T22425] ? netlink_sendmsg+0x642/0xb30 [ 1273.480506][T22425] ? skb_put+0x11b/0x210 [ 1273.480535][T22425] netlink_sendmsg+0x805/0xb30 [ 1273.480572][T22425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1273.480602][T22425] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1273.480641][T22425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1273.480663][T22425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1273.480690][T22425] __sock_sendmsg+0x21c/0x270 [ 1273.480726][T22425] ____sys_sendmsg+0x505/0x830 [ 1273.480761][T22425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1273.480800][T22425] ? import_iovec+0x74/0xa0 [ 1273.480836][T22425] ___sys_sendmsg+0x21f/0x2a0 [ 1273.480866][T22425] ? __pfx____sys_sendmsg+0x10/0x10 [ 1273.480937][T22425] ? __fget_files+0x2a/0x420 [ 1273.480958][T22425] ? __fget_files+0x3a0/0x420 [ 1273.480994][T22425] __x64_sys_sendmsg+0x19b/0x260 [ 1273.481031][T22425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1273.481071][T22425] ? __pfx_ksys_write+0x10/0x10 [ 1273.481109][T22425] ? do_syscall_64+0xbe/0xfa0 [ 1273.481149][T22425] do_syscall_64+0xfa/0xfa0 [ 1273.481182][T22425] ? lockdep_hardirqs_on+0x9c/0x150 [ 1273.481217][T22425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.481241][T22425] ? clear_bhb_loop+0x60/0xb0 [ 1273.481270][T22425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.481294][T22425] RIP: 0033:0x7f4797b8f749 [ 1273.481317][T22425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.481338][T22425] RSP: 002b:00007f4798ae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.481364][T22425] RAX: ffffffffffffffda RBX: 00007f4797de5fa0 RCX: 00007f4797b8f749 [ 1273.481382][T22425] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 1273.481398][T22425] RBP: 00007f4798ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.481413][T22425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.481428][T22425] R13: 00007f4797de6038 R14: 00007f4797de5fa0 R15: 00007f4797f0fa28 [ 1273.481467][T22425] [ 1274.168965][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1274.431015][T13102] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1274.619433][T13102] usb 1-1: Using ep0 maxpacket: 32 [ 1274.630829][T13102] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1274.642298][T13102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.662140][T13102] usb 1-1: config 0 descriptor?? [ 1274.888248][T13102] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1274.911536][T22442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4558'. [ 1274.917589][T13102] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1274.937675][T13102] dib0700: firmware download failed at 7 with -22 [ 1276.104872][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.350678][T22450] FAULT_INJECTION: forcing a failure. [ 1276.350678][T22450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1276.410175][T22450] CPU: 1 UID: 0 PID: 22450 Comm: syz.3.4561 Not tainted syzkaller #0 PREEMPT(full) [ 1276.410210][T22450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1276.410226][T22450] Call Trace: [ 1276.410236][T22450] [ 1276.410247][T22450] dump_stack_lvl+0x189/0x250 [ 1276.410286][T22450] ? __pfx____ratelimit+0x10/0x10 [ 1276.410333][T22450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1276.410366][T22450] ? __pfx__printk+0x10/0x10 [ 1276.410391][T22450] ? __might_fault+0xb0/0x130 [ 1276.410439][T22450] should_fail_ex+0x414/0x560 [ 1276.410482][T22450] _copy_from_user+0x2d/0xb0 [ 1276.410515][T22450] ___sys_sendmsg+0x158/0x2a0 [ 1276.410546][T22450] ? __pfx____sys_sendmsg+0x10/0x10 [ 1276.410616][T22450] ? __fget_files+0x2a/0x420 [ 1276.410639][T22450] ? __fget_files+0x3a0/0x420 [ 1276.410675][T22450] __x64_sys_sendmsg+0x19b/0x260 [ 1276.410715][T22450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1276.410754][T22450] ? __pfx_ksys_write+0x10/0x10 [ 1276.410793][T22450] ? do_syscall_64+0xbe/0xfa0 [ 1276.410833][T22450] do_syscall_64+0xfa/0xfa0 [ 1276.410867][T22450] ? lockdep_hardirqs_on+0x9c/0x150 [ 1276.410903][T22450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.410927][T22450] ? clear_bhb_loop+0x60/0xb0 [ 1276.410955][T22450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.410978][T22450] RIP: 0033:0x7fc67d78f749 [ 1276.411000][T22450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1276.411021][T22450] RSP: 002b:00007fc67e585038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1276.411046][T22450] RAX: ffffffffffffffda RBX: 00007fc67d9e5fa0 RCX: 00007fc67d78f749 [ 1276.411065][T22450] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1276.411079][T22450] RBP: 00007fc67e585090 R08: 0000000000000000 R09: 0000000000000000 [ 1276.411094][T22450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1276.411107][T22450] R13: 00007fc67d9e6038 R14: 00007fc67d9e5fa0 R15: 00007fc67db0fa28 [ 1276.411142][T22450] [ 1276.413657][T22452] openvswitch: netlink: IP tunnel dst address not specified [ 1276.666615][T13102] usb 1-1: USB disconnect, device number 60 [ 1277.119117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.521509][ T6546] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1277.847203][ T6546] usb 1-1: Using ep0 maxpacket: 32 [ 1277.892123][ T6546] usb 1-1: config 9 has an invalid interface number: 37 but max is 0 [ 1277.902472][ T6546] usb 1-1: config 9 has no interface number 0 [ 1277.923472][ T6546] usb 1-1: config 9 interface 37 has no altsetting 0 [ 1277.979632][ T6546] usb 1-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1277.989545][ T6546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.998303][ T6546] usb 1-1: Product: х [ 1278.092888][ T6546] usb 1-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 1278.158906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.230035][ T6546] usb 1-1: SerialNumber: syz [ 1278.932744][T22485] fuse: Unknown parameter 'grou00000000000000000000' [ 1279.897797][T22472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4566'. [ 1281.419198][T13102] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1281.608774][T13102] usb 2-1: Using ep0 maxpacket: 32 [ 1281.655843][ T6546] gspca_main: spca506-2.14.0 probing 0734:043b [ 1281.682923][T13102] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1281.743136][T13102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.816158][T13102] usb 2-1: config 0 descriptor?? [ 1281.822675][T22506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.841304][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.899186][ T6546] usb 1-1: USB disconnect, device number 61 [ 1281.917494][T22505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.960504][T22506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.011448][T22505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.261580][T13102] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1282.406634][T22516] fuse: Unknown parameter 'grou00000000000000000000' [ 1282.561218][T13102] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1282.602315][T13102] dib0700: firmware download failed at 7 with -22 [ 1282.878900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.085304][T22522] openvswitch: netlink: IP tunnel dst address not specified [ 1283.190472][T22518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4575'. [ 1283.919083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.820712][T22539] all: renamed from bridge_slave_0 [ 1285.073009][ T6546] usb 2-1: USB disconnect, device number 50 [ 1286.018769][T13102] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1286.039336][ T6526] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1286.370059][T22558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.380081][T22558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.514697][ T6526] usb 2-1: Using ep0 maxpacket: 32 [ 1286.523477][T13102] usb 1-1: Using ep0 maxpacket: 32 [ 1286.545492][T13102] usb 1-1: config 9 has an invalid interface number: 37 but max is 0 [ 1286.557797][ T6526] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1286.568530][T13102] usb 1-1: config 9 has no interface number 0 [ 1286.575001][ T6526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.583390][T13102] usb 1-1: config 9 interface 37 has no altsetting 0 [ 1286.614672][T13102] usb 1-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1286.625523][T13102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.696033][ T6526] usb 2-1: config 0 descriptor?? [ 1286.808770][T13102] usb 1-1: Product: х [ 1286.818956][T13102] usb 1-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 1287.289480][ T6526] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1287.300970][T13102] usb 1-1: SerialNumber: syz [ 1287.466247][ T6526] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1287.486883][ T6526] dib0700: firmware download failed at 7 with -22 [ 1287.600145][T16451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.015309][T22564] tipc: Enabling of bearer rejected, failed to enable media [ 1288.262228][T22567] openvswitch: netlink: IP tunnel dst address not specified [ 1288.639061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.050418][ T6526] usb 2-1: USB disconnect, device number 51 [ 1289.518998][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1289.678929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.373040][T22589] qrtr: Invalid version 255 [ 1290.403286][T22588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.422422][T22588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.498540][T13102] gspca_main: spca506-2.14.0 probing 0734:043b [ 1291.521543][ T6526] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1291.683843][ T6526] usb 2-1: Using ep0 maxpacket: 32 [ 1291.685054][T22606] openvswitch: netlink: IP tunnel dst address not specified [ 1291.724498][ T6526] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1291.743909][T13102] usb 1-1: USB disconnect, device number 62 [ 1291.770018][ T6526] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1291.790923][ T6526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.831144][ T6526] usb 2-1: Product: syz [ 1291.847145][ T6526] usb 2-1: Manufacturer: syz [ 1291.864646][ T6526] usb 2-1: SerialNumber: syz [ 1291.891785][ T6526] usb 2-1: config 0 descriptor?? [ 1292.333933][ T6526] gs_usb 2-1:0.0: Configuring for 158 interfaces [ 1292.853865][T22614] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1293.360118][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.369057][ T6526] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 1293.381077][ T6526] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 1293.553639][T22621] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4606'. [ 1293.563503][T22621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4606'. [ 1293.634121][T22621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1293.961242][T22625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.970718][T22625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.238093][T22627] syzkaller0: entered promiscuous mode [ 1294.279112][T22627] syzkaller0: entered allmulticast mode [ 1294.346992][ T6526] usb 2-1: USB disconnect, device number 52 [ 1294.398905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.512727][T22631] syzkaller0: left promiscuous mode [ 1294.549012][T22631] syzkaller0: left allmulticast mode [ 1295.438868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.549165][ T5904] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1295.789539][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 1295.811707][ T5904] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 1295.820163][T22647] CIFS: VFS: Malformed UNC in devname [ 1295.820704][ T5904] usb 2-1: config 9 has no interface number 0 [ 1295.899224][ T5904] usb 2-1: config 9 interface 37 has no altsetting 0 [ 1295.982955][ T5904] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1295.992913][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.007554][ T5904] usb 2-1: Product: х [ 1296.011981][ T5904] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 1296.077779][ T5904] usb 2-1: SerialNumber: syz [ 1297.807416][T22669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.841959][T22669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.019613][T22673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4621'. [ 1298.118483][T22673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4621'. [ 1298.480717][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.808935][ T6546] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 1298.978935][ T6546] usb 1-1: device descriptor read/64, error -71 [ 1299.084310][T22681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.154417][ T5904] gspca_main: spca506-2.14.0 probing 0734:043b [ 1299.195146][T22681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.241298][ T6546] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 1299.400872][ T6546] usb 1-1: device descriptor read/64, error -71 [ 1299.457849][ T5904] usb 2-1: USB disconnect, device number 53 [ 1299.518996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.588474][ T6546] usb usb1-port1: attempt power cycle [ 1299.868750][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1299.868769][ T30] audit: type=1326 audit(1764593406.051:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1299.941155][ T30] audit: type=1326 audit(1764593406.051:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1299.999089][ T6546] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 1300.026242][ T30] audit: type=1326 audit(1764593406.051:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1300.085239][ T6546] usb 1-1: device descriptor read/8, error -71 [ 1300.102916][ T30] audit: type=1326 audit(1764593406.051:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1300.207506][ T30] audit: type=1326 audit(1764593406.071:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1300.334230][ T30] audit: type=1326 audit(1764593406.071:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1300.361388][ T6546] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 1300.407140][T18884] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1300.439396][ T30] audit: type=1326 audit(1764593406.071:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1300.469854][ T6546] usb 1-1: device descriptor read/8, error -71 [ 1300.506488][T18884] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1300.540766][ T30] audit: type=1326 audit(1764593406.071:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1300.558209][T18884] usb 4-1: USB disconnect, device number 34 [ 1300.572251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.589711][ T6546] usb usb1-port1: unable to enumerate USB device [ 1300.605129][ T30] audit: type=1326 audit(1764593406.071:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1300.631444][ T30] audit: type=1326 audit(1764593406.071:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22695 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4797b8f749 code=0x7ffc0000 [ 1301.379242][ T6546] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1301.409221][ T5904] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1301.548877][ T5904] usb 2-1: device descriptor read/64, error -71 [ 1301.559295][ T6546] usb 4-1: Using ep0 maxpacket: 32 [ 1301.584363][ T6546] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1301.595452][ T6546] usb 4-1: config 9 has no interface number 0 [ 1301.607190][ T6546] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1301.631802][ T6546] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1301.645033][ T6546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.654362][ T6546] usb 4-1: Product: х [ 1301.663636][ T6546] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 1301.739001][ T6546] usb 4-1: SerialNumber: syz [ 1301.789661][ T5904] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1301.929845][ T5904] usb 2-1: device descriptor read/64, error -71 [ 1302.049907][ T5904] usb usb2-port1: attempt power cycle [ 1302.418794][ T5904] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1302.495968][ T5904] usb 2-1: device descriptor read/8, error -71 [ 1302.739438][ T5904] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1302.760370][ T5904] usb 2-1: device descriptor read/8, error -71 [ 1302.801030][T22750] FAULT_INJECTION: forcing a failure. [ 1302.801030][T22750] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.814624][T22750] CPU: 1 UID: 0 PID: 22750 Comm: syz.4.4651 Not tainted syzkaller #0 PREEMPT(full) [ 1302.814655][T22750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1302.814671][T22750] Call Trace: [ 1302.814680][T22750] [ 1302.814690][T22750] dump_stack_lvl+0x189/0x250 [ 1302.814726][T22750] ? __pfx____ratelimit+0x10/0x10 [ 1302.814758][T22750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1302.814788][T22750] ? __pfx__printk+0x10/0x10 [ 1302.814815][T22750] ? __pfx___might_resched+0x10/0x10 [ 1302.814841][T22750] ? fs_reclaim_acquire+0x7d/0x100 [ 1302.814868][T22750] should_fail_ex+0x414/0x560 [ 1302.814908][T22750] should_failslab+0xa8/0x100 [ 1302.814934][T22750] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1302.814968][T22750] ? basic_change+0x2cd/0xd80 [ 1302.814999][T22750] ? __nla_parse+0x40/0x60 [ 1302.815028][T22750] basic_change+0x2cd/0xd80 [ 1302.815061][T22750] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1302.815110][T22750] ? __pfx_basic_change+0x10/0x10 [ 1302.815166][T22750] tc_new_tfilter+0xdca/0x15b0 [ 1302.815226][T22750] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1302.815291][T22750] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1302.815317][T22750] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1302.815350][T22750] ? __lock_acquire+0xab9/0xd20 [ 1302.815374][T22750] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1302.815409][T22750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1302.815460][T22750] netlink_rcv_skb+0x208/0x470 [ 1302.815480][T22750] ? __lock_acquire+0xab9/0xd20 [ 1302.815509][T22750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1302.815551][T22750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1302.815586][T22750] ? netlink_deliver_tap+0x2e/0x1b0 [ 1302.815618][T22750] netlink_unicast+0x82f/0x9e0 [ 1302.815659][T22750] ? __pfx_netlink_unicast+0x10/0x10 [ 1302.815696][T22750] ? netlink_sendmsg+0x642/0xb30 [ 1302.815723][T22750] ? skb_put+0x11b/0x210 [ 1302.815750][T22750] netlink_sendmsg+0x805/0xb30 [ 1302.815784][T22750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1302.815811][T22750] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1302.815847][T22750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1302.815869][T22750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1302.815892][T22750] __sock_sendmsg+0x21c/0x270 [ 1302.815927][T22750] ____sys_sendmsg+0x505/0x830 [ 1302.815959][T22750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1302.815994][T22750] ? import_iovec+0x74/0xa0 [ 1302.816026][T22750] ___sys_sendmsg+0x21f/0x2a0 [ 1302.816053][T22750] ? __pfx____sys_sendmsg+0x10/0x10 [ 1302.816120][T22750] ? __fget_files+0x2a/0x420 [ 1302.816140][T22750] ? __fget_files+0x3a0/0x420 [ 1302.816172][T22750] __x64_sys_sendmsg+0x19b/0x260 [ 1302.816200][T22750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1302.816238][T22750] ? __pfx_ksys_write+0x10/0x10 [ 1302.816274][T22750] ? do_syscall_64+0xbe/0xfa0 [ 1302.816310][T22750] do_syscall_64+0xfa/0xfa0 [ 1302.816340][T22750] ? lockdep_hardirqs_on+0x9c/0x150 [ 1302.816370][T22750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.816393][T22750] ? clear_bhb_loop+0x60/0xb0 [ 1302.816418][T22750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.816439][T22750] RIP: 0033:0x7fd69418f749 [ 1302.816459][T22750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1302.816478][T22750] RSP: 002b:00007fd6950c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1302.816508][T22750] RAX: ffffffffffffffda RBX: 00007fd6943e5fa0 RCX: 00007fd69418f749 [ 1302.816525][T22750] RDX: 0000000004000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 1302.816541][T22750] RBP: 00007fd6950c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.816554][T22750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1302.816567][T22750] R13: 00007fd6943e6038 R14: 00007fd6943e5fa0 R15: 00007fd69450fa28 [ 1302.816603][T22750] [ 1303.228359][ T5904] usb usb2-port1: unable to enumerate USB device [ 1304.252270][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.622376][ T6546] gspca_main: spca506-2.14.0 probing 0734:043b [ 1304.928852][ T6546] usb 4-1: USB disconnect, device number 35 [ 1305.279438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.540976][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.548035][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.318944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.730543][T22793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1306.869031][ T5904] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 1307.072319][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1307.072373][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.072544][ T5904] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 1307.072570][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.075793][ T5904] usb 1-1: config 0 descriptor?? [ 1307.360640][T22805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.360986][T22805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.496842][T22792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.497259][T22792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.523103][ T5904] glorious 0003:258A:0036.0027: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.0-1/input0 [ 1307.705394][T18884] usb 1-1: USB disconnect, device number 67 [ 1307.940203][T22808] fido_id[22808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1308.131974][T22814] tipc: Enabling of bearer rejected, failed to enable media [ 1309.079214][ T6526] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1309.241048][ T6526] usb 2-1: Using ep0 maxpacket: 32 [ 1309.251655][ T6526] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1309.266596][ T6526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.302555][ T6526] usb 2-1: config 0 descriptor?? [ 1309.514618][T22838] fuse: Unknown parameter 'grou00000000000000000000' [ 1310.000837][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.020832][ T6526] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1310.076640][ T6526] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1310.375210][ T6526] dib0700: firmware download failed at 7 with -22 [ 1310.706998][T22844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.756548][T22843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.811694][T22844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.852899][T22843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.039203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.079049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.435363][ T6526] usb 2-1: USB disconnect, device number 58 [ 1312.880904][T22875] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4685'. [ 1312.972389][T22876] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4685'. [ 1313.695288][T22884] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4688'. [ 1313.738832][T22884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4688'. [ 1313.750928][T22885] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4689'. [ 1313.773952][T22884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4688'. [ 1314.858770][T18884] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1315.042510][T18884] usb 4-1: Using ep0 maxpacket: 32 [ 1315.246258][T18884] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1315.255411][T18884] usb 4-1: config 9 has no interface number 0 [ 1315.272428][T18884] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1315.312922][T18884] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1315.328833][T18884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.342154][T18884] usb 4-1: Product: х [ 1315.347271][T18884] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 1315.494392][T18884] usb 4-1: SerialNumber: syz [ 1315.769873][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.798946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.153839][T22919] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1317.839471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.828217][T18884] gspca_main: spca506-2.14.0 probing 0734:043b [ 1319.272291][T18884] usb 4-1: USB disconnect, device number 36 [ 1320.879778][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1321.004430][T22968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.015773][T22968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.042686][T22970] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1321.114529][T22971] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1321.529689][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.568860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.808034][T22995] random: crng reseeded on system resumption [ 1323.599269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.267650][T23008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.318446][T23008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.329342][T23004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1325.553555][T23015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.562881][T23015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.288426][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.223786][T18884] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1328.318830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.393093][T18884] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xED, changing to 0x8D [ 1328.428005][T18884] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x8D has invalid maxpacket 52921, setting to 64 [ 1328.538449][T18884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1328.556699][T18884] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1328.567702][T18884] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1328.582485][T18884] usb 4-1: Product: syz [ 1328.596773][T18884] usb 4-1: Manufacturer: syz [ 1328.611233][T18884] usb 4-1: SerialNumber: syz [ 1328.634614][T18884] usb 4-1: config 0 descriptor?? [ 1328.685636][T18884] usb 4-1: selecting invalid altsetting 0 [ 1328.919224][T18884] usb 4-1: USB disconnect, device number 37 [ 1329.226086][T23054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4735'. [ 1329.358999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.374283][T23054] 8021q: adding VLAN 0 to HW filter on device team1 [ 1329.560301][T23058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4736'. [ 1332.329437][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.505841][T23094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.559230][T23094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.998818][ T5904] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1333.158772][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 1333.174966][ T5904] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1333.197272][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.229364][ T5904] usb 1-1: config 0 descriptor?? [ 1333.358882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.486693][ T5904] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1333.499367][ T5904] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1333.510635][ T5904] dib0700: firmware download failed at 7 with -22 [ 1333.674701][T18884] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1333.849353][T18884] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1333.863308][T18884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.931323][T18884] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1333.965477][T18884] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1333.993604][T18884] usb 2-1: Manufacturer: syz [ 1334.017733][T18884] usb 2-1: config 0 descriptor?? [ 1334.169423][T18884] rc_core: IR keymap rc-hauppauge not found [ 1334.176750][T18884] Registered IR keymap rc-empty [ 1334.193243][T18884] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1334.379066][T18884] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input86 [ 1334.399022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.519151][ T5904] usb 2-1: USB disconnect, device number 59 [ 1335.621874][T23138] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4757'. [ 1336.468544][ T6526] usb 1-1: USB disconnect, device number 68 [ 1336.580625][T23148] fuse: Unknown parameter 'fd1zӉػ' [ 1337.157643][ T6546] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1337.339187][ T6546] usb 2-1: Using ep0 maxpacket: 32 [ 1337.408250][ T6546] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 1337.442962][ T6546] usb 2-1: config 9 has no interface number 0 [ 1337.450560][ T6546] usb 2-1: config 9 interface 37 has no altsetting 0 [ 1337.467491][ T6546] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1337.478704][ T6546] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.487597][ T6546] usb 2-1: Product: х [ 1337.503556][ T6546] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 1337.518888][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1337.518918][ T30] audit: type=1326 audit(1764593443.711:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d78f749 code=0x7ffc0000 [ 1337.530371][T16451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.632902][ T6546] usb 2-1: SerialNumber: syz [ 1337.642151][ T30] audit: type=1326 audit(1764593443.711:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d78f749 code=0x7ffc0000 [ 1337.735807][ T30] audit: type=1326 audit(1764593443.781:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc67d78f749 code=0x7ffc0000 [ 1337.792986][ T30] audit: type=1326 audit(1764593443.781:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d78f749 code=0x7ffc0000 [ 1337.818731][ C0] vkms_vblank_simulate: vblank timer overrun [ 1337.847794][ T30] audit: type=1326 audit(1764593443.781:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d78f749 code=0x7ffc0000 [ 1338.005004][ T30] audit: type=1326 audit(1764593443.781:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc67d78f749 code=0x7ffc0000 [ 1338.045223][ T30] audit: type=1326 audit(1764593443.781:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d78f749 code=0x7ffc0000 [ 1338.071103][ T30] audit: type=1326 audit(1764593443.791:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc67d78f749 code=0x7ffc0000 [ 1338.097172][ T30] audit: type=1326 audit(1764593443.791:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67d78f749 code=0x7ffc0000 [ 1338.243248][ T30] audit: type=1326 audit(1764593443.791:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23156 comm="syz.3.4763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc67d78f749 code=0x7ffc0000 [ 1338.558918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.598882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.719072][ T6546] gspca_main: spca506-2.14.0 probing 0734:043b [ 1339.744260][T23176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1339.909994][ T6546] usb 2-1: USB disconnect, device number 60 [ 1340.201317][T23167] netlink: 'syz.4.4766': attribute type 4 has an invalid length. [ 1340.951690][T23198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1341.228204][T23203] syzkaller0: entered promiscuous mode [ 1341.238534][T23203] syzkaller0: entered allmulticast mode [ 1341.448830][ T6546] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1341.608947][ T6546] usb 2-1: Using ep0 maxpacket: 8 [ 1341.642713][ T6546] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1341.668730][ T6546] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.718749][ T6546] usb 2-1: Product: syz [ 1341.723376][ T6546] usb 2-1: Manufacturer: syz [ 1341.743934][ T6546] usb 2-1: SerialNumber: syz [ 1341.814821][ T6546] usb 2-1: config 0 descriptor?? [ 1341.833777][ T6546] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 1341.855174][ T6546] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input88 [ 1341.899350][T23225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.913891][T23225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.079615][T13102] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1342.332716][T23228] veth1_to_bond: entered allmulticast mode [ 1342.872999][T23219] veth1_to_bond: left allmulticast mode [ 1343.095223][T13102] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 1343.107739][T13102] usb 1-1: config 0 has no interface number 0 [ 1343.159055][T13102] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1343.201030][T13102] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1343.245481][T13102] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1343.276352][T13102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.289353][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.392918][T13102] usb 1-1: Product: syz [ 1343.415922][T13102] usb 1-1: Manufacturer: syz [ 1343.433978][T13102] usb 1-1: SerialNumber: syz [ 1343.473760][T13102] usb 1-1: config 0 descriptor?? [ 1343.525502][T23222] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1343.561943][T13102] ums-sddr09 1-1:0.20: USB Mass Storage device detected [ 1343.642292][T13102] ums-sddr09 1-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 1343.772807][T13102] usb 1-1: USB disconnect, device number 69 [ 1343.984063][T13102] usb 2-1: USB disconnect, device number 61 [ 1344.318910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.028813][ T6546] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1345.193920][ T6546] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1345.342352][ T6546] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1345.358929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.419056][ T6546] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1345.432499][T23263] fuse: Unknown parameter 'default_perm' [ 1345.509410][ T6546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.594927][T23257] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1345.615382][ T6546] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1346.584825][T23273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1347.904256][T13102] usb 4-1: USB disconnect, device number 38 [ 1348.437109][T23279] pimreg: entered allmulticast mode [ 1349.104870][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.142582][T23278] pimreg: left allmulticast mode [ 1349.203089][T23293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4799'. [ 1349.917217][T23295] batadv_slave_0: entered promiscuous mode [ 1349.934581][T23294] batadv_slave_0: left promiscuous mode [ 1350.159087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.199065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.355737][T23330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.366490][T23330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.110024][T18884] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1353.272973][T18884] usb 4-1: Using ep0 maxpacket: 32 [ 1353.305305][T18884] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1353.319016][T18884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.343130][T18884] usb 4-1: config 0 descriptor?? [ 1353.692256][T18884] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1353.715168][T18884] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1353.735152][T18884] dib0700: firmware download failed at 7 with -22 [ 1354.799244][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.838891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.885648][T23373] FAULT_INJECTION: forcing a failure. [ 1355.885648][T23373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.948845][T23373] CPU: 1 UID: 0 PID: 23373 Comm: syz.0.4823 Not tainted syzkaller #0 PREEMPT(full) [ 1355.948879][T23373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1355.948894][T23373] Call Trace: [ 1355.948904][T23373] [ 1355.948915][T23373] dump_stack_lvl+0x189/0x250 [ 1355.948950][T23373] ? __pfx____ratelimit+0x10/0x10 [ 1355.948983][T23373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1355.949014][T23373] ? __pfx__printk+0x10/0x10 [ 1355.949038][T23373] ? __might_fault+0xb0/0x130 [ 1355.949084][T23373] should_fail_ex+0x414/0x560 [ 1355.949125][T23373] _copy_from_user+0x2d/0xb0 [ 1355.949210][T23373] video_usercopy+0x346/0x1450 [ 1355.949250][T23373] ? __pfx___video_do_ioctl+0x10/0x10 [ 1355.949278][T23373] ? __pfx_video_usercopy+0x10/0x10 [ 1355.949324][T23373] ? __fget_files+0x3a0/0x420 [ 1355.949350][T23373] v4l2_ioctl+0x18d/0x1e0 [ 1355.949378][T23373] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1355.949403][T23373] __se_sys_ioctl+0xfc/0x170 [ 1355.949437][T23373] do_syscall_64+0xfa/0xfa0 [ 1355.949469][T23373] ? lockdep_hardirqs_on+0x9c/0x150 [ 1355.949503][T23373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.949527][T23373] ? clear_bhb_loop+0x60/0xb0 [ 1355.949555][T23373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.949577][T23373] RIP: 0033:0x7fc8c558f749 [ 1355.949599][T23373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1355.949619][T23373] RSP: 002b:00007fc8c64dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.949644][T23373] RAX: ffffffffffffffda RBX: 00007fc8c57e5fa0 RCX: 00007fc8c558f749 [ 1355.949662][T23373] RDX: 0000200000000040 RSI: 0000000040345632 RDI: 0000000000000003 [ 1355.949677][T23373] RBP: 00007fc8c64dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.949692][T23373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.949706][T23373] R13: 00007fc8c57e6038 R14: 00007fc8c57e5fa0 R15: 00007fc8c590fa28 [ 1355.949744][T23373] [ 1356.751971][T23382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1356.878874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.029664][ T6546] usb 4-1: USB disconnect, device number 39 [ 1357.593018][T23404] fuse: Unknown parameter 'default_perm' [ 1359.149519][T23421] fuse: Unknown parameter '000000000000000000030x0000000000000008' [ 1360.560074][T16451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.598944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.639188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.463325][T23444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4842'. [ 1363.898905][ T6546] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1364.051896][ T6546] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.067818][ T6546] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1364.121432][ T6546] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1364.189294][ T6546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.599053][T18884] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1365.157747][ T6546] usb 4-1: config 0 descriptor?? [ 1365.642203][T23458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1365.689762][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.851776][T18884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1365.862642][T18884] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1365.873688][T18884] usb 1-1: can't read configurations, error -71 [ 1365.924628][T23461] openvswitch: netlink: IP tunnel dst address not specified [ 1366.716627][T23483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4853'. [ 1366.725965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.965026][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.971981][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.707922][T23483] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1367.758881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.773626][ T6546] usb 4-1: USB disconnect, device number 40 [ 1367.807436][T23486] macvlan0: entered promiscuous mode [ 1367.850530][T23486] macvlan0: entered allmulticast mode [ 1367.979069][T23486] bond4: (slave macvlan0): Error -22 calling dev_set_mtu [ 1368.086415][T23488] xt_socket: unknown flags 0xc [ 1368.339514][T23493] syz_tun: entered allmulticast mode [ 1368.371235][T23492] syz_tun: left allmulticast mode [ 1368.614275][T23499] all: renamed from bridge_slave_0 [ 1368.882143][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.859100][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1369.859122][ T30] audit: type=1326 audit(1764593476.071:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23529 comm="syz.2.4866" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac0978f749 code=0x0 [ 1369.919121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.768752][ T5904] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1370.804361][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4864'. [ 1370.958865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.024778][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 1371.323700][ T5904] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1371.366977][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.409073][ T5904] usb 2-1: config 0 descriptor?? [ 1371.463691][T23550] xt_CT: No such helper "snmp_trap" [ 1371.655544][ T5904] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1371.667186][ T5904] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1371.676176][ T5904] dib0700: firmware download failed at 7 with -22 [ 1372.080769][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.500226][T23562] hub 9-0:1.0: USB hub found [ 1372.519021][T23562] hub 9-0:1.0: 1 port detected [ 1372.775312][T23562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4873'. [ 1372.834331][T23562] erspan0: entered promiscuous mode [ 1372.998861][T18884] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1373.118927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.150930][T18884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.161724][T18884] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1373.177871][T18884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1373.187797][T18884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.196246][T18884] usb 1-1: Product: syz [ 1373.200800][T18884] usb 1-1: Manufacturer: syz [ 1373.205692][T18884] usb 1-1: SerialNumber: syz [ 1373.393428][T23574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.404587][T23574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.420004][T23572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.431841][T23572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.445732][T18884] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1373.463745][T18884] usb 1-1: USB disconnect, device number 72 [ 1373.898714][T18884] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 1374.076561][T18884] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 1374.107528][T18884] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.133229][T13102] usb 2-1: USB disconnect, device number 62 [ 1374.158826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.228880][T18884] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1374.259074][T18884] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 1374.276849][T18884] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 39696, setting to 64 [ 1374.297950][T18884] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1374.325235][T18884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.345398][T23572] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1374.558274][T23572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.579040][T23591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.579561][T23572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.609033][T23591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.630593][T18884] usb 1-1: usb_control_msg returned -71 [ 1374.649340][T18884] usbtmc 1-1:16.0: can't read capabilities [ 1374.759484][T18884] usb 1-1: USB disconnect, device number 73 [ 1375.219981][T23607] loop2: detected capacity change from 0 to 7 [ 1375.233971][T23607] Dev loop2: unable to read RDB block 7 [ 1375.245592][T23607] loop2: AHDI p1 p2 p3 [ 1375.251612][T23607] loop2: partition table partially beyond EOD, truncated [ 1375.260425][T23607] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1375.268801][T23607] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1375.387539][T23607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1375.439477][T23607] fuse: Unknown parameter 'default_permissions ' [ 1376.416583][ T30] audit: type=1326 audit(1764593482.601:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23573 comm="syz.4.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd69418f749 code=0x7fc00000 [ 1376.502011][T23617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.537633][T23617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.611611][T23617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.637797][T23617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.871757][T23598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4884'. [ 1377.201827][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.713648][T23627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4890'. [ 1377.723130][T23627] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4890'. [ 1378.238858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.614212][T23641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.649265][T23641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.278890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.710190][T23662] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1382.229001][T18884] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1382.411376][T18884] usb 2-1: no configurations [ 1382.416565][T18884] usb 2-1: can't read configurations, error -22 [ 1382.550879][T18884] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1382.709987][T18884] usb 2-1: no configurations [ 1382.716532][T18884] usb 2-1: can't read configurations, error -22 [ 1382.742150][T18884] usb usb2-port1: attempt power cycle [ 1382.965800][ T1089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.099940][T18884] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1383.189077][T18884] usb 2-1: no configurations [ 1383.193815][T18884] usb 2-1: can't read configurations, error -22 [ 1383.339233][T18884] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1383.370589][T18884] usb 2-1: no configurations [ 1383.434602][T18884] usb 2-1: can't read configurations, error -22 [ 1383.457165][T18884] usb usb2-port1: unable to enumerate USB device [ 1383.508509][T18884] IPVS: starting estimator thread 0... [ 1383.661695][T23702] IPVS: using max 26 ests per chain, 62400 per kthread [ 1383.998909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.060064][T23715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4913'. [ 1384.092131][T23715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4913'. [ 1384.138133][ T5904] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1384.311093][ T5904] usb 1-1: config 0 has no interfaces? [ 1384.351572][ T5904] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1384.388906][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.411753][ T5904] usb 1-1: Product: syz [ 1384.416180][ T5904] usb 1-1: Manufacturer: syz [ 1384.493107][ T5904] usb 1-1: SerialNumber: syz [ 1384.519509][ T5904] usb 1-1: config 0 descriptor?? [ 1384.803744][T23706] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 1385.038992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.388727][ T5904] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1385.400962][T18884] usb 1-1: USB disconnect, device number 74 [ 1385.538847][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 1385.546114][ T5904] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1385.557637][ T5904] usb 2-1: config 0 has no interface number 0 [ 1385.569746][ T5904] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1385.594964][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.604023][ T5904] usb 2-1: Product: syz [ 1385.626584][ T5904] usb 2-1: Manufacturer: syz [ 1385.632177][ T5904] usb 2-1: SerialNumber: syz [ 1385.645414][ T5904] usb 2-1: config 0 descriptor?? [ 1385.656813][ T5904] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1385.705346][ T5904] usb 2-1: selecting invalid altsetting 1 [ 1385.721460][ T5904] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1385.805353][ T5904] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1385.977531][ T5904] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1385.986471][ T5904] usb 2-1: media controller created [ 1386.533456][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1386.711781][ T5904] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1386.754758][ T5904] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1387.030166][ T5904] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1387.438848][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1387.510094][ T5904] usb 2-1: USB disconnect, device number 67 [ 1388.052155][T23787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4932'. [ 1389.551052][T16451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.385101][T23801] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1390.558999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.739010][ T5904] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1390.903740][ T5904] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1390.916824][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.932517][ T5904] usb 1-1: Product: syz [ 1390.936845][ T5904] usb 1-1: Manufacturer: syz [ 1390.942340][ T5904] usb 1-1: SerialNumber: syz [ 1390.951437][ T5904] usb 1-1: config 0 descriptor?? [ 1390.962132][ T5904] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1391.161226][T23803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.211070][T23803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.296330][ T5904] sonixb 1-1:0.0: Error reading register 00: -71 [ 1391.352389][ T5904] usb 1-1: USB disconnect, device number 75 [ 1391.396306][T23817] fuse: Bad value for 'fd' [ 1391.599007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.728752][T23825] netlink: 'syz.3.4942': attribute type 1 has an invalid length. [ 1392.026565][T23825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1392.038774][ T5904] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1392.532383][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 1392.563636][ T5904] usb 2-1: config 9 has an invalid interface number: 37 but max is 0 [ 1392.596636][ T5904] usb 2-1: config 9 has no interface number 0 [ 1392.629109][ T5904] usb 2-1: config 9 interface 37 has no altsetting 0 [ 1392.729881][ T5904] usb 2-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1392.764368][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.777931][T13929] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1392.928888][ T5904] usb 2-1: Product: х [ 1392.969643][T13929] usb 1-1: Using ep0 maxpacket: 32 [ 1392.978262][ T5904] usb 2-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 1393.044480][T13929] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1393.067390][T13929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.086495][ T5904] usb 2-1: SerialNumber: syz [ 1393.093384][T13929] usb 1-1: config 0 descriptor?? [ 1393.122132][T23841] syzkaller1: entered promiscuous mode [ 1393.169365][T23841] syzkaller1: entered allmulticast mode [ 1393.485327][T13929] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1393.532421][T13929] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1393.601571][T13929] dib0700: firmware download failed at 7 with -22 [ 1393.639084][T18884] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1393.796062][T18884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1393.803111][T18884] usb 4-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b [ 1393.812734][T18884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.824780][T18884] usb 4-1: config 0 descriptor?? [ 1393.985096][T18884] usb 4-1: selecting invalid altsetting 0 [ 1394.015281][T18884] usb 4-1: can't set first interface for hiFace device. [ 1394.031080][T18884] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1394.640840][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.849994][T23848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.865568][T23848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.881841][T18884] usb 4-1: USB disconnect, device number 41 [ 1395.456930][T13929] usb 1-1: USB disconnect, device number 76 [ 1395.679012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.938791][T18884] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1395.973686][ T5904] gspca_main: spca506-2.14.0 probing 0734:043b [ 1395.994688][T23869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4954'. [ 1396.114044][T18884] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1396.130502][T18884] usb 4-1: can't read configurations, error -61 [ 1396.287689][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4954'. [ 1396.309434][T18884] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1396.317926][ T5904] usb 2-1: USB disconnect, device number 68 [ 1396.582222][T18884] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1396.596081][T23886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.609529][T23886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.634612][T18884] usb 4-1: can't read configurations, error -61 [ 1396.718996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.786173][T18884] usb usb4-port1: attempt power cycle [ 1396.986674][T23890] input: syz1 as /devices/virtual/input/input89 [ 1397.179341][T18884] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1397.212812][T18884] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1397.221242][T18884] usb 4-1: can't read configurations, error -61 [ 1397.357227][T23892] tipc: Enabling of bearer rejected, failed to enable media [ 1397.369322][T18884] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1397.425189][T18884] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1397.448254][T18884] usb 4-1: can't read configurations, error -61 [ 1397.471201][T18884] usb usb4-port1: unable to enumerate USB device [ 1399.761182][T16451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.900350][ T5904] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1400.089162][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 1400.127883][ T5904] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1400.256056][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.678461][ T5904] usb 4-1: config 0 descriptor?? [ 1400.798880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.560743][ T5904] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1401.572430][ T5904] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1401.582843][ T5904] dib0700: firmware download failed at 7 with -22 [ 1401.838912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.933178][T23939] binder: BINDER_SET_CONTEXT_MGR already set [ 1401.941921][T23939] binder: 23938:23939 ioctl 4018620d 200000004a80 returned -16 [ 1402.238762][ T5904] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1402.438819][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 1402.460405][ T5904] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1402.478161][ T5904] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1402.506406][ T5904] usb 1-1: config 1 has no interface number 1 [ 1402.527089][ T5904] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1402.556888][ T5904] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1402.568200][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.581053][ T5904] usb 1-1: Product: syz [ 1402.587621][ T5904] usb 1-1: Manufacturer: syz [ 1402.598213][ T5904] usb 1-1: SerialNumber: syz [ 1402.893498][T23950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.908161][T23950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.058804][T23950] support for the xor transformation has been removed. [ 1403.099171][T13102] usb 4-1: USB disconnect, device number 46 [ 1403.416993][T23955] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4978'. [ 1404.558797][T18884] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1404.729009][T18884] usb 2-1: Using ep0 maxpacket: 32 [ 1404.752204][T18884] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1404.752238][T18884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.753200][T18884] usb 2-1: Product: syz [ 1404.753258][T18884] usb 2-1: Manufacturer: syz [ 1404.753292][T18884] usb 2-1: SerialNumber: syz [ 1404.775908][T18884] usb 2-1: config 0 descriptor?? [ 1404.808053][T18884] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1404.814314][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.680300][T23973] geneve3: entered allmulticast mode [ 1405.838826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.158288][T23978] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4984'. [ 1406.601346][ T5199] Dev loop6: unable to read RDB block 1 [ 1406.608202][ T5199] loop6: unable to read partition table [ 1406.616569][ T5199] loop6: partition table beyond EOD, truncated [ 1406.664599][ T5904] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1406.737078][ T5904] usb 1-1: 2:1 : sample bitwidth 65 in over sample bytes 0 [ 1406.775609][ T5904] usb 1-1: 2:1 : unsupported sample bitwidth 65 in 0 bytes [ 1406.850086][ T5904] usb 1-1: USB disconnect, device number 77 [ 1406.878868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.896354][T23959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.928528][T23959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1407.067880][T18884] gspca_stk1135: reg_w 0x200 err -71 [ 1407.088303][T18884] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.107587][T18884] gspca_stk1135: Sensor write failed [ 1407.139474][T18884] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.152827][T18884] gspca_stk1135: Sensor write failed [ 1407.159794][T18884] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.173253][T18884] gspca_stk1135: Sensor read failed [ 1407.181229][T18884] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.203880][T18884] gspca_stk1135: Sensor read failed [ 1407.223933][T18884] gspca_stk1135: Detected sensor type unknown (0x0) [ 1407.235237][T18884] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.245967][T18884] gspca_stk1135: Sensor read failed [ 1407.252631][T18884] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.262547][T18884] gspca_stk1135: Sensor read failed [ 1407.273123][T18884] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.282767][T18884] gspca_stk1135: Sensor write failed [ 1407.290491][T18884] gspca_stk1135: serial bus timeout: status=0x00 [ 1407.297062][T18884] gspca_stk1135: Sensor write failed [ 1407.302644][T18884] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1407.314040][T18884] usb 2-1: USB disconnect, device number 69 [ 1407.328697][ T5904] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 1407.469478][ T5904] usb 1-1: device descriptor read/64, error -71 [ 1407.756945][ T5904] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 1407.874731][T24001] pim6reg: entered allmulticast mode [ 1408.041225][ T5904] usb 1-1: device descriptor read/64, error -71 [ 1408.159701][ T5904] usb usb1-port1: attempt power cycle [ 1408.217323][T24010] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4995'. [ 1408.518764][ T5904] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 1408.541407][ T5904] usb 1-1: device descriptor read/8, error -71 [ 1408.778757][ T5904] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 1408.799604][ T5904] usb 1-1: device descriptor read/8, error -71 [ 1408.909036][ T5904] usb usb1-port1: unable to enumerate USB device [ 1409.502396][T24030] geneve3: entered allmulticast mode [ 1410.285418][T24045] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1410.320686][T24045] FAULT_INJECTION: forcing a failure. [ 1410.320686][T24045] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.344448][T24045] CPU: 1 UID: 0 PID: 24045 Comm: syz.1.5002 Not tainted syzkaller #0 PREEMPT(full) [ 1410.344478][T24045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1410.344493][T24045] Call Trace: [ 1410.344502][T24045] [ 1410.344512][T24045] dump_stack_lvl+0x189/0x250 [ 1410.344548][T24045] ? __pfx____ratelimit+0x10/0x10 [ 1410.344578][T24045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1410.344608][T24045] ? __pfx__printk+0x10/0x10 [ 1410.344636][T24045] ? __pfx___might_resched+0x10/0x10 [ 1410.344665][T24045] should_fail_ex+0x414/0x560 [ 1410.344704][T24045] should_failslab+0xa8/0x100 [ 1410.344729][T24045] __kmalloc_noprof+0xcb/0x7f0 [ 1410.344759][T24045] ? kfree+0x4d/0x6d0 [ 1410.344784][T24045] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1410.344826][T24045] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1410.344862][T24045] ? tomoyo_domain+0xd9/0x130 [ 1410.344889][T24045] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1410.344917][T24045] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1410.344947][T24045] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1410.345016][T24045] ? __fget_files+0x2a/0x420 [ 1410.345042][T24045] ? __fget_files+0x3a0/0x420 [ 1410.345060][T24045] ? __fget_files+0x2a/0x420 [ 1410.345084][T24045] security_file_ioctl+0xcb/0x2d0 [ 1410.345113][T24045] __se_sys_ioctl+0x47/0x170 [ 1410.345153][T24045] do_syscall_64+0xfa/0xfa0 [ 1410.345183][T24045] ? lockdep_hardirqs_on+0x9c/0x150 [ 1410.345214][T24045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.345235][T24045] ? clear_bhb_loop+0x60/0xb0 [ 1410.345261][T24045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.345282][T24045] RIP: 0033:0x7f4797b8f749 [ 1410.345302][T24045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.345320][T24045] RSP: 002b:00007f4798ac5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.345344][T24045] RAX: ffffffffffffffda RBX: 00007f4797de6090 RCX: 00007f4797b8f749 [ 1410.345359][T24045] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1410.345372][T24045] RBP: 00007f4798ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.345386][T24045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.345399][T24045] R13: 00007f4797de6128 R14: 00007f4797de6090 R15: 00007f4797f0fa28 [ 1410.345433][T24045] [ 1410.345443][T24045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1410.480503][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.299429][T24063] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1411.385428][ T30] audit: type=1326 audit(1764593517.591:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24059 comm="syz.0.5007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8c558f749 code=0x0 [ 1411.444205][T24067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5008'. [ 1411.518825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.849229][T24076] input: syz0 as /devices/virtual/input/input90 [ 1412.284324][T24083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5012'. [ 1412.293831][T24083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5012'. [ 1412.558933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.681958][T24092] syzkaller0: left promiscuous mode [ 1412.689431][T24092] syzkaller0: left allmulticast mode [ 1413.549336][T24110] netlink: 'syz.3.5020': attribute type 4 has an invalid length. [ 1414.809790][ T5904] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1414.969748][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 1414.987569][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.008786][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.029069][ T5904] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1415.048763][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.101791][ T5904] usb 2-1: config 0 descriptor?? [ 1415.168807][T18884] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1415.316794][ T5904] usbhid 2-1:0.0: can't add hid device: -71 [ 1415.356033][T18884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1415.365825][T18884] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 1415.375610][T18884] usb 1-1: config 6 has no interface number 0 [ 1415.382865][T18884] usb 1-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1415.470016][T18884] usb 1-1: config 6 interface 200 has no altsetting 0 [ 1415.529776][ T5904] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1415.548030][ T5904] usb 2-1: USB disconnect, device number 70 [ 1415.615841][T18884] usb 1-1: string descriptor 0 read error: -22 [ 1415.622753][T18884] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1415.643693][T18884] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 1415.743063][T18884] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1415.940520][T18884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1415.997628][T18884] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1416.128049][T18884] usb 1-1: media controller created [ 1416.170851][T18884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1416.240361][ T1089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.250181][T24118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.263728][T24118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.398855][ T5904] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1416.416139][T18884] dvb-usb: bulk message failed: -71 (6/0) [ 1416.429210][T18884] dvb-usb: bulk message failed: -71 (6/0) [ 1416.435154][T18884] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1416.462419][T18884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input91 [ 1416.525761][T18884] dvb-usb: schedule remote query interval to 150 msecs. [ 1416.537387][T18884] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1416.561125][ T5904] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.572164][T18884] usb 1-1: USB disconnect, device number 82 [ 1416.597297][ T5904] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.607948][ T5904] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1416.627814][ T5904] usb 2-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 1416.687456][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.739657][ T5904] usb 2-1: config 0 descriptor?? [ 1416.771147][T18884] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1416.909188][T24139] tipc: Started in network mode [ 1416.914216][T24139] tipc: Node identity ac14140f, cluster identity 4711 [ 1416.924297][T24139] tipc: New replicast peer: 255.255.255.255 [ 1416.940068][T24139] tipc: Enabled bearer , priority 10 [ 1417.092325][ T5904] usbhid 2-1:0.0: can't add hid device: -71 [ 1417.151166][ T5904] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1417.200538][ T5904] usb 2-1: USB disconnect, device number 71 [ 1417.278862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.351841][T24148] FAULT_INJECTION: forcing a failure. [ 1417.351841][T24148] name failslab, interval 1, probability 0, space 0, times 0 [ 1417.379204][T24148] CPU: 1 UID: 0 PID: 24148 Comm: syz.0.5034 Not tainted syzkaller #0 PREEMPT(full) [ 1417.379227][T24148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1417.379238][T24148] Call Trace: [ 1417.379249][T24148] [ 1417.379259][T24148] dump_stack_lvl+0x189/0x250 [ 1417.379293][T24148] ? __pfx____ratelimit+0x10/0x10 [ 1417.379324][T24148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1417.379353][T24148] ? __pfx__printk+0x10/0x10 [ 1417.379389][T24148] should_fail_ex+0x414/0x560 [ 1417.379428][T24148] should_failslab+0xa8/0x100 [ 1417.379454][T24148] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1417.379484][T24148] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1417.379524][T24148] ? sctp_add_bind_addr+0x8c/0x370 [ 1417.379553][T24148] ? sctp_add_bind_addr+0xb0/0x370 [ 1417.379589][T24148] sctp_add_bind_addr+0x8c/0x370 [ 1417.379625][T24148] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1417.379660][T24148] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1417.379691][T24148] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1417.379729][T24148] ? sctp_v6_is_any+0x64/0x80 [ 1417.379765][T24148] ? sctp_copy_one_addr+0x93/0x360 [ 1417.379791][T24148] sctp_bind_addr_copy+0xb3/0x3c0 [ 1417.379815][T24148] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1417.379837][T24148] sctp_connect_new_asoc+0x2e0/0x690 [ 1417.379857][T24148] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1417.379871][T24148] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1417.379901][T24148] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1417.379926][T24148] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1417.379957][T24148] sctp_sendmsg+0x155c/0x2810 [ 1417.379992][T24148] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1417.380017][T24148] ? aa_sk_perm+0x81e/0x950 [ 1417.380053][T24148] ? __pfx_aa_sk_perm+0x10/0x10 [ 1417.380089][T24148] ? sock_rps_record_flow+0x19/0x410 [ 1417.380114][T24148] ? inet_sendmsg+0x2f4/0x370 [ 1417.380140][T24148] __sock_sendmsg+0x19c/0x270 [ 1417.380174][T24148] __sys_sendto+0x3bd/0x520 [ 1417.380198][T24148] ? __pfx___sys_sendto+0x10/0x10 [ 1417.380218][T24148] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1417.380253][T24148] ? __fget_files+0x3a0/0x420 [ 1417.380276][T24148] ? ksys_write+0x22a/0x250 [ 1417.380300][T24148] ? __pfx_ksys_write+0x10/0x10 [ 1417.380325][T24148] __x64_sys_sendto+0xde/0x100 [ 1417.380343][T24148] do_syscall_64+0xfa/0xfa0 [ 1417.380365][T24148] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.380386][T24148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.380402][T24148] ? clear_bhb_loop+0x60/0xb0 [ 1417.380421][T24148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.380435][T24148] RIP: 0033:0x7fc8c558f749 [ 1417.380450][T24148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1417.380463][T24148] RSP: 002b:00007fc8c64dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1417.380480][T24148] RAX: ffffffffffffffda RBX: 00007fc8c57e5fa0 RCX: 00007fc8c558f749 [ 1417.380492][T24148] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000004 [ 1417.380509][T24148] RBP: 00007fc8c64dd090 R08: 000020000005ffe4 R09: 000000000000001c [ 1417.380519][T24148] R10: 000000000000c061 R11: 0000000000000246 R12: 0000000000000002 [ 1417.380530][T24148] R13: 00007fc8c57e6038 R14: 00007fc8c57e5fa0 R15: 00007fc8c590fa28 [ 1417.380568][T24148] [ 1418.009346][ T5904] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1418.023295][T18884] tipc: Node number set to 2886997007 [ 1418.192781][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1418.208220][ T5904] usb 2-1: can't read configurations, error -61 [ 1418.318862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.363945][ T30] audit: type=1326 audit(1764593524.571:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0978f749 code=0x7ffc0000 [ 1418.393806][ T30] audit: type=1326 audit(1764593524.591:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fac0978f749 code=0x7ffc0000 [ 1418.428789][ T5904] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1418.568820][T18884] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1418.640175][ T30] audit: type=1326 audit(1764593524.601:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0978f749 code=0x7ffc0000 [ 1418.735466][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1418.749299][T18884] usb 4-1: Using ep0 maxpacket: 32 [ 1418.762967][T18884] usb 4-1: config 9 has an invalid interface number: 37 but max is 0 [ 1418.768780][ T5904] usb 2-1: can't read configurations, error -61 [ 1418.771612][T18884] usb 4-1: config 9 has no interface number 0 [ 1418.799711][T13102] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1418.812813][ T5904] usb usb2-port1: attempt power cycle [ 1418.813087][T18884] usb 4-1: config 9 interface 37 has no altsetting 0 [ 1418.826341][ T30] audit: type=1326 audit(1764593524.601:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fac0978f749 code=0x7ffc0000 [ 1418.918183][T18884] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=d8.00 [ 1418.928255][T18884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.940093][T18884] usb 4-1: Product: х [ 1418.959264][T13102] usb 1-1: Using ep0 maxpacket: 32 [ 1418.967143][T18884] usb 4-1: Manufacturer: 틙䎞읖䅓丯椇࿄齶诉횷騃䘰핱謄ﶨ费䁅翐缳఻쑉齮梓ଟ純鏠搜䷤⾣夂叇쯴塀댱쑀䫷錶ﯽ錔腮䪖떜怸ᾭ桔䅹闢렐聒몙텞ᒢȉ或篣턄湊诌귇 [ 1419.000169][T13102] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1419.019125][T13102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.028292][ T30] audit: type=1326 audit(1764593524.601:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0978f749 code=0x7ffc0000 [ 1419.067463][T13102] usb 1-1: config 0 descriptor?? [ 1419.077803][T18884] usb 4-1: SerialNumber: syz [ 1419.188740][ T5904] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1419.249548][ T30] audit: type=1326 audit(1764593524.601:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fac0978f749 code=0x7ffc0000 [ 1419.250758][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1419.280951][ T30] audit: type=1326 audit(1764593524.601:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0978f749 code=0x7ffc0000 [ 1419.328197][T13102] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1419.343241][T13102] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1419.363411][T13102] dib0700: firmware download failed at 7 with -22 [ 1419.394357][ T30] audit: type=1326 audit(1764593524.601:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fac0978f749 code=0x7ffc0000 [ 1419.417301][ T5904] usb 2-1: can't read configurations, error -61 [ 1419.418080][ T30] audit: type=1326 audit(1764593524.601:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0978f749 code=0x7ffc0000 [ 1419.449151][ T30] audit: type=1326 audit(1764593524.601:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24167 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fac0978f749 code=0x7ffc0000 [ 1419.568691][ T5904] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1419.639753][ T5904] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1419.655197][T24176] binder: 24175:24176 ioctl 7a6 200000000140 returned -22 [ 1419.662902][ T5904] usb 2-1: can't read configurations, error -61 [ 1419.681213][ T5904] usb usb2-port1: unable to enumerate USB device [ 1421.079072][T24187] fuse: Invalid rootmode [ 1421.999945][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.049912][T18884] gspca_main: spca506-2.14.0 probing 0734:043b [ 1422.275476][T18884] usb 4-1: USB disconnect, device number 47 [ 1422.456453][ T5904] usb 1-1: USB disconnect, device number 83 [ 1423.038903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.895028][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5053'. [ 1424.078958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.165604][T18884] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1424.318683][T18884] usb 2-1: Using ep0 maxpacket: 16 [ 1424.401241][T18884] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1424.410551][T18884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.419302][T18884] usb 2-1: Product: syz [ 1424.423572][T18884] usb 2-1: Manufacturer: syz [ 1424.438449][T18884] usb 2-1: SerialNumber: syz [ 1424.483481][T18884] usb 2-1: config 0 descriptor?? [ 1424.499006][T18884] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 1424.716714][T18884] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 1424.716883][T18884] visor 2-1:0.0: probe with driver visor failed with error -5 [ 1425.148714][ T5904] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1425.308847][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 1425.326465][ T5904] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1425.336500][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.356345][ T5904] usb 4-1: config 0 descriptor?? [ 1425.577126][ T5904] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1425.623272][ T5904] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1425.663529][ T5904] dib0700: firmware download failed at 7 with -22 [ 1426.079120][T16451] wlan0: Trigger new scan to find an IBSS to join [ 1426.181081][ T5199] Dev loop6: unable to read RDB block 1 [ 1426.186948][ T5199] loop6: unable to read partition table [ 1426.203912][ T5199] loop6: partition table beyond EOD, truncated [ 1426.257598][T24246] netlink: 'syz.0.5062': attribute type 4 has an invalid length. [ 1426.274296][T24248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.288434][T24248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.315856][T24248] fuse: Bad value for 'rootmode' [ 1427.062988][T18884] usb 2-1: USB disconnect, device number 76 [ 1427.119979][T16451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.733636][T24262] vlan2: entered allmulticast mode [ 1427.739186][T24262] bridge0: port 3(vlan2) entered blocking state [ 1427.745509][T24262] bridge0: port 3(vlan2) entered disabled state [ 1427.767545][T24262] vlan2: entered promiscuous mode [ 1427.771242][ T5904] usb 4-1: USB disconnect, device number 48 [ 1428.158923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.209546][ T5904] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1428.336873][T24274] netlink: 'syz.4.5075': attribute type 4 has an invalid length. [ 1428.379748][ T5904] usb 4-1: device descriptor read/64, error -71 [ 1428.405710][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.412692][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.574524][T24278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.589665][T24278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.679123][ T5904] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1428.818821][ T5904] usb 4-1: device descriptor read/64, error -71 [ 1428.842866][T24285] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1428.929130][ T5904] usb usb4-port1: attempt power cycle [ 1429.199079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.295908][ T5904] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1429.445662][ T5904] usb 4-1: device descriptor read/8, error -71 [ 1429.699927][ T5904] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1429.709250][T18884] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1429.758863][ T5904] usb 4-1: device descriptor read/8, error -71 [ 1429.876477][ T5904] usb usb4-port1: unable to enumerate USB device [ 1430.059414][T18884] usb 1-1: Using ep0 maxpacket: 32 [ 1430.096319][T18884] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1430.137502][T18884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.158898][T13102] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1430.220598][T18884] usb 1-1: config 0 descriptor?? [ 1430.348991][T13102] usb 2-1: Using ep0 maxpacket: 16 [ 1430.356596][T13102] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.371699][T13102] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1430.405517][T13102] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 1430.448292][T18884] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1430.458391][T13102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.477668][T18884] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1430.514228][T13102] usb 2-1: Product: syz [ 1430.521058][T13102] usb 2-1: Manufacturer: syz [ 1430.527390][T18884] dib0700: firmware download failed at 7 with -22 [ 1430.536802][T13102] usb 2-1: SerialNumber: syz [ 1430.546015][T24307] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5087'. [ 1430.601841][T13102] usb 2-1: config 0 descriptor?? [ 1430.607515][T24307] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5087'. [ 1430.837759][T24301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.854550][T24301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.912619][T13102] usb 2-1: USB disconnect, device number 77 [ 1431.215637][T24315] binder: 24310:24315 ioctl c0306201 2000000001c0 returned -14 [ 1432.348914][T13102] usb 1-1: USB disconnect, device number 84 [ 1432.884988][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.030404][T24350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5100'. [ 1433.859324][T24368] FAULT_INJECTION: forcing a failure. [ 1433.859324][T24368] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.907009][T24368] CPU: 1 UID: 0 PID: 24368 Comm: syz.2.5104 Not tainted syzkaller #0 PREEMPT(full) [ 1433.907041][T24368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1433.907056][T24368] Call Trace: [ 1433.907065][T24368] [ 1433.907075][T24368] dump_stack_lvl+0x189/0x250 [ 1433.907117][T24368] ? __pfx____ratelimit+0x10/0x10 [ 1433.907147][T24368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1433.907177][T24368] ? __pfx__printk+0x10/0x10 [ 1433.907199][T24368] ? __pfx___might_resched+0x10/0x10 [ 1433.907215][T24368] ? fs_reclaim_acquire+0x7d/0x100 [ 1433.907234][T24368] should_fail_ex+0x414/0x560 [ 1433.907262][T24368] should_failslab+0xa8/0x100 [ 1433.907281][T24368] __kmalloc_noprof+0xcb/0x7f0 [ 1433.907302][T24368] ? tomoyo_encode+0x28b/0x550 [ 1433.907331][T24368] tomoyo_encode+0x28b/0x550 [ 1433.907361][T24368] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1433.907394][T24368] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1433.907414][T24368] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1433.907437][T24368] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1433.907486][T24368] ? __fget_files+0x2a/0x420 [ 1433.907505][T24368] ? __fget_files+0x3a0/0x420 [ 1433.907519][T24368] ? __fget_files+0x2a/0x420 [ 1433.907536][T24368] security_file_ioctl+0xcb/0x2d0 [ 1433.907557][T24368] __se_sys_ioctl+0x47/0x170 [ 1433.907580][T24368] do_syscall_64+0xfa/0xfa0 [ 1433.907602][T24368] ? lockdep_hardirqs_on+0x9c/0x150 [ 1433.907625][T24368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.907641][T24368] ? clear_bhb_loop+0x60/0xb0 [ 1433.907660][T24368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.907675][T24368] RIP: 0033:0x7fac0978f749 [ 1433.907690][T24368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1433.907704][T24368] RSP: 002b:00007fac0a680038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.907721][T24368] RAX: ffffffffffffffda RBX: 00007fac099e6090 RCX: 00007fac0978f749 [ 1433.907733][T24368] RDX: 0000200000000740 RSI: 0000000000005402 RDI: 0000000000000003 [ 1433.907744][T24368] RBP: 00007fac0a680090 R08: 0000000000000000 R09: 0000000000000000 [ 1433.907754][T24368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1433.907763][T24368] R13: 00007fac099e6128 R14: 00007fac099e6090 R15: 00007fac09b0fa28 [ 1433.907788][T24368] [ 1433.907806][T24368] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1433.918923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.191797][T24372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.210038][T24372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.769002][ T5904] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1434.958896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.035008][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 1435.052802][ T5904] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1435.084290][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.165954][ T5904] usb 1-1: config 0 descriptor?? [ 1435.180571][T24388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.282048][T18884] IPVS: starting estimator thread 0... [ 1435.326402][T24388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.421011][T24393] IPVS: using max 35 ests per chain, 84000 per kthread [ 1435.462695][ T5904] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1435.512409][ T5904] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1435.621413][ T5904] dib0700: firmware download failed at 7 with -22 [ 1436.139084][T18884] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1436.291576][T18884] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1436.301277][T18884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.328700][T18884] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1436.338205][T18884] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1436.356792][T18884] usb 4-1: Product: syz [ 1436.369524][T18884] usb 4-1: Manufacturer: syz [ 1436.382254][T18884] usb 4-1: SerialNumber: syz [ 1436.415955][T18884] usb 4-1: config 0 descriptor?? [ 1436.432266][T18884] hub 4-1:0.0: bad descriptor, ignoring hub [ 1436.442558][T18884] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1436.702173][T18884] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1436.786133][ T6341] udevd[6341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1437.579759][T18884] usb 4-1: reset high-speed USB device number 53 using dummy_hcd [ 1437.761081][T18884] usb 4-1: device firmware changed [ 1437.801527][T18884] usb 4-1: USB disconnect, device number 53 [ 1437.909038][ T5904] usb 1-1: USB disconnect, device number 85 [ 1438.138962][T18884] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1438.335054][T18884] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.384111][T18884] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1438.433086][T18884] usb 4-1: New USB device found, idVendor=f6ef, idProduct=4be2, bcdDevice= f.16 [ 1438.557157][T18884] usb 4-1: New USB device strings: Mfr=194, Product=209, SerialNumber=40 [ 1438.604556][T18884] usb 4-1: Product: syz [ 1438.640249][T16451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.729975][T18884] usb 4-1: Manufacturer: syz [ 1438.763128][T18884] usb 4-1: SerialNumber: syz [ 1438.930442][T18884] usb 4-1: can't set config #1, error -71 [ 1438.977416][T18884] usb 4-1: USB disconnect, device number 54 [ 1439.225677][T24425] io-wq is not configured for unbound workers [ 1439.267178][T13929] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1439.678837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.687269][T13929] usb 2-1: Using ep0 maxpacket: 32 [ 1439.697517][T13929] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1439.706921][T13929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.754691][T13929] usb 2-1: config 0 descriptor?? [ 1440.032768][T13929] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1440.059293][T13929] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1440.085244][T13929] dib0700: firmware download failed at 7 with -22 [ 1440.718803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.732592][T24437] netlink: 'syz.2.5124': attribute type 63 has an invalid length. [ 1440.741037][T24437] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5124'. [ 1440.781318][T24437] gretap0: entered allmulticast mode [ 1440.861622][T24437] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1441.242350][T24443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5126'. [ 1441.761330][T13102] usb 2-1: USB disconnect, device number 78 [ 1442.199026][T13102] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1442.368946][T13102] usb 2-1: Using ep0 maxpacket: 8 [ 1442.392765][T13102] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 1442.404902][T13102] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.435720][T13102] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1442.468851][T13102] usb 2-1: config 0 has no interface number 0 [ 1442.475030][T13102] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1442.526549][T13102] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1442.558208][T13102] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 1442.607730][T13102] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1442.627176][T24477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.661328][T13102] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1442.671877][T13102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.685754][T24477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.708014][T13102] usb 2-1: Product: syz [ 1442.720396][T13102] usb 2-1: Manufacturer: syz [ 1442.732866][T13102] usb 2-1: SerialNumber: syz [ 1442.732923][T24477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.763724][T13102] usb 2-1: config 0 descriptor?? [ 1442.783122][T24477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.790316][T24465] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1442.809733][T13102] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1443.183355][T24490] input input92: cannot allocate more than FF_MAX_EFFECTS effects [ 1443.956527][T24500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5139'. [ 1444.037262][T24500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1444.124052][T24502] macvlan3: entered promiscuous mode [ 1444.152960][T24502] macvlan3: entered allmulticast mode [ 1444.185295][T24502] bond2: (slave macvlan3): Error -22 calling dev_set_mtu [ 1444.409949][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.956331][T13102] usb 2-1: USB disconnect, device number 79 [ 1445.194571][T24520] netlink: 'syz.3.5143': attribute type 2 has an invalid length. [ 1445.438848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.808032][T24532] all: renamed from bridge_slave_0 [ 1446.160400][T24538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.184028][T24538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.478792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.523800][ T5904] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1447.688746][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 1447.721000][ T5904] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.758719][ T5904] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.853327][ T5904] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1447.991743][ T5904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1448.106574][ T5904] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1448.137883][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.179176][ T5904] usb 1-1: config 0 descriptor?? [ 1448.681731][T24550] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1449.211344][T24570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.222631][T24570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.527845][T16451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.049597][ T5904] usbhid 1-1:0.0: can't add hid device: -71 [ 1450.068839][ T5904] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1450.167586][ T5904] usb 1-1: USB disconnect, device number 86 [ 1450.548068][T24584] syzkaller0: entered promiscuous mode [ 1450.558829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.667107][T24584] syzkaller0: entered allmulticast mode [ 1451.598813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.652986][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1452.653007][ T30] audit: type=1326 audit(1764593558.851:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24603 comm="syz.0.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c558f749 code=0x7ffc0000 [ 1453.028808][ T30] audit: type=1326 audit(1764593558.851:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24603 comm="syz.0.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c558f749 code=0x7ffc0000 [ 1453.120463][ T30] audit: type=1326 audit(1764593558.851:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24603 comm="syz.0.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8c558f749 code=0x7ffc0000 [ 1453.234679][ T30] audit: type=1326 audit(1764593558.861:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24603 comm="syz.0.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c558f749 code=0x7ffc0000 [ 1453.258716][ T30] audit: type=1326 audit(1764593558.861:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24603 comm="syz.0.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c558f749 code=0x7ffc0000 [ 1453.292234][ T30] audit: type=1326 audit(1764593558.861:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24603 comm="syz.0.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8c558f749 code=0x7ffc0000 [ 1453.316494][ T30] audit: type=1326 audit(1764593559.001:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24603 comm="syz.0.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c558f749 code=0x7ffc0000 [ 1453.343966][ T30] audit: type=1326 audit(1764593559.001:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24603 comm="syz.0.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c558f749 code=0x7ffc0000 [ 1453.689357][T24602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5165'. [ 1454.170781][T24627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5172'. [ 1454.599862][T24633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.629293][T24633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.692783][T24633] netlink: 'syz.4.5174': attribute type 1 has an invalid length. [ 1454.736802][T24633] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1454.757870][T24635] bond4: (slave geneve4): making interface the new active one [ 1454.769357][T24635] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 1454.779875][ T1105] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1454.791217][ T1105] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1454.801669][ T1105] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1454.812027][ T1105] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1454.990133][T24633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.047961][T24633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.279039][T13102] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1455.289026][ T1089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.427464][T24649] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.5179'. [ 1455.428771][T13102] usb 4-1: Using ep0 maxpacket: 16 [ 1455.513124][T13102] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1455.525831][T13102] usb 4-1: config 0 has no interface number 0 [ 1455.554370][T13102] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1455.638834][T13102] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1455.659045][T13102] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1455.685760][T13102] usb 4-1: Product: syz [ 1455.700359][T13102] usb 4-1: SerialNumber: syz [ 1455.715981][T13102] usb 4-1: config 0 descriptor?? [ 1455.727333][T13102] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 1455.738772][T24651] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1455.816433][T13102] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input93 [ 1456.318825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.511308][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1456.518443][ C1] ------------[ cut here ]------------ [ 1456.518713][ T5904] usb 4-1: USB disconnect, device number 55 [ 1456.524828][ C1] URB ffff88804f22c700 submitted while active [ 1456.525904][ C1] WARNING: CPU: 1 PID: 0 at drivers/usb/core/urb.c:380 usb_submit_urb+0xf8c/0x18b0 [ 1456.546408][ C1] Modules linked in: [ 1456.551060][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1456.560033][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1456.570221][ C1] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 1456.575990][ C1] Code: 00 00 00 e8 a6 b6 cc fa e9 25 f1 ff ff e8 9c b6 cc fa c6 05 8b c4 73 08 01 90 48 c7 c7 80 18 11 8c 48 89 de e8 85 d2 8f fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 76 b6 cc fa c6 05 07 fd 89 08 01 41 [ 1456.595835][ C1] RSP: 0018:ffffc90000a08878 EFLAGS: 00010046 [ 1456.602138][ C1] RAX: 82b898a76ab7cb00 RBX: ffff88804f22c700 RCX: 0000000000040000 [ 1456.610428][ C1] RDX: ffffc900023a2000 RSI: 0000000000002f2d RDI: 0000000000002f2e [ 1456.619191][ C1] RBP: 000000000000000f R08: ffff8880b8924293 R09: 1ffff11017124852 [ 1456.627309][ C1] R10: dffffc0000000000 R11: ffffed1017124853 R12: 0000000000000820 [ 1456.635480][ C1] R13: ffff888021769030 R14: ffff88804f22c708 R15: dffffc0000000000 [ 1456.643765][ C1] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 1456.653394][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1456.660096][ C1] CR2: 00002000000b1030 CR3: 000000002659e000 CR4: 00000000003526f0 [ 1456.668201][ C1] Call Trace: [ 1456.671503][ C1] [ 1456.674369][ C1] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1456.679944][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1456.685956][ C1] ? kcov_remote_start+0x97/0x7f0 [ 1456.691198][ C1] cm109_urb_irq_callback+0x709/0xca0 [ 1456.696683][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 1456.702093][ C1] dummy_timer+0x85f/0x44c0 [ 1456.706653][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1456.712152][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1456.717192][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1456.722170][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1456.727139][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1456.732357][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 1456.738392][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1456.744417][ C1] ? read_tsc+0x9/0x20 [ 1456.748525][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1456.754395][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1456.759535][ C1] handle_softirqs+0x286/0x870 [ 1456.764331][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1456.769122][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1456.774552][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1456.779899][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1456.784524][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1456.789759][ C1] irq_exit_rcu+0x9/0x30 [ 1456.794133][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1456.799806][ C1] [ 1456.802834][ C1] [ 1456.805774][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1456.811778][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1456.817528][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 81 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1456.837507][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1456.843808][ C1] RAX: 82b898a76ab7cb00 RBX: ffffffff81967b47 RCX: 82b898a76ab7cb00 [ 1456.852170][ C1] RDX: 0000000000000001 RSI: ffffffff8d70f556 RDI: ffffffff8bbf0960 [ 1456.860430][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1456.868424][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cf770 [ 1456.876509][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 1456.884514][ C1] ? do_idle+0x1e7/0x510 [ 1456.888806][ C1] default_idle+0x13/0x20 [ 1456.893171][ C1] default_idle_call+0x73/0xb0 [ 1456.897995][ C1] do_idle+0x1e7/0x510 [ 1456.902108][ C1] ? __pfx_do_idle+0x10/0x10 [ 1456.906841][ C1] cpu_startup_entry+0x44/0x60 [ 1456.911720][ C1] start_secondary+0x101/0x110 [ 1456.916535][ C1] common_startup_64+0x13e/0x147 [ 1456.921525][ C1] [ 1456.924558][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1456.931844][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1456.940785][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1456.951063][ C1] Call Trace: [ 1456.954370][ C1] [ 1456.957232][ C1] dump_stack_lvl+0x99/0x250 [ 1456.961850][ C1] ? __asan_memcpy+0x40/0x70 [ 1456.966560][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1456.971780][ C1] ? __pfx__printk+0x10/0x10 [ 1456.976498][ C1] vpanic+0x237/0x6d0 [ 1456.980615][ C1] ? __pfx_vpanic+0x10/0x10 [ 1456.985150][ C1] panic+0xb9/0xc0 [ 1456.988907][ C1] ? __pfx_panic+0x10/0x10 [ 1456.993458][ C1] __warn+0x31b/0x4b0 [ 1456.997480][ C1] ? usb_submit_urb+0xf8c/0x18b0 [ 1457.002484][ C1] ? usb_submit_urb+0xf8c/0x18b0 [ 1457.007562][ C1] report_bug+0x2be/0x4f0 [ 1457.012016][ C1] ? usb_submit_urb+0xf8c/0x18b0 [ 1457.017070][ C1] ? usb_submit_urb+0xf8c/0x18b0 [ 1457.022128][ C1] ? usb_submit_urb+0xf8e/0x18b0 [ 1457.027198][ C1] handle_bug+0x84/0x160 [ 1457.031550][ C1] exc_invalid_op+0x1a/0x50 [ 1457.036165][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1457.041053][ C1] RIP: 0010:usb_submit_urb+0xf8c/0x18b0 [ 1457.046623][ C1] Code: 00 00 00 e8 a6 b6 cc fa e9 25 f1 ff ff e8 9c b6 cc fa c6 05 8b c4 73 08 01 90 48 c7 c7 80 18 11 8c 48 89 de e8 85 d2 8f fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 76 b6 cc fa c6 05 07 fd 89 08 01 41 [ 1457.066263][ C1] RSP: 0018:ffffc90000a08878 EFLAGS: 00010046 [ 1457.072367][ C1] RAX: 82b898a76ab7cb00 RBX: ffff88804f22c700 RCX: 0000000000040000 [ 1457.080384][ C1] RDX: ffffc900023a2000 RSI: 0000000000002f2d RDI: 0000000000002f2e [ 1457.088379][ C1] RBP: 000000000000000f R08: ffff8880b8924293 R09: 1ffff11017124852 [ 1457.096382][ C1] R10: dffffc0000000000 R11: ffffed1017124853 R12: 0000000000000820 [ 1457.104390][ C1] R13: ffff888021769030 R14: ffff88804f22c708 R15: dffffc0000000000 [ 1457.112392][ C1] ? usb_submit_urb+0xf8b/0x18b0 [ 1457.117455][ C1] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1457.122866][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1457.129057][ C1] ? kcov_remote_start+0x97/0x7f0 [ 1457.134142][ C1] cm109_urb_irq_callback+0x709/0xca0 [ 1457.139542][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 1457.144965][ C1] dummy_timer+0x85f/0x44c0 [ 1457.149517][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1457.154925][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1457.159937][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1457.164896][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1457.169860][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1457.175112][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 1457.181162][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1457.186947][ C1] ? read_tsc+0x9/0x20 [ 1457.191106][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1457.197039][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1457.202181][ C1] handle_softirqs+0x286/0x870 [ 1457.206961][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1457.211765][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1457.217086][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1457.222409][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1457.227136][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1457.232365][ C1] irq_exit_rcu+0x9/0x30 [ 1457.236625][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1457.242334][ C1] [ 1457.245293][ C1] [ 1457.248243][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1457.254247][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1457.260008][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 81 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1457.279632][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1457.285724][ C1] RAX: 82b898a76ab7cb00 RBX: ffffffff81967b47 RCX: 82b898a76ab7cb00 [ 1457.293884][ C1] RDX: 0000000000000001 RSI: ffffffff8d70f556 RDI: ffffffff8bbf0960 [ 1457.301983][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1457.310003][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cf770 [ 1457.318082][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 1457.326211][ C1] ? do_idle+0x1e7/0x510 [ 1457.330495][ C1] default_idle+0x13/0x20 [ 1457.334945][ C1] default_idle_call+0x73/0xb0 [ 1457.339913][ C1] do_idle+0x1e7/0x510 [ 1457.344466][ C1] ? __pfx_do_idle+0x10/0x10 [ 1457.349096][ C1] cpu_startup_entry+0x44/0x60 [ 1457.353870][ C1] start_secondary+0x101/0x110 [ 1457.358823][ C1] common_startup_64+0x13e/0x147 [ 1457.363877][ C1] [ 1457.367301][ C1] Kernel Offset: disabled [ 1457.371641][ C1] Rebooting in 86400 seconds..