last executing test programs: 11.538573425s ago: executing program 0 (id=870): socket$kcm(0x10, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="06e151563520d21413ea7ca130d584add473716d1143c80fdc324d795ad615f9d5a6a4af627c62ca263deb0895e2d030b63b407593887c65e31870453870057d2ffe9c43b9931fb0690101cd7e290a757312f92f9b788a0d9c0709d5c9d869c331ccc413bb05215dee35b2b2cffcc2dba74a47909dbfefb9e474c02521bf5241ddb90e44e1575e0741e102f60763e8cd856e2feb9f5adc3e", 0x98}, {&(0x7f0000000440)="4d21ef834ee3cf2f488f444f817cb0abb8080c2edcf593ad705ecb2ecb1ff01aab924ea0442b9035e05f1986bd1a2d913dbf4684edd94326c422cca4c57d7547a1e175ee4e", 0x45}, {&(0x7f0000000700)="9d65ea1b9e8a29ee9156cf479df48adcaa8a18cd0eabf1e8ac05a1c34646e7b1113179fe63b92cff4b822f255af4649090d9eb4c456e4b48b1569b3d5e148ac9a497266bff67d3a4f444567703618a5fae26f4639cb0e370cc34411c0a7a1f64f6b92f3cce910dd8b64e05358c9554030f3f9499c522a7125bac5a14cdeab665814e82b459214cceb9f296445fae7ea6a5d6c9634def551b7a880ad3af0ae82e41e3eb992b47945990ff7160dc3c7f56fbc7bd0fd56d7a4f27f57c398819d6863d739ad74689e24b9566747eec42087ac4b02701609e092653c6ac43b3c18bbe29038a14e1df6d472f858f67", 0xec}, {&(0x7f0000000800)="3c8a661107e28f1e7c9b10ae7a4588bc91a53b18a61c2655b889614e105b3e6bbe9a8c09592e3f3e1b1ad66cf82481cfb9da9e2ecd0a0a59a7af6b7ca25f8064365eaf63366ad8e9fa059acb9791b2eadacf9ff468e5d9ec38047c5a16799463fa4a333f49541a0358dd34343212dd0a7e19e231d3a6e665cf85322d28ea1fd712", 0x81}], 0x4, &(0x7f0000000180), 0x0, 0x20000000}, {0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x4000000}], 0x2, 0x8000010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001100)=""/81, 0x51}], 0x1}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r2, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000003580)=[{&(0x7f00000034c0)="b3", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000240)='net/stat\x00') pipe2$9p(&(0x7f0000000240), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r5 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r6, 0x4040099d}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000001080104000000000000000003000004cf14afc7b01ccc6bf5ea4cdae0c20d5d2b9166e6c7d53ad6ec2e41e4f9524dd93b8eafe5cfd94fa189faa19cec82dcb77665396d24fe75d69f4c51170d87fa7c6a4b1b4c4f18538f68f424ab946898bc101c8d75a70ea33785e4962a7c922b49b2134e5715d9fc18008756ac5485b1ee5bd1044f09d3ef33c19be34d7e76f5d97861d84341bf6d9b6df0393aaeeea46f12a0b3f12b451529dde3db2ffdf4a3b43cfcaeb6c6be76019b3a1e4ead9d32bc6c7430ce05"], 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x44000) r8 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000080)={0x4}) 10.572282344s ago: executing program 0 (id=873): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x29, 0x8, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa8800, 0x0) fsopen(&(0x7f0000000040)='openpromfs\x00', 0x1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000001280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x3}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000ac0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.576100784s ago: executing program 2 (id=877): syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x143b02) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) syz_usbip_server_init(0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x20000000, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000003c0)=r1) 8.216024403s ago: executing program 4 (id=881): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x3ff) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x9, 0x4, 0x5, 0xfffffffd, 0x12, "0a2ad98453e9817cacbf39d84740f1eebb4e0c"}) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x3004408c) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000, 0x500000000000000}) r3 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) 7.356205852s ago: executing program 0 (id=883): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0xc0001, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) pselect6(0x40, &(0x7f0000000080)={0x10, 0xc00000000000, 0x2, 0x0, 0x81, 0x8, 0x1, 0x100}, &(0x7f00000000c0)={0xffff, 0x4, 0x8001, 0x4, 0x3, 0xa8, 0x4, 0x6}, &(0x7f0000000100)={0x0, 0x9, 0x10000, 0x4, 0x7, 0x0, 0xe, 0x6}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8000000000000000]}, 0x8}) fsmount(0xffffffffffffffff, 0x0, 0xf) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x10, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r2, r2, 0x0, 0x200001) 7.267937478s ago: executing program 4 (id=884): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000180)="a9cff3", 0x3}, {&(0x7f0000001980)="5fb3450effde69bf04e3e4", 0xb}, {&(0x7f00000019c0)="48c2c8557113f61ff1aafba9c7e66173164c8ca0c15cbff5683fb4ddb6394595afbcbaaa377a4a5f830744e047edf851d62a66716dd1b4267d5ed18eb9f5c4f88793e82590b71922e22ef062", 0x4c}, {&(0x7f0000001a80)='Tq', 0x2}, {&(0x7f0000001b00)='ilj{', 0x4}], 0x5}}], 0x1, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000a40)={0x1c8, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "9a57821652e5c73f5eb203c2ab3f4c8ecf8f0f713498"}}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x29b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5000}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6639}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6a}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff2d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xa891, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) close(r4) (async) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_JITTER64={0xc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r11 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, 0x0) r12 = dup3(r11, 0xffffffffffffffff, 0x0) (async) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_stall_count', 0x0, 0x0) flistxattr(r13, 0x0, 0x0) r14 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r13, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c056700", @ANYRES16=r14, @ANYBLOB="00022bbd7000fedbdf2507000000380001800c0007000c00000019000000060004004e2000000600020000000000080008000104000008000b00736970000600020089000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000090) (async) sendmsg$IPVS_CMD_GET_DAEMON(r12, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa1201408}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r14, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xa8786a264c53c7aa}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r14, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x11}, 0x40094) 6.468172522s ago: executing program 4 (id=886): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be004411"], 0xfdef) syz_usb_connect(0x0, 0x5f, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2], 0x0) 5.824058459s ago: executing program 2 (id=887): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000001800)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x874fd42a7836ef64, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f00000001c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f0000000040)='net/rt6_stats\x00') mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) times(&(0x7f0000000080)) 5.770052076s ago: executing program 0 (id=888): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x232241, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000001c0)) dup(0xffffffffffffffff) gettid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0x81}}, 0x1c}}, 0x0) sync_file_range(r6, 0x3e, 0x6, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x4011}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0xe, 0x7ffffe3a}]}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r8, 0x1000, 0x1) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r5, 0x1d, &(0x7f0000019080)=""/29}) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) r10 = msgget$private(0x0, 0x3ac) msgsnd(r10, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgsnd(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000df"], 0x8, 0x0) msgrcv(r10, 0x0, 0x0, 0x2, 0x3800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 4.273762878s ago: executing program 3 (id=889): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000e6cc73483bebf88631e604619c19eb92956b71c1f528d35c55cee8abd942318efad27a6bb586cb123717f942347eb40f2ea15fca5e40d3b1d69b140ebae72f5ff4c83a2b8c0f782f05ec59711c165d4ecb6e8545995929930d02d8a01b04c6a3a09f2e7f84c49e7989421d62cc492bd1faded1e1397dea6efa486eca76530eab217278a9207f35052e66f29081d192", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000ac141400"], 0x16c}}, 0x0) shutdown(r0, 0x0) 4.192070599s ago: executing program 1 (id=890): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) (async) ioctl$int_in(r3, 0x5452, &(0x7f00000002c0)=0x6) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r4 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(0x3) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x30, r7, 0x1, 0x0, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040020}, 0x80010) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r9) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x44}, 0x1, 0xffffffea, 0x0, 0x4}, 0x0) 4.120183675s ago: executing program 2 (id=891): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') close_range(r1, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_to_bond\x00', 0x200}) 3.986817873s ago: executing program 3 (id=892): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0, 0xff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@rand_addr, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x8000, 0x80, 0x15, 0x6, {{0x2b, 0x4, 0x3, 0x3a, 0xac, 0x66, 0x0, 0x3, 0x2f, 0x0, @local, @empty, {[@rr={0x7, 0xf, 0x15, [@private=0xa010102, @local, @multicast2]}, @generic={0x82, 0xe, "568e8c498cf0b5383aa8e0e4"}, @rr={0x7, 0x13, 0xec, [@dev={0xac, 0x14, 0x14, 0x3b}, @remote, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x23}]}, @timestamp={0x44, 0xc, 0xc4, 0x0, 0x2, [0x7, 0x6]}, @end, @timestamp_addr={0x44, 0x24, 0xb4, 0x1, 0x1, [{@private=0xa010101, 0x1}, {@broadcast, 0x6}, {@private=0xa010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xffff}]}, @generic={0x7, 0xd, "3829859d3069f1ff4858ab"}, @rr={0x7, 0x3, 0x94}, @rr={0x7, 0xb, 0x8d, [@local, @multicast2]}, @rr={0x7, 0x1b, 0xd7, [@broadcast, @dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010100, @broadcast, @multicast1, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x800, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x154, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040001}, 0x48810) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 3.944160947s ago: executing program 1 (id=893): syz_emit_ethernet(0x36, &(0x7f00000001c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, 'V\aj', 0x0, 0x88, 0x1, @local, @local}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x74}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000200)="bd9583fa938be4292f", 0x9}, {&(0x7f00000002c0)="997ead39e0804acb5fb57638d48ffb46aaf10aa254548485bad113c45b9c714d9ff987dbe64ec6b7f93fd8377024c9de459c65bc1a0eb7f72fdb74bfda2eabfba4109a23134aff7089e7b1606c6d0913aa263ba0214a6e5fbaa8ec7699bab7601c88a0ce5eaf7529bb341b177ee41a73dd16155515f357790a28cf438a96a61f2f440eba3f2142b3fe8b37de227341856d574896a41e96f519a0f97b3a1638cc16cc45837d0988ad", 0xa8}, {&(0x7f0000000380)="a42ee690cc4397a63938fefbb9e286848edae8aa17de8b76c9d105d359c702bc76c4106b498a05f37cdd85b4cba12ffb4083099d54b9b527075b4495340ca27c9c1cd32f5d493e4714a117f1d94a2f649a5931b42c57946ffb824920351bde895af85f773d85b1e9c9b4d53025efe864d5a555ccf2bd4bbf3f5d2e179182cc78d1a57eb2643b9f71c5dc890c1d3bdf22e37ba07f5498d52626adfb65eeb340275526aaec01bdc89bbd4f4c35fc3ca8dd0ca3059bc632", 0xb6}, {&(0x7f0000000440)="6f300b0a504cc64c6a377a476f1001129e381d10298646aa2946b4acffffd54d931bc7961d116e7cd1bb422f0398c8624085dd8e6106508363aad264a3cc64c2f27ee05ee916", 0x46}, {&(0x7f00000004c0)="8fa0854af203c76c953d75a26183abc76905461fe62fe9747084d7b23111eb5f7a3018289f6d1fb2532e152e07c3881b4030930d5449bef6ccd9ac175d20e330ba220754a82775fb8ca1d50d49450c95e3648d11f9a2a8ab73ec67ca6dea9c5923b46721b9308376ba33937d1c5b2051a5287410c497037fc6ec61f75646c1c97c4dfe3cb19cdb1ce6f80a02b9d1abd0fc78a6b5a36260e258ba5898cf4e2687eba9596246dfe4", 0xa7}, {&(0x7f0000000580)="f979976956c1495385806b017c3d991895b2b2e1b19b9e4b46b73cffcd9bf3b5c6dc641121e8db841941f6ece86164ef175001bdb7cff224f94965bbf05b4a13f77292d048aa7cb7e7409dbbdcad40f667751267bcf16cbe7d8bdf6c850c60de9a06d58c2b925eefbc0eeac06176e1bff9aabe78028fe1dde25c343b45dccce98f0082759b81069a5f5c3759ac40f5062ca065e6e5fb5cc59eea56eaeddc8cc1f34c11d85bfa688739d4992ca47f8339bb89c4ed73f325b0a725b733daa7a72dcfed4ffcc585033a93f2978202894a13fa9639921f31bceeb27a0441758934928d90f397c9cb67d107b463b8f720b21b05ad7f55ee7e", 0xf6}, {&(0x7f0000000680)="e5fcb80378d4320588fd69a7583b1701edd142612edc6611d703f262b63887d9376a35b5526ebf087d1688860768900891767c5cfcb38438925535b79f9b3fbfb8b2bbc8726d822bf773e539574e46bdcf708b69ecc139c7389ae8f6f3967d74afdb5b0b28e23d320f531e0ac28c33f1da0425dcb5186b2fe7cc22f6620ca55fcd0ffc5f9a94f2e97ff068a248438edce13282cf61a46307a06ffe4657c4369df7259999311e836732f1e84990cec1696a4e18dd6cbcebab09dee97fea9beed12c", 0xc1}], 0x7) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r2, 0x200, 0x6a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0xa7, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.832421023s ago: executing program 3 (id=894): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\xf4\xaa\\k[sC\xae\xd6\x98\x9bY\nI}\xd8\xcc9K\xd7Z+\\\xf8\xdb\x84\xee\xa9\f>\xe4\x81\x88\x90_\xd4\r\xb83\x9e\x13B3\xfe\xcf\xccm\xfdO2\xd7\xa0DD4\x1b*\xdd\xb6\xcf\xacr\xabF\f\xb5\x11Vkp\"\xb1\xa8\xf0\x8d\x00\x18}3utO\x1bQ0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x41}, 0x0, 0x20042, 0x49c9debfea8c59cf}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmmsg$inet(r6, &(0x7f0000000940)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) sendmsg$AUDIT_USER(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000ed03000326bd7000fcdbdf255c7b5876406dadd3b99099f1056066e4"], 0x20}, 0x1, 0x0, 0x0, 0x4c8d1}, 0x8841) 3.667427601s ago: executing program 3 (id=895): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x8000046, r2, 0x0) r3 = dup(r2) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x6, "31e0cc2126354ee25937474eb508d54fdace060309d71d31002ea57c04a89f13"}) write$binfmt_elf64(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000000001000500380001000600b10600040300000081000000ff00000000000000f50f0000000000000500000000000000b801000000000000"], 0x178) pwrite64(r3, &(0x7f0000000040)="af", 0x1, 0x800) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.666611449s ago: executing program 0 (id=896): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="b0000000daffffff", @ANYBLOB="f64488f51822f56a"], 0xb0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000000)={0xfffffffd, 0xffffffff, 0x7f}) 3.529011992s ago: executing program 3 (id=897): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x29, 0x5, 0xfffffffd) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r2, 0x79f, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002080)=@newchain={0x2c, 0x64, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x1}, {0xa, 0xfff2}, {0x7, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffd}]}, 0x2c}}, 0x0) syz_io_uring_setup(0x19a6, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x4, 0x200}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xa, 0xd0e0000, 0xd8, 0x100, 0x1a8, 0x1d8, 0x1d8, 0x1a8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {}, {}, 0x2, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xffff, 0x800, 0x1, 'syz1\x00', 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$sock_ifreq(r5, 0x89b1, &(0x7f0000000100)={'gre0\x00', @ifru_flags=0x400}) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3.183462637s ago: executing program 4 (id=898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e0002000300000081000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000010000000a"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x7, 0x80000006}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, r0], 0x0, 0x10, 0x6}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="0101000000000000000001002200000000000000"], 0x14}}, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000140)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{0x9, 0xb}]}) close(0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x1dc}, 0x1, 0x0, 0x0, 0xc090}, 0x20000015) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',ro', @ANYBLOB=',gro']) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x2c, 0x2c, 0x100, 0x30bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x0, 0x1}, {0x10, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0xffffa387}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000020000003900000008000300", @ANYRES32=r7, @ANYBLOB="24005a8020000480"], 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4008804) r8 = dup(r3) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="2c3e5a7af3", 0x5) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 2.992426432s ago: executing program 1 (id=899): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"438cf5af7c0600b7633e9cf100", r0, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000006c0)={0x2, 0x0, [{0x0, 0xe, &(0x7f00000001c0)=""/14}, {0x2, 0xe0, &(0x7f0000000580)=""/224}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000100)={"e8083ff599ce94153eaf0fd65e8a03aa4bf95fd5ef139ca1774c611224853c12", r1}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x7, {{0x2, 0xfffd, @empty}}}, 0x88) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x4e1e, @multicast2}}}, 0x88) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000001140)={@multicast2, @local}, 0x8) 2.848128795s ago: executing program 4 (id=900): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x501100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000040)={0x7, 0x91, 0x3, 0x10, 0x1, 0x59}) syz_usb_connect(0x3, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102dd8a7a20670812980f240102030109023f0001f40820100904440305b79db5050905f8ff08000780040905050200020709f909050410ff0301000209050c08000409000209050a"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000002400)={[{0x7fffffff, 0xd1, 0xfa, 0x5, 0x3, 0x93, 0x9, 0x6, 0xb, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x0, 0x6, 0x40, 0x7, 0x4, 0x9, 0x1}, {0x5, 0x1000, 0x8, 0x4f, 0xd, 0x2a, 0xed, 0xc, 0xb, 0x4, 0xf4, 0x4, 0x200}], 0xfffffffe}) finit_module(r1, &(0x7f00000000c0)='\'\x00', 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaa000000000000004008004500ac1423aa00010000000000000000f430c386f5974ad748a5aa5e44b1b4d9432a88ee811a231ec820e033df29c62637ea7d704a4bc98fbbd4aca56a99a7baa92b4534ff40103f8cac87afcd495d52abc15e1820a844d305540d827e4c87d288b4e17052e2ef64c10000000000000000000000000000cdd0053565cddc05056f09045bb5b2b45f506060c0ece24a6f7252470f47164f50ae85ded248e886e49e1309b1bf3b5009ee38a7441552cb46cc06b14469677deea74fae1dca22317d0205092bb7df7a87200abfcb914214fe27ce51064c86657604f499203a50e861c4348819", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000000907800071312b3e480a7613088fd71106c027deb3b110000"], 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7d, 0xfffffffd, 0x1}, 0x10) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0x9a090a, 0x937}) r8 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x2, @mcast2, @loopback={0x300, 0xffff888101827518}, 0x8, 0x10}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r9) ioctl$RTC_VL_CLR(r9, 0x7014) 2.847396618s ago: executing program 1 (id=901): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x19}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa) ioctl$TCFLSH(r5, 0x540b, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x418, 0x160, 0x0, 0x148, 0x160, 0x148, 0x380, 0x240, 0x240, 0x380, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x2e, [0x4e21, 0x4e20, 0x4e23, 0x4e20, 0x4e22, 0x4e22, 0x4e22, 0x4e22, 0x4e23, 0x4e20, 0x4e22, 0x4e24, 0xe22, 0xb07, 0x4e20], [0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfe]}}, @common=@set={{0x40}, {{0x1, [0x5, 0x1, 0x1, 0x0, 0x0, 0x4], 0x1, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x202b, 0x25, 0x3f, 0x2e, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@uncond, 0x0, 0x1b8, 0x220, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz0\x00', 0x2}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x1, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xd}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0xf41}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0xfffffffd}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0xfff7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xfff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffff0000}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xfffa}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xc000825}, 0x48000) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGMTSLOTS(r8, 0x5421, &(0x7f0000001900)=""/4096) 2.55745342s ago: executing program 2 (id=902): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_io_uring_setup(0x499, &(0x7f0000000140)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = memfd_create(&(0x7f0000000a00)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x0) lseek(r3, 0x0, 0x0) socket$inet6(0xa, 0x800, 0xa9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.38119674s ago: executing program 2 (id=903): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf25130000000e0001"], 0x4c}, 0x1, 0x0, 0x0, 0x88050}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x4, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) semtimedop(0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000640), 0x0, 0xa001) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x5}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r1, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 784.042974ms ago: executing program 3 (id=904): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000500)={0x18, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00030400000004030789c15a3f1f8a4d0d568bf5"], 0x0, 0x0, 0x0}, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r3) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000001800)={0x2c, &(0x7f0000001540)={0x20, 0x10, 0xf8, {0xf8, 0x1, "f9c68bc761b03063387c64908440689513a2db7afdacca38619bb2e60886b38427b5cce414b56e714a6c48bcc2c9fa6587c3b69808a26adeb7eb15ece4956d6080ecaef1860c8aa5f9ccc2016c0599d4cd640261fe07a0f47853929e95ff2b2fd9d586d9d8fd4b6c8e601b6124b66fe1e77c8bb2057ef315d22f3b07669930f3fa88e1acf12cd9ec9ba33bdc0fdbd8ddbc6bd95d266cd811efffecaf98f8562c92773a29aa699be8f6a72cc329d75c0fa1e119a3a09985bfdaa6a4a325fbe701e04a2a1b5d58f77044ca1a6816c4916273078e7eab5f571b695681fba5c8cc3bb00382d8e23580271a7c482606fa124b54b3ecaac0b9"}}, &(0x7f0000001640)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "37d589e47d68737298e5b2c5ecfb5a2f905c44b26666d561ad8301af3add83886b56388f58f66d6863d8fc7ec487b470848c30202b8d934b4d26cf79e31dccb4c62e2cdb4fe30842d9243f09724a8f1030d595671b86d64904c26ea862feae9a023cc6ed1e4cdf5c92093e972085d14635589af43df43becadb80831d3180656b1646ce3e03ae927c8fff833a28505e32f69759809ea98bf4fb0a94529e7837be463e0049785315d183aa03fcce56e77db34e13eeb4171058a95834276f7c4"}}, &(0x7f0000001740)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0xd, 0x10, 0x7ff, 0xa}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x2000000, 0x0, 0x200, [0x1fe00f0, 0xff0000, 0x3f00, 0xc000]}]}}, &(0x7f0000001780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x8, 0x4a, "46b71f63", "83cc83f2"}}, &(0x7f00000017c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x80, 0xfa, 0x4, 0x9d, 0x8, 0x5}}}, &(0x7f0000001c40)={0x84, &(0x7f0000001840)=ANY=[@ANYBLOB="400f2b000000595a3ed377f8bc38f74ebb5fd26aa3f0822f6b6ad6ea8d9bf2c8c5"], &(0x7f0000001880)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000018c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001900)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001940)={0x20, 0x0, 0x4, {0xa0, 0x20}}, &(0x7f0000001980)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000019c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001a00)={0x40, 0xb, 0x2, 'm5'}, &(0x7f0000001a40)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000001a80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001ac0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, &(0x7f0000001b00)={0x40, 0x19, 0x2, '9m'}, &(0x7f0000001b40)={0x40, 0x1a, 0x2, 0x200}, &(0x7f0000001b80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000001bc0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001c00)={0x40, 0x21, 0x1, 0x6}}) r4 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r4, &(0x7f0000001300)={0x14, &(0x7f0000001200)={0x60, 0x23, 0x4a, {0x4a, 0x7, "e84fa67b06433bde6367dfc82ad50ae2977094c3fee93c60e1753c9fb4a97568993904ccbd66237db698a2b4d7fd379ca9f4f2ef7235e852aceb130e47af411d375c37ffd3f14365"}}, &(0x7f0000001280)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "f8a4c50d363963b56e3cf8378d2cebd921f711f314b05c7beedd87278ceb556625bf2bebe04513fbc41eeb4136a194e6da365666ffeede88aaafda7dac4ac566fe73449fd916a57205565d5d1d8cedd4ab910b0ac9f5d93c636a56138a8d1430b3d127e32e1a20defe"}}}, &(0x7f0000001500)={0x34, &(0x7f0000001340)={0x4b3ed213739ce1cd, 0x14, 0x45, "5136bedee558145e18ae24db43e711f3bcf2e2f00f378c5cdef6e1f584823437d86c651c5f2f74b83c5b63bedeebf6ebfc840963937bec0a1f09db24152a941958fb69574e"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001440)={0xc0, 0xa1, 0x4, 0x101}, &(0x7f0000001480)={0x40, 0xa0, 0x4, 0x2}, &(0x7f00000014c0)={0xc0, 0xa2, 0x2f, "d330c276669081fffbe387be5105fe53830fbc8df8016c497e96b0535ac74d959b6b8427f9649b5dda1054b228e348"}}) set_mempolicy(0x0, 0xfffffffffffffffe, 0x400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x40100, 0x8) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000200)={{r0}, "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"}) 556.361551ms ago: executing program 0 (id=905): io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0xfffffffc, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xfffffffd}]}}]}, 0x44}}, 0x0) listen(0xffffffffffffffff, 0x9) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRESHEX=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$incfs(r5, &(0x7f0000000280)='.log\x00', 0x800, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 464.806613ms ago: executing program 1 (id=906): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES16=r4, @ANYBLOB="010000004000fffffffff4ff000008fc2d000300", @ANYRES32=r6, @ANYRES8=r1], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x22}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4a}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1000, 0x7}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x34}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x400c804) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000100)="5539a1735eb01b2d42c4af5f7f3d2a1f35041b2df2c1eecf365b1813b68f86178c4b665d1469411eb8177009210ffe51d9d17fcd5f67c1317e5aae06d15c50dcc4b9116d4e988f590fff8135db09ddec22da378d26f7e0d9d1b2693c63d3d4f77edfee4af048", 0x73) ioctl$VHOST_VDPA_GET_DEVICE_ID(r7, 0x8004af70, &(0x7f0000000080)) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x3, 0x80000) r9 = socket$key(0xf, 0x3, 0x2) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000100)={0x7ffffffc, "5660359c3245d1c42317afadfd48ed5100000000000000608a00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000180)={0x10001, "029c6e5c846eccb800d2ae30e3f5c320998750190300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r12}) sendmsg$key(r9, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="021800000b00000000000000df570000030005000000000002000200e00000010000080000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000580)={0x81, 0x0, 0x7, 0x0}) 180.100008ms ago: executing program 2 (id=907): mq_unlink(&(0x7f0000000340)='eth0\x00') openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000206010400000000000000000000000005000100070000000900020073797a19000000000500050002000000050004000800000015000300686173683a69702c706f72742c6e6574"], 0x50}, 0x1, 0x0, 0x0, 0x44090}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000706c78e17d90000e60ddcf948681a330500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000009c40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/171, 0xab}, {0x0}], 0x2}, 0x3ff}], 0x1, 0x40000000, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a31000000004c000000030a010100000000000000000a0000000a000700726f7574650000001400048008000240000000000800014010d8e8bd0900010073797a3100000000090003"], 0x94}}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) r7 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000020000009b2d000007000000c0b20b445cdf73bf16e8ed5694662fe5519e39ae7adc9293293e18097865b384252efd0bbbc777b95ac12d7576b47223aca835be8f70d4fb4ab2c46d3ff8912dfd2d5822bf5201000000292fe5e4c72c14d4399a96c6e590fa07e6961019a453a7013c72f881e4f62a08f919e30bd809bfda99d757430e556d547320ea33ddd6814e92a19a6b84b99244b740e8b4b70b94e3a3ee80b7be70c0e8fde4f7e7c5e81a32beeb9dd8b1bac29dbbeb305b34ed7a050cd300047fb3f8d66a66dabbd3d82e453d2bfb2d1a8db23e2f5edd16a2d3b39432e833e53c05f67944c14ea9e8e713ec9375", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000940)) socket$kcm(0x2, 0x5, 0x84) 61.125946ms ago: executing program 1 (id=908): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) (async) socket$pptp(0x18, 0x1, 0x2) syz_usb_connect$cdc_ncm(0x2, 0x6f, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "1ae65a95", {0x1, 0xff, 0x8, 0x9c, 0x8}}) 0s ago: executing program 4 (id=909): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x1, 0x5, 0xb, 0x101}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000007440)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x2000) (async) sendmmsg$inet(r2, &(0x7f0000007440)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x2000) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x4000000) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x4000000) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e1e, 0x4d7, @remote, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000940)='u', 0x1}], 0x1}}], 0x1, 0x4c040) kernel console output (not intermixed with test programs): 4.558165][ T5911] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 254.578193][ T5911] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 254.982421][ T5911] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 254.998103][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.013351][ T5911] usb 3-1: Product: syz [ 255.017650][ T5911] usb 3-1: Manufacturer: syz [ 255.048424][ T5911] usb 3-1: SerialNumber: syz [ 255.084783][ T5911] cdc_acm 3-1:2.1: probe with driver cdc_acm failed with error -22 [ 255.148825][ T5911] cdc_acm 3-1:2.0: probe with driver cdc_acm failed with error -22 [ 255.170595][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.358330][ T5911] usb 3-1: USB disconnect, device number 35 [ 255.627502][ T7745] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 255.637066][ T7745] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 255.647361][ T7745] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 256.038676][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.237184][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.573712][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 256.573733][ T30] audit: type=1800 audit(1761216102.476:172): pid=7747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.455" name="bus" dev="ramfs" ino=17943 res=0 errno=0 [ 256.607859][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.800565][ T49] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 256.973095][ T49] usb 2-1: Using ep0 maxpacket: 32 [ 257.016558][ T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.039112][ T49] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 257.055828][ T49] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 257.070994][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.130930][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.461'. [ 257.172888][ T49] usb 2-1: Product: syz [ 257.183026][ T49] usb 2-1: Manufacturer: syz [ 257.238534][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.241512][ T49] usb 2-1: SerialNumber: syz [ 257.473853][ T49] usb 2-1: config 0 descriptor?? [ 258.061817][ T10] usb 2-1: USB disconnect, device number 28 [ 258.288929][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.824620][ T30] audit: type=1326 audit(1761216104.716:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f9d8efc9 code=0x7ffc0000 [ 258.888262][ T30] audit: type=1326 audit(1761216104.716:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24f9d8efc9 code=0x7ffc0000 [ 258.917296][ T30] audit: type=1326 audit(1761216104.716:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f9d8efc9 code=0x7ffc0000 [ 258.946674][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.957530][ T30] audit: type=1326 audit(1761216104.716:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24f9d8efc9 code=0x7ffc0000 [ 258.990404][ T30] audit: type=1326 audit(1761216104.716:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f9d8efc9 code=0x7ffc0000 [ 259.319185][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.331456][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.363241][ T30] audit: type=1326 audit(1761216104.716:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24f9d8efc9 code=0x7ffc0000 [ 259.425539][ T30] audit: type=1326 audit(1761216104.716:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f9d8efc9 code=0x7ffc0000 [ 259.525821][ T30] audit: type=1326 audit(1761216104.716:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24f9d8efc9 code=0x7ffc0000 [ 259.603194][ T30] audit: type=1326 audit(1761216104.716:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7813 comm="syz.2.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24f9d8efc9 code=0x7ffc0000 [ 259.738161][ T5911] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 259.908551][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 259.920614][ T5911] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 259.931813][ T5911] usb 4-1: config 179 has no interface number 0 [ 259.941686][ T5911] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 259.954445][ T5911] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 259.983775][ T5911] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.012267][ T5911] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 260.059575][ T5911] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 260.107499][ T5911] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 260.142826][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.158343][ T7844] netlink: 52 bytes leftover after parsing attributes in process `syz.2.484'. [ 260.189608][ T7834] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 260.368753][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.428388][ T5911] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input21 [ 260.601263][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.645091][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.648724][ T1221] usb 4-1: USB disconnect, device number 21 [ 260.654451][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 260.654498][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 260.688790][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 260.984414][ T7860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.238323][ T5911] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 261.409508][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.421142][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 261.461233][ T5911] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 261.474191][ T5911] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 261.510025][ T5911] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.530930][ T5911] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.544873][ T5911] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 261.562989][ T5911] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.573427][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.583984][ T5911] usb 5-1: Product: syz [ 261.590451][ T5911] usb 5-1: Manufacturer: syz [ 261.597170][ T5911] usb 5-1: SerialNumber: syz [ 261.672409][ T7872] bridge_slave_1: left allmulticast mode [ 261.693363][ T7872] bridge_slave_1: left promiscuous mode [ 261.709127][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.764908][ T7872] bridge_slave_0: left allmulticast mode [ 261.777565][ T7872] bridge_slave_0: left promiscuous mode [ 261.850686][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.920601][ T5911] usb 5-1: USB disconnect, device number 24 [ 262.358927][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.439407][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.536454][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.547485][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.556799][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.748140][ T5911] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 262.793303][ T7895] netlink: 'syz.0.500': attribute type 10 has an invalid length. [ 262.843576][ T7898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'. [ 262.918758][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 262.965436][ T5911] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 262.976690][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.988219][ T5911] usb 3-1: Product: syz [ 262.995243][ T5911] usb 3-1: Manufacturer: syz [ 263.005370][ T5911] usb 3-1: SerialNumber: syz [ 263.079493][ T5911] usb 3-1: config 0 descriptor?? [ 263.094871][ T7898] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 263.116056][ T7898] bond2 (unregistering): Released all slaves [ 263.131291][ T5911] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 263.164936][ T5911] usb 3-1: Detected FT232H [ 263.538695][ T5911] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 263.578305][ T5911] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 263.602227][ T5911] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 263.658576][ T5911] usb 3-1: USB disconnect, device number 36 [ 263.711548][ T7905] FAULT_INJECTION: forcing a failure. [ 263.711548][ T7905] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 263.741919][ T5911] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 263.778646][ T5911] ftdi_sio 3-1:0.0: device disconnected [ 263.787802][ T7905] CPU: 1 UID: 0 PID: 7905 Comm: syz.0.503 Not tainted syzkaller #0 PREEMPT(full) [ 263.787827][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.787841][ T7905] Call Trace: [ 263.787847][ T7905] [ 263.787855][ T7905] dump_stack_lvl+0x189/0x250 [ 263.787882][ T7905] ? __pfx____ratelimit+0x10/0x10 [ 263.787901][ T7905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.787922][ T7905] ? __pfx__printk+0x10/0x10 [ 263.787939][ T7905] ? __might_fault+0xb0/0x130 [ 263.787972][ T7905] should_fail_ex+0x414/0x560 [ 263.788001][ T7905] _copy_from_iter+0x1de/0x1790 [ 263.788021][ T7905] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 263.788049][ T7905] ? policy_nodemask+0x27c/0x720 [ 263.788063][ T7905] ? __pfx__copy_from_iter+0x10/0x10 [ 263.788085][ T7905] ? set_page_refcounted+0xa0/0x1e0 [ 263.788101][ T7905] ? page_copy_sane+0x4e/0x280 [ 263.788119][ T7905] copy_page_from_iter+0xdd/0x170 [ 263.788140][ T7905] tun_get_user+0x1d7b/0x3e90 [ 263.788167][ T7905] ? tun_get_user+0x6f6/0x3e90 [ 263.788191][ T7905] ? aa_file_perm+0x44d/0x1550 [ 263.788206][ T7905] ? __pfx_tun_get_user+0x10/0x10 [ 263.788223][ T7905] ? _parse_integer_limit+0x1ae/0x1f0 [ 263.788255][ T7905] ? __lock_acquire+0xab9/0xd20 [ 263.788277][ T7905] ? ref_tracker_alloc+0x318/0x460 [ 263.788293][ T7905] ? __lock_acquire+0xab9/0xd20 [ 263.788310][ T7905] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 263.788330][ T7905] ? tun_get+0x1c/0x2f0 [ 263.788352][ T7905] ? tun_get+0x1c/0x2f0 [ 263.788371][ T7905] ? tun_get+0x1c/0x2f0 [ 263.788393][ T7905] tun_chr_write_iter+0x113/0x200 [ 263.788414][ T7905] vfs_write+0x5c9/0xb30 [ 263.788441][ T7905] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 263.788461][ T7905] ? __pfx_vfs_write+0x10/0x10 [ 263.788492][ T7905] ? __fget_files+0x2a/0x420 [ 263.788526][ T7905] ksys_write+0x145/0x250 [ 263.788552][ T7905] ? __pfx_ksys_write+0x10/0x10 [ 263.788577][ T7905] ? do_syscall_64+0xbe/0xfa0 [ 263.788602][ T7905] do_syscall_64+0xfa/0xfa0 [ 263.788620][ T7905] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.788641][ T7905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.788659][ T7905] ? clear_bhb_loop+0x60/0xb0 [ 263.788679][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.788696][ T7905] RIP: 0033:0x7f2440d8da7f [ 263.788719][ T7905] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 263.788734][ T7905] RSP: 002b:00007f2441bc9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 263.788760][ T7905] RAX: ffffffffffffffda RBX: 00007f2440fe5fa0 RCX: 00007f2440d8da7f [ 263.788771][ T7905] RDX: 0000000000000046 RSI: 00002000000009c0 RDI: 00000000000000c8 [ 263.788781][ T7905] RBP: 00007f2441bc9090 R08: 0000000000000000 R09: 0000000000000000 [ 263.788791][ T7905] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 263.788800][ T7905] R13: 00007f2440fe6038 R14: 00007f2440fe5fa0 R15: 00007f244110fa28 [ 263.788827][ T7905] [ 264.157739][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.447605][ T7915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.507'. [ 264.462436][ T7916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.507'. [ 264.474411][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 264.498985][ T49] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 264.528559][ T5911] net_ratelimit: 1 callbacks suppressed [ 264.528576][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.625336][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.654215][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.670080][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 264.683336][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.704236][ T49] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 264.715634][ T49] usb 5-1: config 0 has no interface number 0 [ 264.726200][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.748277][ T49] usb 5-1: config 0 interface 184 has no altsetting 0 [ 264.757343][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.050507][ T10] usb 2-1: config 0 descriptor?? [ 265.063913][ T49] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 265.143260][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.216334][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 265.428811][ T49] usb 5-1: Product: syz [ 265.433732][ T49] usb 5-1: Manufacturer: syz [ 265.439614][ T49] usb 5-1: SerialNumber: syz [ 265.582723][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.593553][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.608254][ T49] usb 5-1: config 0 descriptor?? [ 265.617237][ T49] smsc75xx v1.0.0 [ 265.622495][ T49] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 265.647871][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 265.686449][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.703334][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 265.744142][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.771013][ T49] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 265.830278][ T10] usb 2-1: USB disconnect, device number 29 [ 265.855737][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 265.882105][ T49] usb 5-1: USB disconnect, device number 25 [ 265.940419][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 266.018734][ T9] usb 3-1: Manufacturer: syz [ 266.049521][ T9] usb 3-1: config 0 descriptor?? [ 266.318512][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 266.359346][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.782196][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 267.106801][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.125355][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.139065][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 16 [ 267.162332][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 267.178458][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.232262][ T5836] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 267.244835][ T10] usb 2-1: config 0 descriptor?? [ 267.398361][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 267.422583][ T5836] usb 5-1: config 0 has an invalid interface number: 60 but max is 0 [ 267.438349][ T5836] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 267.451768][ T5836] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 267.462801][ T1221] usb 2-1: USB disconnect, device number 30 [ 267.470568][ T5836] usb 5-1: config 0 has no interface number 0 [ 267.501901][ T5836] usb 5-1: config 0 interface 60 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 267.526421][ T5836] usb 5-1: config 0 interface 60 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 267.548549][ T5836] usb 5-1: config 0 interface 60 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 267.564192][ T5836] usb 5-1: config 0 interface 60 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.595467][ T9] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0009/input/input22 [ 267.610220][ T5836] usb 5-1: config 0 interface 60 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 267.628002][ T5836] usb 5-1: config 0 interface 60 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 267.654186][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.656773][ T5836] usb 5-1: config 0 interface 60 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 267.669678][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.683755][ T5836] usb 5-1: New USB device found, idVendor=5050, idProduct=8003, bcdDevice=a8.4a [ 267.732678][ T9] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0009/input/input23 [ 267.774943][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.791403][ T9] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0009/input/input24 [ 267.815621][ T5836] usb 5-1: Product: syz [ 267.822277][ T5836] usb 5-1: Manufacturer: syz [ 267.831700][ T5836] usb 5-1: SerialNumber: syz [ 267.846098][ T9] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0009/input/input25 [ 267.865325][ T5836] usb 5-1: config 0 descriptor?? [ 267.880791][ T7954] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 267.893959][ T5836] ftdi_sio 5-1:0.60: FTDI USB Serial Device converter detected [ 267.920311][ T5836] ftdi_sio ttyUSB0: unknown device type: 0xa84a [ 267.930463][ T9] uclogic 0003:256C:006D.0009: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 268.120133][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.186892][ T7960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.600720][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.809967][ T9] usb 3-1: reset high-speed USB device number 37 using dummy_hcd [ 269.067410][ T7980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.170253][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.520109][ T7992] ALSA: mixer_oss: invalid OSS volume '' [ 269.530912][ T7992] netlink: 'syz.2.526': attribute type 4 has an invalid length. [ 269.563303][ T7992] netlink: 'syz.2.526': attribute type 4 has an invalid length. [ 269.852180][ T5836] usb 3-1: USB disconnect, device number 37 [ 269.962588][ T1221] usb 5-1: USB disconnect, device number 26 [ 270.034147][ T1221] ftdi_sio 5-1:0.60: device disconnected [ 270.200890][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.128175][ T5936] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 271.248842][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.298160][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 271.329209][ T5936] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 271.368127][ T5936] usb 3-1: config 179 has no interface number 0 [ 271.376367][ T5936] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 271.492643][ T5936] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 271.520598][ T5936] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.588301][ T5936] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 271.659148][ T5936] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 271.670032][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.696413][ T5936] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 271.789551][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.808193][ T8007] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 271.914541][ T8022] CUSE: info not properly terminated [ 272.029416][ T8007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.043843][ T8007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.048381][ T5836] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 272.120234][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.228508][ T5911] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 272.240292][ T9] usb 3-1: USB disconnect, device number 38 [ 272.240295][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 272.240337][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 272.261686][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.311775][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.331543][ T5836] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 272.370504][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.628763][ T5836] usb 4-1: config 0 descriptor?? [ 272.689955][ T5911] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 272.719249][ T5911] usb 2-1: can't read configurations, error -61 [ 272.765037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.888248][ T5911] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 273.060278][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 273.090290][ T5911] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 273.091792][ T5836] logitech-djreceiver 0003:046D:C71F.000A: unbalanced collection at end of report description [ 273.106618][ T5911] usb 2-1: can't read configurations, error -61 [ 273.124495][ T5891] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 273.139565][ T5911] usb usb2-port1: attempt power cycle [ 273.203224][ T5836] logitech-djreceiver 0003:046D:C71F.000A: logi_dj_probe: parse failed [ 273.262056][ T5836] logitech-djreceiver 0003:046D:C71F.000A: probe with driver logitech-djreceiver failed with error -22 [ 273.278375][ T5891] usb 3-1: device descriptor read/64, error -71 [ 273.319199][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.337624][ T5836] usb 4-1: USB disconnect, device number 22 [ 273.402534][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.488890][ T5911] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 273.509180][ T1221] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 273.525856][ T5911] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 273.544444][ T5911] usb 2-1: can't read configurations, error -61 [ 273.554315][ T5891] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 273.668122][ T1221] usb 5-1: Using ep0 maxpacket: 32 [ 273.686297][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.701542][ T5891] usb 3-1: device descriptor read/64, error -71 [ 273.708885][ T5911] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 273.718333][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.737843][ T1221] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 273.752077][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.774466][ T1221] usb 5-1: config 0 descriptor?? [ 273.839113][ T5891] usb usb3-port1: attempt power cycle [ 273.899708][ T5911] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 273.933577][ T5911] usb 2-1: can't read configurations, error -61 [ 273.949214][ T5911] usb usb2-port1: unable to enumerate USB device [ 274.188567][ T5891] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 274.218221][ T1221] usbhid 5-1:0.0: can't add hid device: -71 [ 274.226426][ T1221] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 274.237013][ T5891] usb 3-1: device descriptor read/8, error -71 [ 274.248406][ T1221] usb 5-1: USB disconnect, device number 27 [ 274.338669][ T5936] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 274.358957][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.498454][ T5891] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 274.508957][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 274.525399][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 274.546423][ T5936] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 274.563416][ T5891] usb 3-1: device descriptor read/8, error -71 [ 274.573406][ T5936] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 274.661844][ T5936] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 274.673073][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.683008][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.683255][ T5891] usb usb3-port1: unable to enumerate USB device [ 274.701983][ T1221] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 274.713946][ T5936] usb 4-1: Product: syz [ 274.728453][ T5936] usb 4-1: Manufacturer: syz [ 274.735330][ T5936] usb 4-1: SerialNumber: syz [ 274.784110][ T5936] usb 4-1: config 0 descriptor?? [ 274.854911][ T8044] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 274.881202][ T1221] usb 5-1: config 1 has an invalid descriptor of length 133, skipping remainder of the config [ 274.912095][ T5936] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 274.919715][ T1221] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.936347][ T5936] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 274.947684][ T1221] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.964988][ T5936] mcba_usb 4-1:0.0 can0: failed tx_urb -90 [ 274.973444][ T5936] mcba_usb 4-1:0.0 can0: Failed to send cmd (169) [ 275.028768][ T1221] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.055065][ T5936] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 275.086579][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.201420][ T8055] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 275.398619][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.449099][ T1221] usb 5-1: Product: syz [ 275.476099][ T1221] usb 5-1: Manufacturer: syz [ 275.491257][ T1221] usb 5-1: SerialNumber: syz [ 275.511074][ T1221] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 275.520172][ T1221] cdc_ncm 5-1:1.0: bind() failure [ 276.329297][ T5936] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 276.438661][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.531027][ T5936] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 276.551473][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.573721][ T5936] usb 2-1: config 0 has no interfaces? [ 276.755277][ T5936] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 276.804232][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.985107][ T8087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.542'. [ 277.005415][ T8087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.020059][ T8087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.097938][ T5836] usb 4-1: USB disconnect, device number 23 [ 277.120526][ T5836] mcba_usb 4-1:0.0 can0: device disconnected [ 277.183379][ T5936] usb 2-1: config 0 descriptor?? [ 277.404976][ T8097] dlm: non-version read from control device 207 [ 277.506274][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.722170][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.733622][ T5942] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 277.891601][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.957163][ T5942] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 277.970668][ T5942] usb 3-1: config 0 has no interface number 0 [ 277.980089][ T5942] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 277.994212][ T5942] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 278.010766][ T5942] usb 3-1: config 0 interface 48 has no altsetting 0 [ 278.019647][ T5942] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 278.033957][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.098156][ T5836] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 278.133361][ T5942] usb 3-1: config 0 descriptor?? [ 278.258270][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 278.279542][ T5836] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 278.313744][ T5836] usb 4-1: config 179 has no interface number 0 [ 278.343363][ T5836] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 278.462655][ T5836] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 278.509694][ T5836] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 278.525054][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.553251][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.584453][ T5836] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 278.621897][ T10] usb 5-1: USB disconnect, device number 28 [ 278.639080][ T5836] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 278.666280][ T5836] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 278.701735][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.718951][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.736547][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.751300][ T8092] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 279.039913][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input26 [ 279.148539][ T10] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 279.158814][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.252465][ T9] usb 2-1: USB disconnect, device number 35 [ 279.272290][ T5891] usb 4-1: USB disconnect, device number 24 [ 279.272325][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 279.291950][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 279.382622][ T5942] usb 3-1: string descriptor 0 read error: -71 [ 279.423382][ T5942] ums-realtek 3-1:0.48: USB Mass Storage device detected [ 279.449013][ T10] usb 5-1: device descriptor read/64, error -71 [ 279.543354][ T5942] usb 3-1: USB disconnect, device number 43 [ 279.559264][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.749724][ T10] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 279.784661][ T8134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.933932][ T8131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.977484][ T8137] binder: 8136:8137 unknown command 0 [ 279.984284][ T10] usb 5-1: device descriptor read/64, error -71 [ 279.991130][ T8137] binder: 8136:8137 ioctl c0306201 200000000080 returned -22 [ 280.098587][ T10] usb usb5-port1: attempt power cycle [ 280.221914][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'. [ 280.288853][ T8141] netlink: 'syz.1.560': attribute type 3 has an invalid length. [ 280.528259][ T10] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 280.605233][ T8039] net_ratelimit: 45 callbacks suppressed [ 280.605318][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.620217][ T10] usb 5-1: device descriptor read/8, error -71 [ 280.798543][ T49] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 280.868251][ T10] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 280.889612][ T10] usb 5-1: device descriptor read/8, error -71 [ 280.918683][ T8039] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 280.968287][ T49] usb 4-1: Invalid ep0 maxpacket: 64 [ 281.008520][ T10] usb usb5-port1: unable to enumerate USB device [ 281.086870][ T8039] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 281.131678][ T49] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 281.139710][ T8039] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.177093][ T8039] usb 2-1: Product: syz [ 281.184800][ T8039] usb 2-1: Manufacturer: syz [ 281.196073][ T8039] usb 2-1: SerialNumber: syz [ 281.266357][ T8161] netlink: 72 bytes leftover after parsing attributes in process `syz.0.564'. [ 281.308154][ T49] usb 4-1: Invalid ep0 maxpacket: 64 [ 281.324344][ T49] usb usb4-port1: attempt power cycle [ 281.560084][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.617730][ T8039] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 281.637539][ T8039] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 281.655387][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.667574][ T8039] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 281.680448][ T8039] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 281.688317][ T49] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 281.696124][ T8039] usb 2-1: USB disconnect, device number 36 [ 281.719620][ T49] usb 4-1: Invalid ep0 maxpacket: 64 [ 281.868206][ T49] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 281.888362][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 281.921340][ T49] usb 4-1: Invalid ep0 maxpacket: 64 [ 281.929168][ T49] usb usb4-port1: unable to enumerate USB device [ 282.048232][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 282.062033][ T10] usb 3-1: config 0 has an invalid interface number: 248 but max is 0 [ 282.074417][ T10] usb 3-1: config 0 has no interface number 0 [ 282.087801][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=83.0d [ 282.098523][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.110897][ T10] usb 3-1: Product: syz [ 282.115852][ T10] usb 3-1: Manufacturer: syz [ 282.122775][ T10] usb 3-1: SerialNumber: syz [ 282.131906][ T10] usb 3-1: config 0 descriptor?? [ 282.146655][ T10] ttusb_dec_send_command: command bulk message failed: error -22 [ 282.157420][ T10] ttusb-dec 3-1:0.248: probe with driver ttusb-dec failed with error -22 [ 282.351201][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.454565][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.678543][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.767445][ T8177] vlan2: entered promiscuous mode [ 282.979148][ T8039] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 282.993059][ T8185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.148221][ T8039] usb 2-1: Using ep0 maxpacket: 16 [ 283.156497][ T8039] usb 2-1: config 0 interface 0 has no altsetting 0 [ 283.170007][ T8039] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 283.181798][ T8039] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.195478][ T8039] usb 2-1: config 0 descriptor?? [ 283.625686][ T8039] hid (null): bogus close delimiter [ 283.639060][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.645896][ T8039] hid_parser_main: 74 callbacks suppressed [ 283.645918][ T8039] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 283.670651][ T8039] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 283.680057][ T8039] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 283.691069][ T8039] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 283.700515][ T8039] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 283.711276][ T8039] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 283.722824][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.735228][ T8039] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 283.746742][ T8039] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 283.758667][ T8039] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 283.766375][ T8039] hid-generic 0003:0DFC:0101.000B: unknown main item tag 0x0 [ 283.789281][ T8039] hid-generic 0003:0DFC:0101.000B: item 0 4 0 9 parsing failed [ 283.800381][ T8039] hid-generic 0003:0DFC:0101.000B: probe with driver hid-generic failed with error -22 [ 283.860178][ T8039] usb 2-1: USB disconnect, device number 37 [ 284.078154][ T49] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 284.154253][ T8201] netlink: 'syz.3.577': attribute type 1 has an invalid length. [ 284.239157][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 284.250021][ T49] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.263983][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.278737][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.288959][ T49] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 284.299044][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.308810][ T49] usb 5-1: Product: syz [ 284.313389][ T49] usb 5-1: Manufacturer: syz [ 284.321922][ T49] usb 5-1: SerialNumber: syz [ 284.330336][ T49] usb 5-1: config 0 descriptor?? [ 284.394597][ T8206] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 284.547584][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.560157][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.584323][ T8195] netlink: 32 bytes leftover after parsing attributes in process `syz.4.575'. [ 284.601964][ T49] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 284.623967][ T49] usb 5-1: USB disconnect, device number 33 [ 284.665279][ T10] usb 3-1: USB disconnect, device number 44 [ 284.759037][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.864903][ T8211] kvm_intel: kvm [8209]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x3dba [ 285.121738][ T10] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 285.297759][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 285.343455][ T10] usb 3-1: config 9 has an invalid interface number: 58 but max is 0 [ 285.366636][ T10] usb 3-1: config 9 has no interface number 0 [ 285.378380][ T10] usb 3-1: config 9 interface 58 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 285.404090][ T10] usb 3-1: config 9 interface 58 altsetting 4 endpoint 0x6 has invalid maxpacket 2047, setting to 64 [ 285.430269][ T5942] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 285.462967][ T10] usb 3-1: config 9 interface 58 has no altsetting 0 [ 285.486139][ T10] usb 3-1: New USB device found, idVendor=12d1, idProduct=3745, bcdDevice=62.6e [ 285.501047][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.521827][ T10] usb 3-1: Product: syz [ 285.530475][ T10] usb 3-1: Manufacturer: syz [ 285.537330][ T10] usb 3-1: SerialNumber: syz [ 285.549286][ T8211] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.632630][ T5942] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 285.644592][ T49] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 285.654650][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.664297][ T5942] usb 4-1: Product: syz [ 285.672683][ T5942] usb 4-1: Manufacturer: syz [ 285.678434][ T5942] usb 4-1: SerialNumber: syz [ 285.687400][ T5942] usb 4-1: config 0 descriptor?? [ 285.697755][ T5942] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 285.768233][ T5836] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 285.799841][ T5936] net_ratelimit: 1 callbacks suppressed [ 285.799859][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.820892][ T49] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 132, changing to 11 [ 285.834910][ T49] usb 5-1: config 0 interface 0 has no altsetting 0 [ 285.845114][ T49] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 285.859951][ T49] usb 5-1: New USB device strings: Mfr=0, Product=255, SerialNumber=0 [ 285.870710][ T49] usb 5-1: Product: syz [ 285.879007][ T49] usb 5-1: config 0 descriptor?? [ 285.923004][ T5942] gspca_sunplus: reg_r err -71 [ 285.930279][ T5942] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 285.943633][ T5836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.969588][ T5942] usb 4-1: USB disconnect, device number 29 [ 285.976899][ T5836] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.006094][ T5836] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 286.019583][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 286.032094][ T5836] usb 2-1: SerialNumber: syz [ 286.261112][ T5836] usb 2-1: 0:2 : does not exist [ 286.285947][ T5836] usb 2-1: USB disconnect, device number 38 [ 286.318484][ T7222] udevd[7222]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.355934][ T49] sony 0003:12BA:0100.000C: unbalanced collection at end of report description [ 286.375320][ T49] sony 0003:12BA:0100.000C: parse failed [ 286.383364][ T49] sony 0003:12BA:0100.000C: probe with driver sony failed with error -22 [ 286.838695][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.889186][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 286.889198][ T30] audit: type=1326 audit(1761216132.796:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044658efc9 code=0x7ffc0000 [ 286.938675][ T30] audit: type=1326 audit(1761216132.836:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044658efc9 code=0x7ffc0000 [ 287.074698][ T30] audit: type=1326 audit(1761216132.836:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f044658efc9 code=0x7ffc0000 [ 287.103121][ T30] audit: type=1326 audit(1761216132.836:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044658efc9 code=0x7ffc0000 [ 287.133118][ T30] audit: type=1326 audit(1761216132.836:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044658efc9 code=0x7ffc0000 [ 287.198429][ T30] audit: type=1326 audit(1761216132.836:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f044658efc9 code=0x7ffc0000 [ 287.204923][ T8248] [U]  [ 287.233764][ T30] audit: type=1326 audit(1761216132.836:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044658efc9 code=0x7ffc0000 [ 287.234183][ T8248] [U] K{‘ [ 287.316541][ T30] audit: type=1326 audit(1761216132.836:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044658efc9 code=0x7ffc0000 [ 287.343830][ T8248] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 287.353046][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.354529][ T8248] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 287.383192][ T30] audit: type=1326 audit(1761216132.836:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f044658efc9 code=0x7ffc0000 [ 287.415336][ T30] audit: type=1326 audit(1761216132.836:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.1.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044658efc9 code=0x7ffc0000 [ 287.415649][ T8248] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 287.479214][ T8248] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 287.529539][ T8248] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 287.559471][ T8248] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 287.576019][ T8248] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 287.597277][ T8248] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 288.095581][ T8248] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 288.164203][ T8248] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 288.210744][ T8248] [U] 22½“Æ©ÐÛ©X?0;3U± [ 288.226262][ T8248] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 288.381393][ T8248] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 288.448433][ T8248] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 288.470522][ T8248] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 288.537055][ T5891] usb 5-1: USB disconnect, device number 34 [ 288.548638][ T8248] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 288.667389][ T8248] [U] ¹ EC [ 288.698754][ T8248] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 288.750368][ T8248] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 288.920407][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.178130][ T5936] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 289.398787][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.408770][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.458126][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 289.558559][ T5936] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 289.629359][ T5936] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.698254][ T5936] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 289.741554][ T5936] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 289.772048][ T5936] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 289.859588][ T5936] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.898499][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 289.928586][ T5936] usb 5-1: SerialNumber: syz [ 289.958871][ T8266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 289.969175][ T5891] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 289.978706][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.001588][ T8266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 290.040504][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.044333][ T5936] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 290.186892][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 290.201498][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.318319][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.356099][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.378090][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.406230][ T5891] usb 2-1: Product: syz [ 290.425411][ T5891] usb 2-1: Manufacturer: syz [ 290.465933][ T5891] usb 2-1: SerialNumber: syz [ 290.645602][ T5936] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 290.696311][ T5936] usb 5-1: USB disconnect, device number 35 [ 291.016058][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.060978][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.211163][ T8327] netlink: 'syz.2.611': attribute type 30 has an invalid length. [ 292.438379][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.875913][ T5891] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 292.911995][ T5891] cdc_ncm 2-1:1.0: bind() failure [ 292.945264][ T5891] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 292.975487][ T5891] cdc_ncm 2-1:1.1: bind() failure [ 293.040077][ T5891] usb 2-1: USB disconnect, device number 39 [ 293.154497][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.355412][ T8347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.616'. [ 293.406382][ T8347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.616'. [ 293.420610][ T8350] binder: BINDER_SET_CONTEXT_MGR already set [ 293.429572][ T8350] binder: 8348:8350 ioctl 4018620d 200000000040 returned -16 [ 293.678263][ T5836] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 293.854653][ T5836] usb 4-1: device descriptor read/64, error -71 [ 294.018188][ T5891] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 294.139498][ T5836] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 294.225625][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.236266][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 294.260916][ T5891] usb 2-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.304763][ T5891] usb 2-1: config 1 interface 0 has no altsetting 0 [ 294.323119][ T5891] usb 2-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.40 [ 294.348285][ T5836] usb 4-1: device descriptor read/64, error -71 [ 294.368271][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.387918][ T5891] usb 2-1: Product: 우ই곧ݦ싿奊⣥બ꒫溬ᴛ肦탾㴽奓똨떑꾸췩棅ཀᖢᲑ곲귄౫솴幤ô滲ë´ã¬‰î¸‘ⓕ♪欪커鄫긡 [ 294.425281][ T5891] usb 2-1: Manufacturer: 䀄ꖢ뎙㪋耔釧陕죤嶔הּá¢ìŽ–ã¢î‚·êŽë¤æ…µç¦£ã½©åºë†£êç‚í–抇嬉ⴶ털ᙸ슪縧겜알ꮡ昧䴌誯é™æ™‚軀냕à¤îµ¡ã¸¢ç£µâš¼ç£ƒìŽ”祯떪è‚㊾ୋ῱胆㌛벻鿋꾩᱂ኧì…ꢘ䞊摺éˆï¹£é‰¦ç¸Ÿî¢¹è«–æ„™î©ä­­â‡¶íŸ«ë­ áŸ£ëœ¨èžžêŒŸä™ë¢­ä«­ì§™ä‰µæ¨Œâ—’ڊ婨ꎛ䳎Ĕ秣胹缟é‡â½²ê¤´î‹œé¢ê‡”俩̓뺢祙튀჎㶣᪟ꋸ瓀櫇翪囥 [ 294.494189][ T5891] usb 2-1: SerialNumber: Ñ… [ 294.532942][ T5836] usb usb4-port1: attempt power cycle [ 294.795690][ T8358] netlink: 32 bytes leftover after parsing attributes in process `syz.1.620'. [ 294.824158][ T5891] usbhid 2-1:1.0: can't add hid device: -71 [ 294.833535][ T5891] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 294.897302][ T5891] usb 2-1: USB disconnect, device number 40 [ 294.898158][ T5836] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 294.991786][ T5836] usb 4-1: device descriptor read/8, error -71 [ 295.158735][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.169062][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.238448][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.258153][ T5836] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 295.309582][ T5836] usb 4-1: device descriptor read/8, error -71 [ 295.468696][ T5836] usb usb4-port1: unable to enumerate USB device [ 295.870800][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.288395][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.453129][ T8383] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 296.543486][ T8384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.626'. [ 296.846864][ T8384] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 296.950093][ T8384] bond2 (unregistering): Released all slaves [ 297.048347][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 297.318575][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.437139][ T5942] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 297.632748][ T8415] netlink: 72 bytes leftover after parsing attributes in process `syz.2.633'. [ 297.669701][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 297.739324][ T5942] usb 4-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.909661][ T5942] usb 4-1: config 1 interface 0 has no altsetting 0 [ 297.930729][ T5942] usb 4-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.40 [ 298.058523][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.072513][ T5942] usb 4-1: Product: 우ই곧ݦ싿奊⣥બ꒫溬ᴛ肦탾㴽奓똨떑꾸췩棅ཀᖢᲑ곲귄౫솴幤ô滲ë´ã¬‰î¸‘ⓕ♪欪커鄫긡 [ 298.094132][ T5942] usb 4-1: Manufacturer: 䀄ꖢ뎙㪋耔釧陕죤嶔הּá¢ìŽ–ã¢î‚·êŽë¤æ…µç¦£ã½©åºë†£êç‚í–抇嬉ⴶ털ᙸ슪縧겜알ꮡ昧䴌誯é™æ™‚軀냕à¤îµ¡ã¸¢ç£µâš¼ç£ƒìŽ”祯떪è‚㊾ୋ῱胆㌛벻鿋꾩᱂ኧì…ꢘ䞊摺éˆï¹£é‰¦ç¸Ÿî¢¹è«–æ„™î©ä­­â‡¶íŸ«ë­ áŸ£ëœ¨èžžêŒŸä™ë¢­ä«­ì§™ä‰µæ¨Œâ—’ڊ婨ꎛ䳎Ĕ秣胹缟é‡â½²ê¤´î‹œé¢ê‡”俩̓뺢祙튀჎㶣᪟ꋸ瓀櫇翪囥 [ 298.198621][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.301721][ T5942] usb 4-1: SerialNumber: Ñ… [ 298.358598][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.664392][ T8403] netlink: 32 bytes leftover after parsing attributes in process `syz.3.631'. [ 298.692887][ T5942] usbhid 4-1:1.0: can't add hid device: -71 [ 298.743513][ T5942] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 298.771349][ T5942] usb 4-1: USB disconnect, device number 34 [ 298.998164][ T5891] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 299.210109][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 299.226448][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.247355][ T5891] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 299.260295][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 299.284433][ T5891] usb 5-1: Product: syz [ 299.295257][ T5891] usb 5-1: Manufacturer: syz [ 299.306037][ T5891] usb 5-1: SerialNumber: syz [ 299.317903][ T5891] usb 5-1: config 0 descriptor?? [ 299.347156][ T5891] usb 5-1: no audio or video endpoints found [ 299.399062][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.541587][ T1221] usb 5-1: USB disconnect, device number 36 [ 300.278807][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.288638][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.338236][ T1221] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 300.438365][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.498938][ T1221] usb 4-1: device descriptor read/64, error -71 [ 300.510602][ T5936] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 300.640740][ T8463] netlink: 5 bytes leftover after parsing attributes in process `syz.4.648'. [ 300.689020][ T5936] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 300.704610][ T5936] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 300.716483][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.734848][ T5936] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 300.758148][ T1221] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 300.938402][ T1221] usb 4-1: device descriptor read/64, error -71 [ 301.070023][ T1221] usb usb4-port1: attempt power cycle [ 301.419712][ T1221] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 301.471076][ T1221] usb 4-1: device descriptor read/8, error -71 [ 301.480201][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.561673][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.768599][ T1221] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 301.800068][ T1221] usb 4-1: device descriptor read/8, error -71 [ 301.808183][ T5936] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 301.856881][ T5936] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 301.878541][ T5936] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 301.928783][ T1221] usb usb4-port1: unable to enumerate USB device [ 301.988379][ T49] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 302.142289][ T1221] usb 3-1: USB disconnect, device number 46 [ 302.165160][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 302.181201][ T49] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 302.195584][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 12336, setting to 64 [ 302.213724][ T49] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 302.225780][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.268773][ T49] usb 5-1: config 0 descriptor?? [ 302.284628][ T49] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 302.518569][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.748321][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 302.748340][ T30] audit: type=1326 audit(1761216148.646:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.2.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f24f9d8efc9 code=0x7ffc0000 [ 303.208138][ T5936] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 303.318315][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 303.334758][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.391228][ T5936] usb 3-1: Using ep0 maxpacket: 32 [ 303.420258][ T5936] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.455132][ T5936] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.467940][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.573488][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.584994][ T5936] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00 [ 303.654026][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.671502][ T5936] usb 3-1: config 0 descriptor?? [ 304.096239][ T5936] hid-corsair-void 0003:1B1C:0A31.000D: item fetching failed at offset 0/4 [ 304.119436][ T5936] hid-corsair-void 0003:1B1C:0A31.000D: parse failed (reason: -22) [ 304.130843][ T5936] hid-corsair-void 0003:1B1C:0A31.000D: probe with driver hid-corsair-void failed with error -22 [ 304.313824][ T49] usb 3-1: USB disconnect, device number 47 [ 304.506431][ T5936] usb 5-1: USB disconnect, device number 37 [ 304.600061][ T1221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.961927][ T5936] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 305.123969][ T8530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.670'. [ 305.169889][ T5936] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 305.182228][ T5936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.197531][ T5936] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 305.210479][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 305.219871][ T5936] usb 5-1: Product: syz [ 305.225641][ T5936] usb 5-1: Manufacturer: syz [ 305.231713][ T5936] usb 5-1: SerialNumber: syz [ 305.241309][ T5936] usb 5-1: config 0 descriptor?? [ 305.258502][ T5936] usb 5-1: selecting invalid altsetting 0 [ 305.398581][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.605734][ T30] audit: type=1326 audit(1761216151.506:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 305.640880][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.700116][ T30] audit: type=1326 audit(1761216151.506:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 305.727802][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.774629][ T5891] usb 5-1: USB disconnect, device number 38 [ 305.776701][ T30] audit: type=1326 audit(1761216151.506:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 305.808672][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.885552][ T8540] netlink: 100 bytes leftover after parsing attributes in process `syz.2.673'. [ 305.915239][ T30] audit: type=1326 audit(1761216151.546:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 305.941130][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.019192][ T30] audit: type=1326 audit(1761216151.546:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 306.048167][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.058405][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.103472][ T30] audit: type=1326 audit(1761216151.546:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 306.134308][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.511267][ T30] audit: type=1326 audit(1761216151.546:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 306.538825][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.627383][ T30] audit: type=1326 audit(1761216151.546:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 306.659367][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.687951][ T8557] AppArmor: change_hat: Invalid input 'x' [ 306.688686][ T8557] netlink: 72 bytes leftover after parsing attributes in process `syz.4.677'. [ 306.706957][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.727353][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.677'. [ 306.758171][ T30] audit: type=1326 audit(1761216151.546:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.0.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 306.762366][ T8557] netlink: 40 bytes leftover after parsing attributes in process `syz.4.677'. [ 307.321446][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.573401][ T8566] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 307.729457][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.798207][ T5936] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 308.135243][ T8580] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 308.141177][ T1221] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 308.230879][ T5936] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 308.239557][ T5936] usb 3-1: can't read configurations, error -22 [ 308.378279][ T5936] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 308.468351][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.508246][ T1221] usb 2-1: Using ep0 maxpacket: 16 [ 308.560936][ T1221] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 308.572474][ T1221] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.616544][ T1221] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.660406][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.674808][ T1221] usb 2-1: Product: syz [ 308.682650][ T1221] usb 2-1: Manufacturer: syz [ 308.692479][ T1221] usb 2-1: SerialNumber: syz [ 308.720565][ T5936] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 308.754266][ T5936] usb 3-1: can't read configurations, error -22 [ 308.767910][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.784898][ T5936] usb usb3-port1: attempt power cycle [ 309.059350][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 309.059367][ T30] audit: type=1326 audit(1761216154.966:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8588 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a38efc9 code=0x7ffc0000 [ 309.094428][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.120313][ T30] audit: type=1326 audit(1761216154.966:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8588 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a38efc9 code=0x7ffc0000 [ 309.147434][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.154850][ T30] audit: type=1326 audit(1761216154.966:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8588 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a38efc9 code=0x7ffc0000 [ 309.191073][ T5936] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 309.232261][ T5936] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 309.244207][ T5936] usb 3-1: can't read configurations, error -22 [ 309.246565][ T30] audit: type=1326 audit(1761216154.966:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8588 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fad8a38efc9 code=0x7ffc0000 [ 309.281500][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.290135][ T30] audit: type=1326 audit(1761216154.966:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8588 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a38efc9 code=0x7ffc0000 [ 309.328198][ T30] audit: type=1326 audit(1761216154.966:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8588 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a38efc9 code=0x7ffc0000 [ 309.353804][ T8570] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 309.366286][ T30] audit: type=1326 audit(1761216154.966:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8588 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fad8a38efc9 code=0x7ffc0000 [ 309.391964][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.399047][ T5936] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 309.430212][ T5936] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 309.442097][ T5936] usb 3-1: can't read configurations, error -22 [ 309.446147][ T30] audit: type=1326 audit(1761216154.966:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8588 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a38efc9 code=0x7ffc0000 [ 309.458954][ T5936] usb usb3-port1: unable to enumerate USB device [ 309.474465][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.519459][ T30] audit: type=1326 audit(1761216154.966:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8588 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a38efc9 code=0x7ffc0000 [ 309.550303][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.599073][ T30] audit: type=1326 audit(1761216154.966:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8588 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8a38efc9 code=0x7ffc0000 [ 309.625096][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.798904][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.418201][ T49] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 310.747771][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.808580][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.836614][ T1221] usb 2-1: 0:2 : does not exist [ 310.842453][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.872540][ T8619] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 310.917197][ T49] usb 4-1: unable to get BOS descriptor or descriptor too short [ 310.934309][ T49] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 310.962536][ T1221] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 310.979270][ T8619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.694'. [ 311.002521][ T1221] usb 2-1: USB disconnect, device number 41 [ 311.027994][ T49] usb 4-1: can't read configurations, error -71 [ 311.090059][ T7508] udevd[7508]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.178166][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.248607][ T8619] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 311.353236][ T8619] bond2 (unregistering): Released all slaves [ 311.798844][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.879070][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.208750][ T5891] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 312.299310][ T1221] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 312.398616][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 312.422185][ T5891] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 312.453492][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.477072][ T5891] usb 5-1: config 0 descriptor?? [ 312.498203][ T1221] usb 4-1: Using ep0 maxpacket: 8 [ 312.522537][ T1221] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 312.539469][ T8653] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.547732][ T8653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.557531][ T8653] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.566023][ T8653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.577036][ T5936] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 312.620724][ T1221] usb 4-1: can't read configurations, error -22 [ 312.721187][ T5891] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 312.750505][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.778641][ T1221] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 312.808147][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 312.839163][ T5891] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 312.847571][ T5891] usb 5-1: media controller created [ 312.858666][ T5936] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 312.898863][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.918445][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.945023][ T5936] usb 3-1: config 0 has no interface number 0 [ 312.984337][ T1221] usb 4-1: Using ep0 maxpacket: 8 [ 312.991060][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 312.995371][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.000934][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 313.015156][ T1221] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 313.034617][ T5936] usb 3-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 313.048350][ T8669] netlink: 'syz.1.707': attribute type 30 has an invalid length. [ 313.060792][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.079352][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.109887][ T5936] usb 3-1: Product: syz [ 313.115388][ T5936] usb 3-1: Manufacturer: syz [ 313.124783][ T1221] usb 4-1: can't read configurations, error -22 [ 313.153253][ T8671] netlink: 'syz.1.707': attribute type 30 has an invalid length. [ 313.153378][ T1221] usb usb4-port1: attempt power cycle [ 313.166750][ T5891] az6027: usb out operation failed. (-71) [ 313.179738][ T5936] usb 3-1: SerialNumber: syz [ 313.198734][ T5936] usb 3-1: config 0 descriptor?? [ 313.207053][ T1107] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.208491][ T5891] az6027: usb out operation failed. (-71) [ 313.226103][ T5891] stb0899_attach: Driver disabled by Kconfig [ 313.237383][ T5936] usb 3-1: bad CDC descriptors [ 313.269830][ T5891] az6027: no front-end attached [ 313.269830][ T5891] [ 313.290005][ T1107] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.314139][ T5891] az6027: usb out operation failed. (-71) [ 313.335158][ T1107] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.335580][ T8673] netlink: 'syz.0.708': attribute type 10 has an invalid length. [ 313.359016][ T5891] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 313.371023][ T5891] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 313.385279][ T1107] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.388782][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.708'. [ 313.422469][ T5891] dvb-usb: schedule remote query interval to 400 msecs. [ 313.451531][ T5891] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 313.497027][ T5891] usb 5-1: USB disconnect, device number 39 [ 313.529793][ T1221] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 313.540316][ T8674] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 313.560050][ T8651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.570868][ T8677] netlink: 124 bytes leftover after parsing attributes in process `syz.1.709'. [ 313.579393][ T1221] usb 4-1: Using ep0 maxpacket: 8 [ 313.587824][ T1221] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 313.608447][ T8651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.634803][ T8674] bond2 (unregistering): Released all slaves [ 313.639338][ T1221] usb 4-1: can't read configurations, error -22 [ 313.655683][ T5891] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 313.684373][ T5911] usb 3-1: USB disconnect, device number 52 [ 313.818200][ T1221] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 313.859881][ T1221] usb 4-1: Using ep0 maxpacket: 8 [ 313.869961][ T1221] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 313.888564][ T1221] usb 4-1: can't read configurations, error -22 [ 313.911265][ T1221] usb usb4-port1: unable to enumerate USB device [ 313.928254][ T5936] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 313.958696][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.073635][ T30] kauditd_printk_skb: 186 callbacks suppressed [ 314.073653][ T30] audit: type=1326 audit(1761216159.976:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.0.712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f2440d8efc9 code=0x0 [ 314.110818][ T5936] usb 2-1: device descriptor read/64, error -71 [ 314.186509][ T8695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.348188][ T5936] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 314.461741][ T8695] netlink: 88 bytes leftover after parsing attributes in process `syz.4.711'. [ 314.509558][ T5936] usb 2-1: device descriptor read/64, error -71 [ 314.638568][ T5936] usb usb2-port1: attempt power cycle [ 314.928406][ T5942] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 315.008246][ T5936] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 315.049071][ T5936] usb 2-1: device descriptor read/8, error -71 [ 315.108136][ T5942] usb 3-1: Using ep0 maxpacket: 8 [ 315.124572][ T5942] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 315.147710][ T5942] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.162277][ T5942] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.174890][ T5942] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.188960][ T5942] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.207289][ T5942] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 315.220276][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.319435][ T5936] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 315.349443][ T5936] usb 2-1: device descriptor read/8, error -71 [ 315.388185][ T5891] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 315.436395][ T5942] usb 3-1: usb_control_msg returned -32 [ 315.444073][ T5942] usbtmc 3-1:16.0: can't read capabilities [ 315.459313][ T5936] usb usb2-port1: unable to enumerate USB device [ 315.478278][ T1221] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 315.548231][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 315.557381][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.571625][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.583829][ T5891] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 315.595255][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.606589][ T5891] usb 5-1: config 0 descriptor?? [ 315.671741][ T1221] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.684101][ T1221] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.698593][ T1221] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.709397][ T1221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.895225][ T8707] kvm: pic: non byte write [ 315.924847][ T1221] usb 4-1: usb_control_msg returned -32 [ 315.931633][ T1221] usbtmc 4-1:16.0: can't read capabilities [ 315.958393][ T1221] usb 4-1: USB disconnect, device number 45 [ 316.115550][ T5891] hid (null): usage index exceeded [ 316.363205][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.377576][ T5891] usb 5-1: string descriptor 0 read error: -71 [ 316.409511][ T5891] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 316.421556][ T5891] letsketch 0003:6161:4D15.000E: probe with driver letsketch failed with error -32 [ 316.441996][ T5891] usb 5-1: USB disconnect, device number 40 [ 316.500695][ T8716] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 316.660124][ T8719] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 316.670367][ T8719] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 316.978703][ T5891] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 317.074706][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.720'. [ 317.171069][ T5891] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.198359][ T5891] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 317.354669][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 317.369242][ T5891] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 317.369872][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.472064][ T5891] usb 2-1: config 0 descriptor?? [ 318.028261][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.076417][ T8721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 318.177301][ T1221] usb 3-1: USB disconnect, device number 53 [ 318.201119][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.549729][ T5891] hid-u2fzero 0003:10C4:8ACF.000F: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0 [ 318.690571][ T5891] hid-u2fzero 0003:10C4:8ACF.000F: U2F Zero LED initialised [ 318.720400][ T5891] hid-u2fzero 0003:10C4:8ACF.000F: U2F Zero RNG initialised [ 319.098275][ T49] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 319.239494][ T49] usb 3-1: device descriptor read/64, error -71 [ 319.483783][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.494821][ T49] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 319.658151][ T49] usb 3-1: device descriptor read/64, error -71 [ 319.768412][ T10] usb 2-1: USB disconnect, device number 46 [ 319.783694][ T49] usb usb3-port1: attempt power cycle [ 319.954854][ T8752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.728'. [ 319.973017][ T8755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.003921][ T8752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.728'. [ 320.072819][ T8756] fuse: Bad value for 'fd' [ 320.138146][ T49] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 320.189007][ T49] usb 3-1: device descriptor read/8, error -71 [ 320.254647][ T8766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.732'. [ 320.498614][ T49] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 320.511019][ T8755] netlink: 88 bytes leftover after parsing attributes in process `syz.0.727'. [ 320.579948][ T49] usb 3-1: device descriptor read/8, error -71 [ 320.754068][ T49] usb usb3-port1: unable to enumerate USB device [ 320.998178][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 321.168491][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 321.218937][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 321.283351][ T10] usb 5-1: config 0 has no interface number 0 [ 321.328567][ T10] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 321.367078][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.462897][ T10] usb 5-1: Product: syz [ 321.477272][ T10] usb 5-1: Manufacturer: syz [ 321.491090][ T10] usb 5-1: SerialNumber: syz [ 321.560758][ T10] usb 5-1: config 0 descriptor?? [ 321.575420][ T8780] netlink: 'syz.3.736': attribute type 10 has an invalid length. [ 321.592681][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 321.606535][ T8780] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.619297][ T8780] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.645048][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'. [ 321.716918][ T8780] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.725127][ T8780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.732921][ T8780] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.742991][ T8780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.883524][ T8780] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 321.947346][ T8781] bridge_slave_1: left allmulticast mode [ 321.953884][ T8781] bridge_slave_1: left promiscuous mode [ 321.973984][ T8781] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.016379][ T8781] bridge_slave_0: left allmulticast mode [ 322.027707][ T8781] bridge_slave_0: left promiscuous mode [ 322.039324][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.065909][ T8781] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.160206][ T8781] bond0: (slave bridge0): Releasing backup interface [ 322.952712][ T10] gspca_spca1528: reg_w err -110 [ 323.052028][ T10] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 323.369750][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.380845][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.685918][ T5891] usb 5-1: USB disconnect, device number 41 [ 323.962214][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.973493][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.994761][ T8816] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.024168][ T8814] binder: 8813:8814 ioctl c0306201 2000000001c0 returned -22 [ 324.512342][ T8816] netlink: 88 bytes leftover after parsing attributes in process `syz.4.747'. [ 325.238801][ T1117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.561816][ T8845] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 326.727800][ T30] audit: type=1326 audit(1761216172.626:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 326.870014][ T30] audit: type=1326 audit(1761216172.626:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 326.965469][ T30] audit: type=1326 audit(1761216172.666:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 327.094494][ T30] audit: type=1326 audit(1761216172.666:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 327.147651][ T30] audit: type=1326 audit(1761216172.666:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 327.252193][ T30] audit: type=1326 audit(1761216172.666:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 327.338161][ T30] audit: type=1326 audit(1761216172.666:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 327.368875][ T5836] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 327.421058][ T30] audit: type=1326 audit(1761216172.666:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 327.498185][ T30] audit: type=1326 audit(1761216172.666:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2440d8d810 code=0x7ffc0000 [ 327.542666][ T8857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.558318][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 327.587865][ T5836] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 327.615671][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.624456][ T30] audit: type=1326 audit(1761216172.666:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2440d8efc9 code=0x7ffc0000 [ 327.663674][ T5836] usb 2-1: Product: syz [ 327.718136][ T5836] usb 2-1: Manufacturer: syz [ 327.725140][ T5836] usb 2-1: SerialNumber: syz [ 327.743065][ T5836] usb 2-1: config 0 descriptor?? [ 327.751512][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.757'. [ 327.770365][ T5836] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 327.781191][ T5836] usb 2-1: Detected FT-X [ 327.797092][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.757'. [ 327.808782][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.909150][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 327.948183][ T8870] openvswitch: netlink: Key type 14342 is out of range max 32 [ 327.973567][ T5836] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 328.154947][ T8875] fuse: Bad value for 'rootmode' [ 328.198451][ T5891] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 328.338159][ T5891] usb 4-1: device descriptor read/64, error -71 [ 328.391771][ T8879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.454903][ T5836] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 328.528443][ T1117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.605194][ T5891] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 328.830616][ T8879] netlink: 88 bytes leftover after parsing attributes in process `syz.4.763'. [ 328.918354][ T5891] usb 4-1: device descriptor read/64, error -71 [ 329.039889][ T5891] usb usb4-port1: attempt power cycle [ 329.106958][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.162566][ T1221] usb 2-1: USB disconnect, device number 47 [ 329.176933][ T1221] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 329.228942][ T1221] ftdi_sio 2-1:0.0: device disconnected [ 329.358223][ T5836] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 329.408194][ T5891] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 329.439249][ T5891] usb 4-1: device descriptor read/8, error -71 [ 329.518169][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 329.537893][ T5836] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 329.552836][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.563405][ T5836] usb 3-1: Product: syz [ 329.570216][ T5836] usb 3-1: Manufacturer: syz [ 329.576161][ T5836] usb 3-1: SerialNumber: syz [ 329.597108][ T5836] usb 3-1: config 0 descriptor?? [ 329.678273][ T5891] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 329.719037][ T5891] usb 4-1: device descriptor read/8, error -71 [ 329.813546][ T5836] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 329.831074][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.769'. [ 329.843090][ T8898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.769'. [ 329.854535][ T5891] usb usb4-port1: unable to enumerate USB device [ 329.888463][ T8898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.926475][ T8898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.110106][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 330.128192][ T5891] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 330.329328][ T5891] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 330.358204][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.409177][ T5891] usb 2-1: config 0 descriptor?? [ 330.452233][ T5891] cp210x 2-1:0.0: cp210x converter detected [ 330.658647][ T5891] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 330.863692][ T5891] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 330.915571][ T5891] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 330.946798][ T5891] usb 2-1: cp210x converter now attached to ttyUSB0 [ 331.008349][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.011779][ T5891] usb 2-1: USB disconnect, device number 48 [ 331.081376][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 331.144141][ T5891] cp210x 2-1:0.0: device disconnected [ 331.463890][ T5836] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 331.512156][ T5836] usb 3-1: USB disconnect, device number 58 [ 332.196750][ T8939] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.297698][ T8937] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117.87.150326315.2007.15776.1 [ 332.309712][ T8937] PKCS7: Only support pkcs7_signedData type [ 332.375822][ T8942] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 332.462190][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 332.868319][ T49] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 332.918742][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.058206][ T49] usb 5-1: device descriptor read/64, error -71 [ 333.179656][ T8939] netlink: 88 bytes leftover after parsing attributes in process `syz.0.777'. [ 333.318371][ T49] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 333.408912][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 333.528531][ T49] usb 5-1: device descriptor read/64, error -71 [ 333.648578][ T49] usb usb5-port1: attempt power cycle [ 333.739937][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.782'. [ 333.758258][ T5836] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 333.916121][ T5836] usb 2-1: device descriptor read/64, error -71 [ 333.931317][ T8963] binder: BINDER_SET_CONTEXT_MGR already set [ 333.941081][ T8963] binder: 8961:8963 ioctl 4018620d 200000000040 returned -16 [ 334.040826][ T49] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 334.088994][ T49] usb 5-1: device descriptor read/8, error -71 [ 334.200472][ T5836] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 334.207880][ T1117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.338164][ T49] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 334.350499][ T5836] usb 2-1: device descriptor read/64, error -71 [ 334.378890][ T49] usb 5-1: device descriptor read/8, error -71 [ 334.479070][ T5836] usb usb2-port1: attempt power cycle [ 334.506675][ T49] usb usb5-port1: unable to enumerate USB device [ 335.073502][ T5836] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 335.086032][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.119353][ T8978] netlink: 'syz.2.786': attribute type 10 has an invalid length. [ 335.139115][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.786'. [ 335.158923][ T5836] usb 2-1: device descriptor read/8, error -71 [ 335.179249][ T8978] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 335.210884][ T8978] bond2 (unregistering): Released all slaves [ 335.425796][ T5836] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 335.489917][ T5836] usb 2-1: device descriptor read/8, error -71 [ 335.608606][ T5836] usb usb2-port1: unable to enumerate USB device [ 335.791434][ T9000] netlink: 'syz.4.791': attribute type 1 has an invalid length. [ 335.904703][ T9002] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 336.061462][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 336.061483][ T30] audit: type=1326 audit(1761216181.946:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.3.794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f131f78efc9 code=0x0 [ 336.119106][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.154159][ T9008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.238094][ T9027] netlink: 'syz.1.799': attribute type 10 has an invalid length. [ 337.260493][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.799'. [ 337.271068][ T5891] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 337.380994][ T9027] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 337.430474][ T9027] bond1 (unregistering): Released all slaves [ 337.567016][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 337.603922][ T5891] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 337.614604][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.630656][ T5891] usb 4-1: config 0 has no interface number 0 [ 337.641179][ T5891] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 337.706861][ T5891] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 337.730590][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.867968][ T5891] usb 4-1: Product: syz [ 337.877011][ T5891] usb 4-1: Manufacturer: syz [ 338.065819][ T5891] usb 4-1: SerialNumber: syz [ 338.100999][ T5891] usb 4-1: config 0 descriptor?? [ 338.143664][ T5891] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 338.178670][ T5891] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 338.334067][ T5891] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 338.547496][ T5891] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 338.586401][ T5891] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 338.616623][ T5891] usb 4-1: USB disconnect, device number 50 [ 338.675619][ T5891] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 338.686221][ T1117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.836360][ T9080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.016136][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.355632][ T9080] netlink: 88 bytes leftover after parsing attributes in process `syz.1.811'. [ 340.600827][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.321491][ T5836] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 341.528435][ T5836] usb 4-1: config index 0 descriptor too short (expected 51370, got 72) [ 341.539876][ T5836] usb 4-1: config 135 has too many interfaces: 156, using maximum allowed: 32 [ 341.560546][ T5836] usb 4-1: config 135 has an invalid descriptor of length 101, skipping remainder of the config [ 341.590025][ T5836] usb 4-1: config 135 has 0 interfaces, different from the descriptor's value: 156 [ 341.658269][ T10] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 341.702486][ T5836] usb 4-1: config index 1 descriptor too short (expected 51370, got 72) [ 341.728964][ T5836] usb 4-1: config 135 has too many interfaces: 156, using maximum allowed: 32 [ 341.746549][ T5836] usb 4-1: config 135 has an invalid descriptor of length 101, skipping remainder of the config [ 341.760098][ T5836] usb 4-1: config 135 has 0 interfaces, different from the descriptor's value: 156 [ 341.773803][ T5836] usb 4-1: config index 2 descriptor too short (expected 51370, got 72) [ 341.799355][ T5836] usb 4-1: config 135 has too many interfaces: 156, using maximum allowed: 32 [ 341.828098][ T5836] usb 4-1: config 135 has an invalid descriptor of length 101, skipping remainder of the config [ 341.858274][ T5836] usb 4-1: config 135 has 0 interfaces, different from the descriptor's value: 156 [ 341.879106][ T1117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.896416][ T10] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 341.908134][ T5836] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.918800][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.938129][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 341.962465][ T10] usb 2-1: config 0 descriptor?? [ 341.971608][ T5836] usb 4-1: SerialNumber: syz [ 341.992312][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 342.192614][ T10] gp8psk: usb in 128 operation failed. [ 342.209958][ T10] gp8psk: usb in 137 operation failed. [ 342.222904][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 342.288221][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 342.330482][ T10] usb 2-1: USB disconnect, device number 53 [ 342.972629][ T5836] usb 4-1: USB disconnect, device number 51 [ 343.362108][ T9146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.567743][ T9142] tipc: Enabling of bearer rejected, failed to enable media [ 344.008776][ T9146] netlink: 88 bytes leftover after parsing attributes in process `syz.4.828'. [ 344.439312][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.646071][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.730423][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.048146][ T1221] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 346.362192][ T1221] usb 5-1: Using ep0 maxpacket: 8 [ 346.392216][ T1221] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 346.503629][ T1221] usb 5-1: config 2 has no interface number 0 [ 346.511886][ T1221] usb 5-1: config 2 interface 31 has no altsetting 0 [ 346.535391][ T1221] usb 5-1: New USB device found, idVendor=1a86, idProduct=e0a7, bcdDevice=53.3f [ 346.555116][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.588269][ T1221] usb 5-1: Product: syz [ 346.592657][ T1221] usb 5-1: Manufacturer: syz [ 346.597976][ T1221] usb 5-1: SerialNumber: syz [ 346.638694][ T5911] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 346.809043][ T5911] usb 3-1: device descriptor read/64, error -71 [ 347.150646][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 347.190193][ T9204] netlink: 'syz.3.842': attribute type 20 has an invalid length. [ 347.220660][ T9204] netlink: 'syz.3.842': attribute type 21 has an invalid length. [ 347.288153][ T5911] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 347.438179][ T5911] usb 3-1: device descriptor read/64, error -71 [ 347.488768][ T5942] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 347.568620][ T5911] usb usb3-port1: attempt power cycle [ 347.622263][ T9214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.639073][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.651369][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 347.659740][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.680865][ T5942] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 347.693570][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.708135][ T5836] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 347.724871][ T5942] usb 2-1: config 0 descriptor?? [ 347.885790][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.905680][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.917727][ T5911] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 347.918261][ T5836] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.948317][ T9214] netlink: 88 bytes leftover after parsing attributes in process `syz.0.845'. [ 347.962111][ T5911] usb 3-1: device descriptor read/8, error -71 [ 347.972518][ T5836] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.986814][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.003935][ T5836] usb 4-1: config 0 descriptor?? [ 348.165999][ T5942] stadia 0003:18D1:9400.0010: item fetching failed at offset 0/4 [ 348.176911][ T5942] stadia 0003:18D1:9400.0010: parse failed [ 348.193913][ T5942] stadia 0003:18D1:9400.0010: probe with driver stadia failed with error -22 [ 348.208639][ T5911] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 348.239413][ T5911] usb 3-1: device descriptor read/8, error -71 [ 348.358931][ T5911] usb usb3-port1: unable to enumerate USB device [ 348.390600][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 348.409360][ T9208] netlink: 48 bytes leftover after parsing attributes in process `syz.1.843'. [ 348.521670][ T5836] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd [ 348.554144][ T5836] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 348.696207][ T5911] usb 5-1: USB disconnect, device number 46 [ 348.811491][ T9221] program syz.4.846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.859117][ T5836] usb 4-1: USB disconnect, device number 52 [ 348.863282][ T9222] program syz.4.846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.974666][ T5936] usb 2-1: USB disconnect, device number 54 [ 349.015828][ T9226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.498318][ T5836] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 349.705120][ T5836] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 349.720753][ T9247] kvm: pic: non byte write [ 349.740806][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.778796][ T5836] usb 2-1: config 0 descriptor?? [ 349.842084][ T5836] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 350.093128][ T9257] sctp: [Deprecated]: syz.0.856 (pid 9257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.093128][ T9257] Use struct sctp_sack_info instead [ 350.191324][ T9230] netlink: 'syz.1.848': attribute type 10 has an invalid length. [ 350.277577][ T9230] team0: Cannot enslave team device to itself [ 350.339347][ T5836] gspca_sunplus: reg_w_riv err -71 [ 350.453279][ T5836] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 350.514581][ T5836] usb 2-1: USB disconnect, device number 55 [ 350.844288][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.061283][ T9269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.489556][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.411636][ T9282] JFS: charset not found [ 352.580705][ T9287] netlink: 'syz.2.861': attribute type 29 has an invalid length. [ 352.654626][ T9288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.862'. [ 352.669101][ T9287] netlink: 'syz.2.861': attribute type 29 has an invalid length. [ 352.679428][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.050827][ T9293] fuse: Bad value for 'fd' [ 353.408163][ T1221] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 353.583222][ T1221] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 353.602245][ T1221] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 353.624851][ T1221] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 353.645644][ T1221] usb 3-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.664704][ T1221] usb 3-1: config 1 interface 0 has no altsetting 0 [ 353.673297][ T5936] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 353.700222][ T1221] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 353.722601][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.743230][ T1221] usb 3-1: Product: syz [ 353.747788][ T1221] usb 3-1: Manufacturer: syz [ 353.774866][ T1221] usb 3-1: SerialNumber: syz [ 353.795822][ T9299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 353.813107][ T9299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 353.988092][ T5936] usb 2-1: not running at top speed; connect to a high speed hub [ 354.100379][ T5936] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 354.111022][ T5936] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 354.166358][ T5936] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.192087][ T5936] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 354.213513][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.233006][ T9299] trusted_key: encrypted_key: insufficient parameters specified [ 354.245368][ T5936] usb 2-1: Product: syz [ 354.252798][ T5936] usb 2-1: Manufacturer: syz [ 354.265571][ T5936] usb 2-1: SerialNumber: syz [ 354.378221][ T1221] rtl8150 3-1:1.0: couldn't find required endpoints [ 354.397947][ T1221] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 354.415570][ T1221] usb 3-1: USB disconnect, device number 63 [ 354.577943][ T9331] netlink: 6 bytes leftover after parsing attributes in process `syz.1.869'. [ 354.755232][ T9331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.896524][ T9336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.319693][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.545139][ T9341] veth1_to_batadv: entered promiscuous mode [ 356.391417][ T9349] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 356.399992][ T9349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 356.412674][ T9349] vhci_hcd vhci_hcd.0: Device attached [ 356.520384][ T5936] usb 2-1: 0:2 : does not exist [ 356.571963][ T5936] usb 2-1: USB disconnect, device number 56 [ 356.599216][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.648176][ T5836] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 356.657446][ T7508] udevd[7508]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.690704][ T5918] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 356.880600][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.907014][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.908239][ T1221] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 356.926972][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.956168][ T5918] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.968786][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.989165][ T5918] usb 3-1: config 0 descriptor?? [ 357.132838][ T1221] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.150701][ T1221] usb 4-1: config 1 has no interfaces? [ 357.165946][ T1221] usb 4-1: New USB device found, idVendor=12c1, idProduct=5015, bcdDevice= 0.00 [ 357.185228][ T1221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.500602][ T1221] usb 4-1: string descriptor 0 read error: -71 [ 357.521027][ T1221] usb 4-1: USB disconnect, device number 53 [ 357.591572][ T5918] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 357.633428][ T9376] tipc: Enabled bearer , priority 0 [ 357.688725][ T9377] syzkaller0: entered promiscuous mode [ 357.695362][ T9377] syzkaller0: entered allmulticast mode [ 357.788126][ T8039] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 357.917200][ T9379] tipc: Resetting bearer [ 358.044853][ T8039] usb 2-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 358.058154][ T8039] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.101905][ T8039] pwc: Logitech/Cisco VT Camera webcam detected. [ 358.129948][ T9349] usb 3-1: string descriptor 0 read error: -71 [ 358.130914][ T1221] usb 3-1: USB disconnect, device number 64 [ 358.183740][ T9379] tipc: Disabling bearer [ 358.240807][ T9352] vhci_hcd: connection reset by peer [ 358.267015][ T12] vhci_hcd: stop threads [ 358.272348][ T12] vhci_hcd: release socket [ 358.448964][ T12] vhci_hcd: disconnect device [ 358.519379][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.567112][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 359.158595][ T5942] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 359.327388][ T5942] usb 5-1: device descriptor read/64, error -71 [ 359.553302][ T9401] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.936055][ T5942] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 360.101334][ T5942] usb 5-1: device descriptor read/64, error -71 [ 360.251546][ T5942] usb usb5-port1: attempt power cycle [ 360.438618][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.608564][ T5942] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 360.641618][ T8039] pwc: Failed to set LED on/off time (-71) [ 360.649918][ T5942] usb 5-1: device descriptor read/8, error -71 [ 360.659951][ T8039] pwc: send_video_command error -71 [ 360.666450][ T8039] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 360.734913][ T8039] Philips webcam 2-1:127.0: probe with driver Philips webcam failed with error -71 [ 360.786649][ T8039] usb 2-1: USB disconnect, device number 57 [ 360.806034][ T9412] netlink: 68 bytes leftover after parsing attributes in process `syz.3.889'. [ 360.981741][ T5942] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 361.029232][ T5942] usb 5-1: device descriptor read/8, error -71 [ 361.108140][ T5911] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 361.148131][ T5942] usb usb5-port1: unable to enumerate USB device [ 361.280535][ T5911] usb 3-1: Using ep0 maxpacket: 8 [ 361.320395][ T5911] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 361.331301][ T5911] usb 3-1: config 179 has no interface number 0 [ 361.350324][ T5911] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 361.373471][ T5911] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 361.390626][ T5911] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 361.415304][ T5911] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 361.438574][ T9430] SET target dimension over the limit! [ 361.446207][ T5911] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 361.467650][ T5911] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 361.478628][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.497733][ T9416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 361.721646][ T5911] usb 3-1: USB disconnect, device number 65 [ 361.721721][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 361.721775][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 361.788441][ T5836] vhci_hcd: vhci_device speed not set [ 361.825117][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.898'. [ 362.077946][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 362.088746][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 362.116067][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 362.134271][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 362.148646][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 362.160846][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 362.161354][ T9446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.897'. [ 362.297371][ T49] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 362.359291][ T1117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.498142][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 362.510761][ T49] usb 5-1: unable to get BOS descriptor or descriptor too short [ 362.523179][ T49] usb 5-1: config 244 has an invalid interface number: 68 but max is 0 [ 363.297310][ T49] usb 5-1: config 244 has no interface number 0 [ 363.325143][ T49] usb 5-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 363.350931][ T49] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 363.428139][ T49] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 363.543943][ T49] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0 [ 363.640769][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.641029][ T49] usb 5-1: config 244 interface 68 has no altsetting 0 [ 363.683557][ T49] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 363.701037][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.712371][ T9452] syz.3.897 (9452): drop_caches: 2 [ 363.731590][ T9457] __nla_validate_parse: 45 callbacks suppressed [ 363.731611][ T9457] netlink: 40 bytes leftover after parsing attributes in process `syz.2.903'. [ 363.762092][ T49] usb 5-1: Product: syz [ 363.767382][ T49] usb 5-1: Manufacturer: syz [ 363.793165][ T49] usb 5-1: SerialNumber: syz [ 364.126475][ T9442] pimreg: entered allmulticast mode [ 364.139815][ T9442] pimreg: left allmulticast mode [ 364.351578][ T49] comedi comedi5: Endpoint has wrong direction [ 364.372130][ T49] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device. [ 364.470523][ T49] usb 5-1: USB disconnect, device number 52 [ 364.478362][ T8039] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 364.651782][ T8039] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 364.722843][ T8039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.742354][ T8039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.801315][ T8039] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 364.832954][ T8039] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 364.859074][ T8039] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 364.938368][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 364.983115][ T8039] usb 4-1: Manufacturer: syz [ 364.984869][ T31] Not tainted syzkaller #0 [ 365.002635][ T8039] usb 4-1: config 0 descriptor?? [ 365.033982][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 365.133890][ T31] task:kworker/1:0 state:D stack:20472 pid:24 tgid:24 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 365.171304][ T9480] fuse: Bad value for 'fd' [ 365.184921][ T9479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.196800][ T9479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.328170][ T5836] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 365.340542][ T31] Workqueue: usb_hub_wq hub_event [ 365.347485][ T31] Call Trace: [ 365.353656][ T31] [ 365.358665][ T31] __schedule+0x1798/0x4cc0 [ 365.364166][ T31] ? __lock_acquire+0xab9/0xd20 [ 365.414025][ T31] ? __pfx___schedule+0x10/0x10 [ 365.421746][ T31] ? schedule+0x91/0x360 [ 365.432497][ T31] schedule+0x165/0x360 [ 365.444935][ T31] schedule_timeout+0x9a/0x270 [ 365.453295][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 365.460430][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.467278][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.474900][ T8039] hid_parser_main: 613 callbacks suppressed [ 365.474924][ T8039] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 365.477358][ T31] ? wait_for_completion+0x267/0x5d0 [ 365.503808][ T31] wait_for_completion+0x2bf/0x5d0 [ 365.513610][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 365.522869][ T31] i2c_del_adapter+0x581/0x6e0 [ 365.532669][ T31] ? pvr2_hdw_disconnect+0x6d/0x500 [ 365.541259][ T31] ? rpm_resume+0xbf4/0x1610 [ 365.541422][ T5836] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 365.560633][ T1117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.572124][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.582571][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 365.590447][ T31] pvr2_i2c_core_done+0x58/0xb0 [ 365.596552][ T5836] usb 2-1: Product: syz [ 365.603025][ T31] pvr2_hdw_disconnect+0x9f/0x500 [ 365.603750][ T8039] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 365.609136][ T5836] usb 2-1: Manufacturer: syz [ 365.630372][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 365.642146][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 365.728430][ T5836] usb 2-1: SerialNumber: syz [ 365.741832][ T31] pvr2_context_disconnect+0x42/0x210 [ 365.758198][ T5836] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 365.797587][ T31] pvr_disconnect+0x78/0xe0 [ 365.858894][ T31] usb_unbind_interface+0x26e/0x910 [ 365.939329][ T5942] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 365.956907][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 365.997876][ T31] device_release_driver_internal+0x4d9/0x800 [ 366.066218][ T31] bus_remove_device+0x34d/0x410 [ 366.099635][ T9483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.114339][ T9483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.171762][ T31] device_del+0x511/0x8e0 [ 366.215530][ T31] ? __pm_runtime_barrier+0x212/0x460 [ 366.262282][ T31] ? __pfx_device_del+0x10/0x10 [ 366.278184][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 366.304137][ T31] usb_disable_device+0x3e9/0x8a0 [ 366.320544][ T31] usb_disconnect+0x330/0x950 [ 366.343539][ T31] hub_event+0x1cf5/0x4a20 [ 366.359341][ T9483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.378175][ T31] ? do_raw_spin_lock+0x121/0x290 [ 366.392500][ T31] ? register_lock_class+0x51/0x320 [ 366.404471][ T9483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.415207][ T31] ? __pfx_hub_event+0x10/0x10 [ 366.441072][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 366.472708][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.495991][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 366.522774][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 366.550316][ T31] process_scheduled_works+0xae1/0x17b0 [ 366.579804][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 366.603334][ T31] worker_thread+0x8a0/0xda0 [ 366.616580][ T31] kthread+0x711/0x8a0 [ 366.621877][ T31] ? __pfx_worker_thread+0x10/0x10 [ 366.627281][ T31] ? __pfx_kthread+0x10/0x10 [ 366.634145][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.643751][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.655508][ T31] ? __pfx_kthread+0x10/0x10 [ 366.662426][ T31] ret_from_fork+0x4bc/0x870 [ 366.671481][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 366.677789][ T31] ? __switch_to_asm+0x39/0x70 [ 366.685380][ T31] ? __switch_to_asm+0x33/0x70 [ 366.691551][ T31] ? __pfx_kthread+0x10/0x10 [ 366.697720][ T31] ret_from_fork_asm+0x1a/0x30 [ 366.706606][ T31] [ 366.710745][ T31] INFO: task kworker/0:4:5904 blocked for more than 145 seconds. [ 366.712756][ T5936] usb 2-1: USB disconnect, device number 58 [ 366.726193][ T31] Not tainted syzkaller #0 [ 366.734831][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 366.746217][ T31] task:kworker/0:4 state:D stack:21400 pid:5904 tgid:5904 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 366.762273][ T31] Workqueue: events pvr2_hdw_worker_poll [ 366.768609][ T31] Call Trace: [ 366.772956][ T31] [ 366.776285][ T31] __schedule+0x1798/0x4cc0 [ 366.782472][ T31] ? __pfx___schedule+0x10/0x10 [ 366.789602][ T31] ? schedule+0x91/0x360 [ 366.795524][ T31] schedule+0x165/0x360 [ 366.800266][ T31] schedule_preempt_disabled+0x13/0x30 [ 366.807702][ T31] __mutex_lock+0x7e6/0x1350 [ 366.815175][ T31] ? __mutex_lock+0x5bb/0x1350 [ 366.822392][ T31] ? pvr2_hdw_worker_poll+0x37/0x15b0 [ 366.828462][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 366.834587][ T31] ? __lock_acquire+0xab9/0xd20 [ 366.841533][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 366.849037][ T31] pvr2_hdw_worker_poll+0x37/0x15b0 [ 366.860179][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 366.869650][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.875581][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 366.883226][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 366.890378][ T31] process_scheduled_works+0xae1/0x17b0 [ 366.897113][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 366.905705][ T31] worker_thread+0x8a0/0xda0 [ 366.911038][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 366.920343][ T31] ? __kthread_parkme+0x7b/0x200 [ 366.925669][ T31] kthread+0x711/0x8a0 [ 366.931247][ T31] ? __pfx_worker_thread+0x10/0x10 [ 366.939104][ T31] ? __pfx_kthread+0x10/0x10 [ 366.944541][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.950410][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.956835][ T31] ? __pfx_kthread+0x10/0x10 [ 366.962100][ T31] ret_from_fork+0x4bc/0x870 [ 366.968077][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 366.973940][ T31] ? __switch_to_asm+0x39/0x70 [ 366.978228][ T8039] usb 4-1: reset high-speed USB device number 54 using dummy_hcd [ 366.980606][ T31] ? __switch_to_asm+0x33/0x70 [ 366.995041][ T31] ? __pfx_kthread+0x10/0x10 [ 367.000145][ T31] ret_from_fork_asm+0x1a/0x30 [ 367.005984][ T31] [ 367.009721][ T31] [ 367.009721][ T31] Showing all locks held in the system: [ 367.019132][ T31] 2 locks held by ksoftirqd/1/23: [ 367.024563][ T31] 6 locks held by kworker/1:0/24: [ 367.030582][ T31] #0: ffff8880202cf548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 367.046016][ T31] #1: ffffc900001e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 367.060335][ T31] #2: ffff8880276a8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 367.071118][ T31] #3: ffff88807e5dc198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 367.083202][ T5942] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 367.083752][ T31] #4: ffff88807f0e6160 (&dev->mutex [ 367.093486][ T5942] ath9k_htc: Failed to initialize the device [ 367.104225][ T31] ){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 367.117774][ T5936] usb 2-1: ath9k_htc: USB layer deinitialized [ 367.118272][ T31] #5: ffff88807f6f8188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_disconnect+0x6d/0x500 [ 367.136641][ T31] 1 lock held by khungtaskd/31: [ 367.142499][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 367.153929][ T31] 3 locks held by klogd/5190: [ 367.160371][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 367.173320][ T31] #1: ffffffff8e0581a0 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 367.186766][ T31] #2: ffffffff99a4d7a8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 367.199061][ T31] 2 locks held by getty/5591: [ 367.205350][ T31] #0: ffff8880330bc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 367.217743][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 367.232166][ T31] 3 locks held by kworker/0:4/5904: [ 367.238935][ T31] #0: ffff88801a059948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 367.259517][ T31] #1: ffffc9000ab4fba0 ((work_completion)(&hdw->workpoll)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 367.276401][ T31] #2: ffff88807f6f8188 (&hdw->big_lock_mutex){+.+.}-{4:4}, at: pvr2_hdw_worker_poll+0x37/0x15b0 [ 367.290705][ T31] 4 locks held by kworker/1:4/5911: [ 367.297036][ T31] #0: ffff8880202cf548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 367.311532][ T31] #1: ffffc9000abe7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 367.325368][ T31] #2: ffff88823bf04198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 367.337196][ T31] #3: ffff8880277fb518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x628/0x4a20 [ 367.349265][ T31] 5 locks held by kworker/1:7/8039: [ 367.355162][ T31] #0: ffff88801a059948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 367.369699][ T31] #1: ffffc9000df97ba0 ((work_completion)(&intf->reset_ws)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 367.382885][ T31] #2: ffff888057043198 (&dev->mutex){....}-{4:4}, at: usb_lock_device_for_reset+0x123/0x340 [ 367.395833][ T31] #3: ffff8880277fb518 (&port_dev->status_lock){+.+.}-{4:4}, at: usb_reset_device+0x549/0xae0 [ 367.410703][ T31] #4: ffff888027206968 (hcd->address0_mutex){+.+.}-{4:4}, at: usb_reset_and_verify_device+0x372/0x1a80 [ 367.424610][ T31] [ 367.426952][ T31] ============================================= [ 367.426952][ T31] [ 367.441374][ T31] NMI backtrace for cpu 1 [ 367.441404][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 367.441424][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.441434][ T31] Call Trace: [ 367.441440][ T31] [ 367.441448][ T31] dump_stack_lvl+0x189/0x250 [ 367.441479][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.441502][ T31] ? __pfx__printk+0x10/0x10 [ 367.441538][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 367.441560][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 367.441580][ T31] ? __pfx__printk+0x10/0x10 [ 367.441602][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 367.441630][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 367.441650][ T31] watchdog+0xf60/0xfa0 [ 367.441673][ T31] ? watchdog+0x1e2/0xfa0 [ 367.441695][ T31] kthread+0x711/0x8a0 [ 367.441721][ T31] ? __pfx_watchdog+0x10/0x10 [ 367.441737][ T31] ? __pfx_kthread+0x10/0x10 [ 367.441760][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 367.441781][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.441798][ T31] ? __pfx_kthread+0x10/0x10 [ 367.441822][ T31] ret_from_fork+0x4bc/0x870 [ 367.441842][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 367.441866][ T31] ? __switch_to_asm+0x39/0x70 [ 367.441880][ T31] ? __switch_to_asm+0x33/0x70 [ 367.441894][ T31] ? __pfx_kthread+0x10/0x10 [ 367.441916][ T31] ret_from_fork_asm+0x1a/0x30 [ 367.441947][ T31] [ 367.442000][ T31] Sending NMI from CPU 1 to CPUs 0: [ 367.619404][ C0] NMI backtrace for cpu 0 [ 367.619423][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 367.619441][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.619461][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 367.619487][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 31 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 367.619500][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 367.619515][ C0] RAX: 2897048adbb5e300 RBX: ffffffff81967b87 RCX: 2897048adbb5e300 [ 367.619527][ C0] RDX: 0000000000000001 RSI: ffffffff8d70bc84 RDI: ffffffff8bbf0460 [ 367.619538][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 367.619551][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cd370 [ 367.619563][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 367.619574][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 367.619587][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 367.619598][ C0] CR2: 00007f131f9b3ad8 CR3: 000000007cc86000 CR4: 00000000003526f0 [ 367.619612][ C0] Call Trace: [ 367.619621][ C0] [ 367.619627][ C0] default_idle+0x13/0x20 [ 367.619648][ C0] default_idle_call+0x73/0xb0 [ 367.619669][ C0] do_idle+0x1e7/0x510 [ 367.619689][ C0] ? __pfx_do_idle+0x10/0x10 [ 367.619712][ C0] cpu_startup_entry+0x44/0x60 [ 367.619728][ C0] rest_init+0x2de/0x300 [ 367.619744][ C0] start_kernel+0x3ae/0x410 [ 367.619767][ C0] x86_64_start_reservations+0x24/0x30 [ 367.619784][ C0] x86_64_start_kernel+0x143/0x1c0 [ 367.619800][ C0] common_startup_64+0x13e/0x147 [ 367.619827][ C0] [ 368.118920][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.560867][ T5911] usb 4-1: USB disconnect, device number 54 [ 368.760306][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.318660][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.888734][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.898452][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog