last executing test programs: 12.29410746s ago: executing program 3 (id=379): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000183282, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'macvtap0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x39, 0x2, [0x10001, 0x3]}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34615da6fd14d95d}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x6b, 0x1]}, 0x8, 0x800) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f0000000340)=@attr_pmu_init) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x2080) r6 = syz_open_dev$media(&(0x7f00000001c0), 0x5, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000140)={0x0, 0x6, 0x0, &(0x7f0000000440)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0]}) 11.217650651s ago: executing program 3 (id=385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x468, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x43c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x42c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa1, 0x6, 0x1, 0x0, "116dc9611895234599d9b7808ac770cd4f3c763befa2cb1da8934ae025bf8290ffe4d087f911eed1f18ee63392442208044261045530611e38cfc83a413a1ef1fc49563dba72dbec1f5a63f2077fa849e571157b09b1f89848f1d406068970cb245c47f46e9a77b9d5bd3aa75390d5ff281a1ecc0aeb7ec6437106f4675c99d313804b769e0a8cefaff00cd3d554f66830f33723abe6e0b97842e4402c"}, @NFTA_SET_ELEM_USERDATA={0x1c, 0x6, 0x1, 0x0, "260ed8ddf7438b9f5d85e3048a71c18c56d228f300000000"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x65, 0x6, 0x1, 0x0, "04a361a29fa4a177092873e599095b5a04c0c373626825c69b039f2d5121d73b767c533cbcc0eb7d2d72ca3accdc9134843d9cbe96a2dcedce7b58652e233a11a2e4241b04f9437fec0a06dc34d71eeca97b5b44b2b7c2b56005ceb549ac513873"}, @NFTA_SET_ELEM_DATA={0x240, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "722b2fe68f00a7e3851cc8ad8b35abc2818111201fff9e9392d57ed7962d55724b643b8e389b316306dd561520a7a3d221b10268c6f7af11742fa98c04d3b64f0424bc2e0733008f3b2954b45df3abf29e9b478e928526ec98339aca7f60406b8f7396b720cc527cd8c2305edd121f7a8e4f44aa3ec75d5f24d941745df6ccbb56ee13d92a56a22bad2d2d2bf5b29941cf7ad20a884001be6f9211feff91af6118201dd19212fabe69939685fa07eabdad9af7eedfe1a1ceb0bdb16b4ab0"}, @NFTA_DATA_VALUE={0xa9, 0x1, "a836630dc39a2d0380ad357b5977907e1cac1e65c07c440259617a9842bac01c62261a37e68d618dd62e01cca6b4e10562097eddf0306070f203be1c32be07910710bf755cb7a717b3f91de0785d2718ec52f5aec25f921dbef9fe0cdb16a456b9f9b71f1e59464c27d3a39161ee305936cce51189c65fe61505782bcb339fd35a54dde3a4b951b1914734bba43586db67d7fc3ad0754845b0a64ae8ac117733adede919f4"}, @NFTA_DATA_VALUE={0x9a, 0x1, "bb74416c2e0012a058836233fb823a5a13e929c6fd80fb0204b3b5ae409c771599c6416cd91d9b5c979309c7003f76fd10e0da06c1b9794cd494c3887a2ef2c9d20dfe00d749d5f73aeb7fdef8363c0f8fe3b2105802edba7ec5f34950c8d093e672361746fb7a5e56a4ae4bd0ffa411b8a4156bb267"}, @NFTA_DATA_VERDICT={0x50}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @reject={{}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x4ec}}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r3, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140)="8ce2ad4d4f95e087a7846d3f81304bd1958570440101080a0c6614c63c282429", 0x20, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$full(0xffffff9c, &(0x7f0000000140), 0x2081, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, 0x0, 0x0) r6 = openat$nvme_fabrics(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000300)=r6) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000040900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0xf9, 0x12e, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1b312d0b", @ANYRES16=r8, @ANYBLOB="00042cbd7000fddbdf254100000008000300", @ANYRES32, @ANYBLOB="080022012102000008002700000000000800a10006000000"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x1) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r8, 0xd9a5576693af938a, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x77}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5ab68648c6"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000880) open_by_handle_at(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000002000000b36600003b58495a695ed54d4cf27d1bade0c2b0dfadfd2d9d888a0f51a72f2d0541834bef53ec1bca367bcda012c9723afe14c475d60fee659a0ecc238991b20b3f187fad0a840c635003bf06b98c702c41c04d46e34d145cbb781f84f14b387db661539598bc9d4f621f426ce51f3d41653455e4aa4a5d088fabffefbedc2cb8f67eb6f3e188c9bd42a1c7e58436b906385dbab1fe21202f"], 0x10000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x14200}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}]}, 0x50}}, 0x0) 10.697544809s ago: executing program 3 (id=391): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x5, 0x101]) 9.998501207s ago: executing program 1 (id=392): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @remote}, {0x20000010304, @remote}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000080), 0x420a00, 0x0) r4 = getpid() r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x2500, 0x86, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast1, {[@generic={0x88, 0x2}]}}}}}) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x8, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000640)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10) 8.940637963s ago: executing program 1 (id=398): r0 = io_uring_setup(0x40006936, &(0x7f0000000080)={0x0, 0x5069, 0x400, 0x3, 0xbb}) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000380)=@v3={0x3000000, [{0x80, 0x7fff}, {0xe42, 0xffffffff}], r1}, 0x18, 0x8682de90d3a0492e) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0xffffffffffffffed, 0x100000000, 0x0, 0xfffffffffffffffd, 0x2000100001, 0x0, 0x2004c8, 0x7, 0x4, 0x1, 0x7, 0x8000, 0x2, 0x0, 0xad, 0xffffffffffffffff], 0xffff1000, 0x200}) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000240)={0x20003, 0x0, {[0x9, 0xc9, 0xf3, 0xc0, 0x7, 0xab, 0xd0f0, 0x2]}}) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) r5 = landlock_create_ruleset(&(0x7f0000000400)={0xa00, 0x3, 0x0, 0x10}, 0x30, 0x0) landlock_restrict_self(r5, 0x4) landlock_restrict_self(r5, 0x0) (async, rerun: 64) landlock_restrict_self(r5, 0x0) (rerun: 64) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x190) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0xf, 0x2, 0x0, 0x0, 0x1}, 0x30, 0x1) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x4) (async, rerun: 32) landlock_restrict_self(r6, 0x5) (rerun: 32) landlock_restrict_self(r6, 0x0) (async) r7 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) 8.731981251s ago: executing program 1 (id=400): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0xff00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 8.179438467s ago: executing program 1 (id=403): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1) r1 = syz_io_uring_setup(0x3f82, &(0x7f0000000080)={0x0, 0xecb0, 0x10000, 0x2, 0x1d8}, &(0x7f0000000280), &(0x7f0000000140), &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f00000001c0)=[0x10000, 0x8001], 0x2) inotify_init1(0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x1800002, {0x77359400}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000000) close_range(r0, r0, 0x0) 7.913257453s ago: executing program 1 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0xff000000, 0x0, {0x7}}}, 0x100}}, 0x4000000) 7.583181515s ago: executing program 3 (id=406): syz_open_dev$video(&(0x7f0000000000), 0x4483, 0x60080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000300)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) 7.582815431s ago: executing program 1 (id=407): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000183282, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'macvtap0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x39, 0x2, [0x10001, 0x3]}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34615da6fd14d95d}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x6b, 0x1]}, 0x8, 0x800) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f0000000340)=@attr_pmu_init) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x2080) r6 = syz_open_dev$media(&(0x7f00000001c0), 0x5, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000140)={0x0, 0x6, 0x0, &(0x7f0000000440)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0]}) 5.945095146s ago: executing program 2 (id=413): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x1}}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) pipe2$watch_queue(&(0x7f0000000440), 0x80) socket$unix(0x1, 0x2, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x200000, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r10 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) getsockopt$EBT_SO_GET_INIT_ENTRIES(r10, 0x0, 0x83, &(0x7f0000002580)={'broute\x00', 0x0, 0x3, 0x1000, [0x7ff, 0x3, 0x9, 0xffff, 0x8, 0x10000], 0x0, &(0x7f0000000180), &(0x7f0000001580)=""/4096}, &(0x7f0000002600)=0x50) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r11 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50", 0x6}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r12 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r12, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r12, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000004100)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40002180, 0x0) sendmmsg(r12, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r12, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x120, 0x0) sendmmsg$alg(r11, &(0x7f0000009780), 0x0, 0x10000001) socket$inet_sctp(0x2, 0x1, 0x84) fcntl$addseals(r11, 0x409, 0x5) 4.254796441s ago: executing program 4 (id=417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r5 = dup(r3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x1b4, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) socket$packet(0x11, 0x3, 0x300) write$P9_RSETATTR(r4, &(0x7f0000000140)={0x7, 0x1b, 0x2}, 0x7) splice(r6, 0x0, r3, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) close_range(r2, 0xffffffffffffffff, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r11, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0xc, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r14, {0x6}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x3c, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4.194234127s ago: executing program 2 (id=418): syz_usb_connect(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000aedf5510ac05269289b23f020301090222000100000000090400000103"], 0x0) 3.960937474s ago: executing program 3 (id=420): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000380)={0x5, 0x4, 0x3000, 0x1000, &(0x7f0000028000/0x1000)=nil, 0x8000000000000000, r3}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x20c, 0xd378, 0x3, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={r4, 0x531, 0x7d}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000ac0)={0x10, 0x7, 0x2, 0x9, 0x4000005, 0x81, "062100", 0x4, 0x2, 0x5, 0x8, 0x10, 0xc, 0x10}) socket$rds(0x15, 0x5, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) write$tun(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6111b712000011fffe8000000000000000000000000000aafc0100"/54], 0x36) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) prctl$PR_SET_NAME(0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000080)={0x1, 0x7, 0x5, &(0x7f0000000040)={0xe, "810556c721393f4084aa000000000000000000c000"}}) 3.818890431s ago: executing program 4 (id=421): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff3, @empty, 0x9}}, 0x10001fb, 0x2, 0xffff189a, 0x3, 0x26, 0xffffffb7, 0x1a}, 0x9c) 2.856948524s ago: executing program 4 (id=423): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xc80, 0x40, 0x10, 0x0, 0xd968d5b908ac0cde, 0x2, {0x0, 0x9}, {0x350, 0x20002, 0x4000}, {0xf1, 0xddff}, {0x1, 0x0, 0x7fe}, 0x1, 0x100, 0x9, 0xd615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xa, 0x100, 0x3, 0x3}) 2.632211579s ago: executing program 4 (id=424): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x140, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bf6bb789b9f161f2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf4}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="fee3af9b7ca0b59bd50cac6f57d288d3"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="957430f48dfaac2fbc3ee0f3e90fbae8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "55622f754f52dd64"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="25336dde8bf4db0215cbbc5426862cbb183fd833a262f5b1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}]}, @NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cf3c86761fadc98feea6202225601c1f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="10b7e8ba29ed1f187d9832d4d1965a3378fe1dd29af5a274b11079263cf9abd6"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="dbb88c5ed3c4097b330f8b2ebdc3bb10"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9bd0d302dbdbe6a3ee5651e6e277b23c60ae4966388f8382a8673110bd3e0299"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d9edac4e00a9a48731019480cb74e54a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="67911b7980a61696296bf55e2f24751c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="56f531221f0ff1fb163177c5194fbc4a"}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000011}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x4}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) sendmsg(r0, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, r4, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="cfe9947a635524682e163055b369c1183bf35afed69b51d60792f5f39c81218977984f3985cc8340a04d56d9e12d6869f599a4314ee70acddf40da318d65b62102f53d5e8954444b4ff3fdd64875ba4665cc0184c6eef9eb1b3138f21b17b019a344eded35fad5c9b826aa0258495d1f4f4c9aa59a7eba8aabf481e79a1893e010de8302d3252b5563c1fa90ce42d4dc316648e16e58a1eeb5", 0x99}, {&(0x7f0000000380)}, {&(0x7f0000000400)}], 0x3, &(0x7f0000000800)=[{0xc0, 0x10f, 0xa75, "ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f420050895cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81be9ecf703e7cc66bf3a3eb44a7f631b1852f5503a800abff475548a40fa72657c7adcce3564fbf87fade43e0e6"}, {0x2c, 0x2, 0x357cfe31, "4d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857546cedf691120d70"}, {0xf4, 0x10c, 0xd, "08b3cf810833b614ca132432cb8e55e0c0e5b9f6f08e8e1fb598af6edbb5582a4e28cf477f5468d1622b2cb8a54dbbbde624460dea0a2d12211f45e489c445ba0735b51a4bc4e7f5d027d0e1557ad7cb676bf1e844f04fd41dee44281713abf596ab0d34362f703e1e8832923164497ed5d4444a473cd8287770ea33598e9fb159b28f0c84cd63376c250e8a1c8e38f5deecdc9dba821d186b5865532fb0e1d68ad86c8015bc857533449770084ab5277690c3ad2d3cd2f6e498b71ad0d6047858d4655a6fe547683be7edf55997aa17dcd9f1189b2346e66fa36bf356ce3acfea1fe09331506e"}, {0x98, 0x10f, 0x4, "977bcc814f99fe5d78558b9b05b83da02d39d6cc2873f96dec8dd2af403d8e809934540e123347b7280d918c78256fc9d99fb10e42bafdb75d0486c89c8aab25be6dcf262a83ae99a144a54b9d09327981775c0643478c24e85399ad37472c06479d9b7a86adccb198fdc49104edd5798f7c3e9c331881cd6ac70343e3d87f7f92da6d9f314926b090c8b34c"}, {0x50, 0x116, 0x3, "e0bd42576a8b2660db90aa452d49774541a92e2c3cc6435a252c3c85d86aa705f3c8b35e9a7c227267b76aabdbf5c30ccbd3ea439571a6b031cad22247aa42f37659"}, {0x3c, 0x101, 0x5, "ed25f9e605bf38fab5e650f29425d55d69e73d873da8aecfedb1f49daa0d66e54b87d53bb2431425d5a9346532"}, {0xc, 0x108, 0x8fa}], 0x310}, 0x4000004) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff86, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x6, 0x0, 0x402, 0x3, 0xda4d}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f000000b5c0)=ANY=[@ANYBLOB="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"], 0x5bec}}, 0x2004c000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) userfaultfd(0x801) 2.521970489s ago: executing program 2 (id=425): socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000020100000000001c00090008"], 0x4c}}, 0x40000) 2.345007404s ago: executing program 0 (id=426): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000002004e33e00000020000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000004"], 0x28c) 2.34370384s ago: executing program 2 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000006000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 2.145893676s ago: executing program 2 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x40800) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r3 = fsopen(&(0x7f0000000100)='hostfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='.+#/\\\x00', &(0x7f0000000080)='\\\'&(+\xca)[\x1d#\x00', 0x0) 1.759583705s ago: executing program 4 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000100001040000000000000000000fff00", @ANYRES32=0x0, @ANYBLOB="21000000000000002a0012800b00010067656e65766500000c00028008001100ff"], 0x50}}, 0x0) 1.530074068s ago: executing program 0 (id=430): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000000f1ff0b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 1.319690008s ago: executing program 2 (id=431): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, &(0x7f0000000300)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) 1.305519356s ago: executing program 4 (id=432): r0 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0x400200, 0x0) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f00000000c0)={0x8}) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2275, 0x0) sync() syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000002c0)={0x18, {0x0, 0x0, 0x8, 0x4, 0x2}}) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000180)="a6d3", 0x2}], 0x1) 1.195053765s ago: executing program 0 (id=433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000110500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a090000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a3100"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.064961996s ago: executing program 0 (id=434): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff3, @empty, 0x9}}, 0x10001fb, 0x2, 0xffff189a, 0x3, 0x26, 0xffffffb7, 0x1a}, 0x9c) 530.791549ms ago: executing program 3 (id=435): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x8, 0xc9}}}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) syz_usb_connect(0x0, 0x2d, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f00000000c0)={{0x8, 0x3, &(0x7f0000000040)=[{0xf0, 0x0, 0xfffffff4}, {0x6, 0x0, 0x7f}, {0x10, 0x0, 0xfe}]}, 0x1, 0x8, 0x7, 0x1, 0x0, 0x5e99, 0x100000000, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000180)) listns(&(0x7f0000000340)={0x20, 0x0, 0x1000, 0xf4240, 0x0, 0x9}, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5, 0xa51a, 0x401}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000380)={r7, 0x2a}, &(0x7f00000003c0)=0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) openat$panthor(0xffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140), 0x0, 0x2) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) 94.691143ms ago: executing program 0 (id=436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x22000000, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 0s ago: executing program 0 (id=437): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0) (async) r0 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x21c09, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@fsname={'fsname', 0x3d, '-'}}, {@subj_type={'subj_type', 0x3d, '-/\'['}}, {@seclabel}]}}, 0x0, 0x0, &(0x7f00000002c0)="caf0a584b1179b3e7912b96dd69c8987405d80a43145436be4adae30e74ed89f7d847cc6df811c496711140c504d5a7454e8448b5cd2c4078506c9f06d8da29c44a09a6fb80f178bab3f760df9912a1c79858343738ea34fb3f0d23db64ba403da405cf8f19afdc07508ba23caa9ea7997f75ffa2407c4032c81049976112c4bb401cfafe46207af7fe68d3f57e8b7cfca03370ae217be4b7008a09ffbdf5fc7f91d20788d91e010f2e6bef6cfedc0a9d06cfab1cab7ebc679e4425432f9dacb081c37493edc8f63f61548f3f108cea523796a94f2b2ffcd6d5496c57b9bfd0a3357c69d09ae3adbe6575e4dfafd205b") utimensat(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x0, 0x2710}, {0x77359400}}, 0x100) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) (async) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x3, 0x1, 0x0}) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x400021, 0x800000000004, @thr={0x0, &(0x7f0000000100)="d01c3428"}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x7, 0x8, &(0x7f0000000080)={0xc, "7efe711cddad79a8b8935eaefb802b898e1a75b31a1a709cfc0a3c23e83417bcd4"}}) kernel console output (not intermixed with test programs): s an active interface with an up link [ 89.147919][ T5851] syzkaller0: entered promiscuous mode [ 89.154142][ T5851] syzkaller0: entered allmulticast mode [ 89.181683][ T5851] tipc: Started in network mode [ 89.187655][ T5851] tipc: Node identity c646967bead2, cluster identity 4711 [ 89.195755][ T5851] tipc: Enabled bearer , priority 0 [ 89.207440][ T5850] tipc: Resetting bearer [ 89.228280][ T5850] tipc: Disabling bearer [ 89.390531][ T5854] netlink: 204 bytes leftover after parsing attributes in process `syz.3.41'. [ 89.428950][ T5854] netlink: 84 bytes leftover after parsing attributes in process `syz.3.41'. [ 89.866877][ T43] IPVS: starting estimator thread 0... [ 89.970481][ T5855] capability: warning: `syz.4.42' uses 32-bit capabilities (legacy support in use) [ 89.985211][ T5874] IPVS: using max 31 ests per chain, 74400 per kthread [ 90.314841][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.486349][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 90.542284][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.588148][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.626306][ T5886] binder: 5885:5886 ioctl 4018620d 0 returned -22 [ 90.643059][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 90.670405][ T43] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 90.690721][ T43] usb 3-1: Product: syz [ 90.704898][ T43] usb 3-1: Manufacturer: syz [ 90.712467][ T43] usb 3-1: SerialNumber: syz [ 90.718019][ T5886] binder: 5885:5886 ioctl c0306201 0 returned -14 [ 90.743564][ T43] usb 3-1: config 0 descriptor?? [ 90.757119][ T5886] binder: 5885:5886 ioctl c0306201 0 returned -14 [ 90.781378][ T43] appledisplay 3-1:0.0: Could not find int-in endpoint [ 90.821758][ T43] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 90.997584][ T5710] usb 3-1: USB disconnect, device number 2 [ 91.173589][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 91.191735][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 91.279748][ T5892] usb usb8: usbfs: process 5892 (syz.0.53) did not claim interface 0 before use [ 91.503800][ T5898] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[5641] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[5898] [ 91.675184][ T5710] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.790879][ T808] cfg80211: failed to load regulatory.db [ 91.846324][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 91.863082][ T5710] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 91.889119][ T5710] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 91.901739][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.919058][ T5710] usb 1-1: Product: syz [ 91.927259][ T5710] usb 1-1: Manufacturer: syz [ 91.944342][ T5710] usb 1-1: SerialNumber: syz [ 91.974822][ T5710] r8152-cfgselector 1-1: Unknown version 0x0000 [ 91.992809][ T5710] r8152-cfgselector 1-1: config 0 descriptor?? [ 92.225684][ T5710] r8152-cfgselector 1-1: Needed 1 retries to read version [ 92.424564][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 92.451342][ T808] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 92.555248][ T5710] IPVS: starting estimator thread 0... [ 92.636208][ T5920] bridge_slave_0: left allmulticast mode [ 92.654947][ T5921] IPVS: using max 27 ests per chain, 64800 per kthread [ 92.659708][ T5920] bridge_slave_0: left promiscuous mode [ 92.689242][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.740065][ T5926] netlink: 44 bytes leftover after parsing attributes in process `syz.3.65'. [ 92.754181][ T5920] bridge_slave_1: left allmulticast mode [ 92.765794][ T5920] bridge_slave_1: left promiscuous mode [ 92.777368][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.850048][ T5920] bond0: (slave bond_slave_0): Releasing backup interface [ 92.904065][ T5920] bond0: (slave bond_slave_1): Releasing backup interface [ 92.940041][ T5920] team0: Port device team_slave_0 removed [ 92.963783][ T5920] team0: Port device team_slave_1 removed [ 92.982661][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.995698][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.009189][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.017425][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.028938][ T5920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.122747][ T5924] geneve2: entered promiscuous mode [ 93.152691][ T5924] geneve2: entered allmulticast mode [ 93.166888][ T5931] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.66'. [ 93.203099][ T5924] batman_adv: batadv0: Adding interface: geneve2 [ 93.231697][ T5924] batman_adv: batadv0: Interface activated: geneve2 [ 93.525269][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 93.634820][ T808] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.806765][ T808] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 93.831608][ T808] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 93.867950][ T808] usb 5-1: config 0 interface 0 has no altsetting 0 [ 93.889217][ T808] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.912276][ T808] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 93.937553][ T808] usb 5-1: Product: syz [ 93.947909][ T808] usb 5-1: Manufacturer: syz [ 93.958870][ T808] usb 5-1: SerialNumber: syz [ 93.978115][ T808] usb 5-1: config 0 descriptor?? [ 94.004414][ T808] hub 5-1:0.0: bad descriptor, ignoring hub [ 94.021816][ T808] hub 5-1:0.0: probe with driver hub failed with error -5 [ 94.070704][ T808] usb 5-1: selecting invalid altsetting 0 [ 94.203757][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.228436][ T5720] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.242773][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.425127][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 94.448028][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.483777][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.513428][ T5720] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.535634][ T808] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 94.553459][ T5720] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.573181][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.600587][ T5720] usb 4-1: config 0 descriptor?? [ 94.656592][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.878388][ T5956] ip6tnl1: entered promiscuous mode [ 94.893036][ T5956] ip6tnl1: entered allmulticast mode [ 94.930637][ T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 95.008474][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.79'. [ 95.157793][ T5720] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input6 [ 95.160899][ T5966] syzkaller0: entered promiscuous mode [ 95.186490][ T5933] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 95.204629][ T5966] syzkaller0: entered allmulticast mode [ 95.259395][ T5970] tipc: Started in network mode [ 95.275344][ T5970] tipc: Node identity c66428511e09, cluster identity 4711 [ 95.316215][ T5970] tipc: Enabled bearer , priority 0 [ 95.335469][ T5710] usb 5-1: USB disconnect, device number 2 [ 95.409650][ T5720] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 95.466079][ T5964] tipc: Resetting bearer [ 95.598879][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 95.633186][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 95.680572][ T5964] tipc: Disabling bearer [ 95.720468][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.970838][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.998642][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.037899][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.071545][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.103402][ T5983] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.110664][ T5983] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.117137][ T5983] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.123553][ T5983] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.130007][ T5983] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.136416][ T5983] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 96.142874][ T5983] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 96.482434][ T808] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 97.204271][ T6010] netlink: 52 bytes leftover after parsing attributes in process `syz.2.95'. [ 97.482935][ T6008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.93'. [ 97.625851][ T5720] usb 4-1: USB disconnect, device number 2 [ 97.765205][ T5710] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.833973][ T6022] netlink: 'syz.1.99': attribute type 12 has an invalid length. [ 97.965041][ T5710] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.983262][ T5710] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.003532][ T5710] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 98.045937][ T6024] program syz.2.100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.056932][ T5710] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.077913][ T5710] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.096774][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 98.143615][ T5710] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 98.153077][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.183465][ T5710] usb 1-1: Product: syz [ 98.213818][ T5710] usb 1-1: Manufacturer: syz [ 98.226075][ T5710] usb 1-1: SerialNumber: syz [ 98.450737][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 98.520341][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.531351][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.568860][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.619700][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.658105][ T6017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.693284][ T6017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.814972][ C0] net_ratelimit: 10 callbacks suppressed [ 98.814989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.832432][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.842268][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.878133][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.047754][ T5710] usb 1-1: USB disconnect, device number 3 [ 99.215025][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 99.346593][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 99.360166][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 99.372265][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 99.618332][ T6051] syzkaller0: entered promiscuous mode [ 99.629881][ T6051] syzkaller0: entered allmulticast mode [ 99.904851][ T5710] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.938033][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.034807][ T5710] usb 5-1: device descriptor read/64, error -71 [ 100.285121][ T5710] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.424825][ T5710] usb 5-1: device descriptor read/64, error -71 [ 100.559595][ T5710] usb usb5-port1: attempt power cycle [ 100.919869][ T5710] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.969809][ T6062] netlink: 'syz.1.112': attribute type 1 has an invalid length. [ 100.989459][ T5710] usb 5-1: device descriptor read/8, error -71 [ 101.000301][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.245043][ T5710] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 101.275530][ T5710] usb 5-1: device descriptor read/8, error -71 [ 101.409489][ T5710] usb usb5-port1: unable to enumerate USB device [ 101.705651][ T5710] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.856402][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.875298][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 101.890663][ T5710] usb 3-1: config 91 has an invalid interface number: 243 but max is 0 [ 101.919936][ T5710] usb 3-1: config 91 has no interface number 0 [ 101.941231][ T6076] syzkaller0: entered promiscuous mode [ 101.943102][ T5710] usb 3-1: config 91 interface 243 has no altsetting 0 [ 101.964260][ T5710] usb 3-1: New USB device found, idVendor=045e, idProduct=0452, bcdDevice=5c.e4 [ 101.973816][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.982132][ T5710] usb 3-1: Product: syz [ 101.987118][ T5710] usb 3-1: Manufacturer: syz [ 101.991762][ T5710] usb 3-1: SerialNumber: syz [ 102.007984][ T6081] netlink: 96 bytes leftover after parsing attributes in process `syz.0.117'. [ 102.042724][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.260980][ T5710] usb 3-1: USB disconnect, device number 3 [ 102.393973][ T6096] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 102.530884][ T6098] bond1: (slave geneve3): making interface the new active one [ 102.549019][ T6098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.580888][ T6098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.639555][ T6098] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 102.662425][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.684844][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.707176][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.719750][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.159911][ T6119] netlink: 36 bytes leftover after parsing attributes in process `syz.4.132'. [ 103.194647][ T6112] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 103.205337][ T6112] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 103.237754][ T6124] FAULT_INJECTION: forcing a failure. [ 103.237754][ T6124] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.270562][ T6124] CPU: 0 UID: 0 PID: 6124 Comm: syz.0.133 Not tainted syzkaller #0 PREEMPT(full) [ 103.270587][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.270598][ T6124] Call Trace: [ 103.270605][ T6124] [ 103.270613][ T6124] dump_stack_lvl+0xe8/0x150 [ 103.270645][ T6124] should_fail_ex+0x40c/0x560 [ 103.270670][ T6124] _copy_from_user+0x2d/0xb0 [ 103.270696][ T6124] get_compat_msghdr+0xb3/0x4c0 [ 103.270717][ T6124] ? __pfx_get_compat_msghdr+0x10/0x10 [ 103.270738][ T6124] ? kfree+0x4d/0x640 [ 103.270764][ T6124] ___sys_recvmsg+0x1db/0x5a0 [ 103.270798][ T6124] ? __pfx____sys_recvmsg+0x10/0x10 [ 103.270830][ T6124] ? __fget_files+0x2a/0x420 [ 103.270880][ T6124] do_recvmmsg+0x38b/0x7f0 [ 103.270904][ T6124] ? __pfx_do_recvmmsg+0x10/0x10 [ 103.270932][ T6124] ? __mutex_unlock_slowpath+0x731/0x900 [ 103.270968][ T6124] __sys_recvmmsg+0x1a5/0x290 [ 103.270989][ T6124] ? __pfx___sys_recvmmsg+0x10/0x10 [ 103.271008][ T6124] ? ksys_write+0x242/0x270 [ 103.271040][ T6124] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 103.271063][ T6124] __do_fast_syscall_32+0x23e/0x6f0 [ 103.271089][ T6124] ? do_fast_syscall_32+0x33/0x70 [ 103.271123][ T6124] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.271147][ T6124] ? asm_int80_emulation+0x1a/0x20 [ 103.271165][ T6124] ? do_int80_emulation+0x29f/0x550 [ 103.271190][ T6124] ? trace_irq_disable+0x3b/0x140 [ 103.271217][ T6124] do_fast_syscall_32+0x33/0x70 [ 103.271242][ T6124] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.271264][ T6124] RIP: 0023:0xf7f750ec [ 103.271281][ T6124] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 103.271297][ T6124] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 103.271317][ T6124] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 103.271329][ T6124] RDX: 000000000000049e RSI: 00000000000000fe RDI: 0000000000000000 [ 103.271339][ T6124] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.271349][ T6124] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.271360][ T6124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.271386][ T6124] [ 103.550645][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 103.634960][ T5710] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.730492][ T6139] syzkaller0: entered promiscuous mode [ 103.763154][ T6139] syzkaller0: entered allmulticast mode [ 103.784775][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 103.794641][ T5710] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.811648][ T5710] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 103.826083][ T5710] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 103.835954][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.857170][ C0] net_ratelimit: 9 callbacks suppressed [ 103.857187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.875097][ T5710] usb 3-1: config 0 descriptor?? [ 103.891828][ T5710] rndis_host 3-1:0.0: rndis: master #0/ffff8880260ae000 slave #1/0000000000000000 [ 103.902315][ T6138] syzkaller0: tun_net_xmit 90 [ 103.913634][ T6138] tipc: Enabled bearer , priority 0 [ 103.937452][ T6134] tipc: Resetting bearer [ 103.968769][ T6134] tipc: Disabling bearer [ 104.100501][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.114262][ T5688] usb 3-1: USB disconnect, device number 4 [ 104.378102][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 104.515824][ T5688] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.686488][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 104.693647][ T5688] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 104.707090][ T5688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.720828][ T5688] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.732308][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.761168][ T5688] usb 5-1: Product: syz [ 104.771814][ T5688] usb 5-1: Manufacturer: syz [ 104.776669][ T5688] usb 5-1: SerialNumber: syz [ 104.786219][ T5688] usb 5-1: config 0 descriptor?? [ 104.803604][ T5688] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.807970][ T6169] syz.2.148 uses obsolete (PF_INET,SOCK_PACKET) [ 104.815134][ T5688] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 104.821876][ T5781] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.898083][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.987954][ T5710] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.025043][ T5781] usb 2-1: Using ep0 maxpacket: 8 [ 105.032565][ T5781] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 105.044352][ T5781] usb 2-1: config 0 interface 0 has no altsetting 0 [ 105.051723][ T5781] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 105.061645][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.081085][ T5781] usb 2-1: config 0 descriptor?? [ 105.154586][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.166428][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 105.193125][ T5710] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 105.212183][ T5710] usb 1-1: config 0 has no interface number 0 [ 105.229855][ T5710] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 105.251202][ T5710] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 105.276496][ T5710] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 105.304217][ T5710] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 105.329627][ T5710] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 105.342897][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.360181][ T5710] usb 1-1: Product: syz [ 105.369854][ T5710] usb 1-1: Manufacturer: syz [ 105.381498][ T5710] usb 1-1: SerialNumber: syz [ 105.404340][ T5710] usb 1-1: config 0 descriptor?? [ 105.421357][ T6167] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 105.430396][ T5688] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 105.444923][ T5688] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 105.518222][ T5781] hid (null): unknown global tag 0xc [ 105.721286][ T5781] usb 2-1: string descriptor 0 read error: -71 [ 105.742516][ T5781] uclogic 0003:5543:006E.0002: failed retrieving string descriptor #200: -71 [ 105.744494][ T5710] qcserial 1-1:0.49: Qualcomm USB modem converter detected [ 105.769390][ T5781] uclogic 0003:5543:006E.0002: failed retrieving pen parameters: -71 [ 105.783321][ T5710] usb 1-1: USB disconnect, device number 4 [ 105.789952][ T5781] uclogic 0003:5543:006E.0002: failed probing pen v2 parameters: -71 [ 105.795984][ T5710] qcserial 1-1:0.49: device disconnected [ 105.815265][ T5781] uclogic 0003:5543:006E.0002: failed probing parameters: -71 [ 105.837687][ T5781] uclogic 0003:5543:006E.0002: probe with driver uclogic failed with error -71 [ 105.870329][ T5781] usb 2-1: USB disconnect, device number 3 [ 105.942987][ T6184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.952318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.961733][ T5681] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.093570][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 106.116700][ T5681] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 106.125093][ T5681] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 106.132754][ T6188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.135396][ T5681] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.154161][ T5681] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.156479][ T6153] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 106.163726][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.179735][ T5681] usb 3-1: Product: syz [ 106.183974][ T5681] usb 3-1: Manufacturer: syz [ 106.188891][ T5681] usb 3-1: SerialNumber: syz [ 106.191766][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.198197][ T5681] usb 3-1: config 0 descriptor?? [ 106.215123][ T5681] hub 3-1:0.0: bad descriptor, ignoring hub [ 106.221231][ T5681] hub 3-1:0.0: probe with driver hub failed with error -5 [ 106.234187][ T5681] usb 3-1: selecting invalid altsetting 0 [ 106.295784][ T5688] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 106.306214][ T5688] em28xx 5-1:0.0: No AC97 audio processor [ 106.346152][ T5688] usb 5-1: USB disconnect, device number 7 [ 106.367927][ T5688] em28xx 5-1:0.0: Disconnecting em28xx [ 106.426493][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.156'. [ 106.452333][ T5688] em28xx 5-1:0.0: Freeing device [ 106.519979][ T6180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.546331][ T6180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.737295][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 106.865558][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 106.885477][ T6180] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 107.205006][ T6227] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 107.229230][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.402822][ T6230] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 107.463445][ T6227] macvlan2: entered promiscuous mode [ 107.487180][ T6227] bond3: entered promiscuous mode [ 107.512490][ T808] usb 3-1: USB disconnect, device number 5 [ 107.529147][ T6227] bridge1: entered promiscuous mode [ 107.543773][ T6233] fuse: Unknown parameter 'group_iÇLmfr)ŸûK‘åèéæû¿ª¯Ø/ÃX»!Í' [ 107.594337][ T6227] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.676816][ T6227] bond3: left promiscuous mode [ 107.697579][ T6227] bridge1: left promiscuous mode [ 107.784863][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 107.935494][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.298296][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.370807][ T6241] netlink: 'syz.1.172': attribute type 12 has an invalid length. [ 108.616077][ T6243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.173'. [ 108.991830][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 109.056801][ T808] net_ratelimit: 1 callbacks suppressed [ 109.056813][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.090594][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 109.142550][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 109.174847][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 109.399620][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.044531][ T6274] fuse: Bad value for 'fd' [ 110.322803][ T6279] netlink: 172 bytes leftover after parsing attributes in process `syz.2.184'. [ 110.332324][ T808] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.341834][ T6279] netlink: 172 bytes leftover after parsing attributes in process `syz.2.184'. [ 110.416953][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.520336][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.531562][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.544026][ T808] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 110.555073][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.571035][ T808] usb 2-1: config 0 descriptor?? [ 110.675382][ T5781] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 110.849679][ T5781] usb 3-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.876765][ T5781] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.900597][ T5781] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 169, setting to 64 [ 110.906376][ T5710] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.922054][ T5781] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.937492][ T5781] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 110.951661][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 110.970330][ T5781] usb 3-1: Product: syz [ 110.988016][ T808] usbhid 2-1:0.0: can't add hid device: -71 [ 110.998412][ T5781] usb 3-1: Manufacturer: syz [ 111.004059][ T808] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 111.017886][ T5781] usb 3-1: SerialNumber: syz [ 111.039860][ T808] usb 2-1: USB disconnect, device number 4 [ 111.050251][ T5781] usb 3-1: config 0 descriptor?? [ 111.059639][ T6282] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.102495][ T5781] usb 3-1: selecting invalid altsetting 0 [ 111.104251][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.146076][ T5710] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 111.167784][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.198199][ T5710] usb 4-1: config 0 descriptor?? [ 111.233546][ T5710] pwc: Askey VC010 type 2 USB webcam detected. [ 111.284063][ T29] audit: type=1326 audit(1783791186.615:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.189" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f750ec code=0x7ffc0000 [ 111.296215][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.370179][ T29] audit: type=1326 audit(1783791186.625:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.189" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f750ec code=0x7ffc0000 [ 111.395367][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.404709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.413411][ T29] audit: type=1326 audit(1783791186.625:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.189" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f750ec code=0x7ffc0000 [ 111.464285][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.503578][ T29] audit: type=1326 audit(1783791186.625:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.189" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f750ec code=0x7ffc0000 [ 111.531450][ T29] audit: type=1326 audit(1783791186.625:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.189" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f750ec code=0x7ffc0000 [ 111.633513][ T29] audit: type=1326 audit(1783791186.625:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.189" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f750ec code=0x7ffc0000 [ 111.666615][ T5710] pwc: recv_control_msg error -32 req 02 val 2b00 [ 111.692674][ T5710] pwc: recv_control_msg error -32 req 02 val 2700 [ 111.711553][ T29] audit: type=1326 audit(1783791186.625:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.189" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f750ec code=0x7ffc0000 [ 111.742436][ T29] audit: type=1326 audit(1783791186.625:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.189" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f750ec code=0x7ffc0000 [ 111.812046][ T6297] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 111.836390][ T29] audit: type=1326 audit(1783791186.625:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.189" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f750ec code=0x7ffc0000 [ 111.872321][ T10] usb 3-1: USB disconnect, device number 6 [ 111.883101][ T6301] binder: 6300:6301 ioctl 4018620d 0 returned -22 [ 111.893815][ T6301] binder: 6300:6301 ioctl c0306201 0 returned -14 [ 111.907613][ T6301] binder: 6300:6301 ioctl c0306201 0 returned -14 [ 111.914480][ T29] audit: type=1326 audit(1783791186.625:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6291 comm="syz.0.189" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f750ec code=0x7ffc0000 [ 111.966613][ T5710] pwc: recv_control_msg error -32 req 04 val 1000 [ 112.023272][ T5710] pwc: recv_control_msg error -32 req 04 val 1300 [ 112.062350][ T5710] pwc: recv_control_msg error -32 req 04 val 1400 [ 112.090648][ T5710] pwc: recv_control_msg error -32 req 02 val 2000 [ 112.097647][ T5688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.131477][ T5710] pwc: recv_control_msg error -32 req 02 val 2100 [ 112.157708][ T5710] pwc: recv_control_msg error -32 req 04 val 1500 [ 112.187094][ T5710] pwc: recv_control_msg error -32 req 02 val 2500 [ 112.215239][ T5710] pwc: recv_control_msg error -32 req 02 val 2400 [ 112.246039][ T5710] pwc: recv_control_msg error -32 req 02 val 2600 [ 112.267810][ T5710] pwc: recv_control_msg error -32 req 02 val 2900 [ 112.291555][ T5710] pwc: recv_control_msg error -32 req 02 val 2800 [ 112.325286][ T5710] pwc: recv_control_msg error -32 req 04 val 1100 [ 112.423697][ T5710] pwc: Registered as video103. [ 112.479028][ T5710] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 112.498020][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.659118][ T6319] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 112.659118][ T6319] Please contact the netfilter-devel mailing list or update your nftables rules. [ 112.728633][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 112.811247][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 112.874026][ T6321] netlink: 'syz.1.195': attribute type 1 has an invalid length. [ 112.990363][ T6321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.039478][ T6326] netlink: 172 bytes leftover after parsing attributes in process `syz.2.197'. [ 113.108213][ T6324] bond1: (slave geneve3): making interface the new active one [ 113.131113][ T6324] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 113.536511][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.546369][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.606138][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 113.609413][ T5781] usb 4-1: USB disconnect, device number 3 [ 113.635896][ T6338] __nla_validate_parse: 2 callbacks suppressed [ 113.635912][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 113.777022][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.813146][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.824079][ T6342] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 113.834574][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 113.868026][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.881714][ T10] usb 5-1: config 0 descriptor?? [ 114.152948][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 114.153045][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 114.176027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.186713][ T10] usb 5-1: USB disconnect, device number 8 [ 114.319996][ T6347] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 114.386799][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 114.432574][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 114.475995][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 114.505913][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 114.505943][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 114.530241][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 114.536595][ T6354] netlink: 28 bytes leftover after parsing attributes in process `syz.2.208'. [ 114.582827][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.654170][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 114.656182][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.755279][ T35] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.755320][ T35] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.755357][ T35] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.755389][ T35] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.806566][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 115.019252][ T10] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 115.036848][ T10] usb 5-1: config 0 has no interface number 0 [ 115.048596][ T10] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.113087][ T10] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.136412][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.149499][ T10] usb 5-1: config 0 interface 52 has no altsetting 0 [ 115.160523][ T10] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 115.178498][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.196552][ T10] usb 5-1: config 0 descriptor?? [ 115.449408][ T6371] syzkaller0: entered promiscuous mode [ 115.459397][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.474222][ T6371] syzkaller0: entered allmulticast mode [ 115.491940][ T10] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input10 [ 115.519702][ T4976] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 115.551339][ T4976] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 115.556984][ T6371] syzkaller0: tun_net_xmit 90 [ 115.604782][ T5781] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.623930][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.636375][ T6371] tipc: Enabled bearer , priority 0 [ 115.647289][ T5626] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 115.689416][ T6370] tipc: Resetting bearer [ 115.702065][ T6335] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 115.747527][ T4976] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 115.761809][ T808] usb 5-1: USB disconnect, device number 9 [ 115.780661][ T6370] tipc: Disabling bearer [ 115.788430][ T4976] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 115.904744][ T5781] usb 3-1: Using ep0 maxpacket: 8 [ 116.099628][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.141689][ T5781] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 116.154208][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.162405][ T5781] usb 3-1: Product: syz [ 116.166736][ T5781] usb 3-1: Manufacturer: syz [ 116.171405][ T5781] usb 3-1: SerialNumber: syz [ 116.183684][ T5781] usb 3-1: config 0 descriptor?? [ 116.200228][ T5781] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 116.661307][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.856577][ T6366] netlink: 'syz.2.212': attribute type 27 has an invalid length. [ 117.136209][ T5781] gspca_sonixj: reg_w1 err -110 [ 117.143330][ T5781] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 117.195122][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 117.259631][ T6392] usb usb8: usbfs: process 6392 (syz.1.221) did not claim interface 0 before use [ 117.455028][ T5724] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.624831][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 117.642907][ T5724] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 117.658459][ T5710] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.689443][ T5724] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 117.709712][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.715864][ T5724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.748181][ T5724] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 117.772361][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.787134][ T5781] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 117.810973][ T5724] usb 4-1: config 0 descriptor?? [ 117.827100][ T5710] usb 2-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 117.866195][ T5710] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.915493][ T5710] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 117.926945][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.935183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.963387][ T5710] usb 2-1: Product: syz [ 117.974961][ T5781] usb 5-1: Using ep0 maxpacket: 32 [ 117.989147][ T5781] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 118.008236][ T5781] usb 5-1: config 0 has no interface number 0 [ 118.014461][ T5710] usb 2-1: Manufacturer: syz [ 118.027151][ T5710] usb 2-1: SerialNumber: syz [ 118.028508][ T5781] usb 5-1: config 0 interface 255 has no altsetting 0 [ 118.054562][ T5781] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 118.068260][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.084297][ T5781] usb 5-1: Product: syz [ 118.094420][ T5781] usb 5-1: Manufacturer: syz [ 118.104463][ T5781] usb 5-1: SerialNumber: syz [ 118.114856][ T5681] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.127012][ T5781] usb 5-1: config 0 descriptor?? [ 118.147222][ T5781] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 118.170828][ T5781] dvb-usb: bulk message failed: -22 (4/0) [ 118.184891][ T5781] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 118.210753][ T5781] dvb-usb: bulk message failed: -22 (5/0) [ 118.224570][ T5781] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 118.250950][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.264306][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.267315][ T5681] usb 1-1: config 0 has no interfaces? [ 118.305916][ T5681] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 118.334533][ T5781] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.362597][ T5781] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 118.362790][ T5724] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 118.383995][ T5681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.392366][ T5724] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 118.407173][ T5781] usb 5-1: media controller created [ 118.422644][ T5724] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 118.440694][ T5681] usb 1-1: config 0 descriptor?? [ 118.455793][ T5724] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 118.487571][ T5724] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 118.494900][ T5781] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.506968][ T6394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.522984][ T5724] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 118.555325][ T5724] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 118.584971][ T5724] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 118.612459][ T5724] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 118.650712][ T5724] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 118.652836][ T5781] ttusb2: set interface to alts=3 failed [ 118.698492][ T5724] nzxt-kraken2 0003:1E71:170E.0003: item fetching failed at offset 39/40 [ 118.714226][ T10] usb 3-1: USB disconnect, device number 7 [ 118.752684][ T5724] nzxt-kraken2 0003:1E71:170E.0003: hid parse failed with -22 [ 118.782801][ T5724] nzxt-kraken2 0003:1E71:170E.0003: probe with driver nzxt-kraken2 failed with error -22 [ 118.830388][ T5724] usb 4-1: USB disconnect, device number 4 [ 118.888271][ T5781] DVB: Unable to find symbol tda10086_attach() [ 118.916530][ T5781] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 118.920197][ T5781] dvb-usb: bulk message failed: -22 (4/0) [ 118.920242][ T5781] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 118.920366][ T5781] dvb-usb: bulk message failed: -22 (5/0) [ 118.920380][ T5781] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 118.920443][ T5781] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 118.938011][ T5781] usb 5-1: USB disconnect, device number 10 [ 119.069792][ T5781] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 119.251422][ T6399] __nla_validate_parse: 1 callbacks suppressed [ 119.251440][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 119.308556][ T5710] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.319014][ T5710] usb 2-1: MIDIStreaming interface descriptor not found [ 119.352238][ T6404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.374649][ T6404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.491177][ T5710] usb 2-1: USB disconnect, device number 5 [ 119.574555][ T6416] fuse: Unknown parameter 'rboþà«5000000000000008' [ 119.603313][ T6417] fuse: Unknown parameter 'rboþà«5000000000000008' [ 119.621376][ T5724] usb 1-1: USB disconnect, device number 5 [ 119.793222][ T5781] net_ratelimit: 9 callbacks suppressed [ 119.793238][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.016061][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 120.045311][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 120.100697][ T6431] binder: 6429:6431 ioctl c0205867 80000840 returned -22 [ 120.114495][ T6427] usb usb8: usbfs: process 6427 (syz.4.233) did not claim interface 0 before use [ 120.306702][ T5781] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.455870][ T6439] netlink: 'syz.1.238': attribute type 12 has an invalid length. [ 120.464308][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 120.475196][ T5781] usb 4-1: Using ep0 maxpacket: 8 [ 120.484489][ T5781] usb 4-1: unable to get BOS descriptor or descriptor too short [ 120.494238][ T5781] usb 4-1: config 2 has an invalid interface number: 76 but max is 0 [ 120.503777][ T5781] usb 4-1: config 2 has no interface number 0 [ 120.503912][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 120.532955][ T5781] usb 4-1: config 2 interface 76 has no altsetting 0 [ 120.559145][ T5781] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 120.576598][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.598957][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 120.609942][ T5781] usb 4-1: Product: syz [ 120.617164][ T5781] usb 4-1: Manufacturer: syz [ 120.624238][ T5781] usb 4-1: SerialNumber: syz [ 120.657717][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 120.718251][ T6442] hub 8-0:1.0: USB hub found [ 120.819100][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.961217][ T6442] hub 8-0:1.0: 1 port detected [ 121.114317][ T5781] go7007 4-1:2.76: Sensoray 2250 found [ 121.132351][ T5781] go7007 4-1:2.76: probe with driver go7007 failed with error -12 [ 121.218434][ T5781] usb 4-1: USB disconnect, device number 5 [ 121.536853][ T6460] netlink: 'syz.4.243': attribute type 8 has an invalid length. [ 121.583739][ T6462] netlink: 172 bytes leftover after parsing attributes in process `syz.0.244'. [ 121.598247][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'. [ 121.615569][ T6462] netlink: 172 bytes leftover after parsing attributes in process `syz.0.244'. [ 121.644600][ T6462] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 121.701930][ T6463] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 121.763827][ T6462] team0: Port device dummy0 added [ 121.840524][ T6463] team0: Port device dummy0 removed [ 121.866008][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.923646][ T6463] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 122.175788][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.218321][ T6480] binder: 6479:6480 ioctl 4018620d 0 returned -22 [ 122.253616][ T6480] binder: 6479:6480 ioctl c0306201 0 returned -14 [ 122.285085][ T6480] binder: 6479:6480 ioctl c0306201 0 returned -14 [ 122.434855][ T5724] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.597395][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.631991][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.667113][ T5724] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.702045][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.736708][ T5724] usb 1-1: config 0 descriptor?? [ 122.911704][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.978697][ T5724] usbhid 1-1:0.0: can't add hid device: -71 [ 123.004873][ T5724] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 123.046717][ T5724] usb 1-1: USB disconnect, device number 6 [ 123.050459][ T6495] netlink: 'syz.1.256': attribute type 11 has an invalid length. [ 123.063667][ T6494] usb usb8: usbfs: process 6494 (syz.3.255) did not claim interface 0 before use [ 123.223796][ T6501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.342588][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.364489][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.390426][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.435519][ T6504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.505119][ T5724] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.664793][ T5724] usb 1-1: Using ep0 maxpacket: 8 [ 123.697044][ T5724] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 123.722135][ T5724] usb 1-1: config 0 has no interface number 0 [ 123.747755][ T5724] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.774855][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.798073][ T5724] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.812168][ T5724] usb 1-1: config 0 interface 52 has no altsetting 0 [ 123.825899][ T6516] netlink: 'syz.3.261': attribute type 10 has an invalid length. [ 123.848753][ T5724] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 123.872806][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.886234][ T6522] netlink: 'syz.3.261': attribute type 10 has an invalid length. [ 123.911483][ T5724] usb 1-1: config 0 descriptor?? [ 123.987877][ T6516] bond0: (slave dummy0): Releasing backup interface [ 124.044858][ T5710] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 124.060146][ T6516] team0: Port device dummy0 added [ 124.119160][ T6522] team0: Port device dummy0 removed [ 124.148531][ T5724] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input11 [ 124.174554][ T6522] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.190125][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 124.220781][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 124.230708][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 124.259231][ T5710] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 124.277057][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 124.290732][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.313674][ T5710] usb 3-1: Product: syz [ 124.325068][ T5710] usb 3-1: Manufacturer: syz [ 124.334389][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 124.353294][ T5710] usb 3-1: SerialNumber: syz [ 124.395579][ T6477] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 124.433388][ T5710] usb 3-1: config 0 descriptor?? [ 124.463605][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 124.498839][ T10] usb 1-1: USB disconnect, device number 7 [ 124.516912][ T5626] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 124.944204][ T5710] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 124.983107][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.998616][ T43] net_ratelimit: 5 callbacks suppressed [ 124.998634][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.027065][ T5710] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 125.061998][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.084276][ T5710] usb 3-1: media controller created [ 125.121747][ T6537] __nla_validate_parse: 10 callbacks suppressed [ 125.121764][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 125.126680][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.166168][ T6519] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 125.178466][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 125.198236][ T6519] [U] J"—e:ÀÆ" [ 125.215056][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.232787][ T6539] usb usb8: usbfs: process 6539 (syz.1.267) did not claim interface 0 before use [ 125.351703][ T6544] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.358252][ T6544] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.365871][ T6544] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.372405][ T6544] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.378952][ T6544] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.385438][ T6544] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.391946][ T6544] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.769168][ T5710] zl10353_read_register: readreg error (reg=127, ret==0) [ 125.777818][ T6555] netlink: 172 bytes leftover after parsing attributes in process `syz.3.275'. [ 125.777898][ T6555] netlink: 172 bytes leftover after parsing attributes in process `syz.3.275'. [ 125.799561][ T5724] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.808168][ T6555] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 125.835125][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.852279][ T5710] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 125.883898][ T5710] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 125.899424][ T6557] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 125.913622][ T6555] bond0: (slave dummy0): Releasing backup interface [ 125.923497][ T5710] usb 3-1: USB disconnect, device number 8 [ 125.975273][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 125.993987][ T5724] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.025721][ T5710] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 126.043662][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 126.112217][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 126.168503][ T6555] team0: Port device dummy0 added [ 126.191322][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 126.213246][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 126.245342][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.287393][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 126.299515][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.321406][ T6557] team0: Port device dummy0 removed [ 126.345066][ T6557] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.358824][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 126.368242][ T43] usb 5-1: New USB device strings: Mfr=39, Product=2, SerialNumber=3 [ 126.390472][ T43] usb 5-1: Product: syz [ 126.396243][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 126.410531][ T43] usb 5-1: Manufacturer: syz [ 126.419021][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.458325][ T43] usb 5-1: SerialNumber: syz [ 126.477266][ T5724] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 126.493962][ T43] usb 5-1: config 0 descriptor?? [ 126.502527][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.522752][ T5724] usb 2-1: Product: syz [ 126.539953][ T5724] usb 2-1: Manufacturer: syz [ 126.547715][ T5724] usb 2-1: SerialNumber: syz [ 126.552746][ T43] appledisplay 5-1:0.0: Could not find int-in endpoint [ 126.588779][ T5724] usb 2-1: config 0 descriptor?? [ 126.589507][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 126.629487][ T6548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.643501][ T6564] program syz.3.276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.690457][ T6568] syzkaller0: entered promiscuous mode [ 126.701226][ T5724] ati_remote 2-1:0.0: Initializing ati_remote hardware failed. [ 126.714914][ T6568] syzkaller0: entered allmulticast mode [ 126.733770][ T5724] ati_remote 2-1:0.0: probe with driver ati_remote failed with error -5 [ 126.786720][ T5781] usb 5-1: USB disconnect, device number 11 [ 126.802721][ T6568] tipc: Started in network mode [ 126.834945][ T6568] tipc: Node identity , cluster identity 4711 [ 126.849218][ T6568] tipc: Failed to obtain node identity [ 126.865810][ T6568] tipc: Enabling of bearer rejected, failed to enable media [ 127.072133][ T6576] binder: 6547:6576 ioctl c018620b 0 returned -14 [ 127.162271][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 127.244822][ T5724] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.416972][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.441274][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 127.453765][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.478812][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 127.488554][ T5724] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 127.505142][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.531007][ T6581] usb usb8: usbfs: process 6581 (syz.2.281) did not claim interface 0 before use [ 127.543876][ T5724] usb 4-1: config 0 descriptor?? [ 127.772465][ T5724] usbhid 4-1:0.0: can't add hid device: -71 [ 127.913815][ T5724] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 127.917414][ T5724] usb 4-1: USB disconnect, device number 6 [ 127.994041][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 127.994074][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 128.055532][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 128.314901][ T5724] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 128.394748][ T5688] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 128.477563][ T5724] usb 4-1: Using ep0 maxpacket: 8 [ 128.534024][ T5724] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 128.564035][ T5724] usb 4-1: config 0 has no interface number 0 [ 128.596078][ T5688] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 128.616431][ T5724] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.656011][ T5688] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 128.658888][ T43] usb 2-1: USB disconnect, device number 6 [ 128.684058][ T5724] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.712218][ T5688] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 128.730378][ T5724] usb 4-1: config 0 interface 52 has no altsetting 0 [ 128.778223][ T5688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.792306][ T5724] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 128.842858][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.862726][ T5688] usb 1-1: config 0 descriptor?? [ 128.948490][ T5724] usb 4-1: config 0 descriptor?? [ 129.162930][ T5688] usbhid 1-1:0.0: can't add hid device: -71 [ 129.169949][ T5688] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 129.191571][ T5724] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input14 [ 129.194849][ T43] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 129.219078][ T5688] usb 1-1: USB disconnect, device number 8 [ 129.252206][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 129.298228][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 129.335194][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 129.365592][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 129.391436][ T6575] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 129.420941][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.431975][ T5626] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 129.442801][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 129.444411][ T5724] usb 4-1: USB disconnect, device number 7 [ 129.452545][ T43] usb 2-1: config 2 has an invalid interface number: 222 but max is 0 [ 129.471919][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 129.476652][ T43] usb 2-1: config 2 has no interface number 0 [ 129.496796][ T43] usb 2-1: config 2 interface 222 has no altsetting 0 [ 129.514292][ T43] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.d9 [ 129.524130][ T5628] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 129.526726][ T6612] usb usb8: usbfs: process 6612 (syz.0.290) did not claim interface 0 before use [ 129.543899][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.552555][ T43] usb 2-1: Product: syz [ 129.559877][ T43] usb 2-1: Manufacturer: syz [ 129.565665][ T43] usb 2-1: SerialNumber: syz [ 129.704876][ T5696] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 129.782883][ T43] usb-storage 2-1:2.222: USB Mass Storage device detected [ 129.796458][ T43] usb-storage 2-1:2.222: Quirks match for vid 04e6 pid 0007: 1 [ 129.804087][ T43] usb-storage 2-1:2.222: This device (04e6,0007,01d9 S 87 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 129.804087][ T43] Please send a copy of this message to and [ 129.871581][ T43] usb 2-1: USB disconnect, device number 7 [ 129.877681][ T5696] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 129.897922][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.907278][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.918567][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.927756][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.937011][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.949065][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.959231][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.969988][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.984389][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.992865][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.006598][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.020638][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.030284][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.052099][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.063412][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.072612][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.086208][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.098793][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.106936][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.118676][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.129913][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.139820][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.149884][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.164135][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.181395][ T5696] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 130.190957][ T5696] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 130.207021][ T5696] usb 5-1: Product: syz [ 130.215403][ T5696] usb 5-1: Manufacturer: syz [ 130.230385][ T5696] usb 5-1: SerialNumber: syz [ 130.235163][ T6622] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 130.262396][ T5781] net_ratelimit: 13 callbacks suppressed [ 130.262411][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.280558][ T5696] usb 5-1: config 0 descriptor?? [ 130.301184][ T5696] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 130.421702][ T6625] __nla_validate_parse: 5 callbacks suppressed [ 130.421742][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 130.438955][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 130.468531][ T6625] usb usb8: usbfs: process 6625 (syz.0.294) did not claim interface 0 before use [ 130.526570][ T6610] input: syz1 as /devices/virtual/input/input15 [ 131.050498][ T5696] usb 5-1: USB disconnect, device number 12 [ 131.069120][ T5696] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 131.113609][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 131.113639][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 131.124368][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 131.126020][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 131.213924][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 131.304629][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.326973][ T6640] syzkaller0: entered promiscuous mode [ 131.333640][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 131.333725][ T6640] syzkaller0: entered allmulticast mode [ 131.607689][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 131.607700][ T29] audit: type=1326 audit(1783791206.945:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 131.651495][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 131.663536][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 131.672507][ T6647] netlink: 'syz.1.302': attribute type 15 has an invalid length. [ 131.680777][ T29] audit: type=1326 audit(1783791206.985:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 131.721546][ T29] audit: type=1326 audit(1783791206.985:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 131.748097][ T29] audit: type=1326 audit(1783791206.985:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 131.773782][ T808] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.799956][ T29] audit: type=1326 audit(1783791206.985:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 131.848655][ T29] audit: type=1326 audit(1783791206.985:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 131.880147][ T29] audit: type=1326 audit(1783791206.985:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 131.909164][ T29] audit: type=1326 audit(1783791206.985:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 131.936387][ T29] audit: type=1326 audit(1783791206.985:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 131.962030][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.973519][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.992668][ T808] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.004790][ T29] audit: type=1326 audit(1783791206.985:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6646 comm="syz.1.302" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 132.031102][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.041113][ T808] usb 1-1: config 0 descriptor?? [ 132.175329][ T6655] usb usb8: usbfs: process 6655 (syz.1.305) did not claim interface 0 before use [ 132.254551][ T808] usbhid 1-1:0.0: can't add hid device: -71 [ 132.262024][ T808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 132.288378][ T808] usb 1-1: USB disconnect, device number 9 [ 132.341545][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.420896][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.638482][ T6672] syzkaller0: entered promiscuous mode [ 132.651056][ T6672] syzkaller0: entered allmulticast mode [ 132.678721][ T6672] tipc: Started in network mode [ 132.684827][ T5696] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.696389][ T6672] tipc: Node identity 9a6ad9a7f081, cluster identity 4711 [ 132.712283][ T6672] tipc: Enabled bearer , priority 0 [ 132.740127][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.747086][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.747280][ T6671] tipc: Resetting bearer [ 132.792307][ T6671] tipc: Disabling bearer [ 132.826725][ T808] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 132.846132][ T5696] usb 3-1: Using ep0 maxpacket: 16 [ 132.853633][ T5696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.868558][ T5696] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 132.897482][ T5696] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 132.911697][ T5696] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 132.921325][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.958566][ T5696] usb 3-1: config 0 descriptor?? [ 132.971185][ T5696] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 132.995041][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 133.002465][ T808] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 133.012025][ T808] usb 1-1: config 0 has no interface number 0 [ 133.018847][ T808] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.036955][ T808] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.057227][ T808] usb 1-1: config 0 interface 52 has no altsetting 0 [ 133.073535][ T808] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 133.088143][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.110588][ T808] usb 1-1: config 0 descriptor?? [ 133.349409][ T808] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input16 [ 133.380082][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.407804][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 133.460225][ T6039] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 133.474927][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 133.517421][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 133.548909][ T6645] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 133.566691][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 133.578257][ T808] usb 1-1: USB disconnect, device number 10 [ 133.600251][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 133.619269][ T6680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.627593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.698402][ T6678] loop5: detected capacity change from 0 to 7 [ 133.731919][ T6678] Dev loop5: unable to read RDB block 7 [ 133.758981][ T6678] loop5: AHDI p1 p2 p3 [ 133.759015][ T6678] loop5: partition table partially beyond EOD, truncated [ 133.766235][ T6678] loop5: p1 start 1601398130 is beyond EOD, truncated [ 133.766263][ T6678] loop5: p2 start 1702059890 is beyond EOD, truncated [ 133.994751][ T5696] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 134.148966][ T5696] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 134.168304][ T5696] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 134.197411][ T5696] usb 4-1: config 0 has no interface number 0 [ 134.211885][ T5696] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.239143][ T5696] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.264638][ T5696] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 134.281187][ T5696] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 134.290453][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.300243][ T5696] usb 4-1: config 0 descriptor?? [ 134.312506][ T6680] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 134.418110][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.443584][ T6688] usb usb8: usbfs: process 6688 (syz.0.317) did not claim interface 0 before use [ 134.658158][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.936914][ T5696] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input17 [ 134.955538][ T5724] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.135668][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 135.146575][ T5724] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 135.157787][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.183189][ T5724] usb 2-1: config 0 descriptor?? [ 135.228499][ T5688] usb 4-1: USB disconnect, device number 8 [ 135.228601][ C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 135.245136][ T5696] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 135.404896][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 135.405281][ T5724] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 135.423124][ T5696] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 135.434095][ T5696] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.435090][ T5724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.460272][ T5710] usb 3-1: USB disconnect, device number 9 [ 135.485425][ T5724] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 135.490996][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.500741][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.518661][ T5696] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.539624][ T5696] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.541923][ T5724] usb 2-1: media controller created [ 135.561841][ T6706] netlink: 'syz.2.324': attribute type 12 has an invalid length. [ 135.571464][ T5696] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.590106][ T5696] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.599832][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.678849][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.869384][ T5724] az6027: usb out operation failed. (-71) [ 135.882899][ T5724] az6027: usb out operation failed. (-71) [ 135.897164][ T5724] stb0899_attach: Driver disabled by Kconfig [ 135.919679][ T5724] az6027: no front-end attached [ 135.919679][ T5724] [ 135.972467][ T5724] az6027: usb out operation failed. (-71) [ 135.994075][ T5724] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 136.013904][ T5724] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 136.047855][ T5724] dvb-usb: schedule remote query interval to 400 msecs. [ 136.058151][ T5724] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 136.078367][ T5724] usb 2-1: USB disconnect, device number 8 [ 136.140462][ T5724] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 136.186869][ T6715] usb usb8: usbfs: process 6715 (syz.2.328) did not claim interface 0 before use [ 136.268297][ T5681] usb 1-1: USB disconnect, device number 11 [ 136.285137][ T5688] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.446601][ T5688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.458126][ T5688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.468775][ T5688] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 136.479649][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.488150][ T5710] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 136.499230][ T5688] usb 4-1: config 0 descriptor?? [ 136.505875][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.631009][ T6719] netlink: 'syz.1.330': attribute type 1 has an invalid length. [ 136.674903][ T5710] usb 3-1: Using ep0 maxpacket: 16 [ 136.684641][ T5710] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 136.694013][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.710958][ T5710] usb 3-1: Product: syz [ 136.715653][ T5710] usb 3-1: Manufacturer: syz [ 136.722018][ T5710] usb 3-1: SerialNumber: syz [ 136.739521][ T5688] usbhid 4-1:0.0: can't add hid device: -71 [ 136.746774][ T5710] usb 3-1: config 0 descriptor?? [ 136.753579][ T5688] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 136.771435][ T5688] usb 4-1: USB disconnect, device number 9 [ 137.073792][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.091824][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.099306][ T6727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.223957][ T5710] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 137.235154][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.251343][ T5710] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 137.262054][ T5710] usb 3-1: media controller created [ 137.268153][ T5688] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 137.301473][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.424875][ T5688] usb 4-1: Using ep0 maxpacket: 8 [ 137.433546][ T5688] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 137.442120][ T5688] usb 4-1: config 0 has no interface number 0 [ 137.444789][ T5696] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 137.449170][ T6717] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 137.463954][ T5688] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.475410][ T6717] [U] J"—e:ÀÆ" [ 137.479097][ T5688] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.490258][ T5688] usb 4-1: config 0 interface 52 has no altsetting 0 [ 137.497718][ T5688] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 137.507071][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.518249][ T5688] usb 4-1: config 0 descriptor?? [ 137.555284][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.645135][ T5696] usb 1-1: Using ep0 maxpacket: 16 [ 137.654156][ T5696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.666289][ T5696] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 137.677381][ T5696] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 137.691799][ T5696] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 137.702312][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.726429][ T5696] usb 1-1: config 0 descriptor?? [ 137.742052][ T5696] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 137.760881][ T5688] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input20 [ 137.796702][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 137.816302][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 137.837909][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 137.859120][ T5710] zl10353_read_register: readreg error (reg=127, ret==0) [ 137.873417][ T5710] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 137.883711][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 137.899104][ T5710] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 137.913197][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 137.948999][ T5710] usb 3-1: USB disconnect, device number 10 [ 137.963348][ T6713] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 137.981932][ T6039] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 138.007690][ T6739] __nla_validate_parse: 6 callbacks suppressed [ 138.007737][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 138.018493][ T5688] usb 4-1: USB disconnect, device number 10 [ 138.051740][ T5710] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 138.313138][ T6749] usb usb8: usbfs: process 6749 (syz.1.339) did not claim interface 0 before use [ 138.495210][ T5688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.585286][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.604081][ T6762] cifs: Unknown parameter '' [ 138.665506][ T6764] netlink: 'syz.3.345': attribute type 1 has an invalid length. [ 138.798704][ T6767] netlink: 600 bytes leftover after parsing attributes in process `syz.2.346'. [ 139.368068][ T6781] usb usb8: usbfs: process 6781 (syz.2.350) did not claim interface 0 before use [ 139.543975][ T6784] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 139.550673][ T6784] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 139.578845][ T6784] vhci_hcd vhci_hcd.0: Device attached [ 139.625212][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.754836][ T808] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 139.835728][ T808] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 140.240547][ T5696] usb 1-1: USB disconnect, device number 12 [ 140.376986][ T6785] vhci_hcd: connection reset by peer [ 140.393448][ T36] vhci_hcd vhci_hcd.2: stop threads [ 140.396327][ T36] vhci_hcd vhci_hcd.2: release socket [ 140.397888][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 140.417855][ T5781] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 140.576743][ T5781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.576765][ T5781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.576786][ T5781] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 140.576798][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.578619][ T5781] usb 2-1: config 0 descriptor?? [ 140.679886][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.782477][ T5781] usbhid 2-1:0.0: can't add hid device: -71 [ 140.782597][ T5781] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 140.806725][ T5688] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 140.817549][ T5781] usb 2-1: USB disconnect, device number 9 [ 140.954831][ T5688] usb 1-1: device descriptor read/64, error -71 [ 141.164794][ T5724] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 141.185367][ T5696] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.196358][ T5688] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 141.306741][ T6814] netlink: 'syz.4.362': attribute type 1 has an invalid length. [ 141.314793][ T5781] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 141.335814][ T5688] usb 1-1: device descriptor read/64, error -71 [ 141.347697][ T5724] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 141.357541][ T5724] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 141.364965][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 141.374637][ T5724] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.389415][ T5724] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.389962][ T5696] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 141.398859][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 141.417740][ T5724] usb 3-1: Product: syz [ 141.419315][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.421947][ T5724] usb 3-1: Manufacturer: syz [ 141.436323][ T5724] usb 3-1: SerialNumber: syz [ 141.441092][ T5696] usb 4-1: Product: syz [ 141.441113][ T5696] usb 4-1: Manufacturer: syz [ 141.441128][ T5696] usb 4-1: SerialNumber: syz [ 141.456627][ T5688] usb usb1-port1: attempt power cycle [ 141.458705][ T5696] usb 4-1: config 0 descriptor?? [ 141.470098][ T5724] usb 3-1: config 0 descriptor?? [ 141.484786][ T5781] usb 2-1: Using ep0 maxpacket: 8 [ 141.492782][ T5724] hub 3-1:0.0: bad descriptor, ignoring hub [ 141.493336][ T5781] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 141.504935][ T5724] hub 3-1:0.0: probe with driver hub failed with error -5 [ 141.509302][ T5781] usb 2-1: config 0 has no interface number 0 [ 141.521108][ T5781] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.528277][ T5724] usb 3-1: selecting invalid altsetting 0 [ 141.535625][ T5781] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.538584][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.552247][ T5781] usb 2-1: config 0 interface 52 has no altsetting 0 [ 141.567949][ T5781] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 141.578654][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.605234][ T5781] usb 2-1: config 0 descriptor?? [ 141.703704][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.820036][ T5781] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input21 [ 141.834916][ T5688] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 141.855948][ T5688] usb 1-1: device descriptor read/8, error -71 [ 141.867952][ T4976] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 141.892615][ T4976] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 141.918236][ T4976] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 141.940334][ T6039] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 141.946625][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.960047][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.968548][ T5696] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 141.978291][ T4976] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 141.991401][ T4976] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 142.006900][ T4976] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 142.007609][ T5696] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.031802][ T4976] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 142.059026][ T5696] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 142.072957][ T6795] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 142.084320][ T5696] usb 4-1: media controller created [ 142.094002][ T5781] usb 2-1: USB disconnect, device number 10 [ 142.104847][ T5688] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.142422][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.146604][ T5688] usb 1-1: device descriptor read/8, error -71 [ 142.179346][ T6812] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 142.203566][ T6812] [U] J"—e:ÀÆ" [ 142.285335][ T5688] usb usb1-port1: unable to enumerate USB device [ 142.304955][ T6811] usb 3-1: reset high-speed USB device number 11 using dummy_hcd [ 142.315273][ T6829] binder: 6828:6829 ioctl c0205867 80000840 returned -22 [ 142.340767][ T6829] syzkaller0: entered promiscuous mode [ 142.347170][ T6829] syzkaller0: entered allmulticast mode [ 142.672702][ T6834] binder: BINDER_SET_CONTEXT_MGR already set [ 142.679212][ T6834] binder: 6833:6834 ioctl 4018620d 80004a80 returned -16 [ 142.725101][ T5696] zl10353_read_register: readreg error (reg=127, ret==0) [ 142.732419][ T5696] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 142.745859][ T5724] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 142.748330][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.763286][ T5696] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 142.765100][ T6835] binder: 6833:6835 ioctl 80105873 800003c0 returned -22 [ 142.801917][ T5696] usb 4-1: USB disconnect, device number 11 [ 142.863135][ T5696] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 142.906008][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 142.920108][ T5724] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.931397][ T5724] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 142.942884][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 142.980597][ T5724] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 142.993185][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.004054][ T5688] usb 3-1: USB disconnect, device number 11 [ 143.019139][ T5724] usb 5-1: config 0 descriptor?? [ 143.053300][ T5724] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 143.615317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.684094][ T6846] netlink: 172 bytes leftover after parsing attributes in process `syz.0.372'. [ 143.699263][ T6846] netlink: 172 bytes leftover after parsing attributes in process `syz.0.372'. [ 143.704790][ T5688] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 143.731616][ T6846] netlink: 'syz.0.372': attribute type 10 has an invalid length. [ 143.746585][ T6846] bond0: (slave dummy0): Releasing backup interface [ 143.780519][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.793591][ T6847] netlink: 'syz.0.372': attribute type 10 has an invalid length. [ 143.807948][ T6846] team0: Port device dummy0 added [ 143.855776][ T6847] team0: Port device dummy0 removed [ 143.883760][ T6847] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 143.892498][ T5688] usb 4-1: Using ep0 maxpacket: 16 [ 143.902886][ T5688] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 143.916926][ T5688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.929350][ T5688] usb 4-1: config 0 has no interface number 0 [ 143.936054][ T5688] usb 4-1: config 0 interface 123 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 143.954843][ T5688] usb 4-1: config 0 interface 123 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.978547][ T5688] usb 4-1: config 0 interface 123 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 144.009217][ T5688] usb 4-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=68.25 [ 144.022058][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.058363][ T5688] usb 4-1: Product: syz [ 144.143237][ T5688] usb 4-1: Manufacturer: syz [ 144.167076][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 144.167088][ T29] audit: type=1326 audit(1783791219.505:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.2.373" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd50ec code=0x0 [ 144.200276][ T5688] usb 4-1: SerialNumber: syz [ 144.219263][ T5688] usb 4-1: config 0 descriptor?? [ 144.238904][ T6841] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.250646][ T5688] pl2303 4-1:0.123: required interrupt-in endpoint missing [ 144.258509][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.365459][ T6865] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 144.553928][ T5688] usb 4-1: USB disconnect, device number 12 [ 144.622966][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.818222][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.898412][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.965878][ T808] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 145.284796][ T5689] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 145.476329][ T5689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.503267][ T5689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.539647][ T5689] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 145.592479][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.623318][ T5724] usb 5-1: USB disconnect, device number 13 [ 145.624110][ T5689] usb 1-1: config 0 descriptor?? [ 145.869953][ T5696] net_ratelimit: 1 callbacks suppressed [ 145.869967][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.904500][ T5689] usbhid 1-1:0.0: can't add hid device: -71 [ 145.925261][ T5689] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 145.963071][ T6880] binder: 6879:6880 ioctl 4018620d 0 returned -22 [ 145.984530][ T6880] binder: 6879:6880 ioctl c0306201 0 returned -14 [ 146.004490][ T6880] binder: 6879:6880 ioctl c0306201 0 returned -14 [ 146.027198][ T5689] usb 1-1: USB disconnect, device number 17 [ 146.347819][ T6888] netlink: 172 bytes leftover after parsing attributes in process `syz.3.385'. [ 146.369740][ T6888] netlink: 172 bytes leftover after parsing attributes in process `syz.3.385'. [ 146.394576][ T6888] netlink: 'syz.3.385': attribute type 10 has an invalid length. [ 146.407791][ T5689] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 146.438246][ T6888] bond0: (slave dummy0): Releasing backup interface [ 146.454776][ T5724] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 146.465537][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 146.474897][ T6893] netlink: 'syz.3.385': attribute type 10 has an invalid length. [ 146.501442][ T6888] team0: Port device dummy0 added [ 146.562997][ T6893] team0: Port device dummy0 removed [ 146.572581][ T6893] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 146.582898][ T6896] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 146.605193][ T5689] usb 1-1: Using ep0 maxpacket: 8 [ 146.616763][ T5689] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 146.632893][ T5689] usb 1-1: config 0 has no interface number 0 [ 146.641760][ T5724] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.647783][ T5689] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.668577][ T5689] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.678719][ T5689] usb 1-1: config 0 interface 52 has no altsetting 0 [ 146.689892][ T5724] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 146.707765][ T5724] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.717508][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.729550][ T5724] usb 3-1: Product: syz [ 146.729571][ T5724] usb 3-1: Manufacturer: syz [ 146.729609][ T5724] usb 3-1: SerialNumber: syz [ 146.767906][ T5689] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 146.767938][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.772373][ T5689] usb 1-1: config 0 descriptor?? [ 146.829239][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.899341][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.919874][ T6900] tipc: Started in network mode [ 146.919903][ T6900] tipc: Node identity d2b9a51183ac, cluster identity 4711 [ 146.955594][ T6900] tipc: Enabled bearer , priority 0 [ 146.956340][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 146.956384][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 146.996210][ T6900] syzkaller0: entered promiscuous mode [ 146.996237][ T6900] syzkaller0: entered allmulticast mode [ 146.998259][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 147.013785][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.390'. [ 147.109724][ T5689] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input23 [ 147.137071][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 147.164111][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 147.180135][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 147.196296][ T6902] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 147.206614][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.268822][ T5689] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 147.286907][ T5696] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 147.297854][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 147.325125][ T5689] input: failed to attach handler mousedev to device input23, error: -5 [ 147.335289][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.367804][ T4976] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 147.389882][ T5689] usb 1-1: USB disconnect, device number 18 [ 147.414301][ T6900] tipc: Resetting bearer [ 147.459874][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 147.466794][ T5696] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 147.489767][ T6899] tipc: Resetting bearer [ 147.521014][ T5696] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 147.558533][ T6899] tipc: Disabling bearer [ 147.568276][ T5696] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 147.579512][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.612735][ T5696] usb 4-1: config 0 descriptor?? [ 147.636225][ T5696] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 147.675135][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.693612][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.699012][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.761696][ T5724] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 147.781984][ T5724] usb 3-1: USB disconnect, device number 12 [ 147.953833][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.975724][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.021060][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.174930][ T5681] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 148.295179][ T5689] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 148.311199][ T6928] syzkaller0: entered promiscuous mode [ 148.317289][ T6928] syzkaller0: entered allmulticast mode [ 148.364817][ T5681] usb 1-1: Using ep0 maxpacket: 32 [ 148.372481][ T6928] tipc: Enabled bearer , priority 0 [ 148.383798][ T5681] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 148.396424][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.409012][ T6927] tipc: Resetting bearer [ 148.415004][ T5681] usb 1-1: Product: syz [ 148.420450][ T5681] usb 1-1: Manufacturer: syz [ 148.427651][ T5681] usb 1-1: SerialNumber: syz [ 148.451207][ T5681] usb 1-1: config 0 descriptor?? [ 148.474274][ T5681] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 148.484352][ T6927] tipc: Disabling bearer [ 148.494180][ T5681] dvb-usb: bulk message failed: -22 (4/0) [ 148.494787][ T5689] usb 3-1: Using ep0 maxpacket: 8 [ 148.500100][ T5681] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 148.518458][ T5681] dvb-usb: bulk message failed: -22 (5/0) [ 148.528679][ T5681] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 148.549290][ T5689] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 148.564223][ T5689] usb 3-1: config 16 has an invalid descriptor of length 111, skipping remainder of the config [ 148.580549][ T5681] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.585944][ T5689] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.617584][ T5689] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.630264][ T5681] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 148.639274][ T5689] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 148.655090][ T5681] usb 1-1: media controller created [ 148.671306][ T5689] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.713552][ T5689] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 148.723825][ T5681] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.731674][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.784495][ T5681] usb 1-1: selecting invalid altsetting 3 [ 148.807761][ T5681] ttusb2: set interface to alts=3 failed [ 148.852347][ T6939] netlink: 'syz.1.400': attribute type 1 has an invalid length. [ 148.864642][ T5681] DVB: Unable to find symbol tda10086_attach() [ 148.873685][ T5681] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 148.889161][ T5681] dvb-usb: bulk message failed: -22 (4/0) [ 148.907205][ T5681] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 148.924940][ T5681] dvb-usb: bulk message failed: -22 (5/0) [ 148.931310][ T5681] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 148.941776][ T5681] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 148.954839][ T5681] usb 1-1: USB disconnect, device number 19 [ 148.968451][ T5689] usb 3-1: usb_control_msg returned -32 [ 148.976984][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.994099][ T5681] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 149.002271][ T5689] usbtmc 3-1:16.0: can't read capabilities [ 149.074921][ T6941] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 149.110948][ T6939] macvlan4: entered promiscuous mode [ 149.123841][ T6939] macvlan4: entered allmulticast mode [ 149.131688][ T6939] bond2: entered promiscuous mode [ 149.137319][ T6939] bridge2: entered promiscuous mode [ 149.143535][ T6939] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 149.153151][ T6939] bond2: left promiscuous mode [ 149.158412][ T6939] bridge2: left promiscuous mode [ 149.231988][ T6944] netlink: 172 bytes leftover after parsing attributes in process `syz.4.401'. [ 149.247454][ T6944] netlink: 172 bytes leftover after parsing attributes in process `syz.4.401'. [ 149.261854][ T6944] netlink: 'syz.4.401': attribute type 10 has an invalid length. [ 149.278438][ T6944] team0: Port device dummy0 added [ 149.299025][ T6944] netlink: 'syz.4.401': attribute type 10 has an invalid length. [ 149.342748][ T6944] team0: Port device dummy0 removed [ 149.370996][ T6944] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.868878][ T5689] usb 4-1: USB disconnect, device number 13 [ 150.024822][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.071417][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.093218][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.099599][ T1105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.125986][ T5720] usb 3-1: USB disconnect, device number 13 [ 150.303114][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.330078][ T1105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.458913][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.483560][ T1105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.540290][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.552355][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.565261][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.576248][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.583858][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.643662][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.663270][ T1105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.955535][ T5720] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 151.008722][ T6966] geneve2: entered promiscuous mode [ 151.077127][ T6969] syzkaller1: entered promiscuous mode [ 151.084771][ T6969] syzkaller1: entered allmulticast mode [ 151.122616][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.136483][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.148779][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.165092][ T5720] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 151.176535][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.190255][ T5720] usb 4-1: config 0 descriptor?? [ 151.408835][ T5720] usbhid 4-1:0.0: can't add hid device: -71 [ 151.437458][ T5720] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 151.508705][ T5720] usb 4-1: USB disconnect, device number 14 [ 151.531282][ T1105] batman_adv: batadv0: Interface deactivated: geneve2 [ 151.811604][ T6981] netlink: 172 bytes leftover after parsing attributes in process `syz.4.414'. [ 151.840243][ T6981] netlink: 172 bytes leftover after parsing attributes in process `syz.4.414'. [ 151.888370][ T6981] netlink: 'syz.4.414': attribute type 10 has an invalid length. [ 151.938840][ T6983] netlink: 'syz.4.414': attribute type 10 has an invalid length. [ 151.965407][ T5720] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 151.994452][ T1105] bond1 (unregistering): (slave geneve3): Releasing active interface [ 152.025316][ T1105] batman_adv: batadv0: Removing interface: geneve2 [ 152.127104][ T1105] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 152.144774][ T5720] usb 4-1: Using ep0 maxpacket: 8 [ 152.169338][ T1105] bond0 (unregistering): Released all slaves [ 152.180737][ T5720] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 152.204453][ T1105] bond1 (unregistering): Released all slaves [ 152.216834][ T5720] usb 4-1: config 0 has no interface number 0 [ 152.240545][ T1105] bond2 (unregistering): Released all slaves [ 152.240939][ T5720] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.260536][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.282123][ T5720] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.293257][ T5720] usb 4-1: config 0 interface 52 has no altsetting 0 [ 152.301745][ T5720] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 152.312643][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.336352][ T5720] usb 4-1: config 0 descriptor?? [ 152.358794][ T6981] bond0: (slave dummy0): Releasing backup interface [ 152.407129][ T6981] team0: Port device dummy0 added [ 152.444019][ T6983] team0: Port device dummy0 removed [ 152.471492][ T6983] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 152.528261][ T1105] tipc: Left network mode [ 152.577242][ T5720] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input26 [ 152.646140][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 152.654841][ T5628] Bluetooth: hci2: command tx timeout [ 152.708744][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 152.751144][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 152.791339][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 152.829978][ T6993] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 152.870732][ T5977] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 152.900112][ T6993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.908990][ T6959] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 152.921146][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 152.938208][ T5710] usb 4-1: USB disconnect, device number 15 [ 152.971309][ T4976] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 153.059332][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.134946][ T6996] bond1: (slave geneve3): making interface the new active one [ 153.146908][ T6996] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 153.301978][ T5689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.715010][ T5720] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.851740][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.889824][ T5710] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 153.897779][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.914975][ T5720] usb 3-1: Using ep0 maxpacket: 16 [ 153.922518][ T6962] bridge_slave_0: entered allmulticast mode [ 153.930627][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.940433][ T6962] bridge_slave_0: entered promiscuous mode [ 153.947555][ T5720] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.981292][ T5720] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 153.993893][ T5720] usb 3-1: New USB device strings: Mfr=63, Product=2, SerialNumber=3 [ 154.020336][ T5720] usb 3-1: Product: syz [ 154.033585][ T5720] usb 3-1: Manufacturer: syz [ 154.048892][ T5720] usb 3-1: SerialNumber: syz [ 154.065456][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 154.077005][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.088906][ T5710] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 154.101476][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.116187][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.125249][ T6962] bridge_slave_1: entered allmulticast mode [ 154.144867][ T5710] usb 4-1: config 0 descriptor?? [ 154.151018][ T6962] bridge_slave_1: entered promiscuous mode [ 154.166886][ T5720] usb 3-1: config 0 descriptor?? [ 154.190618][ T5720] appledisplay 3-1:0.0: Could not find int-in endpoint [ 154.207029][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 154.245378][ T5720] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 154.286009][ T6962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.335347][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.360801][ T6962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.393564][ T5710] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 154.409670][ T5688] usb 3-1: USB disconnect, device number 14 [ 154.454440][ T5710] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.488064][ T5710] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 154.504833][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 154.519859][ T5710] usb 4-1: media controller created [ 154.561215][ T1105] hsr_slave_0: left promiscuous mode [ 154.561540][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.614966][ T1105] hsr_slave_1: left promiscuous mode [ 154.731640][ T1105] veth1_macvtap: left promiscuous mode [ 154.736092][ T5628] Bluetooth: hci2: command tx timeout [ 154.755272][ T1105] veth0_macvtap: left promiscuous mode [ 154.755494][ T1105] veth1_vlan: left promiscuous mode [ 154.755595][ T1105] veth0_vlan: left promiscuous mode [ 155.377084][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.809589][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 155.835289][ T7069] netlink: 14 bytes leftover after parsing attributes in process `syz.4.429'. [ 155.917035][ T6962] team0: Port device team_slave_0 added [ 156.012996][ T7061] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 156.025562][ T7061] bond1 (unregistering): Released all slaves [ 156.046741][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 156.068350][ T6962] team0: Port device team_slave_1 added [ 156.098188][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.234519][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.252362][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.343443][ T6962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.355987][ T5710] az6027: usb out operation failed. (-71) [ 156.362968][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.373117][ T5710] az6027: usb out operation failed. (-71) [ 156.382650][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.395698][ T5710] stb0899_attach: Driver disabled by Kconfig [ 156.417430][ T5710] az6027: no front-end attached [ 156.417430][ T5710] [ 156.437621][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.445798][ T5681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.454168][ T6962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.483903][ T5710] az6027: usb out operation failed. (-71) [ 156.490041][ T5710] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 156.503341][ T5710] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 156.527138][ T5688] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 156.549873][ T5710] dvb-usb: schedule remote query interval to 400 msecs. [ 156.556983][ T5710] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 156.595691][ T5724] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 156.605440][ T6962] hsr_slave_0: entered promiscuous mode [ 156.615889][ T6962] hsr_slave_1: entered promiscuous mode [ 156.617265][ T5710] usb 4-1: USB disconnect, device number 16 [ 156.630187][ T6962] debugfs: 'hsr0' already exists in 'hsr' [ 156.639480][ T6962] Cannot create hsr debugfs directory [ 156.696590][ T5688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.718102][ T1105] IPVS: stop unused estimator thread 0... [ 156.719789][ T5688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.751986][ T5710] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 156.769740][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 156.777999][ T5688] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.789165][ T5688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.811708][ T5724] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 156.821010][ T5628] Bluetooth: hci2: command tx timeout [ 156.829033][ T5688] usb 3-1: config 0 descriptor?? [ 156.839126][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.849554][ T5724] usb 5-1: Product: syz [ 156.853795][ T5724] usb 5-1: Manufacturer: syz [ 156.867243][ T5724] usb 5-1: SerialNumber: syz [ 156.883423][ T5724] usb 5-1: config 0 descriptor?? [ 157.059270][ T5688] usbhid 3-1:0.0: can't add hid device: -71 [ 157.079305][ T7088] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 157.088070][ T5688] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 157.121109][ T5688] usb 3-1: USB disconnect, device number 15 [ 157.405675][ T5724] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 157.433822][ T5724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.456392][ T5696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.473471][ T5724] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 157.493053][ T5724] usb 5-1: media controller created [ 157.531169][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.584791][ T5688] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 157.595092][ T7103] ------------[ cut here ]------------ [ 157.602000][ T7103] usb 5-1: BOGUS control dir, pipe 80000e80 doesn't match bRequestType c0 [ 157.610871][ T7103] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.0.437/7103 [ 157.623822][ T7103] Modules linked in: [ 157.628436][ T7103] CPU: 1 UID: 0 PID: 7103 Comm: syz.0.437 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.639335][ T7103] Tainted: [L]=SOFTLOCKUP [ 157.643669][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.654791][ T7103] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 157.660499][ T7103] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 157.680623][ T7103] RSP: 0018:ffffc90005a9f4b8 EFLAGS: 00010246 [ 157.687069][ T7103] RAX: 0000000000000000 RBX: ffff888079af3a00 RCX: 0000000080000e80 [ 157.695744][ T7103] RDX: ffff88802ac8a120 RSI: ffffffff8ca31100 RDI: ffffffff906566b0 [ 157.704260][ T7103] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 157.713624][ T7103] R10: ffffc90005a9f5a0 R11: fffff52000b53ec0 R12: 1ffff110477d65ff [ 157.723458][ T7103] R13: ffff88823beb2ff8 R14: ffff88802ac8a120 R15: 0000000080000e80 [ 157.732462][ T7103] FS: 0000000000000000(0000) GS:ffff888125058000(0063) knlGS:00000000f5415b40 [ 157.742195][ T7103] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 157.745730][ T5681] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 157.750129][ T7103] CR2: 0000000000000000 CR3: 00000000203f2000 CR4: 00000000003526f0 [ 157.766462][ T7103] Call Trace: [ 157.769763][ T7103] [ 157.772717][ T7103] usb_start_wait_urb+0x13f/0x5b0 [ 157.775280][ T5688] usb 3-1: Using ep0 maxpacket: 8 [ 157.777949][ T7103] ? rcu_is_watching+0x15/0xb0 [ 157.787617][ T7103] ? trace_kmalloc+0x2a/0xf0 [ 157.792235][ T7103] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 157.797898][ T7103] usb_control_msg+0x234/0x3e0 [ 157.798320][ T5688] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 157.802692][ T7103] dtv5100_i2c_msg+0x231/0x2f0 [ 157.802732][ T7103] dtv5100_i2c_xfer+0x1a5/0x610 [ 157.820547][ T7103] ? __lock_acquire+0x683/0x2cf0 [ 157.826149][ T7103] __i2c_transfer+0x7be/0x1fe0 [ 157.830962][ T7103] __i2c_smbus_xfer+0x1584/0x27d0 [ 157.836638][ T7103] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 157.842117][ T7103] ? lockdep_hardirqs_on+0x7a/0x110 [ 157.847404][ T7103] ? rt_mutex_lock_nested+0x156/0x1c0 [ 157.852808][ T7103] i2c_smbus_xfer+0x1f4/0x310 [ 157.857719][ T7103] i2cdev_ioctl_smbus+0x1e7/0x700 [ 157.863027][ T7103] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 157.864763][ T5688] usb 3-1: config 0 has no interface number 0 [ 157.868726][ T7103] compat_i2cdev_ioctl+0x29d/0x5c0 [ 157.879909][ T7103] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 157.885631][ T7103] ? __fget_files+0x3a2/0x420 [ 157.890341][ T7103] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 157.895989][ T7103] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 157.901478][ T7103] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 157.907741][ T7103] ? kmem_cache_free+0x182/0x650 [ 157.912714][ T7103] ? __se_sys_futex_time32+0x3ab/0x440 [ 157.918276][ T7103] ? rcu_is_watching+0x15/0xb0 [ 157.923087][ T7103] __do_fast_syscall_32+0x23e/0x6f0 [ 157.929206][ T7103] ? do_fast_syscall_32+0x33/0x70 [ 157.930311][ T5688] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.934257][ T7103] ? lockdep_hardirqs_on+0x7a/0x110 [ 157.934292][ T7103] ? asm_int80_emulation+0x1a/0x20 [ 157.956044][ T7103] ? do_int80_emulation+0x29f/0x550 [ 157.961274][ T7103] ? trace_irq_disable+0x3b/0x140 [ 157.966377][ T7103] do_fast_syscall_32+0x33/0x70 [ 157.971254][ T7103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.977643][ T7103] RIP: 0023:0xf7f750ec [ 157.981729][ T7103] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 157.989296][ T5681] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.001405][ T7103] RSP: 002b:00000000f541550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 158.001436][ T7103] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 158.001450][ T7103] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.001462][ T7103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.001472][ T7103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 158.001483][ T7103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.001511][ T7103] [ 158.042623][ T5688] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.046569][ T7103] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.046590][ T7103] CPU: 1 UID: 0 PID: 7103 Comm: syz.0.437 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.046616][ T7103] Tainted: [L]=SOFTLOCKUP [ 158.046622][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.046631][ T7103] Call Trace: [ 158.046640][ T7103] [ 158.046648][ T7103] vpanic+0x56c/0xa60 [ 158.046681][ T7103] ? __pfx__printk+0x10/0x10 [ 158.046702][ T7103] ? __pfx_vpanic+0x10/0x10 [ 158.046727][ T7103] ? is_bpf_text_address+0x292/0x2b0 [ 158.046752][ T7103] ? is_bpf_text_address+0x26/0x2b0 [ 158.046785][ T7103] panic+0xc5/0xd0 [ 158.046811][ T7103] ? __pfx_panic+0x10/0x10 [ 158.046854][ T7103] __warn+0x315/0x4c0 [ 158.046869][ T7103] ? usb_submit_urb+0x1057/0x18b0 [ 158.046893][ T7103] ? usb_submit_urb+0x1057/0x18b0 [ 158.046915][ T7103] __report_bug+0x331/0x530 [ 158.046947][ T7103] ? usb_submit_urb+0x1057/0x18b0 [ 158.046970][ T7103] ? __pfx___report_bug+0x10/0x10 [ 158.047001][ T7103] ? usb_submit_urb+0x1105/0x18b0 [ 158.047020][ T7103] ? usb_submit_urb+0x1100/0x18b0 [ 158.047046][ T7103] ? pt_regs_val+0xc/0x70 [ 158.047073][ T7103] report_bug_entry+0x19a/0x290 [ 158.047099][ T7103] ? usb_submit_urb+0x1100/0x18b0 [ 158.047119][ T7103] ? usb_submit_urb+0x1105/0x18b0 [ 158.047140][ T7103] handle_bug+0xce/0x200 [ 158.047159][ T7103] exc_invalid_op+0x1a/0x50 [ 158.047186][ T7103] asm_exc_invalid_op+0x1a/0x20 [ 158.047204][ T7103] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 158.047227][ T7103] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 158.047244][ T7103] RSP: 0018:ffffc90005a9f4b8 EFLAGS: 00010246 [ 158.047262][ T7103] RAX: 0000000000000000 RBX: ffff888079af3a00 RCX: 0000000080000e80 [ 158.047275][ T7103] RDX: ffff88802ac8a120 RSI: ffffffff8ca31100 RDI: ffffffff906566b0 [ 158.047290][ T7103] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 158.047303][ T7103] R10: ffffc90005a9f5a0 R11: fffff52000b53ec0 R12: 1ffff110477d65ff [ 158.047318][ T7103] R13: ffff88823beb2ff8 R14: ffff88802ac8a120 R15: 0000000080000e80 [ 158.047347][ T7103] ? usb_submit_urb+0x1091/0x18b0 [ 158.047379][ T7103] usb_start_wait_urb+0x13f/0x5b0 [ 158.047403][ T7103] ? rcu_is_watching+0x15/0xb0 [ 158.047432][ T7103] ? trace_kmalloc+0x2a/0xf0 [ 158.047456][ T7103] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 158.047497][ T7103] usb_control_msg+0x234/0x3e0 [ 158.047527][ T7103] dtv5100_i2c_msg+0x231/0x2f0 [ 158.047557][ T7103] dtv5100_i2c_xfer+0x1a5/0x610 [ 158.047578][ T7103] ? __lock_acquire+0x683/0x2cf0 [ 158.047610][ T7103] __i2c_transfer+0x7be/0x1fe0 [ 158.047648][ T7103] __i2c_smbus_xfer+0x1584/0x27d0 [ 158.047685][ T7103] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 158.047722][ T7103] ? lockdep_hardirqs_on+0x7a/0x110 [ 158.047750][ T7103] ? rt_mutex_lock_nested+0x156/0x1c0 [ 158.047773][ T7103] i2c_smbus_xfer+0x1f4/0x310 [ 158.047805][ T7103] i2cdev_ioctl_smbus+0x1e7/0x700 [ 158.047835][ T7103] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 158.047874][ T7103] compat_i2cdev_ioctl+0x29d/0x5c0 [ 158.047902][ T7103] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 158.047938][ T7103] ? __fget_files+0x3a2/0x420 [ 158.047966][ T7103] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 158.047993][ T7103] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 158.048016][ T7103] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 158.048034][ T7103] ? kmem_cache_free+0x182/0x650 [ 158.048063][ T7103] ? __se_sys_futex_time32+0x3ab/0x440 [ 158.048090][ T7103] ? rcu_is_watching+0x15/0xb0 [ 158.048129][ T7103] __do_fast_syscall_32+0x23e/0x6f0 [ 158.048156][ T7103] ? do_fast_syscall_32+0x33/0x70 [ 158.048188][ T7103] ? lockdep_hardirqs_on+0x7a/0x110 [ 158.048212][ T7103] ? asm_int80_emulation+0x1a/0x20 [ 158.048230][ T7103] ? do_int80_emulation+0x29f/0x550 [ 158.048255][ T7103] ? trace_irq_disable+0x3b/0x140 [ 158.048282][ T7103] do_fast_syscall_32+0x33/0x70 [ 158.048309][ T7103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.048331][ T7103] RIP: 0023:0xf7f750ec [ 158.048348][ T7103] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 158.048365][ T7103] RSP: 002b:00000000f541550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 158.048384][ T7103] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 158.048397][ T7103] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.048409][ T7103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.048420][ T7103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 158.048432][ T7103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.048459][ T7103] [ 158.054964][ T7103] Kernel Offset: disabled