last executing test programs: 1m9.792287658s ago: executing program 3 (id=795): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xfffffffffffffffc, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x0, 0x10000000}, @flat=@weak_binder={0x77622a85, 0x1000}, @fda={0x66646185, 0x6, 0x0, 0x26}}, &(0x7f0000000200)={0x0, 0x18, 0x3b}}, 0x40}], 0x0, 0x0, 0x0}) 1m9.646648693s ago: executing program 3 (id=796): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001a00000429bd7000fddbdf250a208047fe03ff080000000008000400", @ANYRES32=0x0, @ANYBLOB="080017000400000008000300", @ANYRES32=0x0, @ANYBLOB="4c0b183f10ec8a8fdfd607d5bde8585532ea4a2456b6f33ecd2739e46c6d48de6697f82ccc7908b3a4ab3ae16810"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r4, 0x8947, &(0x7f0000000400)={'bond0\x00', @ifru_addrs=@llc={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @broadcast}}) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f00000003c0)={0x2c, 0x0, r8, 0x20000000}, 0x10) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) 1m7.983519347s ago: executing program 3 (id=801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet(0x2, 0x3, 0x3) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x2, 0x0, [{0x1, 0x80006, 0x5, 0x8001, 0x8, 0x57, 0xa774}, {0x1, 0x3, 0x0, 0x5, 0x0, 0x59ba, 0x9}]}) 1m7.854474061s ago: executing program 3 (id=802): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0xc000) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0xa8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {}, {0x3, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_ife={0x6c, 0x1, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x8, 0xc, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="66a14593b9a1"}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_DMAC={0xa, 0x3, @random="ef60a6c88e0c"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r10 = socket$kcm(0x11, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xa) 1m7.276029176s ago: executing program 3 (id=810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x1, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_BYTES={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffffffffffff}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040008}, 0x20000804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) 1m5.895658281s ago: executing program 3 (id=817): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000002fdad6af0000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x2400c085}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x20000844) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) sendmsg$sock(r5, 0x0, 0x20000000) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0)={0x0, 0x40}, 0x2) read(r0, &(0x7f0000000440)=""/82, 0x52) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000000)={0x2, 0xfe}, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r6, &(0x7f0000000040)="e4", 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private1, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000200)={0x51, 0x80, 0xfe, 0x0, 0x9, 0x9, 0x8, 0x58, 0x0, 0x17, 0x9}, 0xe) 1m5.357636745s ago: executing program 32 (id=817): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000002fdad6af0000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x2400c085}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x20000844) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) sendmsg$sock(r5, 0x0, 0x20000000) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0)={0x0, 0x40}, 0x2) read(r0, &(0x7f0000000440)=""/82, 0x52) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000000)={0x2, 0xfe}, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r6, &(0x7f0000000040)="e4", 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private1, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000200)={0x51, 0x80, 0xfe, 0x0, 0x9, 0x9, 0x8, 0x58, 0x0, 0x17, 0x9}, 0xe) 5.354639772s ago: executing program 4 (id=1130): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a00"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(r1, &(0x7f0000000040)='\t', 0x27) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.259835679s ago: executing program 4 (id=1131): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xcb, &(0x7f0000000080)=0x47ac6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="60a00200000000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r1, @ANYBLOB="d85ae02f0e7f236358116132445050ab10f93a38bb3428835b238025ddbde0c372330473"], 0x3c}}, 0x8840) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="af0ac95ab194f93f8e795a9b29420fa62dcb83c37ea61d1ac07a93ba79b599c887f0d0bdd2014cfae821", 0x2a}], 0x1}}], 0x1, 0x24088000) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x3e94, 0x2000, 0x8, 0xe4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) socket$packet(0x11, 0x3, 0x300) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x1, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60e1000000301101fe8000000000000000000000000000aaff02000000000000000000000000000140000e220030907826b46dfea6c80d423e9f3dd438a03259f4c1f71745384d1c2b5533fb8c6f44757d467af4a340640c"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000070000000000000000000000085000000500000009500000000fc"], 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r6}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r6, 0x68, &(0x7f0000000200)}, 0x10) 4.8844342s ago: executing program 4 (id=1135): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fremovexattr(r2, &(0x7f0000000040)=@random={'system.', '/dev/kvm\x00'}) 4.829761876s ago: executing program 1 (id=1136): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2c, r2, 0x103, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44880}, 0x8040804) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff481}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'mangle\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x356f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x72f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'pimreg\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%*\x00'}]}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0xc008744c, &(0x7f0000000180)) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x20058) 4.636353058s ago: executing program 4 (id=1138): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r4 = dup(r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xa}, {0x7, 0x9}, {0xb, 0xf}}}, 0x24}}, 0x80000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38491}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xa036}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}}, 0x10) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001180)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x7, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010100, @empty}, {0x14, 0xb, 0x0, @multicast2}}}}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46060478a3060800000000000002003e00cd000000b8010000000000004000000000000000ea020000000000000000c2000500380001000600b10600040300000081"], 0x78) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x80, r2}) r7 = memfd_secret(0x80000) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000000040)) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r2}) 4.456426951s ago: executing program 1 (id=1140): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x42, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b000c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000ffffffffffffffffc0"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) (async) fsopen(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) (async) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0xe, 0x3, 0x20, 0x0, 0xe, 0x32}}}}}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r9, 0x2000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20902, 0x0) 4.429277835s ago: executing program 4 (id=1141): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x17, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async, rerun: 64) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x8505, 0x3, 0x3}, 0x18, 0x0) (rerun: 64) landlock_restrict_self(r2, 0x0) (async, rerun: 64) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x16, 0x0) (rerun: 64) landlock_restrict_self(r3, 0x4) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x3}, 0x1c) (async, rerun: 32) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) 4.308031211s ago: executing program 0 (id=1142): openat$nvram(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) close(0x3) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0xd559, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000ffff28bd7000f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000baff000000440012800b000100697036746e6c000034000280140002002001000000000000000000000000000014000300ff0200000000000000000000000000010500090004000000080004000101", @ANYRES16], 0x6c}}, 0x40014) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) 4.286004675s ago: executing program 1 (id=1143): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x0, 0x10000000}, @flat=@weak_binder={0x77622a85, 0x1000}, @fda={0x66646185, 0x6, 0x0, 0x26}}, &(0x7f0000000200)={0x0, 0x18, 0x3b}}, 0x40}], 0x0, 0x0, 0x0}) 4.241185688s ago: executing program 1 (id=1144): syz_usb_connect$uac2(0x6, 0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000200c201810400001020301090288000301018008080b0001010c200609040000000101200009240103000428000408240a05004000020c24030207030503050303000b24060305", @ANYRES16], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = open(&(0x7f0000000280)='./file1\x00', 0x100603, 0x104) fcntl$addseals(r0, 0x409, 0x8e3652a1e0b94d91) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb200400a100000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000009, 0x8010, 0xffffffffffffffff, 0xec776000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000480)={{0x1000, 0xdddd1000, 0xd, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0x3000, 0x3, 0x0, 0x40, 0x0, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0xc, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x10000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x80, 0x7, 0x2, 0xdb}, {0x60000, 0x100000, 0xc, 0x7, 0xb1, 0x9, 0x21, 0x81, 0x80, 0xff, 0x1, 0x20}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x70000, 0x1000, 0x9, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0xf000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x200000, [0x400f90000000000, 0x4, 0x7e, 0xfff]}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) bind$inet(r8, &(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000001000000010000f4c129e8d43b1fe60ce4544c5dfcaea774a38c24cd60273a323d20225e0ba5f87f10bda177bfa010a6014f6d937ea84bbc66e5c296f62a3090737dc8733bc85c5824e7c2756944795a0509062197d060e1bd574123c4ec541b2b9030fcb238c7def360b96c90c6a9df8e2811fbc22421df627baffeb9226121c8073c07a7963316a56b1c36432d39e981b052c49ac8321c719be3c5c7d11b4bdcccc405802476a03a3c0519d91e7eccfc18c823abc64b78571219eed96170b2f67059ee19c97f56b53aed0b5905a6d80e22f09630", @ANYRES32=r6, @ANYRES32=r6], 0x18, 0x40000}, 0x4000) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540bd5ff000095f57584934070f43f"], 0x0}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r9, 0x400c4807, &(0x7f0000000040)={0x2, 0x200, 0x3fe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) 4.000370192s ago: executing program 5 (id=1147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r4, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r3, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r7 = dup(r6) mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000400), &(0x7f0000000500)=""/84}, 0x20) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000fe8000000000000000000000000000244e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x80c4) socket$inet6(0x2d, 0x2, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000000040)=0xae7c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.753642182s ago: executing program 5 (id=1148): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3", 0x37}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70ab992", 0x5d}], 0x6}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0xb1, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0xff, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x0, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.451713242s ago: executing program 5 (id=1149): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) (async) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x40009c0e, 0x10100}, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x6f5e, 0x40) (async) socket$netlink(0x10, 0x3, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r2 = dup(r1) (async) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) (async) r4 = add_key$user(&(0x7f0000000140), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000740)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r4, r3}, &(0x7f0000003380)=""/4094, 0xffe, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pselect6(0x2a, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000200)={0x80, 0xa, 0x8, 0x6, 0x1, 0x81, &(0x7f0000000080)='h'}) (async) syz_usb_connect$uac3(0x2, 0x8a, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201120500000020820516f42046bb02030101045004080b0100010030f00904000000010130000a2401ff0a00020000000904010000010230000904010101010009050109000200c10f0a252502000000f804000904020000010230000904020101010230000a2402025d2460730d05ecbbd50200050040c90905820908080707060a"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac2(0x6, 0xe1, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x2, 0xd0, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x4, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x5, 0x22, 0x3}, [@mixer_unit={0xa, 0x24, 0x4, 0x5, 0x4, "eb93d9eb89"}, @multiply_unit={0x7, 0x24, 0xc, 0x5, 0xb3, 0x3}, @source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xb, 0x4, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x2, 0x3, 0x0, 0x3, 0xdb, 0x25}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x27, 0x7, {0x8, 0x25, 0x1, 0x2, 0x3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x1, 0xe, 0x0, 0x3, 0x6, 0x6, 0xf}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x6, 0x98}, @as_header={0x10, 0x24, 0x1, 0x5, 0x8, 0x1, 0x5, 0xe, 0x401, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x10, 0x1, 0x12, 0x2}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x4d, 0x39, "5df96e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xb, 0x3, 0x8, {0x8, 0x25, 0x1, 0x1, 0x0, 0x7, 0x4}}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0xfa, 0x6, 0x20}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "c97a207f19ffb3d8ffe481797f69ca8f"}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x404}}, {0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="390302f65029eb69ffe533f9c18e4ac6da475ca84161c2ea2c25b9b7f5c7858ae14b58985e82db91c2e0261ce6b1effdff35f7ee81f87b21a03c0a5071833a4bd31cb503bfae5dd57daac5a8aea1a50a8cc480bd49016aa35d344ee2d5b061e26fc3284a504eea40"]}]}) 3.368556026s ago: executing program 5 (id=1150): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a000000000200000044000480400001800e000100627974656f726465720000002c000280080002400800034000000001080001400000000e0800044000000084080002400000000e140000001100010000000000000000000000000acbd0fd4055330dae2d487b78a8239cd322bca467bdad1fbed0eba5c665eed3d04c57b9362cd878d3da94f83a4c2875cebf641fb3a8a97ad1481977e2aec917153990d1f290a4182d8a1a9387837dfc26390b70fa37408aafe94dfae5593b322d3d571b4bbe63e016dc6064f32b14ee8e92b6720f91af0865c13747527b2523bf3fe4ffa98987420ccb"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2c, r2, 0x103, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44880}, 0x8040804) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff481}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'mangle\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x356f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x72f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'pimreg\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%*\x00'}]}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0xc008744c, &(0x7f0000000180)) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x20058) 3.093549599s ago: executing program 5 (id=1151): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f00000002c0)=@random={'security.', '\xbb\xbb\xbb\xbb\xbb\xbb'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@acquire={0x134, 0x17, 0x1, 0x80000000, 0x0, {{@in6=@private0, 0x0, 0x6c}, @in6=@remote, {@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in6=@private2={0xfc, 0x2, '\x00', 0xfd}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, {}, 0xfffffffd}, 0x80}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x5}}]}, 0x134}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) vmsplice(r5, 0x0, 0x0, 0x1) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600), 0x141000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000640)={0x39, 0x1}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x4002) 2.896148119s ago: executing program 5 (id=1152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) (async) syz_usb_disconnect(r3) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x9498e17e2907101c, 0x9, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x99, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xdd4}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x80, 0x9}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r3, 0x40095505, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="0f01b906ffffffb9800000c00f3235000100000f300fc7686d660ff18135f10000660f3a412cbdf01f000021b98b0800000f32b9800000c00f3235010000000f3026660f38226304b9800000c00f3235002000000f300f20d835080000000f22d8", 0x61}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x5}) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x5}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) r5 = syz_io_uring_setup(0x3d12, &(0x7f0000000040)={0x0, 0xdd68, 0x10100, 0xffffffff, 0x4}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_enter(r5, 0xd44, 0x0, 0xc, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x5, 0x0, 0x1, 0x6, 0x10000000000ff, 0xffffffffffffffe1}, 0x0, 0x0) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}}) (async) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.587245684s ago: executing program 2 (id=1153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0xfffffffd, 0x4) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) (async) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r4 = dup(r3) read(r4, &(0x7f0000000040), 0x0) (async, rerun: 64) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f046}) (async, rerun: 64) read$FUSE(r4, &(0x7f0000008180)={0x2020}, 0xfffffdfc) (async, rerun: 32) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) r7 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000001c0)={'\x00\x00@\x00', 0x10, 0x5, 0x3, 0x800, 0x0, "f759e100edc710000000d9fc6300", "00000004", "960100a5", "e8cc1304", ["8bada11e03411000", "c2fed6e2ffffff6806528640", "0021001000000900", "0000000000000000009700"]}) (async, rerun: 32) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x7ff) (async) close_range(r8, 0xffffffffffffffff, 0x0) r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002cc2cdf40630731203fad0102030109021200015f6562700904010800ff"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010200000000000000000a0000080900010073797a3100000fb74c"], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async, rerun: 32) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000240)=ANY=[@ANYRES64=r10], 0x0) (rerun: 32) r12 = socket$l2tp(0x2, 0x2, 0x73) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x18, 0x4e, 0x1, 0x0, 0x0, {0x0, 0x3}, [@generic="04da9d0e"]}, 0x18}}, 0x0) (async) sendto$inet(r12, &(0x7f0000000000)="4bd563db7692d883a193012a81948286c980a3fad8759b39435a0621ac0aa07bd4e221b0dfd0098aa50d96f79e1e73339e8b06ca3af92ce8e4bdebaddaee35bfcd39992a8b6543420b9ca97eb721ff2cf16d2d40ef375b792f6e729883711491424f2af1bf43244da2781eddbd28153baed4de5d6785492537bb13ffd56d9755cefa7ef74b4b43accb669404978b57c1428667", 0x93, 0x8c0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) 2.492784353s ago: executing program 2 (id=1154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x0, 0x10000000}, @flat=@weak_binder={0x77622a85, 0x1000}, @fda={0x66646185, 0x6, 0x0, 0x26}}, &(0x7f0000000200)={0x0, 0x18, 0x3b}}, 0x40}], 0x0, 0x0, 0x0}) 2.395671085s ago: executing program 2 (id=1155): syz_usb_connect(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x88, 0xf9, 0xc8, 0x40, 0x3f0, 0xf7f, 0x2dac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x16, 0x10, 0x6, "", [{{0x9, 0x4, 0x14, 0xe8, 0x2, 0x44, 0xf5, 0x1b, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x82}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000004c0)={&(0x7f0000000400)=[{0x7, 0x1, 0x0, {0x8, 0x800, 0x2}}, {0xd93, 0x3, 0x0, {0x80, 0x6}}, {0xe000000000000000, 0x2, 0x0, {0x4, 0x6, 0xa3c0ebf0df854c9b}}, {0x8, 0x1, 0x0, {0x4, 0x5a6f, 0x1}}], 0x4, 0x20, 0xfffe, 0x40}) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x19) 1.566953791s ago: executing program 0 (id=1156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000240)={&(0x7f0000000040)=0x2, 0x2, &(0x7f0000000100)=[{}], &(0x7f00000001c0)}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b3, 0x0, 0xd]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x1b59, 0x20007, @empty, 0x200}}, 0x24) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"/773], 0x378}}, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000008c0)={0x4, 0x0, [{0x8000000b, 0x1000, 0x4, 0x6, 0x7e, 0x80000001, 0x1}, {0x80000008, 0x8, 0x1, 0x8, 0x1, 0x4, 0x3}, {0x1, 0xfffffff9, 0x4, 0xc, 0x2, 0xfffffffa, 0x9d2}, {0x40000000, 0x0, 0x1, 0xaa, 0xa, 0x6, 0x1ff}]}) 1.41268515s ago: executing program 0 (id=1157): r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, 0x0, 0x8}, 0x0) 1.315132425s ago: executing program 0 (id=1158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r4, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r3, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r7 = dup(r6) mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000400), &(0x7f0000000500)=""/84}, 0x20) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000fe8000000000000000000000000000244e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x80c4) socket$inet6(0x2d, 0x2, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000000040)=0xae7c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.31484657s ago: executing program 4 (id=1159): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xed, 0x207fff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) syz_usb_connect(0x4, 0x322, &(0x7f0000001600)={{0x12, 0x1, 0x110, 0x6b, 0xd2, 0x78, 0xff, 0x17a8, 0x5, 0x8b9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x310, 0x1, 0x4b, 0x1, 0xb0, 0xb, "", [{{0x9, 0x4, 0x72, 0x2, 0x7, 0xc2, 0xf, 0xbf, 0x9, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "06f414fa885d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0xfa}, [@mdlm={0x15, 0x24, 0x12, 0xe228}, @mdlm_detail={0x24, 0x24, 0x13, 0x7f, "63832544b5992729c2c21e14138e14d2545f2904857f9925c82a39c66ef2f284"}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x8, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xe, 0x3, 0x9c, 0x6, 0xd2}, @mdlm={0x15, 0x24, 0x12, 0x7}, @dmm={0x7, 0x24, 0x14, 0x6, 0x5}]}, @generic={0x18, 0x22, "dc18ffa56b88c91cf826bf9af4fcb8b91f3729e3a30a"}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0x9, 0x0, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x9, 0xdb, 0x1, [@generic={0x2f, 0x5, "e02d445a237f7e38d12a55d30b777b3e32b3b9122286b587f66d616520d33917272bf2b1b18aa485f6a33640c7"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x75, 0x23, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xceb4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x9, 0x7f, 0x0, [@generic={0x99, 0x4, "bfc726695c3a35b0a914b9b91a695a36f352343aac85c7bea9a43db9c81f4a275d0a4be00dd66887c9d3baa5866910786d010b00057a7db0143fbd1d075a8bc9159a40cd5568ecaccaaea14420addc45cfaeb006a11388abd9d84e5d9c127688ffd3aa47edec6af3c344ffd12b654bee5fe77fd336d56cccb1fb2575dc0114994a0efd69ce5ec0e26cf59e8f357c40f1df22d5e70d1ea8"}, @generic={0x7d, 0x7, "4a1e14eaceb5f692d68d95b953f20a4793a92a54c2045455450c18cff69e544e7397ded88a1ed7c7902f7cbb5e8d93faf0a25b01a4281e19699ef38a607b5752c9e4c8f1ec8da0c58296914c1aeef1ca1b6081714d90621c808239b044ef2900beb4d2a2e5054a78ebce4f7161b437e51e3bb125b22c7eb250b77c"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x4, 0x4, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7d, 0x8001}, @generic={0x39, 0x22, "fae95515649ed2d625428b910973775dfc23b93e4e5d5450df8e2ef7a672792b752e6a5c7463e513298db741b78a4a9d74d102f10f74f1"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x1, 0xff, 0xa, [@generic={0x6a, 0xd, "79ca462f6f6175a303cf504955387551b1b2e8fafda8f045e66fb05fc9680ddfcf3d9d4016678067b1abb9ff050bea53fb39965fbd50c4add37de35ad2d37cc0793fe772c5b42f049c2b03b4ccb834471cf09fe594005b28fd68382f5877596c52d0aba2cb67cac3"}, @generic={0x25, 0xe, "d9eeb140fbeb72e3ae1f58ed32fc9737f0e728e75ee23c6b68923ec50fa7069db6c44b"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x4, 0x8d, 0x6}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x250, 0xb2, 0x25, 0x7, 0x40, 0x96}, 0x96, &(0x7f00000019c0)={0x5, 0xf, 0x96, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xae, 0x81, 0x1, 0x100, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "34e85c8f6f181c451c2b7a643255ac3e"}, @ssp_cap={0xc, 0x10, 0xa, 0xff, 0x0, 0x6, 0x0, 0xfffc}, @generic={0x2e, 0x10, 0xb, "5cedcff9a96681ac319d477488d63e7157d0ef22976b3e7ab043ab2e57f5330448a63953b7a4b6161356d2"}, @ssp_cap={0x24, 0x10, 0xa, 0x96, 0x6, 0x10000, 0x780f, 0x8, [0xc0, 0x0, 0xff3f3f, 0xc0, 0x6f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "657292ed87d0b33653ec67e4f197bec1"}]}, 0x5, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0xca3e3a43493e1508}}, {0x21, &(0x7f0000001ac0)=@string={0x21, 0x3, "91934ed6cfe4cbd1be2cad26b5a8b95f817f8d0e1af255325cc324dceec7d7"}}, {0xf4, &(0x7f0000001b00)=@string={0xf4, 0x3, "4527be8a1cb45db394ce43ce3cf66e86a1f3718f99958960e49d3186cce9249c78cf00abffa08409f98f6984121f9b6287f681445f6600313b6196cbf74d06a98a9f4740cb3240c63efcf54b1af16b301045d49068617fdd042fe04847595ba9ffbc7cee5543578a4b176f7ed00f5d0f979339c6a1592282e36d4131c911915495875740e44f81253768fcf1d8071ad8224dbb70ece71a9f6fdfb71dba17c5959cbba9f69631ab4c60b70863c4dde2092d6194b70576c10278abff5bd9a641d9e5095fb98e43fd09e21d17f1d938402de9ff9f6ed799fb9d6187a2445ccfc5bcd0bbc6aaf7f9099c2f92b26124fbde1a43ab"}}, {0x6c, &(0x7f0000001c00)=@string={0x6c, 0x3, "48e9c11f966279087fb005073d085caf7fd5b377150b4b6565324c843ce8598cb47b4273e708a667d1d781340efdaf73451952d25170bda5dfd9914c74cedcb9b8f1551fd99c2f64b78d015ab4990ca4b20b9cd6149d7857808bfca0d123fce81816db708ee0fb8cf653"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x414}}]}) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f00000101c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xe000, 0x201000, 0x8}) 1.12654739s ago: executing program 0 (id=1160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x20004890) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a09040000000000000000020000031c00048018000180080001006c6f67000c000280070002402efa00000900010073797a30000000000900020073797a320000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.117922423s ago: executing program 2 (id=1161): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a000000000200000044000480400001800e000100627974656f726465720000002c000280080002400800034000000001080001400000000e0800044000000084080002400000000e140000001100010000000000000000000000000acbd0fd4055330dae2d487b78a8239cd322bca467bdad1fbed0eba5c665eed3d04c57b9362cd878d3da94f83a4c2875cebf641fb3a8a97ad1481977e2aec917153990d1f290a4182d8a1a9387837dfc26390b70fa37408aafe94dfae5593b322d3d571b4bbe63e016dc6064f32b14ee8e92b6720f91af0865c13747527b2523bf3fe4ffa98987420ccb"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2c, r2, 0x103, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44880}, 0x8040804) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff481}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'mangle\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x356f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x72f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'pimreg\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%*\x00'}]}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0xc008744c, &(0x7f0000000180)) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x20058) 1.020357064s ago: executing program 1 (id=1162): sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x67bcb000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 1.019994527s ago: executing program 0 (id=1163): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) shutdown(0xffffffffffffffff, 0x0) close(0x3) r2 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc1485544, &(0x7f0000000080)=0xfffffffc) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) 565.290307ms ago: executing program 2 (id=1164): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0x7210, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000300)=[{&(0x7f0000007900)=""/4095, 0xfff}], 0x1) 393.854111ms ago: executing program 2 (id=1165): r0 = syz_usb_connect$uac2(0x5, 0xa0, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) r1 = socket(0xa, 0x3, 0xff) close(r1) (async) r2 = socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f00000010c0)=@in6={0xa, 0x4e23, 0x4, @mcast2, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x14, 0x1, 0x3d, 0x475}}], 0x14}, 0x20004004) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 1 (id=1166): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0xd0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0xd0}}, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000240)={0x1, @capture={0x1000, 0x1, {0x8, 0x10000}, 0x6}}) getgroups(0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4, "ee0f6ef6"}, &(0x7f0000000080)=0x28) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000001, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r6 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r8}, 0x80, 0x0}}], 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) getsockopt$sock_buf(r10, 0x1, 0x3d, &(0x7f00000001c0)=""/84, &(0x7f0000000240)=0x54) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000880)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="3100b4d8987d0c2897f70fb2c42e7ece14ad47d0d7669bbbf1eb6c0a13c330d382c51501", 0x24}, {&(0x7f00000000c0)="c63956957babbac78395e48db7bf220b556eae6792b7e28e3849cfc90491b7d7e2318653b5560e19de36bac65c5057902870240ebb671eeb0ca50faca4501232f60cfd8fc2bb1e0a293748d3e596e4174d65ab", 0x53}, {&(0x7f0000000140)="38b3c1b063dba42fc57b60cd53a41708d8ebaa19a7eb9142646b7d5a31c3160d04865cd92127f1d85d77b6940b9c24f1202de1b226a5ff8a23ce02570fe0eb38e14cc7169ec0dd63d0e11cc117bfd49507be115b", 0x54}], 0x3, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x48, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x39, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}]}, @generic={0x83, 0xc, "3694ac0d6d05e6232ff3"}, @ra={0x94, 0x4}]}}}], 0xf0}}, {{&(0x7f0000000500)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000540)="f72aafaa4d7d3a314b4e07bc9f1e4c76b554635a903a7079377cedfe99efc57a37a8f721d038b7897d4d5f4b7a03f05a24723b5faf333a5db2cfa403c66dfdf58b", 0x41}, {&(0x7f00000005c0)="b697a4f6449b37f13ec6c6588cd8712e1e9d84c3fa69979c9badc5d9b97332371f6f74212a1dde01569ea0fb68296bfed9373faccd3d547d12ff074839bbd79b568b8839f59fe7ccae0d15105bdf8591d1ff5fc309bad47c1a71dbcb622311b05c48cf04fe358f670371ee8aa3573dc3e85c066d1d1ee44ddb4ba471bc564bf7eb9877156146ae3136713678b156136f147db7be11e4f72dd403aa60d4db23a5051b21dc7fefee98ddc781735cc33db96c837e59cd80cb0b119fceefc5b37881246cb295", 0xc4}, {&(0x7f00000006c0)="f55e8b74e2aaa9db4a3b5f298157bef3f49c4678e74b0b305af6ce9b4a7a0d2542b0413ddbf87bbb6ecc29cf679c1b072b5332c1e69dd5bcca7f3fd7fa5b0c1ffc0471a1c8c352771277103d24a0685772a73a84394d58051e4c24eab0d4ebe1bade2d11a6132d73a9d82ecb71cb78c0b304605a84a488b0742223ac619a45f9ec3cdc6a20a70b38576795abc902920d7705e823eeb327289de25ec6944dc2e70c3de665d1687b02c9c9f980577912230c5083674dee631489aac481086d1e", 0xbf}], 0x3, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x34, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x1d, [@empty, @loopback, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x43}]}, @ssrr={0x89, 0x7, 0xce, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x82}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xa0}}, {{&(0x7f0000000b80)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000003180)=[{&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="60c319894aa7d027870785ee5352f5b7b8b984d6ffdea863b0b2f9bc8a52205811212c1bcd53eb42fa9de7c918036d2bf411e5c0f4d3877f6ddbfc18911093e22377e49329318fa69f8819cb24c3944c2e3c1970b5c77f42cf8c4ac8be0e024e20c54f76d4b0505bae11672aa557b56001d86959d09759304870d0aed05052698aa56c7fec053b9aa5f76d1da9637d", 0x8f}, {&(0x7f0000003140)="6e52e8c81c28ca8e5b7ce282", 0xc}], 0x3, &(0x7f00000031c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xcd, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x10}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xa1, 0x1, 0x8, [{@rand_addr=0x64010101, 0xffffffd1}]}, @cipso={0x86, 0x16, 0x0, [{0x1, 0x10, "72b509b7a31d38186425c4b27509"}]}, @ssrr={0x89, 0x17, 0x4f, [@loopback, @loopback, @remote, @multicast2, @multicast1]}, @ssrr={0x89, 0x17, 0xa6, [@loopback, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x35}, @loopback]}, @generic={0x94, 0xc, "830299025a7e81ca98f9"}, @timestamp={0x44, 0x1c, 0x12, 0x0, 0x4, [0x5, 0x1, 0x2, 0x8, 0x99eb, 0x6]}]}}}], 0x110}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000003300)="2b285d85482657ac353be809a48102337dd85520b8d6372549e0a279dea4eb56f1c4996a327ea60492178ec67b43034f3d9f718960078560676900f300747f2e278b915015c88be686dafa6b5cbcb0529cd0b717e234bee3a2fa60561a4143398dec939a595ce04ef6629c77b8b13f7d40f23014339d22ced20aa4b3a40b3d003f2a88b4788c181a73cad82145b84d0e7eef3d09816722edf452d9a27940116d11135d39a0abe110e2a782fd", 0xac}, {&(0x7f00000033c0)="51f7db4c6dcaf1b76a3d6fcbd2224f6930b19c3016e28303d42777ba3d8c5e596b1f8b6ee2862da197e0582e39273579bba85e18416e19bb6d0447cb92d587ae92ec6c9028d1dba51d3203f01c73b661b17ead24c46ecad546aa", 0x5a}, {&(0x7f0000003440)="7018d924ef25c5444e612ac4d82a4dceca98548ab2ebb4523849e7cb076c58870d08d67bfd914cb33557413b50c054a836300b83910c2bbc511e1688af882e4f6ad524d08ad69cf87bba1f404687b363c52c540982e54088c5b384104c2c9fcdd506467ed333e401b802bf5d0c186e0acaa0795ba50b808c90151ffa47bf4e1398e5a82dadee497906bc3ec6b4fc74b8", 0x90}, {&(0x7f0000003500)="e35cbb11be7a8daaecca115a70eb6b45f2dfae0f610a88188f49f5081af33181", 0x20}, {&(0x7f0000003540)="c6abfef0f96d74e616605087fc52e3f0fa02e1191eb7f05c5daee1b4fd6863d14e37dec8ac71aabecae442dfd996f4c1c33d06208ec5f689db4b48acb4a1133fa4f0e288f60b4b87382b427d3e3f192dd32a870c8f61f11958b83b3f5cbb42766cb728c023aec7722ca74c4b63ec835988ffc514bdced381b8", 0x79}], 0x5, &(0x7f0000003640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}, {{&(0x7f0000003680)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000004c80)=[{&(0x7f00000036c0)="5cbe6b3f7671960312dc79d4a28150f8e85be51fd266557c2e9058e5c860d1e2d805f95ffdd8cef1efa67e72c15d37426d9d16805e0751759bdee94dcdf0b6fa1794e0941676876347b24f871714d0b83e3f5e4192a2c4a1ae68d1751796bcb314d2f3f338704ce62b6774b12ea4d2df734868beead60ff2e56dc0cb33afc291588df94821bfcc77199aba6b8e883b7d6ba5728ef9339181c97ea2662ec37c58a0dbcf9f00b5a1c483614424544ceaa951fa64e8e731716c798618c8a2fdac7c60ad6ee29af3347a165a5a7babadf0dc4943b5ae8be0b6d8ab57e41794ab7b47b059f3e4c9580306f5ab54ddc6070b4b9b9bf619", 0xf4}, {&(0x7f00000037c0)="169e148d1c3d60b92795c745afaa7b048f6206d0c28df1c9b619202c3614bc1b279fa24d91adc77175be2daa464a973f80cafc5af1395213bc972b3d4246c8e03a4977b387493c5ac98e20d26dc19a5812c943151a585081c326d3e6ffab9f250f92961d24ace89fa75537ba1861d3e94b55122dfec92119a1f49c98a67749bd7886f83d7bf7ac7705c374016b7d48e32761f03761448e55cd12e41e0f681c068bc52c32a014bb352ac7e5ac2fcdc0e78df681e4e786111f37695f555d49ec7fb31e", 0xc2}, {&(0x7f00000038c0)="69472c98b9b304ec01777a6775937a4a49422425430cac5fdb07671a9076aae277fe90e1d74b25cecc42d112365a389914fd0e4d95e837bb913b02c1d0daee33b75cfbcc0ed8a216a746784bf1e95c39d0de74f9cb86a9cda5b6c68bc88e484e01cd0af68943a838c575ae357f57dd8dee6909e7e275556b6af85eb1ad7249a55526d56d4596f05200159b61f2de0681540441f93c622630404e0c416fd46e55656145de8292135d7041a238ec0b6b", 0xaf}, {&(0x7f0000003980)="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", 0xfc}, {&(0x7f0000003a80)="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", 0x1000}, {&(0x7f0000004a80)="8f6819edfc0faa43c2ab06e9c1d6a6152b165636f4e44f56fbfba7c49aaeb095afec799b4ccef06b7ae17af2f311d9bc00fe6971e7aab54b4758b84a6b1608f1d48b9d5df2aaf0f3840b1c198532e4863c2c222c492f1337e45f7cc9d0b612a031b399b3ac33734ca80faba6c2f4f54ab394053f208032423cd98d6696bf14bb7f78e82b50159d74272054b9bdc28896e27ce28d722bf32dcb40f36c8ca7b811643eade1de63c5e638d30afd29266062b5c06f65584c7b15d963e2e14e54097ec93a87adc4f971ac59b9f8aadddee88b3cd774f74b", 0xd5}, {&(0x7f0000004b80)="3a5dfa15eff62ab0b643e21f9cb6a1d311502e1eb9fdfc05abaaf5d785a31b73763e8950082e04090c91959bd04972a7fa1147498f848bc9e7863a5b1b74c568c6f36e13826e84c6ec60ddce17dfd4d24ad6e596d1dbf2b72b6362884cf8a73ea87f097d00d65e7ba7101368bf36ec9b7ac80e5230a10a9f4e707542a4dc11b5d24db0d0a635cfe9db9e93c651d5cb4f85deab2cef18f1a430d1790a041a68126d06effaad67d59ba0a2f38b5e5c1ac2c8e2146656d3b82c1464af626fbd593dcdd3e888a6d55f995dbb7b366963181cb4358430a533c48baff1ea1ea98d93c33b3501454808ed6cba4f27162c5f65825712714744df", 0xf6}], 0x7}}], 0x5, 0x20000004) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) stat(0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001ac0)={{0x12, 0x1, 0x201, 0x6a, 0x5e, 0x2, 0x10, 0x1bbb, 0x3, 0x7723, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x6, 0x90, 0x6, "", [{{0x9, 0x4, 0x39, 0x6, 0x0, 0x18, 0xc7, 0x2, 0x2}}]}}]}}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): tting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.031699][ T5718] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 236.049167][ T5718] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 236.049199][ T5718] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 236.049217][ T5718] usb 3-1: Manufacturer: syz [ 236.052303][ T5718] usb 3-1: config 0 descriptor?? [ 236.113752][ T5737] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 236.189200][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.238714][ T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 236.261308][ T5737] usb 2-1: Using ep0 maxpacket: 16 [ 236.270549][ T5737] usb 2-1: unable to get BOS descriptor or descriptor too short [ 236.280096][ T5737] usb 2-1: config 225 has an invalid descriptor of length 0, skipping remainder of the config [ 236.291182][ T5737] usb 2-1: config 225 has 0 interfaces, different from the descriptor's value: 3 [ 236.307818][ T5737] usb 2-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 236.320506][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.336055][ T5737] usb 2-1: Product: syz [ 236.345443][ T5737] usb 2-1: Manufacturer: syz [ 236.353925][ T5737] usb 2-1: SerialNumber: syz [ 236.393451][ T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 236.403166][ T24] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 236.418355][ T24] usb 1-1: Product: syz [ 236.431083][ T24] usb 1-1: config 0 descriptor?? [ 236.449601][ T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 236.463977][ T24] usb 1-1: Detected FT232H [ 236.464365][ T5718] hid_parser_main: 35 callbacks suppressed [ 236.464383][ T5718] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 236.561601][ T5718] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 236.583638][ T5737] usb 2-1: USB disconnect, device number 46 [ 236.682664][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 236.702439][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 236.718572][ T24] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 236.740251][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.753349][ T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 236.781222][ T24] usb 1-1: USB disconnect, device number 59 [ 236.802975][ T1222] usb 3-1: USB disconnect, device number 56 [ 236.846788][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 236.884732][ T24] ftdi_sio 1-1:0.0: device disconnected [ 237.139068][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.147787][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.161443][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.499145][ T5737] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 237.660583][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.682025][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.695434][ T8897] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 237.709462][ T5718] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 237.709737][ T5737] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 237.730840][ T5737] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 237.751586][ T1222] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 237.770211][ T5737] usb 2-1: Manufacturer: syz [ 237.782415][ T5737] usb 2-1: config 0 descriptor?? [ 237.878744][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 237.920885][ T1222] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 237.931878][ T1222] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.942745][ T1222] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.953805][ T1222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.965419][ T1222] usb 1-1: SerialNumber: syz [ 238.020733][ T8911] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 238.058996][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 238.072999][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.084641][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.094798][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.107790][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.116999][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.120107][ T8913] gretap3: entered allmulticast mode [ 238.132289][ T9] usb 3-1: config 0 descriptor?? [ 238.158110][ T8913] bond2: (slave gretap3): making interface the new active one [ 238.170800][ T8913] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 238.202121][ T1222] usb 1-1: 0:2 : does not exist [ 238.215126][ T1222] usb 1-1: unit 255 not found! [ 238.372406][ T1222] usb 1-1: USB disconnect, device number 60 [ 238.468271][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.472016][ T142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.497650][ T142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.549956][ T9] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 238.570883][ T9] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 238.579810][ T9] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 238.587182][ T9] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 238.597275][ T9] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 238.606816][ T9] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 238.614546][ T9] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 238.634687][ T9] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 238.643934][ T9] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 238.710271][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0015/input/input29 [ 238.748885][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.760216][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.830254][ T5737] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0014/input/input30 [ 238.830440][ T9] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 238.931820][ T9] usb 3-1: USB disconnect, device number 57 [ 238.948300][ T142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.992225][ T142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.024006][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 239.024025][ T29] audit: type=1326 audit(1779355997.043:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8926 comm="syz.0.816" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f762459ce59 code=0x0 [ 239.059932][ C0] net_ratelimit: 1 callbacks suppressed [ 239.059953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.126954][ T5737] uclogic 0003:256C:006D.0014: input,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 239.221711][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.229867][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.235848][ T5737] usb 2-1: USB disconnect, device number 47 [ 239.281483][ T142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.320239][ T142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.538401][ T8933] fido_id[8933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 239.695295][ T142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.716004][ T142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.718329][ T6805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.928371][ T8943] FAULT_INJECTION: forcing a failure. [ 239.928371][ T8943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.976038][ T8943] CPU: 1 UID: 0 PID: 8943 Comm: syz.1.821 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.976066][ T8943] Tainted: [L]=SOFTLOCKUP [ 239.976073][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.976089][ T8943] Call Trace: [ 239.976095][ T8943] [ 239.976103][ T8943] dump_stack_lvl+0xe8/0x150 [ 239.976129][ T8943] should_fail_ex+0x412/0x560 [ 239.976157][ T8943] _copy_from_user+0x2d/0xb0 [ 239.976184][ T8943] ___sys_sendmsg+0x1c6/0x360 [ 239.976209][ T8943] ? __lock_acquire+0x6b5/0x2cf0 [ 239.976238][ T8943] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.976290][ T8943] ? __fget_files+0x2a/0x420 [ 239.976311][ T8943] ? __fget_files+0x3a0/0x420 [ 239.976338][ T8943] __x64_sys_sendmsg+0x1bd/0x2a0 [ 239.976365][ T8943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.976395][ T8943] ? __pfx_ksys_write+0x10/0x10 [ 239.976429][ T8943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.976446][ T8943] do_syscall_64+0x15f/0xf80 [ 239.976470][ T8943] ? trace_irq_disable+0x3b/0x140 [ 239.976500][ T8943] ? clear_bhb_loop+0x40/0x90 [ 239.976521][ T8943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.976537][ T8943] RIP: 0033:0x7f3230f9ce59 [ 239.976554][ T8943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.976568][ T8943] RSP: 002b:00007f3231ea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.976584][ T8943] RAX: ffffffffffffffda RBX: 00007f3231215fa0 RCX: 00007f3230f9ce59 [ 239.976595][ T8943] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 239.976605][ T8943] RBP: 00007f3231ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 239.976615][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.976625][ T8943] R13: 00007f3231216038 R14: 00007f3231215fa0 R15: 00007f323133fa48 [ 239.976650][ T8943] [ 240.307324][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.345962][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.372562][ T4945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.400024][ T4945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.424935][ T4945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.442256][ T4945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.450126][ T4945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.589455][ T8958] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 240.756835][ T8958] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.805283][ T8970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.815958][ T8961] vlan2: entered allmulticast mode [ 240.825965][ T8961] bond3: entered allmulticast mode [ 240.838485][ T8970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.859593][ T5737] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 241.015838][ T5737] usb 1-1: Using ep0 maxpacket: 8 [ 241.023444][ T5737] usb 1-1: config 53 has an invalid interface number: 101 but max is 0 [ 241.041872][ T5737] usb 1-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 241.067020][ T5737] usb 1-1: config 53 has no interface number 0 [ 241.080515][ T5737] usb 1-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 241.107015][ T5737] usb 1-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.136049][ T5737] usb 1-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 241.171612][ T5737] usb 1-1: config 53 interface 101 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.243869][ T5737] usb 1-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 241.253501][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.282904][ T5737] usb 1-1: Product: syz [ 241.287186][ T5737] usb 1-1: Manufacturer: syz [ 241.296030][ T5737] usb 1-1: SerialNumber: syz [ 241.383053][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.467434][ T142] bond5 (unregistering): (slave geneve3): Releasing active interface [ 241.471820][ T8997] x_tables: unsorted entry at hook 3 [ 241.487119][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 241.498154][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 241.508033][ T142] bond4 (unregistering): (slave geneve2): Releasing active interface [ 241.528167][ T5737] kvaser_usb 1-1:53.101: error -ENODEV: Cannot get usb endpoint(s) [ 241.563415][ T5737] usb 1-1: USB disconnect, device number 61 [ 241.585072][ T1222] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 241.619162][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.678234][ T142] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 241.687359][ T142] bridge1 (unregistering): left promiscuous mode [ 241.760145][ T1222] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 241.768303][ T1222] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 241.779316][ T1222] usb 3-1: config 8 has no interface number 0 [ 241.785909][ T1222] usb 3-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 241.799238][ T1222] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 241.809062][ T1222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.824307][ T142] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 241.832546][ T1222] usb 3-1: NFC: intf ffff88802e11f000 id ffffffff8f3e4800 [ 241.844278][ T142] bridge2 (unregistering): left promiscuous mode [ 241.851263][ T142] bridge2 (unregistering): left allmulticast mode [ 241.907035][ T142] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 241.917980][ T142] bridge3 (unregistering): left promiscuous mode [ 241.982342][ T142] bond0 (unregistering): Released all slaves [ 241.993123][ T142] bond1 (unregistering): Released all slaves [ 242.013103][ T142] bond2 (unregistering): Released all slaves [ 242.036547][ T9] usb 3-1: USB disconnect, device number 58 [ 242.060499][ T142] bond3 (unregistering): Released all slaves [ 242.079394][ T142] bond4 (unregistering): Released all slaves [ 242.098895][ T142] bond5 (unregistering): Released all slaves [ 242.140198][ T1222] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 242.167226][ T8966] bond3: (slave geneve3): making interface the new active one [ 242.176966][ T8966] geneve3: entered allmulticast mode [ 242.186211][ T8966] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 242.245028][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 242.313066][ T1222] usb 5-1: config index 0 descriptor too short (expected 12336, got 36) [ 242.341612][ T1222] usb 5-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 242.355992][ T1222] usb 5-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 242.366610][ T1222] usb 5-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 242.415640][ T1222] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 242.445161][ T1222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.499574][ T5632] Bluetooth: hci1: command tx timeout [ 242.731207][ T24] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 242.902720][ T10] usb 5-1: USB disconnect, device number 50 [ 242.919099][ T24] usb 1-1: config 1 interface 0 altsetting 201 bulk endpoint 0x82 has invalid maxpacket 16 [ 242.950594][ T142] hsr_slave_0: left promiscuous mode [ 242.969231][ T24] usb 1-1: config 1 interface 0 altsetting 201 bulk endpoint 0x3 has invalid maxpacket 1024 [ 242.983055][ T142] hsr_slave_1: left promiscuous mode [ 243.012096][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 243.034494][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.053627][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.077122][ T24] usb 1-1: Product: syz [ 243.094551][ T24] usb 1-1: Manufacturer: syz [ 243.103069][ T142] veth1_to_bridge: left promiscuous mode [ 243.110159][ T142] veth1_macvtap: left promiscuous mode [ 243.110476][ T24] usb 1-1: SerialNumber: syz [ 243.117690][ T142] veth0_macvtap: left promiscuous mode [ 243.130285][ T142] veth1_vlan: left promiscuous mode [ 243.135852][ T142] veth0_vlan: left promiscuous mode [ 243.147281][ T9006] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 243.170272][ T9006] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 243.624475][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.649338][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.687444][ T24] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 243.759553][ T24] usb 1-1: USB disconnect, device number 62 [ 244.089579][ T5632] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 244.147987][ T12] net_ratelimit: 15 callbacks suppressed [ 244.148001][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.201317][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 244.340941][ T3307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.414360][ T9047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.839'. [ 244.430907][ T3307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.480363][ T9046] netlink: 68 bytes leftover after parsing attributes in process `syz.2.839'. [ 244.589766][ T5632] Bluetooth: hci1: command tx timeout [ 244.705885][ T8955] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.726465][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.736054][ T8955] bridge_slave_0: entered allmulticast mode [ 244.747168][ T8955] bridge_slave_0: entered promiscuous mode [ 244.759742][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.776795][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.790268][ T8955] bridge_slave_1: entered allmulticast mode [ 244.802980][ T8955] bridge_slave_1: entered promiscuous mode [ 244.963254][ T8955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.979982][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.029055][ T8955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.279306][ T142] IPVS: stop unused estimator thread 0... [ 245.330316][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.362785][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.430615][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.448960][ T9068] overlayfs: missing 'lowerdir' [ 245.455065][ T8955] team0: Port device team_slave_0 added [ 245.472269][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.490457][ T8955] team0: Port device team_slave_1 added [ 245.643015][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.662742][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.678071][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.755409][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.791263][ T8955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.858421][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 245.887423][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.905338][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.947789][ T1222] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 245.992493][ T8955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.017985][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 246.033344][ T9084] veth0: Caught tx_queue_len zero misconfig [ 246.049669][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 246.113885][ T1222] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 246.133801][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.156414][ T1222] usb 3-1: Product: syz [ 246.160997][ T1222] usb 3-1: Manufacturer: syz [ 246.165777][ T1222] usb 3-1: SerialNumber: syz [ 246.211330][ T1222] usb 3-1: config 0 descriptor?? [ 246.223697][ T8955] hsr_slave_0: entered promiscuous mode [ 246.242653][ T8955] hsr_slave_1: entered promiscuous mode [ 246.251288][ T8955] debugfs: 'hsr0' already exists in 'hsr' [ 246.257122][ T8955] Cannot create hsr debugfs directory [ 246.397700][ T9097] No such timeout policy "syz1" [ 246.529866][ T1222] usb 3-1: ignoring: probably an ADSL modem [ 246.660693][ T5632] Bluetooth: hci1: command tx timeout [ 246.834410][ T1222] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 246.889413][ T1222] usb 3-1: USB disconnect, device number 59 [ 247.338745][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 247.356150][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 247.372057][ T8955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 247.405306][ T8955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.414051][ T5718] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 247.434403][ T8955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 247.463264][ T8955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.481411][ T8955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 247.511971][ T8955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 247.522018][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 247.530760][ T8955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.542873][ T10] usb 2-1: config 114 has an invalid interface number: 33 but max is 0 [ 247.556734][ T10] usb 2-1: config 114 has an invalid descriptor of length 0, skipping remainder of the config [ 247.573295][ T8955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.580631][ T10] usb 2-1: config 114 has no interface number 0 [ 247.587575][ T10] usb 2-1: config 114 interface 33 altsetting 232 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.603404][ T5718] usb 1-1: Using ep0 maxpacket: 16 [ 247.609634][ T10] usb 2-1: config 114 interface 33 has no altsetting 0 [ 247.617961][ T5718] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 247.631269][ T5718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.643394][ T5718] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.657991][ T10] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e300, bcdDevice=4b.7e [ 247.668478][ T5718] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.681203][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.695733][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.704349][ T10] usb 2-1: Product: syz [ 247.708581][ T5718] usb 1-1: Product: syz [ 247.713398][ T10] usb 2-1: Manufacturer: syz [ 247.718229][ T5718] usb 1-1: Manufacturer: syz [ 247.723412][ T10] usb 2-1: SerialNumber: syz [ 247.731948][ T5718] usb 1-1: SerialNumber: syz [ 247.758722][ T5697] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 247.776161][ T5718] usb 1-1: 0:2 : does not exist [ 247.939601][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 247.961910][ T5697] usb 5-1: config 0 has no interfaces? [ 247.969902][ T10] em28xx 2-1:114.33: audio device (eb1a:e300): interface 33, class 1 [ 247.976396][ T8955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.982316][ T5697] usb 5-1: New USB device found, idVendor=0080, idProduct=0000, bcdDevice= 0.00 [ 247.995564][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 247.996685][ T10] usb 2-1: USB disconnect, device number 48 [ 248.012312][ T5697] usb 5-1: SerialNumber: syz [ 248.020572][ T5697] usb 5-1: config 0 descriptor?? [ 248.045906][ T8955] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.080685][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.087886][ T3307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.128418][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.135736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.277698][ T8955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.343342][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.366786][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.382123][ T8955] veth0_vlan: entered promiscuous mode [ 248.411663][ T8955] veth1_vlan: entered promiscuous mode [ 248.489329][ T8955] veth0_macvtap: entered promiscuous mode [ 248.510229][ T29] audit: type=1326 audit(1779356006.523:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.2.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb945f9ce59 code=0x7ffc0000 [ 248.553153][ T8955] veth1_macvtap: entered promiscuous mode [ 248.581614][ T29] audit: type=1326 audit(1779356006.523:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.2.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb945f9ce59 code=0x7ffc0000 [ 248.611377][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.637834][ T29] audit: type=1326 audit(1779356006.563:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.2.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fb945f9ce59 code=0x7ffc0000 [ 248.665496][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.690586][ T29] audit: type=1326 audit(1779356006.563:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.2.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb945f9ce59 code=0x7ffc0000 [ 248.720324][ T142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.722506][ T29] audit: type=1326 audit(1779356006.563:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.2.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb945f9ce59 code=0x7ffc0000 [ 248.754898][ T29] audit: type=1326 audit(1779356006.563:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.2.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb945f9ce59 code=0x7ffc0000 [ 248.761567][ T5632] Bluetooth: hci1: command tx timeout [ 248.784617][ T142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.797252][ T29] audit: type=1326 audit(1779356006.563:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.2.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb945f9ce59 code=0x7ffc0000 [ 248.823164][ T29] audit: type=1326 audit(1779356006.563:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.2.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb945f9ce59 code=0x7ffc0000 [ 248.838933][ T142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.882730][ T142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.150812][ C0] net_ratelimit: 10 callbacks suppressed [ 249.150832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.165791][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.203789][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.234505][ T6799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.268189][ T6799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.304997][ T29] audit: type=1326 audit(1779356007.323:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.2.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb945f9ce59 code=0x7ffc0000 [ 249.375216][ T9146] SET target dimension over the limit! [ 249.390396][ T29] audit: type=1326 audit(1779356007.323:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9145 comm="syz.2.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb945f9ce59 code=0x7ffc0000 [ 249.470162][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.540641][ T6799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.549860][ T6799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.955820][ T5732] usb 5-1: USB disconnect, device number 51 [ 250.183851][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.217006][ T5718] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 250.378976][ T5718] usb 1-1: USB disconnect, device number 63 [ 250.390249][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.429215][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.483548][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 251.219511][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.227682][ T6803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.568752][ T5718] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 251.598976][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.649001][ T1222] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 251.732225][ T5718] usb 3-1: Using ep0 maxpacket: 16 [ 251.756344][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.786717][ T5718] usb 3-1: config 9 has an invalid interface number: 57 but max is 0 [ 251.805583][ T5718] usb 3-1: config 9 has no interface number 0 [ 251.814260][ T5718] usb 3-1: config 9 interface 57 has no altsetting 0 [ 251.819434][ T1222] usb 5-1: Using ep0 maxpacket: 16 [ 251.831338][ T5718] usb 3-1: string descriptor 0 read error: -22 [ 251.839013][ T5718] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 251.864324][ T1222] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 251.867490][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.900731][ T1222] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.938372][ T1222] usb 5-1: config 0 has no interfaces? [ 251.954654][ T1222] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 251.982268][ T1222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.001489][ T1222] usb 5-1: config 0 descriptor?? [ 252.177622][ T5718] video4linux radio48: keene_cmd_main failed (-71) [ 252.186807][ T5732] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 252.214564][ T5718] radio-keene 3-1:9.57: V4L2 device registered as radio48 [ 252.259391][ T9] usb 5-1: USB disconnect, device number 52 [ 252.267174][ T5718] usb 3-1: USB disconnect, device number 60 [ 252.377196][ T5732] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.420040][ T5732] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 252.455352][ T5732] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.473659][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.497776][ T9196] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 252.518137][ T5732] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.930126][ T5718] usb 2-1: USB disconnect, device number 49 [ 253.161956][ T9221] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.647341][ T9231] fuse: Bad value for 'fd' [ 253.888812][ T1222] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 254.004703][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 254.032412][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 254.058681][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 254.058698][ T29] audit: type=1326 audit(1779356012.073:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.0.881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762459ce59 code=0x7ffc0000 [ 254.070796][ T1222] usb 5-1: Using ep0 maxpacket: 32 [ 254.156664][ T1222] usb 5-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40 [ 254.184258][ T29] audit: type=1326 audit(1779356012.073:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.0.881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762459ce59 code=0x7ffc0000 [ 254.188792][ T1222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.235122][ T9242] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 254.260700][ T9242] net_ratelimit: 9 callbacks suppressed [ 254.260712][ T9242] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 254.288112][ T9248] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 254.303337][ T1222] usb 5-1: Product: syz [ 254.307905][ T1222] usb 5-1: Manufacturer: syz [ 254.314199][ T1222] usb 5-1: SerialNumber: syz [ 254.332463][ T29] audit: type=1326 audit(1779356012.143:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.0.881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f762459ce59 code=0x7ffc0000 [ 254.342087][ T9249] kvm: emulating exchange as write [ 254.366479][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.419235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.462559][ T29] audit: type=1326 audit(1779356012.143:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.0.881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762459ce59 code=0x7ffc0000 [ 254.549178][ T29] audit: type=1326 audit(1779356012.153:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.0.881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f762455d68e code=0x7ffc0000 [ 254.603760][ T29] audit: type=1326 audit(1779356012.153:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.0.881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762459ce59 code=0x7ffc0000 [ 254.616453][ T1222] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 254.629063][ T29] audit: type=1326 audit(1779356012.153:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.0.881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762459ce59 code=0x7ffc0000 [ 254.704024][ T29] audit: type=1326 audit(1779356012.153:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.0.881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f762459ce59 code=0x7ffc0000 [ 254.838443][ T1222] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 254.923751][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.961549][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.980355][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.039898][ T29] audit: type=1326 audit(1779356012.153:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.0.881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762459ce59 code=0x7ffc0000 [ 255.170371][ T29] audit: type=1326 audit(1779356012.153:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.0.881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762459ce59 code=0x7ffc0000 [ 255.294220][ T10] usb 5-1: USB disconnect, device number 53 [ 255.379938][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.549397][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.703703][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.710280][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.037054][ T9277] xt_l2tp: missing protocol rule (udp|l2tpip) [ 256.129323][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.156678][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.308845][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 256.418946][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.500762][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 256.525267][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.545716][ T10] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.556959][ T10] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.600342][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 256.636105][ T10] usb 6-1: string descriptor 0 read error: -22 [ 256.655476][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 256.678151][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.748747][ T1222] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 256.919017][ T1222] usb 5-1: Using ep0 maxpacket: 32 [ 256.934326][ T1222] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 256.954247][ T1222] usb 5-1: config 0 has no interface number 0 [ 256.970091][ T1222] usb 5-1: config 0 interface 184 has no altsetting 0 [ 257.000522][ T1222] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 257.010212][ T1222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.018518][ T1222] usb 5-1: Product: syz [ 257.026462][ T1222] usb 5-1: Manufacturer: syz [ 257.031672][ T1222] usb 5-1: SerialNumber: syz [ 257.041736][ T1222] usb 5-1: config 0 descriptor?? [ 257.113473][ T9311] kvm: pic: non byte write [ 257.158233][ T9280] vivid-000: disconnect [ 257.197735][ T10] hid_parser_main: 1 callbacks suppressed [ 257.197756][ T10] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 257.239282][ T10] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 257.255357][ T10] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 257.276876][ T10] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 257.294706][ T10] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 257.308899][ T10] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 257.322446][ T10] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 257.339882][ T10] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 257.354410][ T10] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 257.369697][ T10] kone 0003:1E7D:2CED.0016: unknown main item tag 0x0 [ 257.414645][ T9279] vivid-000: reconnect [ 257.440084][ T5718] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 257.571703][ T10] kone 0003:1E7D:2CED.0016: hidraw0: USB HID v0.05 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 257.599598][ T10] kone 0003:1E7D:2CED.0016: couldn't init struct kone_device [ 257.621145][ T5718] usb 3-1: device descriptor read/64, error -71 [ 257.637276][ T10] kone 0003:1E7D:2CED.0016: couldn't install mouse [ 257.681866][ T1222] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 257.682896][ T10] kone 0003:1E7D:2CED.0016: probe with driver kone failed with error -5 [ 257.714029][ T10] usb 6-1: USB disconnect, device number 2 [ 257.715548][ T1222] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 257.893765][ T5718] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 257.941625][ T9328] sctp: [Deprecated]: syz.0.903 (pid 9328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.941625][ T9328] Use struct sctp_sack_info instead [ 258.059221][ T5718] usb 3-1: device descriptor read/64, error -71 [ 258.181205][ T5718] usb usb3-port1: attempt power cycle [ 258.249957][ T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 258.418731][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 258.433832][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 258.453395][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.471745][ T24] usb 2-1: Product: syz [ 258.483374][ T24] usb 2-1: Manufacturer: syz [ 258.491965][ T24] usb 2-1: SerialNumber: syz [ 258.513664][ T24] usb 2-1: config 0 descriptor?? [ 258.552628][ T5718] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 258.591136][ T5718] usb 3-1: device descriptor read/8, error -71 [ 258.736886][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 258.751948][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.783671][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.804339][ T1222] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 258.838116][ T1222] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 258.849185][ T5718] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 258.864261][ T1222] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 258.879547][ T5718] usb 3-1: device descriptor read/8, error -71 [ 258.907257][ T1222] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 258.957226][ T1222] usb 5-1: USB disconnect, device number 54 [ 259.000184][ T5718] usb usb3-port1: unable to enumerate USB device [ 259.355372][ T9365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.539604][ T1222] net_ratelimit: 10 callbacks suppressed [ 259.539633][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.601211][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.623234][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.440464][ T9405] Cannot find add_set index 1 as target [ 260.559420][ T1222] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 260.572829][ T9330] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 260.580667][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.690374][ T5683] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 260.721826][ T1222] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 260.735592][ T1222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.747375][ T1222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.759149][ T1222] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 260.772993][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.783535][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.784672][ T1222] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 260.801033][ T1222] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 260.809494][ T1222] usb 3-1: Manufacturer: syz [ 260.814759][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 260.832416][ T1222] usb 3-1: config 0 descriptor?? [ 260.837803][ T24] usb 2-1: USB disconnect, device number 50 [ 260.858921][ T5683] usb 6-1: Using ep0 maxpacket: 32 [ 260.860573][ T5718] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 260.866269][ T5683] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.882987][ T5683] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.907740][ T5683] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.918580][ T5683] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.942269][ T5683] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.951734][ T5683] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 260.961337][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.974727][ T5683] usb 6-1: config 0 descriptor?? [ 261.040704][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 261.050585][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.065277][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.076884][ T5718] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 261.086039][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.099012][ T5718] usb 5-1: config 0 descriptor?? [ 261.278256][ T1222] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 261.386576][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.916'. [ 261.418732][ T9405] openvswitch: netlink: Flow actions attr not present in new flow. [ 261.431091][ T5732] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 261.547893][ T9401] input: syz0 as /devices/virtual/input/input32 [ 261.583664][ T5732] usb 1-1: device descriptor read/64, error -71 [ 261.619455][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.627640][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.655813][ T5683] usbhid 6-1:0.0: can't add hid device: -71 [ 261.669596][ T5683] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 261.701630][ T5683] usb 6-1: USB disconnect, device number 3 [ 261.725732][ T5718] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 261.741133][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 261.788038][ T9] usb 3-1: USB disconnect, device number 65 [ 261.848788][ T5732] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 261.899055][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 261.906436][ T24] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 261.915207][ T24] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 261.924199][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 261.933462][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.934142][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.944129][ T5718] ft260 0003:0403:6030.0018: failed to retrieve system status [ 261.956731][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 261.971261][ T5718] ft260 0003:0403:6030.0018: probe with driver ft260 failed with error -71 [ 261.971494][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 261.985558][ T5718] usb 5-1: USB disconnect, device number 55 [ 262.001508][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 262.014962][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.025839][ T24] usb 2-1: config 0 descriptor?? [ 262.028837][ T5732] usb 1-1: device descriptor read/64, error -71 [ 262.149780][ T5732] usb usb1-port1: attempt power cycle [ 262.227669][ T9447] binder: binder_mmap: 9446 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 262.249458][ T24] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 262.529491][ T5732] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 262.561233][ T5732] usb 1-1: device descriptor read/8, error -71 [ 262.783156][ T9] usb 2-1: USB disconnect, device number 51 [ 262.805373][ T9] usblp0: removed [ 262.839000][ T5732] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 262.882764][ T5732] usb 1-1: device descriptor read/8, error -71 [ 263.011478][ T5732] usb usb1-port1: unable to enumerate USB device [ 263.219531][ T5718] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 263.304253][ T9471] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 263.327860][ T9471] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.346792][ T9471] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 263.358465][ T9471] bond4: entered promiscuous mode [ 263.363645][ T9471] bond4: entered allmulticast mode [ 263.398761][ T5718] usb 6-1: Using ep0 maxpacket: 16 [ 263.398885][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 263.406225][ T5718] usb 6-1: unable to get BOS descriptor or descriptor too short [ 263.420828][ T5718] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 263.433989][ T9473] netlink: 36 bytes leftover after parsing attributes in process `syz.2.931'. [ 263.492223][ T9474] macvlan2: entered promiscuous mode [ 263.497737][ T9474] macvlan2: entered allmulticast mode [ 263.505298][ T9474] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 263.547942][ T5718] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 263.557427][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.565603][ T5718] usb 6-1: Product: syz [ 263.566342][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 263.569894][ T5718] usb 6-1: Manufacturer: syz [ 263.586710][ T5718] usb 6-1: SerialNumber: syz [ 263.604748][ T24] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 263.628097][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.644634][ T24] usb 2-1: Product: syz [ 263.649533][ T24] usb 2-1: Manufacturer: syz [ 263.655148][ T24] usb 2-1: SerialNumber: syz [ 263.664468][ T24] usb 2-1: config 0 descriptor?? [ 263.682452][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 263.696281][ T9476] netlink: 48 bytes leftover after parsing attributes in process `syz.4.932'. [ 263.785968][ T9481] program syz.2.933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.812168][ T5718] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 263.824534][ T5718] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 264.038914][ T5683] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 264.082111][ T24] gspca_se401: ExtraFeatures: 189 [ 264.087211][ T24] gspca_se401: Too many frame sizes [ 264.113276][ T9497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.130340][ T9497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.188813][ T5683] usb 3-1: device descriptor read/64, error -71 [ 264.240622][ T9467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.257068][ T9502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.266965][ T9467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.268344][ T9502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.299399][ T9504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.938'. [ 264.302320][ T9] usb 2-1: USB disconnect, device number 52 [ 264.310972][ T9504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.938'. [ 264.329523][ T5737] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 264.370465][ T5718] usb 6-1: USB disconnect, device number 4 [ 264.439403][ T5683] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 264.488703][ T5737] usb 5-1: Using ep0 maxpacket: 16 [ 264.495269][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.506580][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.516525][ T5737] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.530063][ T5737] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 264.539285][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.549258][ T5737] usb 5-1: config 0 descriptor?? [ 264.588832][ T5683] usb 3-1: device descriptor read/64, error -71 [ 264.660133][ T10] net_ratelimit: 8 callbacks suppressed [ 264.660154][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.673913][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.699962][ T5683] usb usb3-port1: attempt power cycle [ 264.739471][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.758721][ T5737] usbhid 5-1:0.0: can't add hid device: -71 [ 264.765718][ T5737] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 264.776935][ T5737] usb 5-1: USB disconnect, device number 56 [ 265.012512][ T9511] netlink: 36 bytes leftover after parsing attributes in process `syz.5.939'. [ 265.039058][ T5683] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 265.101239][ T5683] usb 3-1: device descriptor read/8, error -71 [ 265.341859][ T6805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.348716][ T5683] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 265.373719][ T6805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.379766][ T5683] usb 3-1: device descriptor read/8, error -71 [ 265.511834][ T5683] usb usb3-port1: unable to enumerate USB device [ 265.604950][ T9510] netlink: 'syz.1.940': attribute type 12 has an invalid length. [ 265.621170][ T9510] netlink: 'syz.1.940': attribute type 29 has an invalid length. [ 265.635585][ T9510] netlink: 148 bytes leftover after parsing attributes in process `syz.1.940'. [ 265.652929][ T9510] netlink: 59 bytes leftover after parsing attributes in process `syz.1.940'. [ 265.779993][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.279174][ T5683] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 266.318571][ T9531] tipc: Enabled bearer , priority 0 [ 266.328288][ T9531] syzkaller0: entered promiscuous mode [ 266.334062][ T9531] syzkaller0: entered allmulticast mode [ 266.364569][ T9531] tipc: Resetting bearer [ 266.448896][ T5683] usb 1-1: Using ep0 maxpacket: 32 [ 266.454584][ T9534] tipc: Resetting bearer [ 266.466228][ T5683] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 266.503420][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.512522][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.521165][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.530860][ T5683] usb 1-1: Product: syz [ 266.545008][ T5683] usb 1-1: Manufacturer: syz [ 266.548385][ T9534] tipc: Disabling bearer [ 266.550274][ T5683] usb 1-1: SerialNumber: syz [ 266.586056][ T5683] usb 1-1: config 0 descriptor?? [ 266.602625][ T5683] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 266.714793][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 266.819056][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.168809][ T9] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 267.189130][ T1222] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 267.320908][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.331105][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 267.338746][ T1222] usb 3-1: Using ep0 maxpacket: 16 [ 267.340416][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 267.347770][ T1222] usb 3-1: unable to get BOS descriptor or descriptor too short [ 267.354802][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.367638][ T1222] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 267.381141][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.389533][ T1222] usb 3-1: Product: syz [ 267.390607][ T9] usb 5-1: config 0 descriptor?? [ 267.394036][ T1222] usb 3-1: Manufacturer: syz [ 267.403430][ T1222] usb 3-1: SerialNumber: syz [ 267.412953][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 267.436286][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 267.448179][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 267.457819][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 267.466604][ T9] usb 5-1: media controller created [ 267.484973][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.518047][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 267.530806][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 267.548417][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input34 [ 267.565034][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 267.572107][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 267.639651][ T9549] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 267.653089][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.665746][ T9547] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 267.682306][ T1222] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 267.711089][ T1222] gspca_vc032x: reg_w err -71 [ 267.723303][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.734112][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.741637][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.744037][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 267.747064][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747076][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747086][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747095][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747104][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747112][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747120][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747158][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747166][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747173][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747181][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747188][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747202][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747211][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747219][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747227][ T1222] gspca_vc032x: I2c Bus Busy Wait 00 [ 267.747244][ T1222] gspca_vc032x: Unknown sensor... [ 267.747335][ T1222] vc032x 3-1:12.0: probe with driver vc032x failed with error -22 [ 267.764191][ T1222] usb 3-1: USB disconnect, device number 70 [ 267.781743][ T9] dvb-usb: error while querying for an remote control event. [ 267.943661][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 267.975462][ T9] dvb-usb: error while querying for an remote control event. [ 268.102790][ T5683] gspca_ov534_9: reg_r err -71 [ 268.158725][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 268.166281][ T9] dvb-usb: error while querying for an remote control event. [ 268.308707][ T5737] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 268.340161][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 268.346018][ T10] dvb-usb: error while querying for an remote control event. [ 268.358717][ T5683] gspca_ov534_9: Unknown sensor 0000 [ 268.358814][ T5683] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 268.375906][ T5683] usb 1-1: USB disconnect, device number 68 [ 268.458782][ T5737] usb 6-1: Using ep0 maxpacket: 16 [ 268.466497][ T5737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.477927][ T5737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.487952][ T5737] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 268.501160][ T5737] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 268.510562][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.519026][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 268.521464][ T5737] usb 6-1: config 0 descriptor?? [ 268.528235][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 268.545432][ T10] dvb-usb: error while querying for an remote control event. [ 268.678694][ T9] usb 3-1: device descriptor read/64, error -71 [ 268.718979][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 268.728490][ T10] dvb-usb: error while querying for an remote control event. [ 268.745661][ T9565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.755047][ T9565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.889854][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 268.895727][ T10] dvb-usb: error while querying for an remote control event. [ 268.928711][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 268.971312][ T5737] microsoft 0003:045E:07DA.0019: ignoring exceeding usage max [ 268.979401][ T5683] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 268.988136][ T5737] microsoft 0003:045E:07DA.0019: ignoring exceeding usage max [ 269.003412][ T5737] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 269.015282][ T5737] microsoft 0003:045E:07DA.0019: no inputs found [ 269.021884][ T5737] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 269.072345][ T9] usb 3-1: device descriptor read/64, error -71 [ 269.079023][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 269.084811][ T10] dvb-usb: error while querying for an remote control event. [ 269.118778][ T5683] usb 1-1: device descriptor read/64, error -71 [ 269.178388][ T9565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.188808][ T9565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.189409][ T9] usb usb3-port1: attempt power cycle [ 269.204500][ T10] usb 6-1: USB disconnect, device number 5 [ 269.259654][ T5732] dvb-usb: bulk message failed: -22 (1/0) [ 269.266075][ T5732] dvb-usb: error while querying for an remote control event. [ 269.358716][ T5683] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 269.428765][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 269.435121][ T10] dvb-usb: error while querying for an remote control event. [ 269.488775][ T5683] usb 1-1: device descriptor read/64, error -71 [ 269.568863][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 269.599153][ T5683] usb usb1-port1: attempt power cycle [ 269.609777][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 269.615824][ T9] usb 3-1: device descriptor read/8, error -71 [ 269.622811][ T10] dvb-usb: error while querying for an remote control event. [ 269.789109][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 269.802140][ T10] dvb-usb: error while querying for an remote control event. [ 269.879458][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 269.899757][ T9] usb 3-1: device descriptor read/8, error -71 [ 269.930328][ T5732] usb 5-1: USB disconnect, device number 57 [ 269.938930][ T5683] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 269.940351][ T6795] net_ratelimit: 8 callbacks suppressed [ 269.940368][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.963369][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.981703][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.990382][ T5683] usb 1-1: device descriptor read/8, error -71 [ 270.014962][ T5732] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 270.026459][ T9] usb usb3-port1: unable to enumerate USB device [ 270.099645][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 270.238970][ T5683] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 270.242133][ T5697] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 270.269563][ T5683] usb 1-1: device descriptor read/8, error -71 [ 270.276817][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.289873][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.300888][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.314312][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.326325][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.338197][ T10] usb 2-1: config 0 descriptor?? [ 270.368521][ T9593] fuse: Bad value for 'fd' [ 270.378974][ T5683] usb usb1-port1: unable to enumerate USB device [ 270.413274][ T5697] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.423083][ T6803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.423482][ T5697] usb 6-1: config 0 has no interface number 0 [ 270.441590][ T5697] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 270.451883][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.460291][ T5697] usb 6-1: Product: syz [ 270.464801][ T5697] usb 6-1: Manufacturer: syz [ 270.465122][ T9592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.470113][ T5697] usb 6-1: SerialNumber: syz [ 270.485112][ T5697] usb 6-1: config 0 descriptor?? [ 270.492056][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 270.693689][ T5697] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 270.710907][ T5697] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 270.721572][ T5697] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 270.729705][ T5697] usb 6-1: media controller created [ 270.744020][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.753559][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.781267][ T10] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 270.858829][ T5683] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 270.978910][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.984901][ T5697] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 271.008691][ T5683] usb 5-1: Using ep0 maxpacket: 16 [ 271.019617][ T5683] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 271.034162][ T5697] usb 6-1: USB disconnect, device number 6 [ 271.050277][ T5683] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 271.064453][ T5737] usb 2-1: USB disconnect, device number 53 [ 271.080225][ T5683] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.091135][ T5683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.100941][ T5683] usb 5-1: Product: syz [ 271.102558][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.105222][ T5683] usb 5-1: Manufacturer: syz [ 271.118513][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.139792][ T5683] usb 5-1: SerialNumber: syz [ 271.356214][ T5683] cdc_ncm 5-1:1.0: bind() failure [ 271.367645][ T5683] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 271.380963][ T5683] cdc_ncm 5-1:1.1: bind() failure [ 271.396662][ T5683] usb 5-1: USB disconnect, device number 58 [ 271.831325][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 271.989894][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 271.996413][ T10] usb 6-1: config 3 has an invalid interface number: 19 but max is 1 [ 272.004872][ T10] usb 6-1: config 3 has an invalid interface descriptor of length 2, skipping [ 272.013967][ T10] usb 6-1: config 3 has an invalid interface number: 196 but max is 1 [ 272.022784][ T1222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.022906][ T10] usb 6-1: config 3 has no interface number 0 [ 272.037667][ T10] usb 6-1: config 3 has no interface number 1 [ 272.044672][ T10] usb 6-1: config 3 interface 19 has no altsetting 0 [ 272.052229][ T10] usb 6-1: config 3 interface 196 has no altsetting 0 [ 272.060860][ T10] usb 6-1: New USB device found, idVendor=0489, idProduct=e076, bcdDevice=48.c6 [ 272.070505][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.078553][ T10] usb 6-1: Product: syz [ 272.082843][ T10] usb 6-1: Manufacturer: syz [ 272.087445][ T10] usb 6-1: SerialNumber: syz [ 272.129059][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 272.138733][ T5683] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 272.248864][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.280269][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.291597][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.303395][ T5683] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 272.318903][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 272.324509][ T9608] macvlan2: entered promiscuous mode [ 272.337450][ T9608] bridge0: entered promiscuous mode [ 272.337456][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.341073][ T5683] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.363079][ T24] usb 5-1: config 0 descriptor?? [ 272.370375][ T5683] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.387648][ T5683] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.407800][ T5683] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.419191][ T5683] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.431153][ T5683] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.439682][ T5683] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.449262][ T5683] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.490062][ T5683] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.491955][ T10] usb 6-1: USB disconnect, device number 7 [ 272.509311][ T9622] kvm: kvm [9621]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 272.529644][ T5683] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.544500][ T5683] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.588736][ T5683] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.615130][ T5683] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.625045][ T5683] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.646509][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.974'. [ 272.659562][ T5683] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.680351][ T5683] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.707440][ T5683] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.727192][ T5683] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.735694][ T5683] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.760199][ T5683] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.776050][ T5683] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.786759][ T5683] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.800598][ T24] hid_parser_main: 4010 callbacks suppressed [ 272.800619][ T24] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 272.817897][ T5683] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 272.830028][ T24] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 272.839227][ T24] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 272.846273][ T5683] usb 1-1: config 0 interface 0 has no altsetting 0 [ 272.853339][ T24] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 272.861815][ T24] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 272.870110][ T5683] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 272.879794][ T24] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 272.886808][ T5683] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 272.905834][ T24] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 272.917669][ T5683] usb 1-1: Product: syz [ 272.927153][ T5683] usb 1-1: Manufacturer: syz [ 272.937181][ T9633] sctp: [Deprecated]: syz.2.977 (pid 9633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.937181][ T9633] Use struct sctp_sack_info instead [ 272.956768][ T24] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 272.968313][ T5683] usb 1-1: SerialNumber: syz [ 272.977208][ T5683] usb 1-1: config 0 descriptor?? [ 272.994562][ T5683] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 273.029645][ T24] cp2112 0003:10C4:EA90.001B: Part Number: 0x00 Device Version: 0x00 [ 273.214311][ T9642] netlink: 228 bytes leftover after parsing attributes in process `syz.5.981'. [ 273.285832][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 273.297104][ T9] usb 1-1: USB disconnect, device number 73 [ 273.318068][ T9] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 273.330968][ T10] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 273.521563][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 273.563355][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.586847][ T10] usb 2-1: Product: syz [ 273.598338][ T10] usb 2-1: Manufacturer: syz [ 273.611253][ T10] usb 2-1: SerialNumber: syz [ 273.642510][ T10] usb 2-1: config 0 descriptor?? [ 273.697350][ T24] cp2112 0003:10C4:EA90.001B: error reading lock byte: -71 [ 273.728225][ T24] usb 5-1: USB disconnect, device number 59 [ 273.856906][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 273.918829][ T5737] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 274.070421][ T5737] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 274.079658][ T5737] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.089862][ T5737] usb 3-1: config 0 has no interface number 0 [ 274.096186][ T5737] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 274.107855][ T5737] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.121999][ T5737] usb 3-1: config 0 interface 52 has no altsetting 0 [ 274.131083][ T5737] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 274.140460][ T5737] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 274.148662][ T5737] usb 3-1: Manufacturer: syz [ 274.155752][ T5737] usb 3-1: config 0 descriptor?? [ 274.165181][ T5737] hub 3-1:0.52: bad descriptor, ignoring hub [ 274.171312][ T5737] hub 3-1:0.52: probe with driver hub failed with error -5 [ 274.375867][ T5737] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input36 [ 274.461678][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.502106][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.699149][ T5697] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 274.798945][ T5737] usb 3-1: USB disconnect, device number 75 [ 274.869058][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 274.871814][ T5697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.871839][ T5697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.884072][ T5697] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.884103][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.884122][ T5697] usb 1-1: Product: syz [ 274.884136][ T5697] usb 1-1: Manufacturer: syz [ 274.884151][ T5697] usb 1-1: SerialNumber: syz [ 274.911813][ T5697] usb 1-1: 0:2 : does not exist [ 275.106581][ T5697] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 275.124633][ T9676] netlink: 76 bytes leftover after parsing attributes in process `syz.4.991'. [ 275.158957][ T5737] net_ratelimit: 13 callbacks suppressed [ 275.158977][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.176816][ T5697] usb 1-1: USB disconnect, device number 74 [ 275.228634][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.459926][ T6805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.599163][ T6805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.633927][ T6805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.916790][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 275.983666][ T10] usb 2-1: USB disconnect, device number 54 [ 276.178910][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.448704][ T5697] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 276.540030][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 276.574333][ T9707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.605366][ T9706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.652914][ T5697] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 276.663003][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.671491][ T5697] usb 6-1: Product: syz [ 276.678052][ T5697] usb 6-1: Manufacturer: syz [ 276.689462][ T5697] usb 6-1: SerialNumber: syz [ 276.816023][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.831058][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.857944][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.029324][ T9716] overlayfs: missing 'lowerdir' [ 277.219084][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.365775][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.992'. [ 277.518982][ T5683] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 277.523442][ T5697] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 277.565247][ T5697] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 277.591523][ T5697] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 277.616192][ T5697] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 277.650339][ T5697] usb 6-1: USB disconnect, device number 8 [ 277.698924][ T5683] usb 2-1: device descriptor read/64, error -71 [ 277.949010][ T5683] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 278.099066][ T5683] usb 2-1: device descriptor read/64, error -71 [ 278.281241][ T5683] usb usb2-port1: attempt power cycle [ 278.648721][ T5683] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 278.672500][ T5683] usb 2-1: device descriptor read/8, error -71 [ 278.728809][ T5737] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 278.891601][ T5737] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 278.924992][ T5737] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 278.935082][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.944733][ T5737] usb 1-1: Product: syz [ 278.950272][ T5737] usb 1-1: Manufacturer: syz [ 278.957847][ T5737] usb 1-1: SerialNumber: syz [ 278.962699][ T5683] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 278.989797][ T5683] usb 2-1: device descriptor read/8, error -71 [ 279.099087][ T5683] usb usb2-port1: unable to enumerate USB device [ 279.512606][ T9763] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 280.189121][ T9788] netlink: 'syz.2.1019': attribute type 4 has an invalid length. [ 280.199126][ T142] net_ratelimit: 9 callbacks suppressed [ 280.199138][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.224564][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.351270][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.373196][ T9790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.384564][ T9790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.395078][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.543561][ T9794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.552287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.788866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.799012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.838319][ T9785] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 280.871373][ T9785] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.906739][ T9785] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 280.914087][ T9785] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.923595][ T9785] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 280.934933][ T9785] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 281.188711][ T5697] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 281.370157][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 281.384783][ T5697] usb 5-1: config 39 has an invalid interface number: 133 but max is 0 [ 281.401585][ T5697] usb 5-1: config 39 has no interface number 0 [ 281.419062][ T5697] usb 5-1: config 39 interface 133 has no altsetting 0 [ 281.441701][ T5697] usb 5-1: New USB device found, idVendor=19d2, idProduct=1088, bcdDevice=6b.53 [ 281.469034][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.496159][ T5697] usb 5-1: Product: syz [ 281.522574][ T5697] usb 5-1: Manufacturer: syz [ 281.546977][ T5697] usb 5-1: SerialNumber: syz [ 281.566066][ T5737] usb 1-1: selecting invalid altsetting 1 [ 281.584199][ T5737] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 281.584310][ T5737] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 281.661981][ T5737] usb 1-1: USB disconnect, device number 75 [ 281.782732][ T9783] kvm: kvm [9782]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 281.800625][ T9783] kvm: kvm [9782]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 281.920558][ T5697] option 5-1:39.133: GSM modem (1-port) converter detected [ 281.963067][ T5697] usb 5-1: USB disconnect, device number 60 [ 282.008835][ T5697] option 5-1:39.133: device disconnected [ 282.015447][ T9827] loop5: detected capacity change from 0 to 7 [ 282.065263][ T9827] Dev loop5: unable to read RDB block 7 [ 282.078769][ T5737] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 282.125977][ T9830] tipc: Enabled bearer , priority 0 [ 282.166672][ T9827] loop5: unable to read partition table [ 282.179899][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 282.205331][ T9827] loop5: partition table beyond EOD, truncated [ 282.217787][ T9834] syzkaller0: entered promiscuous mode [ 282.230027][ T9827] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 282.255733][ T9834] syzkaller0: entered allmulticast mode [ 282.269105][ T5737] usb 1-1: Using ep0 maxpacket: 32 [ 282.282540][ T5737] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 282.292814][ T5737] usb 1-1: config 0 has no interface number 0 [ 282.299155][ T5737] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 282.312231][ T5737] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 282.322958][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.335401][ T5737] usb 1-1: Product: syz [ 282.341578][ T5737] usb 1-1: Manufacturer: syz [ 282.350245][ T5737] usb 1-1: SerialNumber: syz [ 282.377208][ T5737] usb 1-1: config 0 descriptor?? [ 282.385432][ T9823] tipc: Resetting bearer [ 282.394060][ T9820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.477715][ T9823] tipc: Disabling bearer [ 282.613776][ T9820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.763617][ T9844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.796869][ T9844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.898747][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 282.979447][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.979485][ T4945] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.009117][ T5732] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 283.086383][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1038'. [ 283.179006][ T5732] usb 3-1: Using ep0 maxpacket: 8 [ 283.189480][ T5732] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.204381][ T5732] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 283.217371][ T5732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.231163][ T5732] usb 3-1: config 0 descriptor?? [ 283.231536][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.257739][ T5732] rndis_host 3-1:0.0: missing cdc header descriptor [ 283.271565][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.285135][ T5737] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 283.302283][ T5732] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 283.313802][ T5737] asix 1-1:0.188: probe with driver asix failed with error -71 [ 283.335305][ T5737] usb 1-1: USB disconnect, device number 76 [ 283.350391][ T5732] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 283.369230][ T5732] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 283.430767][ T5697] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 283.456969][ T5732] usb 3-1: USB disconnect, device number 76 [ 283.610707][ T5697] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 283.620206][ T5697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.642853][ T5697] usb 5-1: config 0 descriptor?? [ 284.478962][ T5737] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 284.577868][ T5697] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 284.600886][ T5732] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 284.626284][ T5697] hackrf 5-1:0.0: Could not detect board [ 284.635676][ T5697] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 284.661839][ T5697] usb 5-1: USB disconnect, device number 61 [ 284.678922][ T5737] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 284.724059][ T5737] usb 3-1: config 0 interface 0 has no altsetting 0 [ 284.760978][ T5737] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 284.784294][ T5732] usb 1-1: LPM exit latency is zeroed, disabling LPM. [ 284.809524][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 284.834161][ T5732] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.848777][ T5737] usb 3-1: Product: syz [ 284.861632][ T5732] usb 1-1: string descriptor 0 read error: -22 [ 284.863848][ T5737] usb 3-1: Manufacturer: syz [ 284.871146][ T5732] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.887742][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.905996][ T5737] usb 3-1: SerialNumber: syz [ 284.934308][ T5732] usb 1-1: No union descriptors [ 284.939494][ T5737] usb 3-1: config 0 descriptor?? [ 284.968244][ T5737] usb 3-1: selecting invalid altsetting 0 [ 285.059084][ T4945] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.347415][ T5732] usb 1-1: USB disconnect, device number 77 [ 285.417846][ T9889] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 9889 comm: syz.1.1045) [ 285.452108][ T9896] fuse: Unknown parameter '(Honfd' [ 285.525784][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 285.525801][ T29] audit: type=1800 audit(1779356043.543:419): pid=9889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1045" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=34585 res=0 errno=0 [ 285.698840][ T5737] net_ratelimit: 21 callbacks suppressed [ 285.698858][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.781819][ T6795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.796241][ T5737] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.809871][ T5683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.838934][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.860347][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.949676][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.017845][ T9905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1049'. [ 286.433144][ T9917] raw_sendmsg: syz.4.1052 forgot to set AF_INET. Fix it! [ 286.819155][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.988953][ T5683] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 286.996943][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.009517][ T5737] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 287.019251][ T6799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.131669][ T9872] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 287.143989][ T5697] usb 3-1: USB disconnect, device number 77 [ 287.149520][ T4945] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.185107][ T5683] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.199383][ T5683] usb 1-1: config 0 has no interface number 0 [ 287.212897][ T5737] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.230606][ T5683] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.246455][ T5737] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.259066][ T5683] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.278097][ T5737] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.292851][ T5683] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 287.307949][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.336417][ T9928] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1057'. [ 287.362146][ T5683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.381979][ T9923] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 287.415596][ T5683] usb 1-1: config 0 descriptor?? [ 287.421628][ T5737] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.477951][ T9925] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1056'. [ 287.629417][ T5737] usb 2-1: USB disconnect, device number 59 [ 287.641719][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.669420][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.682143][ T5697] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 287.854363][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 287.877949][ T5697] usb 3-1: not running at top speed; connect to a high speed hub [ 287.905059][ T5697] usb 3-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 287.922493][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.952928][ T5697] usb 3-1: Product: syz [ 287.962328][ T5697] usb 3-1: Manufacturer: syz [ 287.983047][ T5697] usb 3-1: SerialNumber: syz [ 288.062616][ T9941] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.086743][ T9941] bridge0: entered allmulticast mode [ 288.117631][ T5683] usbhid 1-1:0.1: can't add hid device: -71 [ 288.136409][ T5683] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 288.164398][ T5683] usb 1-1: USB disconnect, device number 78 [ 288.195355][ T9928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.237385][ T9928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.325772][ T9928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.351780][ T9928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.410620][ T5697] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 288.449520][ T5697] usb 3-1: unit 37 not found! [ 288.464867][ T5697] usb 3-1: unit 0 not found! [ 288.573830][ T5697] usb 3-1: USB disconnect, device number 78 [ 288.598349][ T9957] tipc: Started in network mode [ 288.638340][ T9957] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 288.677556][ T9957] tipc: Enabled bearer , priority 10 [ 289.042320][ T9959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.051247][ T9959] IPv6: NLM_F_CREATE should be set when creating new route [ 289.060039][ T9959] IPv6: NLM_F_CREATE should be set when creating new route [ 289.156161][ T9972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.370864][ T9976] overlayfs: missing 'lowerdir' [ 289.798739][ T5737] tipc: Node number set to 10136234 [ 289.925728][ T9987] batadv0: entered promiscuous mode [ 289.938061][ T9987] gretap0: entered promiscuous mode [ 289.951312][ T9987] hsr1: entered allmulticast mode [ 289.958025][ T9987] batadv0: entered allmulticast mode [ 289.972220][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 289.981080][ T9987] gretap0: entered allmulticast mode [ 290.143340][ T10] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 290.161299][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.178255][ T10] usb 5-1: Product: syz [ 290.186436][ T10] usb 5-1: Manufacturer: syz [ 290.195535][ T10] usb 5-1: SerialNumber: syz [ 290.208412][ T10] usb 5-1: config 0 descriptor?? [ 290.231485][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 290.244970][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 290.298744][ T5737] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 290.423599][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 290.472472][ T5737] usb 6-1: config index 0 descriptor too short (expected 36356, got 18) [ 290.489872][ T5737] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 290.505562][ T5737] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 290.522164][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 290.526788][ T5737] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 129 [ 290.545261][ T5737] usb 6-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=ab.0e [ 290.551418][ T10] dib0700: firmware download failed at 7 with -22 [ 290.566864][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.577033][ T5737] usb 6-1: Product: syz [ 290.594115][ T5737] usb 6-1: Manufacturer: syz [ 290.611222][ T5737] usb 6-1: SerialNumber: syz [ 290.634239][ T5737] usb 6-1: config 0 descriptor?? [ 290.661713][ T9995] lo: Caught tx_queue_len zero misconfig [ 290.952085][ T10] usb 5-1: USB disconnect, device number 62 [ 291.093275][ T5737] usb 6-1: USB disconnect, device number 9 [ 291.129083][ T5683] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 291.148928][ T1222] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 291.278917][ T5683] usb 1-1: Using ep0 maxpacket: 32 [ 291.278993][ T10] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 291.295437][ T5683] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.309116][ T1222] usb 2-1: Using ep0 maxpacket: 32 [ 291.318912][ T5683] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 291.349801][ T1222] usb 2-1: unable to get BOS descriptor or descriptor too short [ 291.359789][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.369600][ T1222] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 291.395743][ T5683] usb 1-1: Product: syz [ 291.400406][ T5683] usb 1-1: Manufacturer: syz [ 291.405022][ T5683] usb 1-1: SerialNumber: syz [ 291.416441][ T1222] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 291.428931][ T1222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.439342][ T10] usb 5-1: device descriptor read/64, error -71 [ 291.447164][ T5683] usb 1-1: config 0 descriptor?? [ 291.453257][ T1222] usb 2-1: Product: syz [ 291.472707][ T5683] usb 1-1: expecting 3 got 0 endpoints! Bailing out. [ 291.480163][ T1222] usb 2-1: Manufacturer: syz [ 291.488556][ T1222] usb 2-1: SerialNumber: syz [ 291.681040][ T10] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 291.714189][ T1222] usb 2-1: Invalid number of CPorts: 0 [ 291.733856][ T1222] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 291.849363][ T10] usb 5-1: device descriptor read/64, error -71 [ 291.917798][T10001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.938534][ T1222] usb 1-1: USB disconnect, device number 79 [ 291.940497][T10001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.977612][ T10] usb usb5-port1: attempt power cycle [ 291.985601][T10001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.998529][T10001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.043438][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.080149][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.104066][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.121687][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.217692][ T5697] usb 2-1: USB disconnect, device number 60 [ 292.229120][T10033] netlink: 'syz.5.1084': attribute type 4 has an invalid length. [ 292.254784][T10039] overlayfs: missing 'lowerdir' [ 292.294687][T10036] netlink: 'syz.5.1084': attribute type 4 has an invalid length. [ 292.379139][ T10] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 292.387937][T10033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.401622][ T10] usb 5-1: device descriptor read/8, error -71 [ 292.416276][T10041] bond4: option min_links: invalid value (18446744073709551608) [ 292.448711][T10041] bond4: option min_links: allowed values 0 - 2147483647 [ 292.476454][T10041] bond4 (unregistering): Released all slaves [ 292.651381][ T10] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 292.691265][ T10] usb 5-1: device descriptor read/8, error -71 [ 292.718036][T10043] netlink: 'syz.1.1086': attribute type 2 has an invalid length. [ 292.810251][ T10] usb usb5-port1: unable to enumerate USB device [ 292.914998][T10051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.164715][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'. [ 293.225402][T10055] dummy0: entered promiscuous mode [ 293.278990][T10055] macvlan2: entered promiscuous mode [ 293.598678][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 293.672965][T10064] vlan0: entered promiscuous mode [ 293.698539][T10064] bridge0: entered promiscuous mode [ 293.793047][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.811389][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 293.824511][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.856667][ T10] usb 2-1: config 0 descriptor?? [ 293.876673][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 294.135458][ T5697] usb 2-1: USB disconnect, device number 61 [ 294.179129][T10077] kvm: kvm [10074]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd [ 294.349230][ T5737] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 294.531336][ T5737] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 294.572871][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.588538][ T5737] usb 3-1: Product: syz [ 294.597464][ T5737] usb 3-1: Manufacturer: syz [ 294.602250][ T5737] usb 3-1: SerialNumber: syz [ 294.619945][ T5737] usb 3-1: config 0 descriptor?? [ 294.629973][ T5737] hub 3-1:0.0: bad descriptor, ignoring hub [ 294.636993][ T5737] hub 3-1:0.0: probe with driver hub failed with error -5 [ 294.649138][ T1222] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 294.808918][ T1222] usb 6-1: Using ep0 maxpacket: 32 [ 294.825890][ T1222] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 294.877826][ T5737] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 294.888424][ T1222] usb 6-1: config 0 has no interface number 0 [ 294.904995][ T1222] usb 6-1: config 0 interface 184 has no altsetting 0 [ 294.914929][ T5737] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 294.935481][ T1222] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 294.953475][ T5737] dib0700: firmware download failed at 7 with -22 [ 294.971719][ T1222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.010102][ T1222] usb 6-1: Product: syz [ 295.029765][ T1222] usb 6-1: Manufacturer: syz [ 295.054738][ T1222] usb 6-1: SerialNumber: syz [ 295.087031][ T1222] usb 6-1: config 0 descriptor?? [ 295.182287][T10097] overlayfs: missing 'lowerdir' [ 295.342311][ T5737] usb 3-1: USB disconnect, device number 79 [ 295.468811][ T5683] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 295.632095][ T5683] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.652506][ T5737] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 295.673130][ T5683] usb 2-1: config 114 has an invalid interface number: 20 but max is 0 [ 295.683763][ T5683] usb 2-1: config 114 has no interface number 0 [ 295.699280][ T5683] usb 2-1: config 114 interface 20 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 295.718741][ T5683] usb 2-1: config 114 interface 20 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 295.752790][ T1222] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 295.764918][ T5683] usb 2-1: config 114 interface 20 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 295.796622][ T5683] usb 2-1: config 114 interface 20 has no altsetting 0 [ 295.804080][ T1222] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 295.816683][ T5737] usb 3-1: device descriptor read/64, error -71 [ 295.826144][ T1222] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 295.842964][ T5683] usb 2-1: New USB device found, idVendor=03f0, idProduct=0f7f, bcdDevice=2d.ac [ 295.857128][ T1222] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 295.865641][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.883846][ T5683] usb 2-1: Product: syz [ 295.894131][ T1222] usb 6-1: USB disconnect, device number 10 [ 295.910573][ T5683] usb 2-1: Manufacturer: syz [ 295.915265][ T5683] usb 2-1: SerialNumber: syz [ 295.973304][T10099] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 295.984166][T10099] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 296.078773][ T5737] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 296.218827][ T5737] usb 3-1: device descriptor read/64, error -71 [ 296.230374][ T5683] pl2303 2-1:114.20: required interrupt-in endpoint missing [ 296.258770][ T5683] usb 2-1: USB disconnect, device number 62 [ 296.294322][T10106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 296.303851][T10106] net_ratelimit: 12 callbacks suppressed [ 296.303866][T10106] openvswitch: netlink: Flow actions attr not present in new flow. [ 296.349943][ T5737] usb usb3-port1: attempt power cycle [ 296.383406][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 296.395930][T10108] openvswitch: netlink: Flow actions attr not present in new flow. [ 296.709705][ T5737] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 296.729309][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 296.729400][ T5737] usb 3-1: device descriptor read/8, error -71 [ 296.748777][ T10] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 296.891485][ T9] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 296.904442][ T9] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 296.918390][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 296.928656][ T9] usb 6-1: config 171 has no interface number 0 [ 296.938179][ T9] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 296.954117][ T9] usb 6-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 18176, setting to 64 [ 296.971718][ T9] usb 6-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 296.986274][ T5737] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 296.999311][ T5737] usb 3-1: device descriptor read/8, error -71 [ 297.009631][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 297.020228][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.031260][ T9] usb 6-1: Product: syz [ 297.037450][ T9] usb 6-1: Manufacturer: syz [ 297.044726][ T9] usb 6-1: SerialNumber: syz [ 297.049120][ T5683] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 297.049518][ T10] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 297.080308][T10113] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 297.109839][ T5737] usb usb3-port1: unable to enumerate USB device [ 297.192253][T10137] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1115'. [ 297.229191][ T5683] usb 2-1: Using ep0 maxpacket: 16 [ 297.240177][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 297.245875][ T10] usb usb1-port1: attempt power cycle [ 297.252597][ T5683] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 297.263526][ T5683] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 297.272598][ T5683] usb 2-1: can't read configurations, error -61 [ 297.291645][ T9] ath6kl: Failed to submit usb control message: -71 [ 297.313475][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 297.333992][ T9] ath6kl: Unable to send get target info: -71 [ 297.362817][ T9] ath6kl: Failed to init ath6kl core: -71 [ 297.371031][ T9] ath6kl_usb 6-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 297.398141][ T9] usb 6-1: USB disconnect, device number 11 [ 297.408948][ T5683] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 297.569430][ T5683] usb 2-1: Using ep0 maxpacket: 16 [ 297.577333][ T5683] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 297.596289][ T5683] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 297.605159][ T5683] usb 2-1: can't read configurations, error -61 [ 297.608770][ T10] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 297.622615][ T5683] usb usb2-port1: attempt power cycle [ 297.650391][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 297.699049][ T5737] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 297.789013][ T10] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 297.841590][ T10] usb 1-1: Invalid ep0 maxpacket: 16 [ 297.847183][ T10] usb usb1-port1: unable to enumerate USB device [ 297.863963][ T5737] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 297.872754][ T5737] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 297.882054][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.892860][ T5737] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 297.902490][ T5737] usb 3-1: config 1 has no interface number 0 [ 297.909881][ T5737] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 297.930824][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.968860][ T5683] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 297.979109][ T5737] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 298.000899][T10144] overlayfs: missing 'lowerdir' [ 298.009807][ T5683] usb 2-1: Using ep0 maxpacket: 16 [ 298.018177][ T5683] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 298.033657][ T5683] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 298.042118][ T5683] usb 2-1: can't read configurations, error -61 [ 298.169446][ T5737] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 298.178686][ T5683] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 298.186714][ T5737] snd_usb_pod 3-1:1.1: invalid control EP [ 298.195228][ T5737] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 298.202304][ T5737] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 298.210465][ T5683] usb 2-1: Using ep0 maxpacket: 16 [ 298.218363][ T5683] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 298.227348][ T5737] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 298.243886][ T5683] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 298.266366][ T5683] usb 2-1: can't read configurations, error -61 [ 298.284485][ T5683] usb usb2-port1: unable to enumerate USB device [ 298.364512][ T5683] usb 3-1: USB disconnect, device number 84 [ 299.219699][T10156] bond5: Unable to set up delay as MII monitoring is disabled [ 299.231973][T10156] bond5 (unregistering): Released all slaves [ 299.246825][T10161] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 299.285689][T10161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1121'. [ 299.508178][T10179] kernel read not supported for file /memory.events (pid: 10179 comm: syz.4.1126) [ 299.518334][ T29] audit: type=1800 audit(1779356057.533:420): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1126" name="memory.events" dev="mqueue" ino=37151 res=0 errno=0 [ 299.609354][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 299.668744][ T5697] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 299.771399][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 299.784429][ T10] usb 6-1: config 114 has an invalid interface number: 20 but max is 0 [ 299.798799][ T10] usb 6-1: config 114 has no interface number 0 [ 299.802953][T10191] team0: Port device syz_tun added [ 299.808943][ T10] usb 6-1: config 114 interface 20 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 299.829946][ T10] usb 6-1: config 114 interface 20 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 299.836499][T10191] loop2: detected capacity change from 0 to 7 [ 299.853035][ T5697] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 299.866468][ T10] usb 6-1: config 114 interface 20 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 299.881104][T10191] Dev loop2: unable to read RDB block 7 [ 299.886802][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.886828][ T5697] usb 3-1: Product: syz [ 299.886840][ T5697] usb 3-1: Manufacturer: syz [ 299.886852][ T5697] usb 3-1: SerialNumber: syz [ 299.890254][ T10] usb 6-1: config 114 interface 20 has no altsetting 0 [ 299.920589][ T5697] usb 3-1: config 0 descriptor?? [ 299.943713][ T5697] hub 3-1:0.0: bad descriptor, ignoring hub [ 299.946401][T10191] loop2: unable to read partition table [ 299.953290][ T5697] hub 3-1:0.0: probe with driver hub failed with error -5 [ 299.976829][T10191] loop2: partition table beyond EOD, truncated [ 299.985709][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=0f7f, bcdDevice=2d.ac [ 299.996796][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.005235][ T10] usb 6-1: Product: syz [ 300.009852][ T10] usb 6-1: Manufacturer: syz [ 300.014552][T10191] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 300.024714][ T10] usb 6-1: SerialNumber: syz [ 300.036098][T10169] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 300.060830][T10169] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 300.146422][ T5697] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 300.194544][ T5697] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 300.227460][ T5697] dib0700: firmware download failed at 7 with -22 [ 300.307626][ T10] pl2303 6-1:114.20: required interrupt-in endpoint missing [ 300.348362][ T10] usb 6-1: USB disconnect, device number 12 [ 300.540262][T10216] libceph: resolve '0.' (ret=-3): failed [ 300.566781][T10217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.583536][T10217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.633200][ T5683] usb 3-1: USB disconnect, device number 85 [ 300.919000][ T5737] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 300.939732][ T5683] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 301.008736][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 301.059997][ T5737] usb 5-1: device descriptor read/64, error -71 [ 301.079004][ T5683] usb 3-1: device descriptor read/64, error -71 [ 301.159021][ T5732] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 301.188840][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 301.196367][ T9] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 301.207200][ T9] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 301.220294][ T9] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.231975][ T9] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 301.247774][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 301.256945][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.265116][ T9] usb 1-1: Product: syz [ 301.269591][ T9] usb 1-1: Manufacturer: syz [ 301.274207][ T9] usb 1-1: SerialNumber: syz [ 301.286368][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 301.303440][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input37 [ 301.316855][ T5737] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 301.326269][ T5683] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 301.335365][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.335400][ T5732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.335422][ T5732] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 301.335464][ T5732] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.335486][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.401049][ T5732] usb 2-1: config 0 descriptor?? [ 301.499286][ T9] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 301.514155][ T9] (id 0x00) [ 301.518962][ T5737] usb 5-1: device descriptor read/64, error -71 [ 301.525598][ T5683] usb 3-1: device descriptor read/64, error -71 [ 301.598678][ T9] rc_core: IR keymap rc-imon-pad not found [ 301.606415][ T9] Registered IR keymap rc-empty [ 301.611927][ T9] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 301.629414][ T5737] usb usb5-port1: attempt power cycle [ 301.633230][ T9] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 301.648958][ T5683] usb usb3-port1: attempt power cycle [ 301.715873][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 301.732239][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input38 [ 301.756045][ T9] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:84> initialized [ 301.940215][ T5732] plantronics 0003:047F:FFFF.001C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 301.977393][ T5737] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 301.999704][ T5683] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 302.029768][ T5683] usb 3-1: device descriptor read/8, error -71 [ 302.036823][ T5737] usb 5-1: device descriptor read/8, error -71 [ 302.268943][ T5683] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 302.278782][ T5737] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 302.290096][ T5683] usb 3-1: device descriptor read/8, error -71 [ 302.309829][ T5737] usb 5-1: device descriptor read/8, error -71 [ 302.399236][ T5683] usb usb3-port1: unable to enumerate USB device [ 302.420226][ T5737] usb usb5-port1: unable to enumerate USB device [ 302.523675][T10271] vivid-004: kernel_thread() failed [ 302.581369][ T1222] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 302.719243][T10267] imon:send_packet: packet tx failed (-71) [ 302.721356][ T5737] usb 1-1: USB disconnect, device number 84 [ 302.749354][T10267] imon:vfd_write: send packet #3 failed [ 302.857258][T10280] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 302.869131][ T5683] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 303.032574][ T5683] usb 3-1: unable to get BOS descriptor or descriptor too short [ 303.042232][ T5683] usb 3-1: config 114 has an invalid interface number: 20 but max is 0 [ 303.051030][ T5683] usb 3-1: config 114 has no interface number 0 [ 303.057528][ T5683] usb 3-1: config 114 interface 20 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 303.068212][ T5683] usb 3-1: config 114 interface 20 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 303.082213][ T5683] usb 3-1: config 114 interface 20 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 303.092703][ T5683] usb 3-1: config 114 interface 20 has no altsetting 0 [ 303.101854][ T5683] usb 3-1: New USB device found, idVendor=03f0, idProduct=0f7f, bcdDevice=2d.ac [ 303.111206][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.119392][ T5683] usb 3-1: Product: syz [ 303.123796][ T5683] usb 3-1: Manufacturer: syz [ 303.128530][ T5683] usb 3-1: SerialNumber: syz [ 303.139012][T10278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.149613][T10278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.370391][ T5683] pl2303 3-1:114.20: required interrupt-in endpoint missing [ 303.386383][ T5683] usb 3-1: USB disconnect, device number 90 [ 303.541542][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 303.853965][ T5697] usb 2-1: USB disconnect, device number 67 [ 304.128677][ T5732] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 304.289636][ T5732] usb 5-1: Using ep0 maxpacket: 32 [ 304.307078][ T5732] usb 5-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 304.350328][ T9] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 304.368826][ T5732] usb 5-1: config 123 interface 0 has no altsetting 0 [ 304.404066][ T5732] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 304.419902][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.433587][ T5732] usb 5-1: Product: syz [ 304.437806][ T5732] usb 5-1: Manufacturer: syz [ 304.443343][ T5732] usb 5-1: SerialNumber: syz [ 304.524782][ T9] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 304.552388][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.562448][ T9] usb 1-1: Product: syz [ 304.574171][ T9] usb 1-1: Manufacturer: syz [ 304.587284][ T9] usb 1-1: SerialNumber: syz [ 304.610802][ T9] usb 1-1: config 0 descriptor?? [ 304.623447][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 304.630394][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 304.826901][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 304.841756][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 304.852270][ T9] dib0700: firmware download failed at 7 with -22 [ 304.906096][ T5732] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 304.954473][ T5732] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 304.968370][ T5732] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 304.977063][ T5697] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 304.986477][ T5732] usb 5-1: media controller created [ 305.018100][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.066177][T10298] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 305.067297][ T5732] set interface failed [ 305.078555][T10298] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 305.078587][T10298] CPU: 1 UID: 0 PID: 10298 Comm: syz.0.1163 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.078612][T10298] Tainted: [L]=SOFTLOCKUP [ 305.078618][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 305.078629][T10298] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 305.078653][T10298] Code: e0 d3 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d d0 38 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 86 67 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 305.078669][T10298] RSP: 0018:ffffc9000202f180 EFLAGS: 00010206 [ 305.078687][T10298] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a44d303 [ 305.156495][T10298] RDX: 0000000000000000 RSI: ffffffff8e21f706 RDI: 00000000000000c0 [ 305.164465][T10298] RBP: ffffc9000202f338 R08: ffffc9000202f2a7 R09: 0000000000000000 [ 305.172441][T10298] R10: ffffc9000202f280 R11: fffff52000405e55 R12: 0000000000000068 [ 305.179593][ T9] usb 1-1: USB disconnect, device number 85 [ 305.180414][T10298] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000405e48 [ 305.189913][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 305.194290][T10298] FS: 00007f76227f66c0(0000) GS:ffff888125389000(0000) knlGS:0000000000000000 [ 305.194314][T10298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.194328][T10298] CR2: 000000110c31e789 CR3: 00000000327ca000 CR4: 00000000003526f0 [ 305.209106][ T5697] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 305.211918][T10298] Call Trace: [ 305.211942][T10298] [ 305.211951][T10298] ? __mutex_lock+0x32d/0x1550 [ 305.211980][T10298] ? __mutex_trylock_common+0x158/0x260 [ 305.221516][ T5697] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 305.226542][T10298] ? dvb_usbv2_generic_write+0x26/0x60 [ 305.226581][T10298] ? __pfx___mutex_lock+0x10/0x10 [ 305.238357][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.240812][T10298] ? __pfx___mutex_lock+0x10/0x10 [ 305.240841][T10298] ? __mutex_lock+0x319/0x1550 [ 305.240856][T10298] ? handle_mm_fault+0xee/0x3170 [ 305.240879][T10298] dvb_usbv2_generic_write+0x26/0x60 [ 305.244257][ T5697] usb 3-1: Product: syz [ 305.248561][T10298] mxl111sf_ctrl_msg+0x160/0x2f0 [ 305.248597][T10298] mxl111sf_write_reg+0xa9/0x1b0 [ 305.248621][T10298] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 305.248644][T10298] ? __lock_acquire+0x6b5/0x2cf0 [ 305.254690][ T5697] usb 3-1: Manufacturer: syz [ 305.263193][T10298] mxl111sf_i2c_xfer+0x496/0x5100 [ 305.263231][T10298] ? __lock_acquire+0x6b5/0x2cf0 [ 305.263259][T10298] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 305.263280][T10298] ? unwind_next_frame+0xa6/0x2550 [ 305.269254][ T5697] usb 3-1: SerialNumber: syz [ 305.273728][T10298] ? is_bpf_text_address+0x26/0x2b0 [ 305.273758][T10298] ? is_bpf_text_address+0x26/0x2b0 [ 305.367017][T10298] ? is_bpf_text_address+0x292/0x2b0 [ 305.372364][T10298] ? is_bpf_text_address+0x26/0x2b0 [ 305.377602][T10298] ? kernel_text_address+0xa5/0xe0 [ 305.378821][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 305.382736][T10298] ? __kernel_text_address+0xd/0x30 [ 305.382772][T10298] ? unwind_get_return_address+0x4d/0x90 [ 305.401199][T10298] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 305.407427][T10298] ? arch_stack_walk+0xfb/0x150 [ 305.412311][T10298] ? stack_trace_save+0xa9/0x100 [ 305.417357][T10298] ? __pfx_stack_trace_save+0x10/0x10 [ 305.422761][T10298] ? kasan_save_free_info+0x46/0x50 [ 305.428159][T10298] ? stack_depot_save_flags+0x33/0x810 [ 305.433645][T10298] ? irqentry_exit+0x218/0x760 [ 305.438442][T10298] ? lockdep_hardirqs_on+0x7a/0x110 [ 305.443682][T10298] ? trace_irq_disable+0x3b/0x140 [ 305.448727][T10298] __i2c_transfer+0x79a/0x1f70 [ 305.453519][T10298] __i2c_smbus_xfer+0x113e/0x2050 [ 305.458636][T10298] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 305.464042][T10298] ? lockdep_hardirqs_on+0x7a/0x110 [ 305.469270][T10298] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 305.475115][T10298] ? rt_mutex_lock_nested+0x15c/0x1e0 [ 305.480526][T10298] i2c_smbus_xfer+0x1f4/0x310 [ 305.485241][T10298] i2cdev_ioctl_smbus+0x1e7/0x730 [ 305.490297][T10298] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 305.495872][T10298] i2cdev_ioctl+0x615/0x880 [ 305.500391][T10298] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 305.505448][T10298] ? __fget_files+0x2a/0x420 [ 305.510057][T10298] ? __fget_files+0x3a0/0x420 [ 305.510784][ T5697] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 305.514744][T10298] ? bpf_lsm_file_ioctl+0x9/0x20 [ 305.514772][T10298] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 305.514791][T10298] __se_sys_ioctl+0xfc/0x170 [ 305.536008][T10298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.542106][T10298] do_syscall_64+0x15f/0xf80 [ 305.546758][T10298] ? trace_irq_disable+0x3b/0x140 [ 305.551802][T10298] ? clear_bhb_loop+0x40/0x90 [ 305.556482][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.562392][T10298] RIP: 0033:0x7f762459ce59 [ 305.566848][T10298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.586986][T10298] RSP: 002b:00007f76227f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.595843][T10298] RAX: ffffffffffffffda RBX: 00007f7624815fa0 RCX: 00007f762459ce59 [ 305.603840][T10298] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000004 [ 305.611825][T10298] RBP: 00007f7624632d6f R08: 0000000000000000 R09: 0000000000000000 [ 305.619818][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.627798][T10298] R13: 00007f7624816038 R14: 00007f7624815fa0 R15: 00007f762493fa48 [ 305.629406][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 305.635777][T10298] [ 305.635793][T10298] Modules linked in: [ 305.636881][T10298] ---[ end trace 0000000000000000 ]--- [ 305.654653][T10298] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 305.668682][T10298] Code: e0 d3 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d d0 38 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 86 67 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 305.678659][ T1222] usb 6-1: unable to get BOS descriptor or descriptor too short [ 305.694200][T10298] RSP: 0018:ffffc9000202f180 EFLAGS: 00010206 [ 305.704420][ T1222] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 305.705988][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 305.711480][ T1222] usb 6-1: can't read configurations, error -71 [ 305.721991][T10298] [ 305.736553][ T5697] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 305.745439][ T5697] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 305.750191][T10298] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a44d303 [ 305.757087][ T5697] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 305.771450][ T5697] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 305.771888][T10298] RDX: 0000000000000000 RSI: ffffffff8e21f706 RDI: 00000000000000c0 [ 305.780309][ T10] usb 2-1: config 3 has an invalid interface number: 57 but max is 0 [ 305.796801][ T10] usb 2-1: config 3 has no interface number 0 [ 305.796953][T10298] RBP: ffffc9000202f338 R08: ffffc9000202f2a7 R09: 0000000000000000 [ 305.812559][T10298] R10: ffffc9000202f280 R11: fffff52000405e55 R12: 0000000000000068 [ 305.820677][T10298] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000405e48 [ 305.821714][ T5697] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 305.828884][T10298] FS: 00007f76227f66c0(0000) GS:ffff888125389000(0000) knlGS:0000000000000000 [ 305.836823][ T10] usb 2-1: config 3 interface 57 has no altsetting 0 [ 305.846477][T10298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.852581][ T5697] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 305.859594][T10298] CR2: 00007fb946f19fe0 CR3: 00000000327ca000 CR4: 00000000003526f0 [ 305.877858][T10298] Kernel panic - not syncing: Fatal exception [ 305.884471][T10298] Kernel Offset: disabled [ 305.888791][T10298] Rebooting in 86400 seconds..