last executing test programs: 7.567433193s ago: executing program 0 (id=1373): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000000108000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x100000}, 0x0) 7.510354077s ago: executing program 0 (id=1374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x141600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000008010100000a2401000000020102132406000006000000000000000000000000000924030000000500000000000000f8431cfd0924030001030004030624050400fd0904010000010200000904010101010200000905010900000000000725010000000009040200000102000009040201010102000009051abcef"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000440)="66410f011d00600000c744240055a64b01c74424020c000000c7442406000000000f011c24b9800000c00f3235001000000f3066ba6100b000ee36410f01cf0fba39fb430fc7bbe5420000c4c2e5922c8ec744240046000000c744240202000000ff1c24410f20d4", 0x68}], 0x1, 0x11, 0x0, 0x0) getsockopt(r2, 0x1, 0x2bd0, &(0x7f0000000880)=""/4096, &(0x7f0000000000)=0x1000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.639250748s ago: executing program 0 (id=1383): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) (async, rerun: 32) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x46, 0x24}) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x26, 0x5, 0x5, &(0x7f0000000c00)) (async) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) (async, rerun: 32) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (rerun: 32) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000ac0)={0x73622a85, 0x0, 0xfffffffffffffffd}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async, rerun: 64) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async, rerun: 64) r8 = io_uring_setup(0x17ef, &(0x7f0000000480)={0x0, 0x211c, 0x400, 0xffffffc, 0x13c}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, 0x0, 0x300) (async) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) (async) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r9 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r9, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x3013, 0x0, 0x0, 0x80, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4, 0x0, 0x0, 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000e5ad600027842cf52300000000000000", @ANYRESOCT=r10, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x2}, 0xc000) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000500)={0x2, &(0x7f00000002c0)=[{0x4, 0xc1, 0x8, 0x4}, {0x3, 0xf, 0x1, 0xfffffffa}]}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x8, r12, 0x0, 0x80000000, 0x4a, &(0x7f00000003c0)="07f16367cbe570a4a49f8c442aae0a42bde7444a3e7ddc71d0b11eaee034c54e3c754a3ef89f4af9582f015a9af0e1d34e60b276f8080129e3e3b9ee5b1653bcbdd1f269ee4596da35a9", 0x4}) (async) socket$key(0xf, 0x3, 0x2) 5.098303081s ago: executing program 3 (id=1384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x0, 0x1, 0x7ffffffc}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890b, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x0, 0x2, &(0x7f0000000240)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000100)={'veth0\x00', 0x42}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) pivot_root(&(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00') 3.575265374s ago: executing program 1 (id=1389): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000080000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000010000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ac14143b0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000002b"], 0x23c}}, 0x0) 3.54559839s ago: executing program 0 (id=1390): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000180)='`', 0x5dc, 0x20000000, &(0x7f0000000240)={0x6, 0x0, r6, 0x1, 0x0, 0x6, @random="00001e00"}, 0x14) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r11) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e2c, @rand_addr=0x64010101}}) 3.423128311s ago: executing program 3 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) futex(0xfffffffffffffffc, 0x8, 0x10002, 0x0, 0x0, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@remote, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x500}}}}}}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x3}, @nested={0xfffffe7b, 0x8, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0x2f}}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000007c0)={0x3, 0x8, [0xffffffe8, 0x5]}) (async, rerun: 64) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x1e, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x7b, 0x7, 0x50}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x2, 0xdc}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3, 0x5, 0x8b, 0x40, 0x1}, 0x2e, &(0x7f0000000140)={0x5, 0xf, 0x2e, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xa, 0x3, 0x6, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x4, 0x400}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc3, 0x7f, 0x6, 0x8, 0xe}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x459}}, {0xb1, &(0x7f0000000240)=@string={0xb1, 0x3, "91e4954ced92c571593790f478e1ed1eae7e4588a9199137d51d8ca7e79a280cdfe36937a7cb1639196f09df39ad0308d4f9a20f7f257a9aaf537ce0f5fd6a2f1fad8deb2a0e50e9dc9a8336bb21fed85dc545f4be5b4a836d660167d203e0c44a2f9bd65738f167917d75c716e9496683f3bd690237756dffd5fa4d0bed55a84562d805512353a277e2a8670d1bb9f7eecd621b5f970d7a300fae03267f298e1db5524f0e3e013904f052f21bbc55"}}, {0x44, &(0x7f00000003c0)=@string={0x44, 0x3, "af5bce3c6267d4add7bde6d6b54d65a906012648ee4c9a0700409152d8d879c44b926c6eabef1f1d93995c5ef6b5c1ad4c81b4cc3fb18f8bc797894a7b72d6dab05a"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x180a}}, {0xaf, &(0x7f0000000440)=@string={0xaf, 0x3, "0754660951160ae4ad209a4d2e878c98165b8baf00f8425a4677f438c0ccb3488a78fe7d482194cb097b5dea030596c4037918f7a15615cacd8eb01613ccb7d870fdc2d25ff1c5df8d25a9ab6fefc14bcfa14f138598b94b1660122ae9abbc92090f941b1cc9b286aa5223037e557216c047bb6f1dbd97ef117bf2d4dac19079af5b0bed9d50988d79ef11babafb6a014cd90e8c9c56b87c3cec5827007e94b91b3120d66b55fc328cf2072489"}}, {0xba, &(0x7f0000000600)=@string={0xba, 0x3, "bdd6e9004dfd70a009712546f89a670e7d8fb489f92c4eabc93b05919f3385ee3f1e0530d267119d9ac7e3f2854cec08ea33272bbd1af5f989e1d3835aac7f6f6d5cc33a96941afa12a6c37a0a2abc75461e326acb121d1171d4328c625f17ee336dfe26f5e497fbdf16c71008e45a4f9a74176fabf6e663b4a0a7f6679746d3b1ca2528ad7d97889fd22d56ce13df5aeb0227c38153424d68ac32696ab64bfb1dfb131c91787071bbf69802b432a50631448b6785d8f995"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1401}}]}) (rerun: 64) 3.392844675s ago: executing program 1 (id=1393): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00009f5000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x9, 0x3, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x6, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) nanosleep(0x0, 0x0) (async) nanosleep(0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) userfaultfd(0x1) (async) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r4, 0xc028aa05, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x58, r6, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6ec}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5f6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4014044}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x58, r6, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6ec}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5f6}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4014044}, 0x0) io_uring_enter(r3, 0x2d3e, 0xc6f8, 0x12, 0x0, 0x0) 2.847137441s ago: executing program 1 (id=1395): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) rmdir(0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x5000000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="66643d8bd644e0e4a543387f08980d9536c3d8c075ed", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x2058) open(&(0x7f0000000000)='./file0/file0\x00', 0x80000, 0x100) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0xff, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 2.537090999s ago: executing program 2 (id=1396): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x2, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffff7fff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000380)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x701, 0x0, &(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000300)=[r5, r4], &(0x7f0000000180)=[0x0, 0x712, 0x0], 0x0, 0xfffffffefffffffd}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f00000005c0)={0x1c, r9}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r8, 0x3b71, &(0x7f00000000c0)={0x20, 0x2, 0x0, 0x8000, 0xffffffffffffeffd}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8000000002) recvmsg(r6, &(0x7f0000000340)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x3f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private1, 0xb1b2}, {0xa, 0x0, 0x0, @empty, 0xfffff4ce}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4]}}, 0x5c) 2.524836604s ago: executing program 4 (id=1397): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0x1000000f, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0xfffffffffffffffc}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc4) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) 2.443241682s ago: executing program 0 (id=1398): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r0 = dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r3, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r0, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r6 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r6, 0x0, 0x0) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) 1.563851076s ago: executing program 4 (id=1399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142408000700e000000108000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1.563105534s ago: executing program 3 (id=1400): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = socket(0x22, 0x2, 0x24) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000008000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500", @ANYRES64=r0], 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 1.321130529s ago: executing program 4 (id=1401): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0xffffffff, 0x4) sendto$inet6(r0, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x381, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff1, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x19}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40408c4}, 0x20000814) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000040), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071102200000000009c000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x3a3, 0x0, 0x0, 0x0) 1.246286654s ago: executing program 3 (id=1402): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x40480c4}, 0xc000) 1.179166071s ago: executing program 0 (id=1403): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x0, 0x823}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f0000000680)=[@code={0xa, 0x78, {"b805000000b9c30000000f01d9b91f030000b801000000ba000000000f30c744240006000000c7442402eaff0073ff1c243e0fc75b38420f2011b805000000b9db3300000f01c1450f01b3bee8175566baf80cb8e8e9be8def66bafc0cb06dee7cf065450f01c3"}}], 0x78}) ioctl$KVM_RUN(r6, 0xae80, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000680)="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", 0xfe}], 0x1, 0x7, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9, 0x6d, 0x5c, 0x40, 0x2304, 0x23e, 0xd769, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x0, 0x37, 0x10, 0xeb}}]}}]}}, 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(0xfffffffffffffffc) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x22, 0x56, {0x56, 0x30, "1ebbf364240869ee5c46713520d57005c0a8922876031791886dc724d60c44f5914e5c73f1d1cd3c6c26a63bea4e9aad96cb894c3575a20b609b9de2d57fdebc19111ada7f5554ef53c6b93fc4b215fc9538d03b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x40, 0x16, 0xe2, "73f7b926ad7e93733628b6b10d0a7edb8cbf3ca352fcf5134c543e89625179b528be3a38baba4f6ba43fe927df43e9ff65c7b44a7cb593cf18f8e7c4a60f21685d2d1b2bc823aff28faf48885bad55b766b9b6d567ed82c15d8bddf8b0ddfc161c5f7bd17bbe9c40fc1bdcc614232f58738588c1cc1dd967a99ca8ee4135e68d27d62b6f947c7195ffbcc31e745f61a8480e7a0ec1d784b91f7e92d089b664677ebd499b1d85f18e3ae844d6710ae64bd846cc99507ffee20971e210bc169d8e19f5e4e8c15c57297f472baf798229aee51ae41bf19ebc538d8482e2a2df41085372"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x2095, 0x4, 0x612, 0x8, 0x225, 0x4, 0x9, 0xc, 0x3, 0x4, 0x7, 0x7}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000400)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x8000}, &(0x7f0000000480)={0x20, 0x89, 0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@struct={0xd, 0x5, 0x0, 0x4, 0x1, 0xd9, [{0x2, 0x2, 0x5}, {0x5, 0x3, 0xd6e}, {0x4, 0x0, 0x1}, {0x2, 0x1, 0xa4}, {0x5, 0x3, 0x940}]}]}, {0x0, [0x5f]}}, &(0x7f0000000780)=""/4096, 0x63, 0x1000, 0x1, 0x200}, 0x28) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r10, r9, 0x0, 0x7ffffffd) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0xd, 0x89, 0xffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x10}, 0x50) 1.158717099s ago: executing program 1 (id=1404): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@rand_addr=0x64010100, 0x0, 0x0, 0xa0, 0x0, [{@empty}, {@local}, {@local}, {@loopback}, {@multicast2}, {@multicast2}, {@dev}, {@loopback}, {@local}, {@multicast2}]}}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) (rerun: 32) 1.08172138s ago: executing program 4 (id=1405): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f78d9ca38fff48f3be52283448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000700)="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", 0x1000}], 0x4, &(0x7f0000000100)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000001c0)=""/10, 0xa}, {&(0x7f0000000600)=""/242, 0xf2}], 0x2}, 0x0) 1.027335621s ago: executing program 3 (id=1406): pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010027bd700000000000e000000200"/43], 0xb8}}, 0x4004) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x4) socket$unix(0x1, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) recvmmsg(r6, &(0x7f0000001480), 0x0, 0x10022, 0x0) write$vhost_msg_v2(r3, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 1.000781277s ago: executing program 1 (id=1407): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 903.111666ms ago: executing program 1 (id=1408): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000180)='`', 0x5dc, 0x20000000, &(0x7f0000000240)={0x6, 0x0, r6, 0x1, 0x0, 0x6, @random="00001e00"}, 0x14) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r11) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e2c, @rand_addr=0x64010101}}) 855.201513ms ago: executing program 2 (id=1409): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1000, 0x10009, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x341981) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x1, 0xc, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000003c0)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x7, 0xb2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1000, 0x10009, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x341981) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x1, 0xc, 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000003c0)={0xda2, 0x8166, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0x4}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x80, 0x7, 0xb2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) (async) dup(r2) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 854.981527ms ago: executing program 4 (id=1410): r0 = syz_usb_connect(0x0, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xd5, 0xe, 0x50, 0x20, 0x46d, 0x8da, 0xa985, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x10, 0x5}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)={0x40, 0x13, 0x28, "162039a1db8728ccc32171e8cb00603fb7181b0369a729822bcf599dea680baff2ae1a551f6f7000"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000002c0)={0x0, 0x13, 0xc, "f42732933b1890fe16787e72"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 724.541928ms ago: executing program 2 (id=1411): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) preadv2(r3, 0x0, 0x0, 0x8, 0x0, 0x31) 546.918521ms ago: executing program 2 (id=1412): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = socket(0x22, 0x2, 0x24) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000019000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500", @ANYRES64=r0], 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 443.16744ms ago: executing program 2 (id=1413): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0xf00, 0x140, 0xf00, 0x10, 0x4, 0x1000, 0x2c, 0x1, {0x9, 0x7f, 0x1}, {0x3, 0x3}, {0x9, 0x0, 0x1}, {0x4, 0x5, 0x1}, 0x0, 0x0, 0x0, 0x80, 0x1, 0x1, 0x0, 0x9cb, 0x2, 0x3, 0x8, 0x46d1da3b, 0x1, 0x200, 0x1, 0x7}) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0) lseek(r0, 0x8, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x7800, 0x40, 0x4, 0x6, {{0x7, 0x4, 0x2, 0x8, 0x1c, 0x68, 0x0, 0x7, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, {[@lsrr={0x83, 0x7, 0x35, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0xaa61, 0x1, {{0x1e, 0x4, 0x0, 0x9, 0x78, 0x67, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0xb, 0x2b, [@rand_addr=0x64010102, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x30, 0x3, 0xc, [{@local, 0x9}, {@multicast2, 0x7f}, {@local, 0x2}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0xf9}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x2f, 0x3, 0x1, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@empty, 0x56}, {@remote, 0x977}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x148, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x14a}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008080}, 0x20004080) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r1) fcntl$getownex(r1, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xac, r7, 0x300, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0xac}}, 0x40040) r9 = syz_open_dev$loop(&(0x7f0000000900), 0x200, 0x20202) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r1) ioctl$int_in(r0, 0x5421, &(0x7f0000000940)=0x7) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000980)={0x8, 0x9}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000009c0)={0x0, 'veth1\x00', {0x3}, 0x5}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e24, 0xe4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, [0x1ff, 0x6, 0x8b, 0x80, 0x4, 0x1, 0x2, 0xc66c, 0x37, 0x7, 0xffffffffffff825a, 0xc7, 0xf, 0x0, 0xe80]}, &(0x7f0000000b00)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000b40)={r11, 0xab9, 0x90, 0x3, 0x9, 0x8}, &(0x7f0000000b80)=0x14) sendmsg$tipc(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000bc0)="2d91ebf38049dd08a3bf3f64cdba00ab3f0f99659901781a01f8a89763ec7fdd648c7887815ea4853aafa4fc94aee2d783e2b20b8552bf1b48123c979f76774be83748e26d05eaaba3587bebc4f0c8276cb14514d20ce0eb4cf7260514b3270f35328ac075fdda5efcc40a4116d3a555acb3a51f2651662ab2fcbf3aee85d3c57b024bcc8dc7e37299fd271fa71a690277042f45be44ad3b5c7509db447a8c0833fb9be8335888251e6bc53cd266355e2eca1a9c021a9f5e3dd558b15eb71a60349734", 0xc3}, {&(0x7f0000000cc0)="722d5ed6b126460b49b7dcc1bd784b07243b0d708937a82d855e7bab1386f043683c6d822ddf016f8784e02d6a95925a37c462020c98a4f0a5387876ecb996ddfa43b62e32928b72ead7fb6ff9c869b5394a5fdd918ef90ab7baa8b296bb4aa8ab350ab70a29eb5a0dbd1f78d19080b51afc44fd2a32c81d35494676b14b0fdadec14db747e63eda598f0b69d03c697e796ea8c20387ad9d20ab9abc4ca91711f98c168bd9f2137b099241bf1c254e8518", 0xb1}, {&(0x7f0000000d80)="1edc42c10f460c4763dfb5497051ede4dea9c30312e3ad87fb70a571ce10ecca50fdb0e08e0cbfdddb94cfa6323f66902698ed2e04b92fcad4b4e6ae30afbb14ec571446c18bd9570b73d00e853dbf5e15098a72b0264831d090ae4aafe7766a02d4d35a928ea627d5659b505c6354f8897a1cce23185eb7", 0x78}, {&(0x7f0000000e00)="ee5fb0fbf7ac2bb22090f4e20d965e36a1c97f0de11c6eb9f468d22bf73cf1f51cb7284b973429db19ca90c563a764a6428cd8721fe9b3c25c7f7b798d47c66b3fc00d", 0x43}], 0x4, &(0x7f0000000ec0)="76b2e61a7c32e93fd1262365951fe34f0bca56b5c5388cf38fd868d502b28d9f049f9e8721f75d518546861c2de826d142ae4860bb3422e6aa8f2cfa85bf223cde93586e1eb9479e83f20a53d06c74b38b25989229be53e8317564b964297c7e1f3a4ffb1af66a68758f1d716868b615ed7808fabe04f2aea1af927e368d953b4b143d39ebba8b4ab1c10c2d73c655032bb99b6d3f7f7732c4373937397e99048f5e382b2993fd5d5791bd49e49e89a9ef3d5d0992d66d93aa488cb8d85dd3cef5a8d75713faa05279cb147e1bc0337f92e77ebebefdaa9979d6ff075566927b26d4549d6a5f85bba3684915", 0xec, 0x40}, 0xc1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r12, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x4c, r13, 0x1, 0x70bd2a, 0x5, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x9, 0x2c}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44800}, 0x4040) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xf0, r13, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1c}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}, @NL80211_ATTR_VENDOR_DATA={0xcb, 0xc5, "b377cf27e87743c72ed292d2767360036019b245ad5725698477243cf46e6dedf218d5de46fe1d6388f8678410717ba8832fc668a3e63f88b266b6385e2132dc7f3cfe9d7f660993970306e372397c5b75e27e59185bac4f636012fd7c5fc07e06ccaad02f1bee7704856e344baa082775331795cd993a2be53964fe4b155af700eb52c33db71a6d0b2bae5b3d3212fa6ee0d7d8f15899eb94c1682c4c5e3c0ec3c53940a663ccda1eb3401a452ebc5ecd2a66088b90a3e0eeed5098974897579d5cdb1d8d7932"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 431.846197ms ago: executing program 2 (id=1414): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) rmdir(0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x7000000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="66643d8bd644e0e4a543387f08980d9536c3d8c075ed", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x2058) open(&(0x7f0000000000)='./file0/file0\x00', 0x80000, 0x100) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0xff, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 134.209796ms ago: executing program 4 (id=1415): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a19, 0x0, 0x0}], 0x2}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x4000000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r5}]}}}]}, 0x38}, 0x1, 0xba01}, 0x20040080) 0s ago: executing program 3 (id=1416): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="2010bd"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='@\x00='], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0xfe}}) kernel console output (not intermixed with test programs): 1-1: config 220 interface 76 has no altsetting 0 [ 283.108598][ T5911] usb 1-1: config 220 interface 1 has no altsetting 0 [ 283.131248][ T5911] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 283.140794][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.171129][ T5911] usb 1-1: Product: syz [ 283.193293][ T5911] usb 1-1: Manufacturer: syz [ 283.197912][ T5911] usb 1-1: SerialNumber: syz [ 283.476184][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.557894][ T8935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.029519][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 284.215391][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 230: 112, using maximum allowed: 30 [ 284.232103][ T8950] netlink: 32 bytes leftover after parsing attributes in process `syz.2.887'. [ 284.244210][ T24] usb 4-1: config 0 interface 0 altsetting 230 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 284.265548][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 284.272391][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 284.286107][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.314767][ T24] usb 4-1: config 0 descriptor?? [ 284.520431][ T24] net_ratelimit: 6 callbacks suppressed [ 284.520450][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.549821][ T8957] IPVS: set_ctl: invalid protocol: 50 172.20.20.47:20000 [ 284.603610][ T8961] gre1: entered promiscuous mode [ 284.610053][ T8961] gre1: entered allmulticast mode [ 284.682821][ T5987] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 284.846265][ T5987] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 284.857110][ T5987] usb 2-1: can't read configurations, error -22 [ 284.992825][ T5987] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 284.992914][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.176151][ T5987] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 285.185478][ T5987] usb 2-1: can't read configurations, error -22 [ 285.193038][ T5987] usb usb2-port1: attempt power cycle [ 285.295403][ T5911] usb 1-1: selecting invalid altsetting 0 [ 285.312220][ T5911] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 285.319070][ T5903] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -110 [ 285.331046][ T5903] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -110 [ 285.345235][ T5911] usb 1-1: No valid video chain found. [ 285.350797][ T5903] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -110 [ 285.367099][ T5911] usb 1-1: selecting invalid altsetting 0 [ 285.374889][ T5903] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -110 [ 285.383335][ T5911] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 285.422815][ T5911] usb 1-1: USB disconnect, device number 32 [ 285.576774][ T5987] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 285.588851][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.608850][ T5987] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 285.618997][ T5987] usb 2-1: can't read configurations, error -22 [ 285.783362][ T5987] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 285.963478][ T5987] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 285.989135][ T5987] usb 2-1: can't read configurations, error -22 [ 286.002237][ T5987] usb usb2-port1: unable to enumerate USB device [ 286.072279][ T8977] raw_sendmsg: syz.2.894 forgot to set AF_INET. Fix it! [ 286.615874][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.825634][ T5987] usb 4-1: USB disconnect, device number 28 [ 286.924440][ T8984] loop7: detected capacity change from 0 to 7 [ 286.951935][ T5896] Buffer I/O error on dev loop7, logical block 0, async page read [ 286.953022][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 286.971466][ T5896] Buffer I/O error on dev loop7, logical block 0, async page read [ 287.003076][ T5896] Buffer I/O error on dev loop7, logical block 0, async page read [ 287.052317][ T5896] Buffer I/O error on dev loop7, logical block 0, async page read [ 287.083567][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.093929][ T5896] Buffer I/O error on dev loop7, logical block 0, async page read [ 287.110157][ T5896] Buffer I/O error on dev loop7, logical block 0, async page read [ 287.119259][ T5896] Buffer I/O error on dev loop7, logical block 0, async page read [ 287.120475][ T8990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.899'. [ 287.142076][ T5896] ldm_validate_partition_table(): Disk read failed. [ 287.151596][ T5896] Buffer I/O error on dev loop7, logical block 0, async page read [ 287.160312][ T5896] Buffer I/O error on dev loop7, logical block 0, async page read [ 287.174654][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.189448][ T5896] Buffer I/O error on dev loop7, logical block 0, async page read [ 287.192744][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 287.216289][ T5896] Dev loop7: unable to read RDB block 0 [ 287.230773][ T5896] loop7: unable to read partition table [ 287.246885][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.251451][ T5896] loop7: partition table beyond EOD, truncated [ 287.271649][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.294954][ T8984] ldm_validate_partition_table(): Disk read failed. [ 287.301891][ T8984] Dev loop7: unable to read RDB block 0 [ 287.320647][ T9] usb 1-1: config 0 descriptor?? [ 287.331779][ T8984] loop7: unable to read partition table [ 287.347973][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 287.361983][ T8984] loop7: partition table beyond EOD, truncated [ 287.368758][ T8984] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 287.572717][ T5987] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 287.639486][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.666997][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.676057][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.688169][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.737383][ T5987] usb 4-1: Using ep0 maxpacket: 32 [ 287.744039][ T5987] usb 4-1: config 0 has an invalid interface number: 232 but max is 0 [ 287.752392][ T5987] usb 4-1: config 0 has no interface number 0 [ 287.771442][ T5987] usb 4-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 287.782673][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.863047][ T5987] usb 4-1: Product: syz [ 287.868641][ T5987] usb 4-1: Manufacturer: syz [ 287.882634][ T5987] usb 4-1: SerialNumber: syz [ 287.898873][ T5987] usb 4-1: config 0 descriptor?? [ 288.032882][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.103130][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 288.123859][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.901'. [ 288.139784][ T8995] vlan2: entered promiscuous mode [ 288.145124][ T8995] team0: entered promiscuous mode [ 288.150428][ T8995] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 288.218898][ T5987] usb 4-1: USB disconnect, device number 29 [ 288.253494][ T9028] netlink: 'syz.0.896': attribute type 4 has an invalid length. [ 288.267112][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 288.305796][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 288.317905][ T9] usb 3-1: config 0 has no interface number 0 [ 288.329917][ T9] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 288.340793][ T9028] netlink: 'syz.0.896': attribute type 4 has an invalid length. [ 288.366843][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.368049][ T9] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 288.386637][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.394707][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.428863][ T9] usb 3-1: Product: syz [ 288.439626][ T9] usb 3-1: Manufacturer: syz [ 288.450733][ T9] usb 3-1: SerialNumber: syz [ 288.473897][ T9] usb 3-1: config 0 descriptor?? [ 288.489494][ T9] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 288.517763][ T9] em28xx 3-1:0.132: Video interface 132 found: [ 288.815814][ T9] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 289.001864][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 289.012401][ T9] em28xx 3-1:0.132: board has no eeprom [ 289.103085][ T9] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 289.119996][ T30] audit: type=1326 audit(1759219608.250:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0758eec9 code=0x7ffc0000 [ 289.130749][ T9] em28xx 3-1:0.132: analog set to bulk mode. [ 289.153858][ T5840] em28xx 3-1:0.132: Registering V4L2 extension [ 289.213573][ T9046] tipc: Enabled bearer , priority 10 [ 289.226018][ T9046] tipc: Enabled bearer , priority 0 [ 289.426616][ T9] usb 3-1: USB disconnect, device number 32 [ 289.446642][ T9] em28xx 3-1:0.132: Disconnecting em28xx [ 289.490678][ T30] audit: type=1326 audit(1759219608.250:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e0758eec9 code=0x7ffc0000 [ 289.597256][ T5840] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 289.606146][ T5840] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 289.633380][ C0] net_ratelimit: 5 callbacks suppressed [ 289.633394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.662825][ T5840] em28xx 3-1:0.132: No AC97 audio processor [ 289.673239][ T30] audit: type=1326 audit(1759219608.250:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0758eec9 code=0x7ffc0000 [ 289.709431][ T30] audit: type=1326 audit(1759219608.260:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e0758eec9 code=0x7ffc0000 [ 289.770865][ T30] audit: type=1326 audit(1759219608.260:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0758eec9 code=0x7ffc0000 [ 289.793263][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.812239][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.823402][ T5840] usb 3-1: Decoder not found [ 289.828171][ T5840] em28xx 3-1:0.132: failed to create media graph [ 289.837891][ T5840] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 289.848631][ T30] audit: type=1326 audit(1759219608.260:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0758eec9 code=0x7ffc0000 [ 289.871908][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.893387][ T979] usb 1-1: USB disconnect, device number 33 [ 289.916655][ T5840] em28xx 3-1:0.132: Remote control support is not available for this card. [ 289.932794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.948168][ T9] em28xx 3-1:0.132: Closing input extension [ 289.988455][ T9] em28xx 3-1:0.132: Freeing device [ 290.072834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.212873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.352909][ T979] tipc: Node number set to 1285372621 [ 290.492820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.762717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.851088][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.037339][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 291.074158][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.096758][ T9068] delete_channel: no stack [ 291.402694][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 291.404381][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.441330][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.452716][ T5840] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 291.527178][ T30] audit: type=1326 audit(1759219610.660:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9084 comm="syz.1.928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc5238eec9 code=0x0 [ 291.571174][ T9083] Invalid logical block size (7836) [ 291.573004][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 291.600175][ T9] usb 1-1: config 0 has an invalid interface number: 232 but max is 0 [ 291.626929][ T9] usb 1-1: config 0 has no interface number 0 [ 291.634178][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 291.642007][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 291.655672][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 291.668297][ T5840] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 291.678485][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.687314][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.702274][ T9] usb 1-1: Product: syz [ 291.709250][ T5840] usb 3-1: Product: syz [ 291.718378][ T9] usb 1-1: Manufacturer: syz [ 291.723397][ T5840] usb 3-1: Manufacturer: syz [ 291.728424][ T9] usb 1-1: SerialNumber: syz [ 291.746716][ T5840] usb 3-1: SerialNumber: syz [ 291.758254][ T9] usb 1-1: config 0 descriptor?? [ 291.774208][ T5840] usb 3-1: config 0 descriptor?? [ 291.812168][ T5840] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 291.858458][ T5840] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 292.011523][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'. [ 292.052802][ T9074] vlan2: entered promiscuous mode [ 292.130908][ T5987] usb 1-1: USB disconnect, device number 34 [ 292.303069][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.303823][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.388512][ T5840] em28xx 3-1:0.0: chip ID is em2874 [ 292.801000][ T30] audit: type=1326 audit(1759219611.930:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5238eec9 code=0x7ffc0000 [ 292.823188][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.879830][ T30] audit: type=1326 audit(1759219611.930:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5238eec9 code=0x7ffc0000 [ 292.902079][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.037801][ T5840] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 293.050145][ T5840] em28xx 3-1:0.0: board has no eeprom [ 293.104773][ T30] audit: type=1326 audit(1759219611.930:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9112 comm="syz.1.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc5238eec9 code=0x7ffc0000 [ 293.392962][ T5987] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 293.544733][ T5987] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.556642][ T5987] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 293.594507][ T5987] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 293.630353][ T5987] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.639995][ T5987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.650799][ T5987] usb 1-1: Product: syz [ 293.655482][ T5987] usb 1-1: Manufacturer: syz [ 293.660243][ T5987] usb 1-1: SerialNumber: syz [ 294.196294][ T9077] em28xx 3-1:0.0: reading from i2c device at 0x8 failed (error=-5) [ 294.252816][ T5840] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 294.260674][ T5840] em28xx 3-1:0.0: dvb set to bulk mode. [ 294.339700][ T9] em28xx 3-1:0.0: Binding DVB extension [ 294.443203][ T5840] usb 3-1: USB disconnect, device number 33 [ 294.477442][ T5840] em28xx 3-1:0.0: Disconnecting em28xx [ 294.550533][ T9] em28xx 3-1:0.0: Registering input extension [ 294.650609][ T9] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 294.672860][ T9] Registered IR keymap rc-empty [ 294.689049][ T9] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 294.744430][ T9] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 294.832187][ T9] em28xx 3-1:0.0: Input extension successfully initialized [ 294.848131][ T5840] em28xx 3-1:0.0: Closing input extension [ 294.916344][ T5911] net_ratelimit: 12 callbacks suppressed [ 294.916360][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.968587][ T5840] em28xx 3-1:0.0: Freeing device [ 294.970386][ T9155] netlink: 156 bytes leftover after parsing attributes in process `syz.3.952'. [ 294.974346][ T37] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 295.044934][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.065295][ T979] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 295.072988][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.242760][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 295.255559][ T979] usb 2-1: config 0 has an invalid interface number: 232 but max is 0 [ 295.277052][ T979] usb 2-1: config 0 has no interface number 0 [ 295.299523][ T979] usb 2-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 295.316624][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.340969][ T9167] netlink: 68 bytes leftover after parsing attributes in process `syz.2.957'. [ 295.341944][ T979] usb 2-1: Product: syz [ 295.358432][ T979] usb 2-1: Manufacturer: syz [ 295.363901][ T979] usb 2-1: SerialNumber: syz [ 295.390146][ T979] usb 2-1: config 0 descriptor?? [ 295.472856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.643518][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'. [ 295.653971][ T9179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.690981][ T9150] vlan2: entered promiscuous mode [ 295.790642][ T979] usb 2-1: USB disconnect, device number 28 [ 295.803334][ T5840] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 295.953009][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.972619][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 295.979601][ T5840] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 296.000446][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.042155][ T5840] pvrusb2: Hardware description: Terratec Grabster AV400 [ 296.095439][ T5840] pvrusb2: ********** [ 296.099542][ T5840] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 296.112248][ T5840] pvrusb2: Important functionality might not be entirely working. [ 296.122079][ T5840] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 296.145834][ T5840] pvrusb2: ********** [ 296.171283][ T5987] cdc_ncm 1-1:1.0: bind() failure [ 296.201749][ T5987] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 296.233961][ T5987] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 296.426599][ T9181] netlink: 88 bytes leftover after parsing attributes in process `syz.3.962'. [ 296.443075][ T2343] pvrusb2: Invalid write control endpoint [ 296.457385][ T5987] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 296.492626][ T5840] usb 3-1: USB disconnect, device number 34 [ 296.522701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.581166][ T5987] usb 1-1: USB disconnect, device number 35 [ 296.860450][ T2343] pvrusb2: Invalid write control endpoint [ 296.889530][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 296.983049][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 296.992786][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.029331][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 297.084011][ T2343] pvrusb2: Device being rendered inoperable [ 297.100349][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 297.118543][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 297.130910][ T2343] pvrusb2: Attached sub-driver cx25840 [ 297.137328][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 297.153847][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.162488][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.180354][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.182838][ T5987] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 297.196424][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.206496][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 297.281662][ T9204] fuse: Bad value for 'group_id' [ 297.289421][ T9204] fuse: Bad value for 'group_id' [ 297.304972][ T9204] netlink: 'syz.2.971': attribute type 6 has an invalid length. [ 297.384831][ T5987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.478934][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 297.503977][ T5987] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.513470][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.552836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.607613][ T5987] usb 2-1: config 0 descriptor?? [ 297.646603][ T5987] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 297.825599][ T5840] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 297.998209][ T979] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 298.080114][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 298.089423][ T5840] usb 3-1: config 0 has an invalid interface number: 184 but max is 11 [ 298.099021][ T5840] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 12 [ 298.111162][ T5840] usb 3-1: config 0 has no interface number 0 [ 298.162628][ T979] usb 1-1: Using ep0 maxpacket: 16 [ 298.169843][ T979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.180825][ T5840] usb 3-1: config 0 interface 184 has no altsetting 0 [ 298.202266][ T979] usb 1-1: config 0 has no interfaces? [ 298.212022][ T5840] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 298.239612][ T979] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 298.255370][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.268534][ T979] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 298.294659][ T5840] usb 3-1: Product: syz [ 298.299760][ T979] usb 1-1: Manufacturer: syz [ 298.307307][ T5840] usb 3-1: Manufacturer: syz [ 298.354402][ T5840] usb 3-1: SerialNumber: syz [ 298.369212][ T979] usb 1-1: config 0 descriptor?? [ 298.384030][ T5840] usb 3-1: config 0 descriptor?? [ 298.392479][ T5840] smsc75xx v1.0.0 [ 298.412933][ T5903] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 298.562656][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 298.570465][ T9223] netlink: 'syz.1.967': attribute type 4 has an invalid length. [ 298.613668][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.639134][ T9223] netlink: 'syz.1.967': attribute type 4 has an invalid length. [ 298.665784][ T5903] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 298.703616][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.734743][ T5903] usb 4-1: config 0 descriptor?? [ 299.012505][ T5840] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 299.028017][ T5840] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 299.080734][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 299.190217][ T5903] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 299.680990][ T5903] usb 4-1: USB disconnect, device number 30 [ 299.906408][ T5911] usb 2-1: USB disconnect, device number 29 [ 300.095512][ T9233] netlink: 'syz.1.976': attribute type 1 has an invalid length. [ 300.132487][ T5911] net_ratelimit: 6 callbacks suppressed [ 300.132499][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.275424][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.453826][ T979] usb 1-1: USB disconnect, device number 36 [ 300.531419][ T9240] FAULT_INJECTION: forcing a failure. [ 300.531419][ T9240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.561661][ T9233] bond4: entered promiscuous mode [ 300.568312][ T9233] bond4: entered allmulticast mode [ 300.595542][ T9233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.602663][ T9240] CPU: 1 UID: 0 PID: 9240 Comm: syz.0.978 Not tainted syzkaller #0 PREEMPT(full) [ 300.602683][ T9240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 300.602693][ T9240] Call Trace: [ 300.602701][ T9240] [ 300.602707][ T9240] dump_stack_lvl+0x189/0x250 [ 300.602732][ T9240] ? __pfx____ratelimit+0x10/0x10 [ 300.602751][ T9240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.602770][ T9240] ? __pfx__printk+0x10/0x10 [ 300.602785][ T9240] ? __might_fault+0xb0/0x130 [ 300.602814][ T9240] should_fail_ex+0x414/0x560 [ 300.602842][ T9240] _copy_from_user+0x2d/0xb0 [ 300.602872][ T9240] ___sys_sendmsg+0x158/0x2a0 [ 300.602894][ T9240] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.602947][ T9240] ? __fget_files+0x2a/0x420 [ 300.602962][ T9240] ? __fget_files+0x3a0/0x420 [ 300.602985][ T9240] __sys_sendmmsg+0x227/0x430 [ 300.603007][ T9240] ? __pfx___sys_sendmmsg+0x10/0x10 [ 300.603025][ T9240] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 300.603063][ T9240] ? ksys_write+0x22a/0x250 [ 300.603086][ T9240] ? __pfx_ksys_write+0x10/0x10 [ 300.603104][ T9240] ? rcu_is_watching+0x15/0xb0 [ 300.603127][ T9240] __x64_sys_sendmmsg+0xa0/0xc0 [ 300.603150][ T9240] do_syscall_64+0xfa/0x3b0 [ 300.603168][ T9240] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.603184][ T9240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.603206][ T9240] ? clear_bhb_loop+0x60/0xb0 [ 300.603225][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.603240][ T9240] RIP: 0033:0x7fead078eec9 [ 300.603254][ T9240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.603268][ T9240] RSP: 002b:00007fead16ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 300.603286][ T9240] RAX: ffffffffffffffda RBX: 00007fead09e5fa0 RCX: 00007fead078eec9 [ 300.603299][ T9240] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 300.603308][ T9240] RBP: 00007fead16ea090 R08: 0000000000000000 R09: 0000000000000000 [ 300.603318][ T9240] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 300.603328][ T9240] R13: 00007fead09e6038 R14: 00007fead09e5fa0 R15: 00007fead0b0fa28 [ 300.603354][ T9240] [ 300.673033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.890836][ T9236] bridge1: entered promiscuous mode [ 300.911144][ T9236] bridge1: entered allmulticast mode [ 300.934944][ T5840] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 300.946541][ T5840] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 300.953421][ T7630] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 300.956594][ T5840] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 301.015867][ T9236] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 301.065727][ T5840] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 301.109611][ T5840] usb 3-1: USB disconnect, device number 35 [ 301.133156][ T7630] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 301.162378][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.712735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.761554][ T9260] syzkaller0: entered promiscuous mode [ 301.767296][ T9260] syzkaller0: entered allmulticast mode [ 302.156545][ T9268] netlink: 64 bytes leftover after parsing attributes in process `syz.0.983'. [ 302.165667][ T9268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.983'. [ 302.273253][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.284704][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.301244][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.442851][ T5911] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 304.520964][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.990'. [ 304.539697][ T9294] delete_channel: no stack [ 304.902801][ T5911] usb 1-1: device descriptor read/64, error -71 [ 305.241653][ T5911] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 305.257121][ T5840] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 305.392884][ T5924] net_ratelimit: 8 callbacks suppressed [ 305.392904][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.406655][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.424705][ T5911] usb 1-1: device descriptor read/64, error -71 [ 305.426479][ T5840] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 305.457767][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 305.471603][ T5840] usb 4-1: config 0 has no interface number 0 [ 305.501198][ T5840] usb 4-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 305.534504][ T5911] usb usb1-port1: attempt power cycle [ 305.550264][ T5840] usb 4-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 305.563089][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 305.563109][ T30] audit: type=1326 audit(1759219624.670:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.4.988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd58eec9 code=0x0 [ 305.564149][ T5840] usb 4-1: config 0 interface 153 has no altsetting 0 [ 305.618197][ T5840] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 305.628299][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.638064][ T5840] usb 4-1: Product: syz [ 305.649791][ T5840] usb 4-1: Manufacturer: syz [ 305.656410][ T5840] usb 4-1: SerialNumber: syz [ 305.676292][ T5840] usb 4-1: config 0 descriptor?? [ 305.872957][ T5911] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 305.874683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.895296][ T5911] usb 1-1: device descriptor read/8, error -71 [ 305.914091][ T5840] hub 4-1:0.153: bad descriptor, ignoring hub [ 305.921282][ T5840] hub 4-1:0.153: probe with driver hub failed with error -5 [ 305.942104][ T5840] sierra 4-1:0.153: Sierra USB modem converter detected [ 306.005909][ T5840] usb 4-1: USB disconnect, device number 31 [ 306.013486][ T5840] sierra 4-1:0.153: device disconnected [ 306.155484][ T5911] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 306.183458][ T5911] usb 1-1: device descriptor read/8, error -71 [ 306.294598][ T5911] usb usb1-port1: unable to enumerate USB device [ 306.439904][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.913120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.921877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.478509][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.545014][ T9316] fuse: Unknown parameter '' [ 307.607036][ T9317] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 307.623248][ T9301] dummy0: entered promiscuous mode [ 307.642103][ T9301] macsec1: entered promiscuous mode [ 307.682917][ T9301] macsec1: entered allmulticast mode [ 307.730777][ T9301] dummy0: entered allmulticast mode [ 307.807560][ T9301] dummy0: left allmulticast mode [ 307.812967][ T9301] dummy0: left promiscuous mode [ 307.858883][ T9320] FAULT_INJECTION: forcing a failure. [ 307.858883][ T9320] name failslab, interval 1, probability 0, space 0, times 0 [ 307.895458][ T9320] CPU: 0 UID: 0 PID: 9320 Comm: syz.2.996 Not tainted syzkaller #0 PREEMPT(full) [ 307.895483][ T9320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.895506][ T9320] Call Trace: [ 307.895513][ T9320] [ 307.895520][ T9320] dump_stack_lvl+0x189/0x250 [ 307.895546][ T9320] ? __pfx____ratelimit+0x10/0x10 [ 307.895565][ T9320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.895585][ T9320] ? __pfx__printk+0x10/0x10 [ 307.895607][ T9320] ? __pfx___might_resched+0x10/0x10 [ 307.895629][ T9320] should_fail_ex+0x414/0x560 [ 307.895659][ T9320] should_failslab+0xa8/0x100 [ 307.895684][ T9320] kmem_cache_alloc_noprof+0x73/0x3c0 [ 307.895706][ T9320] ? ptlock_alloc+0x20/0x70 [ 307.895732][ T9320] ptlock_alloc+0x20/0x70 [ 307.895753][ T9320] pte_alloc_one+0x7d/0x170 [ 307.895775][ T9320] __pte_alloc+0x25/0x1a0 [ 307.895796][ T9320] __handle_mm_fault+0x49b3/0x5440 [ 307.895834][ T9320] ? __pfx___handle_mm_fault+0x10/0x10 [ 307.895877][ T9320] ? __pfx___might_resched+0x10/0x10 [ 307.895898][ T9320] handle_mm_fault+0x40a/0x8e0 [ 307.895930][ T9320] __get_user_pages+0x1699/0x2ce0 [ 307.895949][ T9320] ? __lock_acquire+0xab9/0xd20 [ 307.895996][ T9320] __gup_longterm_locked+0xde9/0x1660 [ 307.896029][ T9320] ? sanity_check_pinned_pages+0x1241/0x1300 [ 307.896053][ T9320] ? gup_fast_fallback+0x195f/0x2010 [ 307.896077][ T9320] gup_fast_fallback+0x1e6a/0x2010 [ 307.896131][ T9320] ? __pfx_gup_fast_fallback+0x10/0x10 [ 307.896153][ T9320] ? __local_bh_enable_ip+0x12d/0x1c0 [ 307.896171][ T9320] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 307.896195][ T9320] ? pin_user_pages_fast+0x4d/0xb0 [ 307.896219][ T9320] iov_iter_extract_pages+0x35a/0x5e0 [ 307.896250][ T9320] extract_iter_to_sg+0xe46/0x24e0 [ 307.896283][ T9320] ? sanity_check_pinned_pages+0x123a/0x1300 [ 307.896308][ T9320] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 307.896328][ T9320] ? unpin_user_page+0xc9/0x1d0 [ 307.896345][ T9320] ? __pfx_unpin_user_page+0x10/0x10 [ 307.896376][ T9320] ? __asan_memset+0x22/0x50 [ 307.896397][ T9320] hash_sendmsg+0x4f4/0x11d0 [ 307.896441][ T9320] ? __pfx_hash_sendmsg+0x10/0x10 [ 307.896464][ T9320] __sock_sendmsg+0x21c/0x270 [ 307.896485][ T9320] ____sys_sendmsg+0x52d/0x830 [ 307.896511][ T9320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.896542][ T9320] ? import_iovec+0x74/0xa0 [ 307.896566][ T9320] ___sys_sendmsg+0x21f/0x2a0 [ 307.896590][ T9320] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.896648][ T9320] ? __fget_files+0x2a/0x420 [ 307.896663][ T9320] ? __fget_files+0x3a0/0x420 [ 307.896690][ T9320] __sys_sendmmsg+0x227/0x430 [ 307.896717][ T9320] ? __pfx___sys_sendmmsg+0x10/0x10 [ 307.896736][ T9320] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 307.896782][ T9320] ? ksys_write+0x22a/0x250 [ 307.896806][ T9320] ? __pfx_ksys_write+0x10/0x10 [ 307.896825][ T9320] ? rcu_is_watching+0x15/0xb0 [ 307.896850][ T9320] __x64_sys_sendmmsg+0xa0/0xc0 [ 307.896873][ T9320] do_syscall_64+0xfa/0x3b0 [ 307.896891][ T9320] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.896908][ T9320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.896924][ T9320] ? clear_bhb_loop+0x60/0xb0 [ 307.896944][ T9320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.896960][ T9320] RIP: 0033:0x7efcef38eec9 [ 307.896975][ T9320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.896989][ T9320] RSP: 002b:00007efced5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 307.897007][ T9320] RAX: ffffffffffffffda RBX: 00007efcef5e5fa0 RCX: 00007efcef38eec9 [ 307.897020][ T9320] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 307.897031][ T9320] RBP: 00007efced5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 307.897041][ T9320] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 307.897052][ T9320] R13: 00007efcef5e6038 R14: 00007efcef5e5fa0 R15: 00007efcef70fa28 [ 307.897080][ T9320] [ 308.278526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.512749][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.560004][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.814714][ T9342] netlink: 64 bytes leftover after parsing attributes in process `syz.1.997'. [ 308.825178][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.997'. [ 308.943958][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 309.365285][ T9344] fuse: Bad value for 'fd' [ 309.475802][ T9346] netlink: 'syz.0.1003': attribute type 1 has an invalid length. [ 309.492757][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 309.535415][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.545757][ T24] usb 4-1: config 0 has no interface number 0 [ 309.554560][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 309.592627][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.600840][ T24] usb 4-1: Product: syz [ 309.612036][ T24] usb 4-1: Manufacturer: syz [ 309.617826][ T24] usb 4-1: SerialNumber: syz [ 309.666353][ T9346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 309.715938][ T24] usb 4-1: config 0 descriptor?? [ 309.776170][ T24] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 309.825257][ T24] usb 4-1: selecting invalid altsetting 1 [ 309.841365][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 309.924410][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 309.985879][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 310.040001][ T24] usb 4-1: media controller created [ 310.121795][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 310.274824][ T24] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 310.329099][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 310.358718][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 310.405779][ T24] usb 4-1: USB disconnect, device number 32 [ 310.698135][ T5987] net_ratelimit: 5 callbacks suppressed [ 310.698155][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.812012][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1011'. [ 310.824281][ T9367] delete_channel: no stack [ 310.883157][ T5911] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 311.233124][ T9379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1013'. [ 311.324923][ T5911] usb 1-1: config 0 has an invalid interface number: 207 but max is 0 [ 311.335910][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.347451][ T5911] usb 1-1: config 0 has no interface number 0 [ 311.394083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.449007][ T5911] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 311.460985][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.469271][ T5911] usb 1-1: Product: syz [ 311.474304][ T5911] usb 1-1: Manufacturer: syz [ 311.478909][ T5911] usb 1-1: SerialNumber: syz [ 311.487568][ T5911] usb 1-1: config 0 descriptor?? [ 311.513748][ T5911] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22 [ 311.517845][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 311.559225][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.596076][ T9384] delete_channel: no stack [ 311.746282][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.912676][ T9363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1008'. [ 312.035172][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.045083][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.054099][ T9] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 312.192642][ T9] usb 2-1: device descriptor read/64, error -71 [ 312.432851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.443524][ T9] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 312.595236][ T9] usb 2-1: device descriptor read/64, error -71 [ 312.703340][ T9] usb usb2-port1: attempt power cycle [ 312.753098][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.072887][ T9397] PM: Enabling pm_trace changes system date and time during resume. [ 313.072887][ T9397] PM: Correct system time has to be restored manually after resume. [ 313.162999][ T9] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 313.276356][ T9] usb 2-1: device descriptor read/8, error -71 [ 313.473014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.532717][ T9] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 313.634795][ T9406] netlink: 'syz.0.1023': attribute type 6 has an invalid length. [ 313.642170][ T5924] usb 1-1: USB disconnect, device number 41 [ 313.657631][ T9406] netlink: 'syz.0.1023': attribute type 7 has an invalid length. [ 313.675200][ T9406] netlink: 'syz.0.1023': attribute type 8 has an invalid length. [ 313.679334][ T9] usb 2-1: device descriptor read/8, error -71 [ 313.804123][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.817578][ T9] usb usb2-port1: unable to enumerate USB device [ 314.116544][ T9420] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1026'. [ 314.126234][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1026'. [ 315.080327][ T9431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.089305][ T9431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.875780][ T5911] net_ratelimit: 6 callbacks suppressed [ 315.875794][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.592674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.917752][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.932772][ T5924] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 317.113402][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 317.143062][ T5924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 317.159489][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.166051][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.173986][ T5924] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 317.192636][ T5911] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 317.200315][ T5924] usb 3-1: can't read configurations, error -71 [ 317.348025][ T5911] usb 4-1: device descriptor read/64, error -71 [ 317.592800][ T5911] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 317.632870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.732678][ T5911] usb 4-1: device descriptor read/64, error -71 [ 317.843169][ T5911] usb usb4-port1: attempt power cycle [ 317.882867][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.960814][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.054255][ T9482] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1043'. [ 318.063557][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1043'. [ 318.267107][ T5911] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 318.312442][ T5911] usb 4-1: device descriptor read/8, error -71 [ 318.672669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.683296][ T9487] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1045'. [ 318.815208][ T5911] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 318.910182][ T5911] usb 4-1: device descriptor read/8, error -71 [ 319.001942][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.038051][ T5911] usb usb4-port1: unable to enumerate USB device [ 319.723196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.036417][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.572303][ T5924] net_ratelimit: 1 callbacks suppressed [ 321.572323][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.586042][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.621545][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.790757][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 321.792969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.818860][ T9524] delete_channel: no stack [ 321.998037][ T9522] PM: Enabling pm_trace changes system date and time during resume. [ 321.998037][ T9522] PM: Correct system time has to be restored manually after resume. [ 322.111795][ T9528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.114812][ T9532] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1061'. [ 322.449592][ T9539] macsec1: entered promiscuous mode [ 322.455005][ T9539] bridge0: entered promiscuous mode [ 322.471223][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 322.557210][ T9546] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 322.605090][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.760574][ T9546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.804519][ T9551] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1064'. [ 322.832771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.645517][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.872881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.033222][ T5911] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 324.108804][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.123979][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.264708][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 324.286682][ T5911] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 324.312602][ T5911] usb 4-1: config 0 has no interface number 0 [ 324.347110][ T5911] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 324.568354][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.592848][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.640903][ T5911] usb 4-1: Product: syz [ 324.645354][ T5911] usb 4-1: Manufacturer: syz [ 324.649970][ T5911] usb 4-1: SerialNumber: syz [ 324.665221][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1069'. [ 324.697371][ T5911] usb 4-1: config 0 descriptor?? [ 324.713599][ T9564] delete_channel: no stack [ 324.724693][ T5911] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 324.759006][ T5911] usb 4-1: selecting invalid altsetting 1 [ 324.772825][ T5911] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 324.949431][ T5911] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 324.960475][ T5911] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 325.008601][ T5911] usb 4-1: media controller created [ 325.108872][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.156105][ T5911] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 325.166998][ T5911] zl10353_read_register: readreg error (reg=127, ret==-71) [ 325.183121][ T5911] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 325.343359][ T5911] usb 4-1: USB disconnect, device number 37 [ 325.553619][ T9579] ptrace attach of "./syz-executor exec"[5856] was attempted by "./syz-executor exec"[9579] [ 325.682768][ T9584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.699742][ T9584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.902735][ T5911] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 326.054077][ T5903] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 326.074320][ T9590] PM: Enabling pm_trace changes system date and time during resume. [ 326.074320][ T9590] PM: Correct system time has to be restored manually after resume. [ 326.082657][ T5911] usb 4-1: config 8 has an invalid interface number: 101 but max is 0 [ 326.109698][ T5911] usb 4-1: config 8 has no interface number 0 [ 326.120047][ T5911] usb 4-1: config 8 interface 101 has no altsetting 0 [ 326.130491][ T5911] usb 4-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 326.141885][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.216361][ T5903] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 326.226432][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.237958][ T9592] netlink: 'syz.0.1078': attribute type 2 has an invalid length. [ 326.254873][ T5903] usb 2-1: config 0 descriptor?? [ 326.270981][ T5903] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 326.432827][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.444278][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.578881][ T9600] program syz.1.1076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.624654][ T9588] bond4: (slave bridge1): Removing an active aggregator [ 326.645774][ T36] net_ratelimit: 4 callbacks suppressed [ 326.645792][ T36] bond4: Warning: Found an uninitialized port [ 326.692475][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'. [ 326.720110][ T9588] bond4: (slave bridge1): Releasing backup interface [ 326.769560][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.823498][ T9588] bridge1: left promiscuous mode [ 326.843610][ T9588] bridge1: left allmulticast mode [ 326.885427][ T5911] usb 4-1: string descriptor 0 read error: -71 [ 326.925563][ T5911] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 326.972850][ T5911] gspca_sunplus: reg_w_riv err -71 [ 327.002694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.003258][ T5911] sunplus 4-1:8.101: probe with driver sunplus failed with error -71 [ 327.101409][ T5911] usb 4-1: USB disconnect, device number 38 [ 327.403248][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.411938][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.422226][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.458076][ T5903] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 327.520472][ T5903] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 327.562153][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 327.610873][ T9611] delete_channel: no stack [ 327.718122][ T9610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.791293][ T9610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.819882][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.942729][ T979] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 327.957700][ T5840] usb 2-1: USB disconnect, device number 34 [ 328.032858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.163306][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 328.205128][ T979] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 328.327973][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.389536][ T979] pvrusb2: Hardware description: Terratec Grabster AV400 [ 328.412428][ T979] pvrusb2: ********** [ 328.428042][ T979] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 328.492737][ T979] pvrusb2: Important functionality might not be entirely working. [ 328.550912][ T979] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 328.589966][ T979] pvrusb2: ********** [ 328.637020][ T2343] pvrusb2: Invalid write control endpoint [ 328.912061][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.968705][ T9610] pvrusb2: Invalid write control endpoint [ 328.983037][ T5903] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 329.024700][ T2343] pvrusb2: Invalid write control endpoint [ 329.030581][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 329.043545][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 329.051554][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 329.070660][ T2343] pvrusb2: Device being rendered inoperable [ 329.077010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.092248][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 329.102230][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 329.171674][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 329.188243][ T5903] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 329.196687][ T5903] usb 2-1: config 1 has no interface number 0 [ 329.209404][ T5903] usb 2-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.246006][ T5903] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.279194][ T5903] usb 2-1: config 1 interface 236 has no altsetting 0 [ 329.368681][ T5903] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 329.371475][ T2343] pvrusb2: Attached sub-driver cx25840 [ 329.383227][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 329.390820][ T5903] usb 2-1: config 1 has no interface number 0 [ 329.393366][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 329.473244][ T5903] usb 2-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.506029][ T5903] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.577843][ T5903] usb 2-1: config 1 interface 236 has no altsetting 0 [ 329.664839][ T5903] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 329.681514][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.725199][ T5903] usb 2-1: Product: syz [ 329.741513][ T5903] usb 2-1: Manufacturer: syz [ 329.761717][ T5903] usb 2-1: SerialNumber: syz [ 330.130838][ T5903] ti_usb_3410_5052 2-1:1.236: TI USB 5052 2 port adapter converter detected [ 330.435659][ T9642] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1092'. [ 330.528197][ T979] usb 4-1: USB disconnect, device number 39 [ 330.562442][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.602141][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.842189][ T9649] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1095'. [ 331.149224][ T9657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.252988][ T9657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.591204][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 332.192968][ C0] net_ratelimit: 6 callbacks suppressed [ 332.192983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.206889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.220859][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 332.261455][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 332.270831][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.289834][ T24] usb 4-1: Product: syz [ 332.325481][ T24] usb 4-1: Manufacturer: syz [ 332.336936][ T24] usb 4-1: SerialNumber: syz [ 332.417146][ T24] usb 4-1: config 0 descriptor?? [ 332.477493][ T44] usb 2-1: USB disconnect, device number 35 [ 333.161625][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.169929][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.242652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.297142][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.473500][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.812686][ T5924] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 333.972658][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 334.021155][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.099420][ T5903] usb 4-1: USB disconnect, device number 40 [ 334.192717][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.250297][ T5924] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 334.272931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.378246][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.444460][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.754082][ T5924] usb 1-1: config 0 descriptor?? [ 334.767085][ T5924] hub 1-1:0.0: USB hub found [ 334.824669][ T9698] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1106'. [ 334.837165][ T9698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1106'. [ 335.242707][ T5924] hub 1-1:0.0: 1 port detected [ 335.312705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.378668][ T9686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.379851][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1104'. [ 335.392740][ T9686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.650872][ T5924] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 335.712782][ T5924] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 335.783049][ T5924] usbhid 1-1:0.0: can't add hid device: -71 [ 335.832954][ T5924] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 335.934195][ T5924] usb 1-1: USB disconnect, device number 42 [ 335.946971][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1110'. [ 335.969782][ T9713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1111'. [ 336.027629][ T9711] delete_channel: no stack [ 336.375072][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.385447][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.859811][ T9736] program syz.1.1116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.392716][ C0] net_ratelimit: 4 callbacks suppressed [ 337.392737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.505553][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.531915][ T9741] ipvlan2: entered promiscuous mode [ 337.662693][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.756341][ T9742] vlan2: entered promiscuous mode [ 337.767567][ T5926] usb 5-1: [UEAGLE-ATM] firmware is not available [ 337.785939][ T9742] macvlan1: entered promiscuous mode [ 338.442792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.497624][ T9757] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 338.522775][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.554426][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.641485][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1123'. [ 338.714073][ T9758] delete_channel: no stack [ 338.765676][ T9759] bond5: entered promiscuous mode [ 338.781058][ T9759] bond5: entered allmulticast mode [ 338.825589][ T9759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 338.847163][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 338.913126][ T7631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.245866][ T9760] bridge2: entered promiscuous mode [ 339.257571][ T9760] bridge2: entered allmulticast mode [ 339.267619][ T9760] bond5: (slave bridge2): Enslaving as a backup interface with an up link [ 339.303160][ T9775] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1125'. [ 339.342950][ T7631] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 339.472730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.510141][ T9777] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 339.553252][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.646805][ T9777] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.833859][ T9785] syzkaller0: entered promiscuous mode [ 339.839905][ T9785] syzkaller0: entered allmulticast mode [ 341.043953][ T44] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 341.245581][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 341.269935][ T44] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 341.280364][ T44] usb 1-1: config 179 has no interface number 0 [ 341.287838][ T44] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 341.305975][ T24] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 341.317816][ T44] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 341.332962][ T44] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 341.354588][ T44] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 341.366432][ T44] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 341.381665][ T44] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 341.410855][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.431966][ T9796] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 341.448310][ T44] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 341.467250][ T24] usb 2-1: device descriptor read/64, error -71 [ 341.503074][ T979] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 341.687237][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 341.695503][ T979] usb 3-1: config 0 has an invalid interface number: 232 but max is 0 [ 341.705656][ T979] usb 3-1: config 0 has no interface number 0 [ 341.712997][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 341.726414][ T979] usb 3-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 341.739606][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.749743][ T979] usb 3-1: Product: syz [ 341.754398][ T979] usb 3-1: Manufacturer: syz [ 341.760722][ T979] usb 3-1: SerialNumber: syz [ 341.778057][ T979] usb 3-1: config 0 descriptor?? [ 341.842963][ T24] usb 2-1: device descriptor read/64, error -71 [ 341.956994][ T24] usb usb2-port1: attempt power cycle [ 342.000579][ T9802] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 342.009501][ T9802] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 342.039330][ T9802] vhci_hcd vhci_hcd.0: Device attached [ 342.060347][ T9802] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.081997][ T9802] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(21) [ 342.090238][ T9802] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 342.102671][ T9802] vhci_hcd vhci_hcd.0: Device attached [ 342.112338][ T9802] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(23) [ 342.121560][ T9802] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 342.144415][ T9802] vhci_hcd vhci_hcd.0: Device attached [ 342.201041][ T9809] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(25) [ 342.208922][ T9809] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 342.219532][ T44] vhci_hcd: vhci_device speed not set [ 342.219821][ T9802] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.292851][ T44] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 342.302407][ T9802] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.305613][ T24] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 342.338170][ T9809] vhci_hcd vhci_hcd.0: Device attached [ 342.405248][ T9803] vhci_hcd: connection reset by peer [ 342.422602][ T9805] vhci_hcd: connection closed [ 342.422836][ T9807] vhci_hcd: connection closed [ 342.432753][ T24] usb 2-1: device descriptor read/8, error -71 [ 342.458931][ T61] vhci_hcd: stop threads [ 342.484894][ T9810] vhci_hcd: connection closed [ 342.487200][ T61] vhci_hcd: release socket [ 342.521455][ T61] vhci_hcd: disconnect device [ 342.539512][ T61] vhci_hcd: stop threads [ 342.559815][ T61] vhci_hcd: release socket [ 342.565403][ T61] vhci_hcd: disconnect device [ 342.567449][ T979] usb 3-1: USB disconnect, device number 39 [ 342.572399][ T61] vhci_hcd: stop threads [ 342.592887][ C0] net_ratelimit: 6 callbacks suppressed [ 342.592908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.630235][ T61] vhci_hcd: release socket [ 342.637467][ T61] vhci_hcd: disconnect device [ 342.648266][ T61] vhci_hcd: stop threads [ 342.654658][ T61] vhci_hcd: release socket [ 342.670899][ T61] vhci_hcd: disconnect device [ 342.679343][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.759553][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 342.796950][ T24] usb 2-1: device descriptor read/8, error -71 [ 342.916437][ T24] usb usb2-port1: unable to enumerate USB device [ 343.133555][ T24] usb 1-1: USB disconnect, device number 43 [ 343.307088][ T9820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.632687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.716614][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.810315][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.042111][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.247629][ T9827] fuse: Bad value for 'fd' [ 344.652909][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 344.673189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.687688][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.759606][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.937662][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 344.962169][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 344.971937][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.010011][ T24] usb 2-1: Product: syz [ 345.031696][ T24] usb 2-1: Manufacturer: syz [ 345.057204][ T24] usb 2-1: SerialNumber: syz [ 345.107371][ T24] usb 2-1: config 0 descriptor?? [ 345.613785][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'. [ 345.668347][ T9830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.684097][ T9830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.712691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.129342][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1148'. [ 347.552947][ T44] vhci_hcd: vhci_device speed not set [ 347.577414][ T5924] usb 2-1: USB disconnect, device number 40 [ 347.792690][ C0] net_ratelimit: 6 callbacks suppressed [ 347.792704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.961340][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.012667][ T5924] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 348.122713][ T5840] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 348.172741][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 348.265887][ T9881] syzkaller0: entered promiscuous mode [ 348.273457][ T5924] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 348.292912][ T9881] syzkaller0: entered allmulticast mode [ 348.323043][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 348.338660][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.349140][ T5840] usb 3-1: config 0 has an invalid interface number: 232 but max is 0 [ 348.406486][ T5840] usb 3-1: config 0 has no interface number 0 [ 348.426307][ T5924] usb 2-1: config 0 descriptor?? [ 348.463574][ T5840] usb 3-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 348.477681][ T5924] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 348.493967][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.506735][ T5840] usb 3-1: Product: syz [ 348.511014][ T5840] usb 3-1: Manufacturer: syz [ 348.516908][ T5840] usb 3-1: SerialNumber: syz [ 348.531934][ T5840] usb 3-1: config 0 descriptor?? [ 348.556264][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1154'. [ 348.778803][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'. [ 348.796442][ T9875] vlan2: entered promiscuous mode [ 348.832958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.875346][ T5924] gspca_sonixj: reg_r err -32 [ 348.880279][ T5924] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 349.002752][ T5926] usb 3-1: USB disconnect, device number 40 [ 349.038094][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.182826][ T5911] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 349.472683][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 349.480822][ T5911] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 349.502282][ T5911] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.555120][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.594226][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.752369][ T5911] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.798659][ T5911] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 349.804854][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.882852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.912698][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.914638][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.154122][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.213832][ T5911] usb 1-1: usb_control_msg returned -32 [ 350.229932][ T5911] usbtmc 1-1:16.0: can't read capabilities [ 350.438756][ T7631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.494051][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1158'. [ 350.912933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.233386][ T9888] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 351.499968][ T9913] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1161'. [ 351.512626][ T9914] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1161'. [ 351.761604][ T5926] usb 2-1: USB disconnect, device number 41 [ 352.681441][ T5930] usb 1-1: USB disconnect, device number 44 [ 352.995418][ C0] net_ratelimit: 3 callbacks suppressed [ 352.995433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.043722][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.313415][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.951296][ T9930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.993765][ T9930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.036252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.353929][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.932645][ T5924] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 355.072859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.162630][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 355.189221][ T5924] usb 2-1: config 0 has an invalid interface number: 232 but max is 0 [ 355.246703][ T5924] usb 2-1: config 0 has no interface number 0 [ 355.312889][ T5924] usb 2-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 355.360631][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.405475][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.439939][ T5924] usb 2-1: Product: syz [ 355.471495][ T5924] usb 2-1: Manufacturer: syz [ 355.530531][ T5924] usb 2-1: SerialNumber: syz [ 355.543692][ T5924] usb 2-1: config 0 descriptor?? [ 355.553261][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.567815][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.756779][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'. [ 356.112712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.738441][ T979] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 357.789283][ T9934] vlan2: entered promiscuous mode [ 357.898680][ T979] usb 3-1: Using ep0 maxpacket: 16 [ 358.093813][ T9956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.146679][ T9958] usb usb8: check_ctrlrecip: process 9958 (syz.2.1172) requesting ep 01 but needs 81 [ 358.156991][ T9958] usb usb8: usbfs: process 9958 (syz.2.1172) did not claim interface 0 before use [ 358.192724][ C0] net_ratelimit: 4 callbacks suppressed [ 358.192742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.200588][ T5911] usb 2-1: USB disconnect, device number 42 [ 358.227437][ T9956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.629458][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.156262][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.233008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.767367][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.912158][ T9980] netlink: 'syz.3.1178': attribute type 13 has an invalid length. [ 360.012702][ T9980] netlink: 'syz.3.1178': attribute type 17 has an invalid length. [ 360.272696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.385182][ T979] usb 3-1: unable to get BOS descriptor or descriptor too short [ 360.409681][ T979] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 360.441583][ T979] usb 3-1: can't read configurations, error -71 [ 360.838597][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.962350][ T9998] batadv0: entered promiscuous mode [ 360.999483][ T9994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.105433][ T9994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.185112][ T9994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.195023][ T9994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.205460][T10002] syzkaller0: entered promiscuous mode [ 361.211390][T10002] syzkaller0: entered allmulticast mode [ 361.312988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.323275][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.333485][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.972701][T10011] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1186'. [ 361.982824][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1186'. [ 363.392862][ C0] net_ratelimit: 4 callbacks suppressed [ 363.392882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.961434][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.432724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.882637][ T5924] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 364.997531][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.048760][ T5924] usb 2-1: New USB device found, idVendor=1e47, idProduct=0000, bcdDevice= 0.00 [ 365.058013][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.069247][ T5924] usb 2-1: config 0 descriptor?? [ 365.295985][ T5911] usb 2-1: USB disconnect, device number 43 [ 365.313324][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.472866][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.881518][T10051] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 365.928789][ T5924] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 366.040480][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.059261][T10051] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.082735][ T5924] usb 3-1: device descriptor read/64, error -71 [ 366.377416][ T5924] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 366.422917][ T44] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 366.522692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.545240][ T5924] usb 3-1: device descriptor read/64, error -71 [ 366.552650][ T44] usb 1-1: device descriptor read/64, error -71 [ 366.740779][ T5924] usb usb3-port1: attempt power cycle [ 366.794633][ T44] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 366.818301][T10077] dvmrp0: entered allmulticast mode [ 366.951727][ T44] usb 1-1: device descriptor read/64, error -71 [ 367.062997][ T44] usb usb1-port1: attempt power cycle [ 367.075539][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.084131][ T6327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.325419][T10086] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1207'. [ 367.334638][T10086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1207'. [ 367.362597][ T5924] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 367.424795][ T44] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 367.437325][ T5924] usb 3-1: device descriptor read/8, error -71 [ 367.870668][ T44] usb 1-1: device descriptor read/8, error -71 [ 368.066209][ T5924] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 368.114928][ T5924] usb 3-1: device descriptor read/8, error -71 [ 368.182642][ T44] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 368.228515][ T5924] usb usb3-port1: unable to enumerate USB device [ 368.232242][ T44] usb 1-1: device descriptor read/8, error -71 [ 368.396542][ T44] usb usb1-port1: unable to enumerate USB device [ 368.592688][ C0] net_ratelimit: 4 callbacks suppressed [ 368.592707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.813842][T10104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.942090][T10107] fuse: Bad value for 'fd' [ 369.605695][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.632813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.388198][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 370.672703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.701968][T10155] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1225'. [ 370.718103][T10155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1225'. [ 370.764264][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.392825][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.493608][ T979] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 371.595652][T10169] program syz.4.1229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.693418][T10169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.712316][T10169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.720670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.742779][ T979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.779517][ T979] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 371.809354][ T979] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.818712][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.821418][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.837201][ T979] usb 2-1: config 0 descriptor?? [ 371.846906][ T979] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 372.032829][ T44] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 372.202655][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 372.238454][ T44] usb 4-1: config 0 has an invalid interface number: 232 but max is 0 [ 372.320100][ T44] usb 4-1: config 0 has no interface number 0 [ 372.332200][ T44] usb 4-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 372.351527][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.370516][ T44] usb 4-1: Product: syz [ 372.380903][ T44] usb 4-1: Manufacturer: syz [ 372.456164][ T44] usb 4-1: SerialNumber: syz [ 372.472040][ T44] usb 4-1: config 0 descriptor?? [ 372.752756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.820662][T10180] netlink: 'syz.1.1228': attribute type 4 has an invalid length. [ 372.862016][T10180] netlink: 'syz.1.1228': attribute type 4 has an invalid length. [ 372.980077][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1230'. [ 373.019007][T10170] vlan2: entered promiscuous mode [ 373.189880][ T5926] usb 4-1: USB disconnect, device number 41 [ 373.793039][ C0] net_ratelimit: 3 callbacks suppressed [ 373.793061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.914709][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.211182][ T979] usb 2-1: USB disconnect, device number 44 [ 374.331542][T10192] batman_adv: batadv0: Adding interface: dummy0 [ 374.348854][T10192] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.397430][T10192] batman_adv: batadv0: Interface activated: dummy0 [ 374.447194][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.501029][T10195] batadv0: mtu less than device minimum [ 374.548835][T10195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.561593][T10195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.573529][T10195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.585548][T10195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.597558][T10195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.609568][T10195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.793862][ T5926] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 374.982682][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 375.062679][ T5926] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 375.070951][ T5926] usb 2-1: config 0 has no interface number 0 [ 375.100081][ T5926] usb 2-1: config 0 interface 237 has no altsetting 0 [ 375.132469][ T5926] usb 2-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 375.155282][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.173198][ T5926] usb 2-1: Product: syz [ 375.187901][ T5926] usb 2-1: Manufacturer: syz [ 375.200446][ T5926] usb 2-1: SerialNumber: syz [ 375.239410][ T5926] usb 2-1: config 0 descriptor?? [ 375.351604][ T5926] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 found [ 375.541944][ T5926] snd_usb_podhd 2-1:0.237: cannot get proper max packet size [ 375.551428][ T5926] snd_usb_podhd 2-1:0.237: Line 6 POD HD300 now disconnected [ 375.570010][ T5926] snd_usb_podhd 2-1:0.237: probe with driver snd_usb_podhd failed with error -22 [ 375.744705][ T5926] usb 2-1: USB disconnect, device number 45 [ 375.787251][T10216] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1241'. [ 375.870357][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1241'. [ 375.888412][T10218] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1242'. [ 376.522709][ T5930] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 376.766542][ T5930] usb 4-1: config 0 has an invalid interface number: 197 but max is 4 [ 376.778384][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.802597][ T5930] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 376.836785][ T5930] usb 4-1: config 0 has no interface number 0 [ 376.860140][ T5930] usb 4-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 376.890557][ T5930] usb 4-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 376.923114][ T5930] usb 4-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.043037][T10234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.077675][T10234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.114024][ T5930] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 377.145735][ T44] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 377.182856][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.193118][ T5930] usb 4-1: Product: syz [ 377.197323][ T5930] usb 4-1: Manufacturer: syz [ 377.201918][ T5930] usb 4-1: SerialNumber: syz [ 377.347522][ T5930] usb 4-1: config 0 descriptor?? [ 377.363997][T10218] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 377.518447][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 377.529710][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 377.549220][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 377.728253][ T44] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 377.737990][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.787073][ T44] usb 2-1: config 0 descriptor?? [ 377.819957][ T44] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 378.018858][T10231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.027448][ T979] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 378.028015][T10231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.048962][ T44] usb 2-1: USB disconnect, device number 46 [ 378.172856][ T979] usb 1-1: device descriptor read/64, error -71 [ 378.454449][ T979] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 378.598658][ T979] usb 1-1: device descriptor read/64, error -71 [ 378.606394][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.612920][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.713038][ T979] usb usb1-port1: attempt power cycle [ 378.770756][ T5924] usb 4-1: USB disconnect, device number 42 [ 378.992669][ C0] net_ratelimit: 24 callbacks suppressed [ 378.992692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.072775][ T979] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 379.093410][ T979] usb 1-1: device descriptor read/8, error -71 [ 379.586455][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.855199][ T979] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 379.893416][ T979] usb 1-1: device descriptor read/8, error -71 [ 380.011696][ T979] usb usb1-port1: unable to enumerate USB device [ 380.033373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.246302][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 380.273044][T10272] delete_channel: no stack [ 380.523773][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.600141][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.816136][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 380.862109][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 381.072656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.208625][T10287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.230265][T10287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.635732][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.112827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.180123][T10285] Set syz1 is full, maxelem 6117 reached [ 382.495376][ T5911] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 382.652737][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 382.671385][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 382.690005][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.729688][ T5911] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 382.746910][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.816694][ T5911] usb 2-1: Product: syz [ 382.828593][ T5911] usb 2-1: Manufacturer: syz [ 383.232856][ T5911] usb 2-1: SerialNumber: syz [ 383.284277][ T5911] usb 2-1: config 0 descriptor?? [ 383.375594][ T5911] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 383.452191][ T5911] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 383.978271][ T5911] em28xx 2-1:0.0: chip ID is em2874 [ 384.192846][ C0] net_ratelimit: 3 callbacks suppressed [ 384.192867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.353058][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.362297][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.587799][ T5911] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 384.607627][ T5911] em28xx 2-1:0.0: board has no eeprom [ 384.768557][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.777016][ T5911] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 384.794352][ T5911] em28xx 2-1:0.0: dvb set to bulk mode. [ 384.811091][ T24] em28xx 2-1:0.0: Binding DVB extension [ 384.847493][ T5911] usb 2-1: USB disconnect, device number 47 [ 384.888241][ T5911] em28xx 2-1:0.0: Disconnecting em28xx [ 384.950299][ T24] em28xx 2-1:0.0: Registering input extension [ 385.152597][ T24] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 385.159240][ T24] Registered IR keymap rc-empty [ 385.182122][ T24] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 385.232652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.260839][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.271746][ T24] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 385.289514][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.335712][ T24] em28xx 2-1:0.0: Input extension successfully initialized [ 385.381351][ T5911] em28xx 2-1:0.0: Closing input extension [ 385.401537][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.410975][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.637172][ T5911] em28xx 2-1:0.0: Freeing device [ 385.799772][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.920916][T10333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.930907][T10333] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1270'. [ 385.940162][T10333] openvswitch: netlink: Flow key attr not present in new flow. [ 386.076765][T10339] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1271'. [ 386.086824][T10339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1271'. [ 386.222952][ T5924] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 386.272823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.382987][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 386.403226][ T5926] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 386.471660][ T5924] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 386.488368][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.508033][ T5924] usb 3-1: config 0 descriptor?? [ 386.737921][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.747362][ T5926] usb 4-1: config 0 has no interfaces? [ 386.759534][ T5926] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 386.769542][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.840794][ T5926] usb 4-1: Product: syz [ 386.846530][ T5926] usb 4-1: Manufacturer: syz [ 386.851734][ T5926] usb 4-1: SerialNumber: syz [ 386.893588][ T5926] usb 4-1: config 0 descriptor?? [ 389.209028][ T5924] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 389.294096][ T5924] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 389.373913][ T5926] usb 4-1: USB disconnect, device number 43 [ 389.392679][ C0] net_ratelimit: 5 callbacks suppressed [ 389.392696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.425198][ T5924] asix 3-1:0.0: probe with driver asix failed with error -71 [ 389.525078][ T5924] usb 3-1: USB disconnect, device number 47 [ 389.812721][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.821167][ T5926] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 389.985030][ T5926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.026712][ T5926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.082473][ T5926] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.113338][ T7631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.121762][ T147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.135613][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.160931][ T5926] usb 4-1: Product: syz [ 390.214030][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.214305][ T5926] usb 4-1: Manufacturer: syz [ 390.274288][ T5926] usb 4-1: SerialNumber: syz [ 390.434316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.734708][T10362] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 390.752226][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.775078][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.967172][ T5926] usb 4-1: cannot find UAC_HEADER [ 391.008843][ T5926] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 391.040876][ T5926] usb 4-1: USB disconnect, device number 44 [ 391.073053][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.152668][ T44] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 391.248251][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.314840][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.326561][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 391.357225][ T44] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.378066][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.442453][ T44] usb 1-1: config 0 descriptor?? [ 391.472837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.483571][ T44] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 391.516885][T10406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.933054][ T5926] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 392.049547][T10424] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1293'. [ 392.058924][T10424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'. [ 392.137805][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 392.188437][ T5926] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 392.290451][ T5926] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.316104][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.335625][ T5926] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 392.375850][T10430] netlink: 'syz.0.1287': attribute type 4 has an invalid length. [ 392.394396][ T5926] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.403941][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.494938][T10434] netlink: 'syz.0.1287': attribute type 4 has an invalid length. [ 392.514009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.546934][ T5926] usb 2-1: Product: syz [ 392.551178][ T5926] usb 2-1: Manufacturer: syz [ 392.614863][ T5926] usb 2-1: SerialNumber: syz [ 393.615348][T10437] syzkaller0: entered promiscuous mode [ 393.638608][T10437] syzkaller0: entered allmulticast mode [ 394.435576][ T24] net_ratelimit: 3 callbacks suppressed [ 394.435593][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.510518][ T24] usb 1-1: USB disconnect, device number 53 [ 394.593073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.512832][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.632656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.882806][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.958397][ T7630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.966578][ T7630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.592969][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.672897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.635823][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.842336][ T5840] usb 2-1: USB disconnect, device number 48 [ 398.919685][T10485] netlink: 'syz.3.1303': attribute type 1 has an invalid length. [ 399.033101][T10493] bond4: entered promiscuous mode [ 399.038259][T10493] bond4: entered allmulticast mode [ 399.044303][T10493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 399.103549][T10494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.125301][T10485] bridge1: entered promiscuous mode [ 399.130881][T10485] bridge1: entered allmulticast mode [ 399.137429][T10485] bond4: (slave bridge1): Enslaving as a backup interface with an up link [ 399.186310][T10494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.234780][T10494] netlink: 'syz.4.1306': attribute type 4 has an invalid length. [ 399.299965][T10502] netlink: 'syz.4.1306': attribute type 4 has an invalid length. [ 399.404911][T10505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1310'. [ 399.417090][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1310'. [ 399.602730][ T5911] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 399.715249][ T44] net_ratelimit: 6 callbacks suppressed [ 399.715266][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.772783][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 399.776498][ T5911] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 399.776516][ T5911] usb 3-1: config 0 has no interface number 0 [ 399.776537][ T5911] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 399.776551][ T5911] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 399.784090][ T5911] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 399.784109][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.784120][ T5911] usb 3-1: Product: syz [ 399.784127][ T5911] usb 3-1: Manufacturer: syz [ 399.784135][ T5911] usb 3-1: SerialNumber: syz [ 399.786388][ T5911] usb 3-1: config 0 descriptor?? [ 399.792699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.090927][ T5911] usb 3-1: USB disconnect, device number 48 [ 400.271860][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.704914][T10549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.732244][T10549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.752683][ T44] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 400.760840][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.832968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.922799][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 400.938779][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 400.953270][ T5840] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 400.965700][ T44] usb 4-1: config 3 has an invalid descriptor of length 9, skipping remainder of the config [ 400.985230][ T44] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 400.999844][ T44] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=bf.bf [ 401.021655][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.039362][ T44] usb 4-1: Product: syz [ 401.044296][ T44] usb 4-1: Manufacturer: syz [ 401.049471][ T44] usb 4-1: SerialNumber: syz [ 401.115925][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 401.130477][ T5840] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 401.164575][ T5840] usb 3-1: can't read configurations, error -61 [ 401.266970][ T44] usb 4-1: USB disconnect, device number 45 [ 401.323342][ T5840] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 401.482850][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 401.494675][ T5840] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 401.512430][ T5840] usb 3-1: can't read configurations, error -61 [ 401.626726][ T5840] usb usb3-port1: attempt power cycle [ 401.633372][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.641530][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.799900][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.882925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.983170][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.005920][T10593] netlink: 'syz.4.1329': attribute type 1 has an invalid length. [ 402.064014][ T5840] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 402.098251][T10593] 8021q: adding VLAN 0 to HW filter on device bond5 [ 402.148337][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 402.270370][ T5840] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 402.294601][ T5840] usb 3-1: can't read configurations, error -61 [ 402.463071][ T5840] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 402.517282][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 402.542011][ T5840] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 402.576550][ T5840] usb 3-1: can't read configurations, error -61 [ 402.624279][ T5840] usb usb3-port1: unable to enumerate USB device [ 402.832907][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.855533][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.876960][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.926594][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.953372][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.977667][T10619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1334'. [ 403.682637][ T5926] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 403.867316][ T5926] usb 1-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 403.891025][ T5926] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.926688][ T5926] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.938346][ T5926] usb 1-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 404.000998][ T5926] usb 1-1: config 0 interface 0 has no altsetting 0 [ 404.022769][ T5926] usb 1-1: New USB device found, idVendor=5500, idProduct=004d, bcdDevice= 0.00 [ 404.044812][T10657] fuse: Bad value for 'fd' [ 404.081328][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.230080][ T5926] usb 1-1: config 0 descriptor?? [ 404.707324][ T5926] hid-generic 0003:5500:004D.0007: unknown main item tag 0x0 [ 404.720453][ T5926] hid-generic 0003:5500:004D.0007: item fetching failed at offset 8/10 [ 404.740536][ T5926] hid-generic 0003:5500:004D.0007: probe with driver hid-generic failed with error -22 [ 404.920316][ T24] net_ratelimit: 3 callbacks suppressed [ 404.920333][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.002831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.039263][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.100746][ T24] usb 1-1: USB disconnect, device number 54 [ 405.109983][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.139524][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.342595][ T5926] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 405.432595][ T5840] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 405.494344][ T5926] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.506670][ T5926] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.520178][ T5926] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.529684][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.604705][ T5840] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.614952][ T5840] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.625761][ T5840] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 405.634952][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 405.643120][ T5840] usb 2-1: SerialNumber: syz [ 405.743623][ T5926] usb 3-1: usb_control_msg returned -71 [ 405.750385][ T5926] usbtmc 3-1:16.0: can't read capabilities [ 405.764186][ T5926] usb 3-1: USB disconnect, device number 53 [ 405.848921][T10677] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1347'. [ 405.869769][ T5840] usb 2-1: 0:2 : does not exist [ 405.906458][ T5840] usb 2-1: USB disconnect, device number 49 [ 405.959551][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.976920][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.042859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.341797][T10687] gretap1: entered promiscuous mode [ 406.387539][T10690] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1350'. [ 406.446824][T10695] netlink: 'syz.2.1352': attribute type 1 has an invalid length. [ 406.511196][T10695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.763096][ T7631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.993682][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.072916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.142621][ T5911] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 407.208959][T10715] syz_tun: entered allmulticast mode [ 407.225651][T10715] dvmrp1: entered allmulticast mode [ 407.355916][ T5911] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.367542][ T5911] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.408366][ T5911] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 407.418061][ T7630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.430187][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 407.474658][T10710] syz_tun: left allmulticast mode [ 407.537065][ T5911] usb 1-1: SerialNumber: syz [ 407.660397][T10720] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1358'. [ 407.861143][T10725] netlink: 'syz.2.1361': attribute type 5 has an invalid length. [ 408.033338][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.646855][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 410.113074][ T44] net_ratelimit: 4 callbacks suppressed [ 410.113089][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.202842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.272633][ T979] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 410.422626][ T979] usb 4-1: Invalid ep0 maxpacket: 9 [ 410.507772][ T5911] usb 1-1: 0:2 : does not exist [ 410.514274][ T5911] usb 1-1: unit 5: unexpected type 0x0e [ 410.542192][ T5911] usb 1-1: USB disconnect, device number 55 [ 410.552915][ T979] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 410.605203][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.732584][ T979] usb 4-1: Invalid ep0 maxpacket: 9 [ 410.733247][ T979] usb usb4-port1: attempt power cycle [ 410.987864][ T5158] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 411.081891][ T5911] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 411.097943][ T979] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 411.143877][ T979] usb 4-1: Invalid ep0 maxpacket: 9 [ 411.153622][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.232873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.276723][ T979] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 411.293012][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 411.301144][ T5911] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.311701][ T979] usb 4-1: Invalid ep0 maxpacket: 9 [ 411.317405][ T5911] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 411.337316][ T5911] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 411.356359][ T5911] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 411.360290][ T979] usb usb4-port1: unable to enumerate USB device [ 411.374814][ T5911] usb 1-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1A, changing to 0xA [ 411.392407][ T5911] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0xA has invalid maxpacket 239, setting to 64 [ 411.422124][ T5911] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.492456][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.514985][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.534545][ T5911] usb 1-1: Product: syz [ 411.547629][ T5911] usb 1-1: Manufacturer: syz [ 411.598170][ T5911] usb 1-1: SerialNumber: syz [ 411.626486][T10779] fuse: Bad value for 'fd' [ 411.891700][ T5911] usb 1-1: USB disconnect, device number 56 [ 411.949989][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.200930][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.272642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.513727][ T7631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.169223][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.240156][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.366288][ T30] audit: type=1326 audit(1759219732.500:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10797 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd58eec9 code=0x7ffc0000 [ 413.438883][ T30] audit: type=1326 audit(1759219732.530:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10797 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd58eec9 code=0x7ffc0000 [ 413.468985][ T30] audit: type=1326 audit(1759219732.530:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10797 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5fd58eec9 code=0x7ffc0000 [ 413.527428][ T30] audit: type=1326 audit(1759219732.530:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10797 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd58eec9 code=0x7ffc0000 [ 413.585914][ T30] audit: type=1326 audit(1759219732.530:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10797 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd58eec9 code=0x7ffc0000 [ 413.632394][ T30] audit: type=1326 audit(1759219732.540:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10797 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5fd58eec9 code=0x7ffc0000 [ 413.723699][ T30] audit: type=1326 audit(1759219732.540:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10797 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd58eec9 code=0x7ffc0000 [ 413.792645][T10804] B: renamed from veth0 (while UP) [ 414.504023][T10809] netlink: 'syz.4.1387': attribute type 1 has an invalid length. [ 414.532161][ T30] audit: type=1326 audit(1759219732.540:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10797 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd58eec9 code=0x7ffc0000 [ 414.695504][ T30] audit: type=1326 audit(1759219732.540:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10797 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5fd58eec9 code=0x7ffc0000 [ 414.726225][ T30] audit: type=1326 audit(1759219732.540:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10797 comm="syz.4.1386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5fd58eec9 code=0x7ffc0000 [ 414.853168][T10809] 8021q: adding VLAN 0 to HW filter on device bond6 [ 415.061653][ T5911] IPVS: starting estimator thread 0... [ 415.071237][T10827] fuse: Bad value for 'user_id' [ 415.076864][T10827] fuse: Bad value for 'user_id' [ 415.128689][T10827] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 415.135242][T10827] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 415.147503][T10827] vhci_hcd vhci_hcd.0: Device attached [ 415.153249][T10828] IPVS: using max 34 ests per chain, 81600 per kthread [ 415.162980][T10830] vhci_hcd: connection closed [ 415.163998][ T7631] vhci_hcd: stop threads [ 415.173144][ T979] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 415.184159][ T7631] vhci_hcd: release socket [ 415.188666][ T7631] vhci_hcd: disconnect device [ 415.337345][ T979] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 415.349180][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.360957][ T979] usb 4-1: config 0 descriptor?? [ 415.381147][ T979] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 415.392900][ C0] net_ratelimit: 7 callbacks suppressed [ 415.392916][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.408526][ T979] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 415.567820][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.579248][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1392'. [ 415.601430][T10821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.619793][T10821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.639839][T10821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.653767][T10821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.678039][T10839] fuse: Bad value for 'fd' [ 415.709451][T10821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.728671][T10821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.785858][T10821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.829559][T10821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.866921][T10821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.909399][T10844] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 415.918149][T10821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.999238][ T5840] usb 4-1: USB disconnect, device number 50 [ 416.442656][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.596202][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.769090][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1400'. [ 416.935370][T10854] delete_channel: no stack [ 417.459460][T10878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.472232][T10878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.480871][ T5930] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 417.482876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.553551][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.597967][T10885] dummy0: entered promiscuous mode [ 417.603887][T10885] macsec2: entered promiscuous mode [ 417.609204][T10885] macsec2: entered allmulticast mode [ 417.616625][T10885] dummy0: entered allmulticast mode [ 417.625628][T10885] dummy0: left allmulticast mode [ 417.630884][T10885] dummy0: left promiscuous mode [ 417.636612][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.652577][ T5930] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 417.661111][ T5930] usb 1-1: config 0 has no interface number 0 [ 417.669885][ T5930] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 417.679119][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.687173][ T5930] usb 1-1: Product: syz [ 417.691341][ T5930] usb 1-1: Manufacturer: syz [ 417.696202][ T5930] usb 1-1: SerialNumber: syz [ 417.706859][ T5930] usb 1-1: config 0 descriptor?? [ 417.713853][ T5930] hub 1-1:0.217: bad descriptor, ignoring hub [ 417.719964][ T5930] hub 1-1:0.217: probe with driver hub failed with error -5 [ 417.770357][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1412'. [ 417.781435][T10887] delete_channel: no stack [ 417.918755][ T5930] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 417.928842][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 417.938885][ T5930] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 417.947686][ T5930] usb 1-1: media controller created [ 417.979431][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 418.127525][T10896] fuse: Bad value for 'fd' [ 418.195996][ T5930] DVB: Unable to find symbol dib7000p_attach() [ 418.202207][ T5930] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 418.285935][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.345892][T10903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.355035][T10903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.371678][T10903] ------------[ cut here ]------------ [ 418.377688][T10903] usb 1-1: BOGUS control dir, pipe 80003980 doesn't match bRequestType c0 [ 418.445926][ T5930] rc_core: IR keymap rc-dib0700-rc5 not found [ 418.452115][ T5930] Registered IR keymap rc-empty [ 418.466603][T10903] WARNING: CPU: 1 PID: 10903 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 418.476579][T10903] Modules linked in: [ 418.480989][T10903] CPU: 1 UID: 0 PID: 10903 Comm: syz.4.1415 Not tainted syzkaller #0 PREEMPT(full) [ 418.490485][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 418.500900][T10903] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 418.507063][T10903] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 20 37 f0 8b 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 46 b2 99 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 418.526773][T10903] RSP: 0018:ffffc900034f7850 EFLAGS: 00010246 [ 418.532715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.532913][T10903] RAX: 80aa3490f2868300 RBX: ffff888057bd0800 RCX: 0000000000080000 [ 418.542815][ T5840] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 418.548933][T10903] RDX: ffffc9000eb31000 RSI: 000000000000592a RDI: 000000000000592b [ 418.564848][T10903] RBP: 1ffff1100519f15c R08: 0000000000000003 R09: 0000000000000004 [ 418.572867][T10903] R10: dffffc0000000000 R11: fffffbfff1b7a1d4 R12: dffffc0000000000 [ 418.580849][T10903] R13: ffff888028cf8ae0 R14: 0000000080003980 R15: ffff888053b57900 [ 418.588926][T10903] FS: 00007ff5fe4686c0(0000) GS:ffff88812647e000(0000) knlGS:0000000000000000 [ 418.598148][T10903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.604814][T10903] CR2: 00007f7703c84e9c CR3: 0000000077380000 CR4: 00000000003526f0 [ 418.612851][T10903] Call Trace: [ 418.616144][T10903] [ 418.619097][T10903] usb_start_wait_urb+0x114/0x4c0 [ 418.624215][T10903] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 418.629806][T10903] usb_control_msg+0x232/0x3e0 [ 418.634690][T10903] dib0700_i2c_xfer+0xba7/0xf70 [ 418.639576][T10903] __i2c_transfer+0x874/0x2170 [ 418.644489][T10903] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.649712][T10903] ? __pfx___i2c_transfer+0x10/0x10 [ 418.655000][T10903] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 418.660392][T10903] ? i2c_transfer+0x11d/0x3a0 [ 418.665175][T10903] i2c_transfer+0x25b/0x3a0 [ 418.669703][T10903] ? __pfx_i2c_transfer+0x10/0x10 [ 418.675158][T10903] ? _copy_from_user+0x94/0xb0 [ 418.679950][T10903] i2cdev_ioctl_rdwr+0x460/0x740 [ 418.684990][T10903] i2cdev_ioctl+0x64b/0x7f0 [ 418.689509][T10903] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 418.694611][T10903] ? __fget_files+0x3a0/0x420 [ 418.699296][T10903] ? __fget_files+0x2a/0x420 [ 418.703983][T10903] ? bpf_lsm_file_ioctl+0x9/0x20 [ 418.708942][T10903] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 418.714038][T10903] __se_sys_ioctl+0xfc/0x170 [ 418.718654][T10903] do_syscall_64+0xfa/0x3b0 [ 418.723250][T10903] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.728458][T10903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.734659][T10903] ? clear_bhb_loop+0x60/0xb0 [ 418.739361][T10903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.746567][T10903] RIP: 0033:0x7ff5fd58eec9 [ 418.746594][T10903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.746612][T10903] RSP: 002b:00007ff5fe468038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.746634][T10903] RAX: ffffffffffffffda RBX: 00007ff5fd7e6180 RCX: 00007ff5fd58eec9 [ 418.746649][T10903] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000009 [ 418.746663][T10903] RBP: 00007ff5fd611f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.746677][T10903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.746690][T10903] R13: 00007ff5fd7e6218 R14: 00007ff5fd7e6180 R15: 00007ff5fd90fa28 [ 418.746722][T10903] [ 418.746745][T10903] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 418.746761][T10903] CPU: 1 UID: 0 PID: 10903 Comm: syz.4.1415 Not tainted syzkaller #0 PREEMPT(full) [ 418.746781][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 418.746793][T10903] Call Trace: [ 418.746802][T10903] [ 418.746810][T10903] dump_stack_lvl+0x99/0x250 [ 418.746835][T10903] ? __asan_memcpy+0x40/0x70 [ 418.746857][T10903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.746879][T10903] ? __pfx__printk+0x10/0x10 [ 418.746910][T10903] vpanic+0x281/0x750 [ 418.746933][T10903] ? __pfx__printk+0x10/0x10 [ 418.746950][T10903] ? __pfx_vpanic+0x10/0x10 [ 418.746972][T10903] ? is_bpf_text_address+0x292/0x2b0 [ 418.747000][T10903] panic+0xb9/0xc0 [ 418.747022][T10903] ? __pfx_panic+0x10/0x10 [ 418.747061][T10903] __warn+0x31b/0x4b0 [ 418.747082][T10903] ? usb_submit_urb+0x112b/0x1830 [ 418.747108][T10903] ? usb_submit_urb+0x112b/0x1830 [ 418.747131][T10903] report_bug+0x2be/0x4f0 [ 418.747150][T10903] ? usb_submit_urb+0x112b/0x1830 [ 418.747173][T10903] ? usb_submit_urb+0x112b/0x1830 [ 418.747195][T10903] ? usb_submit_urb+0x112d/0x1830 [ 418.747217][T10903] handle_bug+0x84/0x160 [ 418.747245][T10903] exc_invalid_op+0x1a/0x50 [ 418.747267][T10903] asm_exc_invalid_op+0x1a/0x20 [ 418.747284][T10903] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 418.747307][T10903] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 20 37 f0 8b 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 46 b2 99 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 418.747323][T10903] RSP: 0018:ffffc900034f7850 EFLAGS: 00010246 [ 418.747340][T10903] RAX: 80aa3490f2868300 RBX: ffff888057bd0800 RCX: 0000000000080000 [ 418.747354][T10903] RDX: ffffc9000eb31000 RSI: 000000000000592a RDI: 000000000000592b [ 418.747366][T10903] RBP: 1ffff1100519f15c R08: 0000000000000003 R09: 0000000000000004 [ 418.747379][T10903] R10: dffffc0000000000 R11: fffffbfff1b7a1d4 R12: dffffc0000000000 [ 418.747394][T10903] R13: ffff888028cf8ae0 R14: 0000000080003980 R15: ffff888053b57900 [ 418.747438][T10903] usb_start_wait_urb+0x114/0x4c0 [ 418.747469][T10903] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 418.747512][T10903] usb_control_msg+0x232/0x3e0 [ 418.747543][T10903] dib0700_i2c_xfer+0xba7/0xf70 [ 418.747584][T10903] __i2c_transfer+0x874/0x2170 [ 418.747608][T10903] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.747634][T10903] ? __pfx___i2c_transfer+0x10/0x10 [ 418.747656][T10903] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 418.747677][T10903] ? i2c_transfer+0x11d/0x3a0 [ 418.747697][T10903] i2c_transfer+0x25b/0x3a0 [ 418.747718][T10903] ? __pfx_i2c_transfer+0x10/0x10 [ 418.747736][T10903] ? _copy_from_user+0x94/0xb0 [ 418.747762][T10903] i2cdev_ioctl_rdwr+0x460/0x740 [ 418.747793][T10903] i2cdev_ioctl+0x64b/0x7f0 [ 418.747813][T10903] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 418.747835][T10903] ? __fget_files+0x3a0/0x420 [ 418.747851][T10903] ? __fget_files+0x2a/0x420 [ 418.747871][T10903] ? bpf_lsm_file_ioctl+0x9/0x20 [ 418.747893][T10903] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 418.747913][T10903] __se_sys_ioctl+0xfc/0x170 [ 418.747937][T10903] do_syscall_64+0xfa/0x3b0 [ 418.747956][T10903] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.747974][T10903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.747991][T10903] ? clear_bhb_loop+0x60/0xb0 [ 418.748012][T10903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.748026][T10903] RIP: 0033:0x7ff5fd58eec9 [ 418.748038][T10903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.748051][T10903] RSP: 002b:00007ff5fe468038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.748067][T10903] RAX: ffffffffffffffda RBX: 00007ff5fd7e6180 RCX: 00007ff5fd58eec9 [ 418.748080][T10903] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000009 [ 418.748092][T10903] RBP: 00007ff5fd611f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.748104][T10903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.748115][T10903] R13: 00007ff5fd7e6218 R14: 00007ff5fd7e6180 R15: 00007ff5fd90fa28 [ 418.748144][T10903] [ 418.752363][T10903] Kernel Offset: disabled