last executing test programs: 17m37.960890793s ago: executing program 0 (id=70): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r2, &(0x7f0000000540)={0x2, 0x2, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 17m35.896812676s ago: executing program 0 (id=77): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) 17m33.543111094s ago: executing program 0 (id=85): openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffff9, 0xa68d7c519ec00fe1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000ea59e277000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) 17m33.159829732s ago: executing program 0 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x3bf8, 0x400, 0x1, 0x34}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r2, 0x6f58, 0x0, 0x0, 0x0, 0x0) 17m31.370046493s ago: executing program 0 (id=91): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r4, 0x1, 0x100000000, 0x80000000) 17m30.968888504s ago: executing program 0 (id=94): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 17m30.392577158s ago: executing program 32 (id=94): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 15m17.580628148s ago: executing program 1 (id=656): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_clone(0x908a500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, 0x0) 15m16.73159978s ago: executing program 1 (id=658): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x5e, &(0x7f0000003980)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000080", 0x28, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @loopback}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0xa6, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x70, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1c, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x9, "cf6af75d5cdcf0"}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @generic={0x22, 0x9, "da64345379e89f"}, @sack={0x5, 0x16, [0xa, 0x10, 0x6, 0xfffffff9, 0x7890]}, @timestamp={0x8, 0xa, 0x80}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) 15m16.432674501s ago: executing program 1 (id=660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000640)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m14.034562608s ago: executing program 1 (id=673): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 15m12.446301345s ago: executing program 1 (id=678): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000004c0)={0x40, 0xc, 0x2, "10d8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m10.484691003s ago: executing program 1 (id=685): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002f80)={0x1c, &(0x7f0000000e80)={0x20, 0x11}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000800)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000b40)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m9.654883007s ago: executing program 33 (id=685): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002f80)={0x1c, &(0x7f0000000e80)={0x20, 0x11}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000800)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000b40)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m34.202070281s ago: executing program 6 (id=1041): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) 13m32.443575989s ago: executing program 6 (id=1048): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x16, @loopback, 0x4e24, 0x1, 'none\x00', 0x0, 0x32bb, 0x9}, {@remote, 0x4e21, 0x2, 0xfffffffe, 0x4, 0x12d5c}}, 0x44) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m30.841982822s ago: executing program 6 (id=1054): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 13m30.695150833s ago: executing program 6 (id=1055): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 13m29.669769159s ago: executing program 6 (id=1058): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) socket$netlink(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) 13m26.866999466s ago: executing program 6 (id=1064): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42, 0xfffffffc}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 13m26.311222078s ago: executing program 34 (id=1064): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42, 0xfffffffc}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 20.207771135s ago: executing program 3 (id=2926): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSERGETLSR(r2, 0x5459, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000280)=0x100090c2, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 15.339818093s ago: executing program 3 (id=2933): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2800, 0xa0102}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0xeb}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xffffffff}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x6c}}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x1, @loopback}, 0xb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) close_range(r0, 0xffffffffffffffff, 0x0) 15.249341058s ago: executing program 5 (id=2934): socket$netlink(0x10, 0x3, 0x10) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x5851, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 14.926553782s ago: executing program 7 (id=2935): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r5 = dup3(r2, r1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1/file2\x00', 0x10080, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file2\x00', 0x2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x37}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf}}) 14.52793822s ago: executing program 7 (id=2936): listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x20000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f03f, 0x6e}) listen(0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x10) listen(r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000000080)='GPL\x00', 0x80d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80008, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) 13.863650139s ago: executing program 2 (id=2937): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x80) r6 = syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 13.602017151s ago: executing program 4 (id=2938): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 12.803099514s ago: executing program 5 (id=2939): r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='#!.\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x742, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x642000, 0x0) syz_open_dev$media(0x0, 0x8, 0x10b482) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd0}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/cpu_byteorder', 0x42, 0x80) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r5, 0x141601) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r6, 0xc008551c, &(0x7f00000001c0)=ANY=[]) 12.364860997s ago: executing program 4 (id=2940): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x20, &(0x7f0000000440)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x50}}, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 12.155295124s ago: executing program 7 (id=2941): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad001400fb000001b72896ab313dc200000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 11.200930107s ago: executing program 3 (id=2942): syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev, 0x2}}, 0x24) fcntl$getflags(r1, 0x3) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) write$cgroup_int(r5, &(0x7f0000000040)=0x902, 0x12) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x70, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x1, 0x1, 0x1, {0x0, r6}}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.048342528s ago: executing program 7 (id=2943): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1bc}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffaac) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/kernel/oops_count', 0x400, 0x1) read$FUSE(r6, &(0x7f00000011c0)={0x2020}, 0x2020) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.544712789s ago: executing program 2 (id=2944): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000280)}], 0x2, 0xe, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x42303159, 0x0, @discrete={0xe, 0xba}}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="a2caeca6ab4cfc6458432d2cd6e066db0b974ab2d51fce3736d3e4a68aff397feba8983b4a8d4c62f67d5becb53869dc8dd9b8a1d738866895205b82b4475f294961a0570ddec94310739a703276011c31635de2915a189f9d24d7", 0x5b}], 0x1) r4 = socket$inet6(0xa, 0x805, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x0) unshare(0x28040600) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a00000905050200"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x120, 0x11, 0x148, 0x120, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x6, 0x9, 0x2], 0x5}, {0xffffffffffffffff, [0x0, 0x0, 0x6, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f00000000c0), 0x127, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}}) 10.426487682s ago: executing program 5 (id=2945): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000068ff1c32e90f55db86c001020000d473c20000000000000000000000020008bbfca82f027bce2753d387e89f74fe32f7edc11781248adbe3883074e5b1299e87cf7a7b66a40154f146bf0ad6e657f6"], 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf1, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="400f01000000562fe30db675529bee07f82a60456b47215e2f5952f22684980b41561600b9c615594c1aeace55c41beeafcc9f97aecd3ebc41e62513d734087777630f1f6fe64c79406002e526f4cd751608b27a5b759c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f000000c740)={0x0, 0x0, &(0x7f000000c700)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000040a01010000000000000000000000060c0002400035ae000000000108000a40000000050c000480080001400000000108000b400000000400"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24048048) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e23, 0x3, @loopback, 0x7}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) 10.085153567s ago: executing program 4 (id=2946): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000380)=""/169, 0xa9, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x11, 0x0, 0x0) 9.005999427s ago: executing program 3 (id=2947): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300), 0x0) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x9) r2 = dup(r0) unshare(0x2010000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000080)=""/162) fsopen(&(0x7f0000000240)='romfs\x00', 0x1) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) listen(r3, 0x8) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000140)=0x8) 7.31272252s ago: executing program 3 (id=2948): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000200), 0x80) 6.637426094s ago: executing program 4 (id=2949): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000193c0)='net/protocols\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0xf11, 0x900, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x0) 6.366095707s ago: executing program 7 (id=2950): socket(0x27, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0x40, 0x3f, 0x32, 0x1, 0x0, 0x0, {0x0, 0x0, 0x400000}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0xe, 0x0, 0x0, 0x8}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) fremovexattr(r4, &(0x7f0000002340)=@known='system.posix_acl_access\x00') r5 = socket$inet6(0xa, 0x3, 0xff) close(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r7, r6) syz_open_dev$vim2m(&(0x7f0000000000), 0x83, 0x2) 6.292473227s ago: executing program 5 (id=2951): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x2a43, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000005c0)=0x84) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r3, 0x0, &(0x7f0000000340)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r2, @ANYRES16=r0, @ANYBLOB="a046a8bcb11a4b94911de5aceef14334bc4c410b40bdf0c40601053841ccf406c4ff23098c5566e4cc84b25e354558cc9009be5a1281d2aeccb1d7e63baa362c94e8640be33112688af09fab8306358d82089dd9f488d18f03afcb04f8cda8cdd3f74e90892aa4c429a5780b043bcc67343b94abe054efac139a70288949b4dc5df4a527a9e03b5e8412bc03886a9aaae815a05a488081ac914a7c7d", @ANYRESDEC=r1, @ANYBLOB]) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e21, 0xfffff79e, @mcast1, 0xfffffdfc}}, 0x0, 0x0, 0x9, 0x0, "0c9e089c01860b471037f43d223b3c1b324debec40e55a07f709417eb48821996aff1c7154e746be4d7686455261c425a7519cc269d04e6205abaabde24a2b12440b329ad5bd35f21907c7988d1300"}, 0xd8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha1-ni\x00'}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) fchown(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e23, @private=0xa010102}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, r7, {0xf}, {0x0, 0x1}, {0x3, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x44) 5.877345693s ago: executing program 2 (id=2952): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad001400fb000001b72896ab313dc200000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 4.474142712s ago: executing program 2 (id=2953): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad001400fb000001b72896ab313dc200000000000001"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 3.491071068s ago: executing program 2 (id=2954): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x64c842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) epoll_create(0x101) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="d4e7db1d52d52f023458b201056f6c20ef323f7cb87e94c96d4115eda7ae5939707ede9fc0c28be674f69794cbcb40bd541a97595ebc57bac9a886c3d7d560e48a9fc52bb566abbef7baa08cb7cce2650589657e2c17", 0x56, 0x8940, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x40000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$FIONCLEX(r0, 0x5450) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x0, 0xe, 0x3, &(0x7f0000000080)={0x10, "d006ef137a3a5ed350a82c1b11dfa8968498c4b1637b6008e5dd61d69e909484c3"}}) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) 2.752638696s ago: executing program 7 (id=2955): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x20, 0x17, 0x1, '\b'}, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) preadv(r3, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/4103, 0x1007}], 0x1, 0x2, 0x7e) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=@delchain={0x2c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}}}, 0x2c}}, 0x40) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_io_uring_setup(0x247a, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x2}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000020240)='./file1\x00'}) 2.679163343s ago: executing program 5 (id=2956): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000e7ff00", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) chown(&(0x7f0000000080)='./file0\x00', 0x0, r6) 2.628294359s ago: executing program 3 (id=2957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) r4 = dup(r3) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) close(0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003d000900000000000000000001000000040000001400018010001080080001000a0100fe04001000080002"], 0x34}}, 0x0) ioctl$KVM_SET_CPUID2(r4, 0xc008ae09, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3]) 2.210593904s ago: executing program 4 (id=2958): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7fbbbc5b58c2", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$dsp(r5, &(0x7f00000000c0)=""/229, 0xe5) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x38, 0x1406, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x40080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) 882.518424ms ago: executing program 4 (id=2959): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="800000006d00afbd29bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1080040002b3000008001f000900000008001f000000000008002900"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = io_uring_setup(0x3eb0, &(0x7f0000000300)={0x0, 0x3da2, 0x0, 0xfffffffe, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usbip_server_init(0x4) 821.630632ms ago: executing program 2 (id=2960): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) openat$kvm(0xffffffffffffff9c, 0x0, 0x48000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x0, 0x86b1b18158a7cb82) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x8000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "000001fffbffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x8201, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) 0s ago: executing program 5 (id=2961): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) keyctl$session_to_parent(0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f727400000000a9a1ec0906f1df8060e388afe27ac00064c8500bfd9438b3348632f99393f2f0dc4a710135dcbed09504383456d7aaac938cee62e91eb97b8a"], 0x58}}, 0x0) r4 = open(0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$tipc(r4, &(0x7f0000001380)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x4}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="ab45b3d24d71effafa5d09c410b578c210cad38a1aa9b36eb645c979b2dfcd5a4247038bb0b38b2d98c5a4b22dad8d80cf3a", 0x32}, {&(0x7f0000000340)="c4125aa5c0da24ca948fbdf7176347e3cbb7c85581356aa4c76a8519c6c1ad3af9e2b3b8a877a8a22622204dec304d2207220204f9fa26e55546ba2ec7680b9ca3d4f3f7db9207b20602a709b40cfb1ee7763e525132f9d31e549ebd77b5573752dddff9a6cc1899c952a2637cff025274dec329a591fb137c6a18d0df418f692a5fac23dff03d2ae22e818f6b7828d0070222ca5a21d162157e9e64d2cbb019d8605785e12df1e5647320cd7395120c6d159475a5f4d4d224dc67fc7b63653e65567e0cba4b7a60b4aa190fc1e1cd611b1bbf2294e8c3e466ecad4b03dfbcfb12bf88a4c8bc44dc3da79e2c485aef46c01b341e82543736a570fcd2bae0a36b79c8f61b80df5b1ae537ee694c2f1074fc04d09d155b527689c633928d7d4ada0ef8b8f8793274a0c54d337199d04be216b4edd7c5b133aa8be77849680b519b012d0d02512abf8ae532940f3b606c70c1f6f9691ddf339ff0c3a6cc82a73100b4e98b237e93b9cbddff10d00e2df6e1d81322d906032ed6a166cc4c8a40704ef69813ccc04e0b80123be42a7a4e8f8d83b98ccba02d9fee2ca831eb68c51cc838d00bce348067a483e6b12136df3c4c28414779410700125fcb8a68588ad4109452e9a197ccfa9517a1ecf1d1999624ee8d116f5e9365047afceb1932ed7001949310b5be3a163b148770abe737807171035cb2d497c7937ed494e36db084995bf82ddf6f358df3bfbf1ffed73eea0359a19adef3c9333d8c27e2331d1e7d8164f7fe2da7d96c07ef4bd7fe661897f38d7caffec1f3e4546d1f907b752580ff6e434db27c77dee0380cb6b23e0057816ed81642b2dcd9a6a55cd6c665e0a530821c9bb94441a9c82faebabe2fca8bfcb77d3e0c58e83881366218d791bb67efc48ccbcb50afa654f9c2b3b87dd7637871f99d0cc7e63460c6cd69ab9285eb336276b1685ea8dfa5f0d3b1e5f764e4043f77235d002d5485f921a429d78d178f29083bed465aa0c965012e07685bdd48ee577c8f3392df76ff3072cc336103c1849ab0f15f9bbd4832fc8b57915bbd7703b75e6bd7909c2bb9b3eb4276985059d2c9883de0c57c2b079fa1087980bcf2aef06dd2d44308b1cf27bc9b623d7d505ad8ad54296d2ae7e7a637a414ea80989d231a93166abed2f49d97dadd2313aab3162178ba05cf21fb0c4cd8d5656c411ba261d006b3ad845134de7193e26bd14965f397210df6bedd93c623f67554a23552b9b11597b8328f6341483b79a499f57075b83ecd89fdce69d4b2a7dd9d7ea4b163907c8459323c710b1cc4ce7365a57efcee37867119935bdda50bfff5ac295ce0ce479248cf69979f348d286498edca9ba1f1b9f9318409f2b257cd6ff0a24ce142f174304130314eb848d8a9d4e101243cdd3e13f2b2e35aec1ac3ee877a1166511efe8aeaf064e7f41dae23f6470f8592ec3e3520126bd42122b3e4789b1942ca45e0d8dcf79208fa934e9150459892059eced81f53bc188d35f8626bdd6c470ce78f72a5e4d3bf6a9184eb142baed9d9cd2ca6d35a64487f115e9485ad0fc8f50f82994ef690efba895afec7394882d10594a76d447132b5b07ee6c573e344e760554b83e6c0c6e34273f7b89a3480608b819ea77d6661a760d36d3216a46e37ab2321f61d5ee549d728dc0bc2f164df075b65913ef323491c1c50e23dbcc1aeca102d16766a224285b13078c8c516250ff05a787e2355cffe18251b162cd6f38a293a30949de0846dbfbc347c6d1731f197c92903e4eacb90ab501acd7f0eec23129fdabf1c8fec7205f651fe2b79c4fafea47bbda249de5801b2636d6b6c85c041c42e41b694abaf39420e80d6078824e6aa3ede2599715670967fa8c127c5987d45d850c5884cee38b9e7068e5ea7a8a5d7a5a16f2a50c64ffcefcb891ab0696a58608645a7bf1762b7664f364da9bb8caea1ee9798683a464dacb8a71a57140d467795000c94f32ece419e20386d558b3d33291e65dbcdc20c95dcb4c796cb4954934415413fcb747d2048371c293c7b451d026937bbae4369f7ae24c26b93b5dfb7c61c64b72c88ee9a473153e3bcc1cf0aaa3c8d19b7da5465cb82772bbcc822eadbbf6c9149a3b11a8c8ce515c11327099a684f88610b3d61e6dffe94b64bc9059a0f00af9a0311f699ca6d4572942b32359cc29aec68b120aedef9c05643ce0d135dd7d607bc9aa02d080c5d3fb97248383468ec781f2ae55b6119f8fd5428da6f2cdee149ff447881cdfd0503ab70f8bcaab2a20fddc034f86de07da5338fc809896347feea4544fe501c06ee9e8a6acb5a67c973fcda52809200928a9469a533f6922cb7cb9792444aacb925ec2d9934ad8d428d5699acade62d20fdc7302106e888f760b9d63744b58d95c3721daef78d94529d5ffa2a2f112d2cabd6c93badf223c015ac0ba33f31f5c7ff3a232328f8d21435134e617e8b18b4380844b6cb711fd08caf93ee994be302ad5b70a0503d66cc64b6d5c7bffbc39138e30a44677fb227b03d1700524abe06ef1cdd08f8be581dcceae54eb25b7938569faaa19d58df484c1ce07ae5c40409b1b1bb4c31692cd5ee2cd8b1cd04fc968779ea06e519b8d6ab3553a65373930b90c77d2cbe5af86e8d9a1a12f78fba2117a38530144b9724a8052fbe607131da7b4aae4d6a5268bb49b14db3af6ad5dc47b2cdcc2060051703b60b5b29871b247934d248cbcc67e89c4d4b40536c0f44376bc47d5fbcf97c7b473da03b0c8dd5c5d46cd19131394e465ca8a2c15e65f6ff1bd2a3f49e4dacb555c649617dbae9b95a77b8d3465b5e066259c34a5a880ad545b2b823358dc6420454ed82b6f96d3f763b6ed4314ced9398456fa261e2ae4c02eeb4b6917c3141e1d71effdb24000c7d000cae9f3a606b1a35c52514b552bccfd3a3245d7585a6ba852d7f063e35fa26aa55de2b719622a081abfc5cf0c0d1d49c970b9dfa7679a047643db219beaaaf83846f35a119e1e9963a8651074a5659cc183bbf0a92729e91b4dc65d52cb543d6bbcdd6e6838d5925dd9d5a32881d4957c2aa42296f78e3527abcbbc81496bafb0500894c7e362d9b66bc437f1878a10f4275a9aeb1e8e1c6cc0d517213efa7638028125f095a3b7b350d1b893308559c765af47838388ca0a6f2dd6554958a859efe5c68c0a990a846db6110457d22ffaaae657212299df59d0df614aef703dfe666b1771a1cdcb002d3b0d6f6346f9842575c28aca66ad0892430f6a62169b1e5424ae41a913b0c072f2c08d0d6d6b9aeffd15f500d76bd74f71adcb58cdff3fc9cf771ab98f51c03b998ba773e3fdc76c6fefbfe46b68e1bf7df5f9e1b4174ecd472695e2d4f670660014452a1b4f4eb03215c5257f8e9e9854557f7663462c5d694ddd67d57ed440f559d2ccc60e57313ac1e32a06dd40ba2a163e43ad996892bd617189c50941f7eb9524f8e80c1e11fb95ff7b38ad4eeda504e0fdff6cdce9d6d183c4c02f3be5cc8728ab675d778ccc037070e89f9dca73ff6047db7a207c9c2b0c2ea85404f11c8baad076256a6fe03736c76b5ebd1cdf7858979506aca77164e0f6074dd480a1d3b4b1abc813ea25f2ef262597dec0e60859ccba141297390ab6f094f0c92e88a26f6c1f30da5848ff7996f57856e84ea15c12a4d8e8cf55a2f65b2663a07cf8025b2fa3e97173129bdb4b0ede29eb9b205faed7aadb1a712ec8e978b25317dd98eaba009f62a7e51a4aa40046d67e2840150d0a1c1a28a3d81c76c8cbe0efe3b9713c63ad786224c19839102856d4a4d8b975277b5c49e844341d22119d168926135b8d671a226254d91b8e3b5d2d29877fcff12043016c1d341e14ac55a3fe19aa469ac0e088da7008adaddb6cf2332f428cd8c30a44fb243c46134679736dac8144ed5794c49f23228a53c00fc0bd9dd50680368572f4b81aa99121ca8154d0ffe2a8992df7425c736f02641eb9a7c302af37e3da9510268882ddd8f8a0797938ef168189c1eecc8e4fca9f5ff704edfbc8047910b02ec50a029179e60cf942f93e42af73df1686c5903a80448fee32f1cb5d924fdc8a844d99061efb54e90a93a6a86bc040ed0bf93f867154a617380af1451ef3975626b35e64d0c9d93eb55d8278950c074e98e8f3e2a01b629dbf024f3ba36737e94f8b279ad063e0505c5cad72fed7bc29a8389f7613d10b1c7317d772dc346148f847ae020ea15d316ea18b0f3fd075273132a39ca334a9f97d900d8cb71e59c6a7d7de2c821c625c15ec188b3ff43506ee4e33236400a389abe02eee45ea523610bce793a5c7eb65d296cd029e487118f4335346e00f6f8635deff5f7572f4d8c621339e3e49eb30d06e6a0caf60969880a771227ba36cafe9c11469470e15fceaeb2693cf907c72afce71ed7ed8f0e7558c75615e96c57551da9e34ff56e534077cdcee1f00e653a2f49d83718c75df79ba6320e4dfd16d42c75dcabaf2f95b940c8e205fafdd5886941a321f774c86dfcda8d6bbb9088a9ac7f25b615451ba44f40f67832d1364e8dea628ad1679d3b48a89f5b4cbff00b00b34484e0958eae291a141d92baea3f73d1866e584197b93ac57f4e88cd9ad567baba72968745d43a80b7f8d9328537aba03bb0529431b6ee0f8067356c14b059b0393e779ec893b0b7054b07a99d9acf77d85f8684cb70f3c4b22e0c2f162d5a287ed45afb48e4d0247ff9c940d79207c79c0300e4d64d163cf1f0b308d0a835d473d06f46bbad4c6cac7abef0119212eae7c0e0bad391f754ef693905e0a57b64ea862f1cdb9020f2d972bdfeb967544832752f69941b7668f410cc8b8b966522c715e069cac67fc984c1985595a9631eddf447cd1c5d9d3c72d8046a4cb444ea88342cfa60190e26f12bcc8b25b83c91aa1df307ad87fe52e9fbc031b5666b43c487889a10e214d9098e119b509a466a390089ee664d4122822a68f32e6aef882376a7cea403ef21128bec1bb9efad8f430a320b71d36379aab9ae030d755b9e5a7124d028296867bc86a53b72d97b30df26ba39394b1da818435cb871ce1747a49ba59b144febd4e59d43e04501460b1c7bdcac6e5c0f0aefb34469d8b093e0920ee89c4f54cbf80513b6d8c92e6abe877213c0b4a0917ea2ec84f78ad09400cf4565041cdf5f708e4be8ef630a114b8ece0e40ac1ec55561d968b6611757493f89a57cf5f62faf4bd9ae8098927c05edbe1e4af1d43e92f03ef8635331bbaab24ed5a69bca1007796cdfcb95489b62c176c43b6fb9e0643cdb9824e0436120e09f8c47472455cc33d909266be4af437add4fe591ac8947e7568c27707c0f2215e8301ea7a61624277c273d7c98ac92aa1bea703ba1dd7c8cce1c74c4666fd245594f4dafc01459f1dd8ae4529b60be292bd9c20c71d107c209469646728dbfb4bfbc48e8626632c5abfe47f8e4a09eb5fddd3d544f146a226d6bddb5adbc017db3022280a9dcc602c8e6c9a08350cf91e5a21a523e634c5f3a80ca8922dea3fcff11dc54655897caa99621915a476d6056ca30750fa3129e9a7aff1dbd338f20e8ca56247c42454f2a1a404969def34c406e7cc90b33209fffe17e29ce66efd55d04daf83e40ea0caf2f0af5651ca26a9208a938931e0071b271c07010ac85e9f0939fcc8facb9d6f9d9518b358c94960f082162bd8d49dd006595bcd00777595b471aac10750d0980ab22d1d49aed175db54c7c45e389fc2be773f2c08235c7d7154b8949c7cfa85859422c01f719f03860fdd5ae13fd55b20e3f", 0x1000}], 0x2, &(0x7f0000001340)="46b1c5e9a4204ada96d3a496318cdcc6bf3dae23962a84e85c2d9f2cb1e86cc3145dcb8140", 0x25, 0x24005011}, 0x40) mkdirat(0xffffffffffffffff, 0x0, 0x100) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) msgsnd(0x0, 0x0, 0x8, 0x800) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000180)={0x34, 0x3, 0x2, 0x83a, 0x1, [0x6, 0x9, 0x8, 0x10]}) msgsnd(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="96f6"], 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffff7f00000000, 0x800) kernel console output (not intermixed with test programs): rget info (-71) [ 968.770620][T13807] usb 6-1: USB disconnect, device number 78 [ 968.800971][T13811] usb 8-1: config 0 has no interfaces? [ 968.835729][ T2138] usb 3-1: could not probe fw (-71) [ 968.877001][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.889934][T13811] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 968.995141][T13811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.053803][T13811] usb 8-1: Product: syz [ 969.142236][T13804] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 969.194347][T13811] usb 8-1: Manufacturer: syz [ 969.203848][T13811] usb 8-1: SerialNumber: syz [ 969.296612][T13064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.318172][T13811] usb 8-1: config 0 descriptor?? [ 969.345524][T13804] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 969.374753][T13804] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.403968][T13804] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 969.413322][T13804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.534564][ T9367] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 969.697597][T13804] usb 5-1: usb_control_msg returned -32 [ 969.730760][T13804] usbtmc 5-1:16.0: can't read capabilities [ 969.981178][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.989464][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.998212][T13064] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 970.332562][ T9367] usb 4-1: Using ep0 maxpacket: 8 [ 970.634125][T13064] usb 3-1: config 0 has no interfaces? [ 970.688090][ T9367] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 970.858674][T13064] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 970.877229][ T9367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.042521][T13019] usb 5-1: USB disconnect, device number 77 [ 971.069724][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.119797][T13064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.134680][ T9367] usb 4-1: Product: syz [ 971.138908][ T9367] usb 4-1: Manufacturer: syz [ 971.143528][ T9367] usb 4-1: SerialNumber: syz [ 971.154095][T13064] usb 3-1: Product: syz [ 971.161648][T13064] usb 3-1: Manufacturer: syz [ 971.170965][T13064] usb 3-1: SerialNumber: syz [ 971.176436][ T9367] usb 4-1: config 0 descriptor?? [ 971.213948][T13064] usb 3-1: config 0 descriptor?? [ 971.483412][ T9367] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 971.494654][T16692] netlink: 'syz.2.2619': attribute type 2 has an invalid length. [ 972.105448][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.344009][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.042728][ T9367] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 973.063295][ T9367] usb 4-1: USB disconnect, device number 75 [ 973.134921][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.153637][T13064] usb 8-1: USB disconnect, device number 48 [ 973.286047][T13804] usb 3-1: USB disconnect, device number 77 [ 973.484965][ T9374] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 973.540239][ T30] audit: type=1326 audit(1746573910.225:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16716 comm="syz.2.2624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x0 [ 973.624489][T13064] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 973.718667][ T9374] usb 5-1: config 0 has no interfaces? [ 973.795143][T13064] usb 8-1: Using ep0 maxpacket: 32 [ 973.819324][T13064] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 973.829134][T13064] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.859606][T13064] usb 8-1: Product: syz [ 973.863849][T13064] usb 8-1: Manufacturer: syz [ 973.909504][T13064] usb 8-1: SerialNumber: syz [ 973.924335][ T9374] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 973.952512][ T9374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.969927][T13064] usb 8-1: config 0 descriptor?? [ 974.009073][ T9374] usb 5-1: Product: syz [ 974.049072][ T9374] usb 5-1: Manufacturer: syz [ 974.100367][ T9374] usb 5-1: SerialNumber: syz [ 974.123644][ T9374] usb 5-1: config 0 descriptor?? [ 974.170368][T16722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2626'. [ 974.175529][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.405406][T16722] macvtap1: entered promiscuous mode [ 974.439852][T16713] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 974.515449][T16722] batadv0: entered promiscuous mode [ 974.546394][T16722] macvtap1: entered allmulticast mode [ 974.560460][T13064] peak_usb 8-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 974.589382][T16722] batadv0: entered allmulticast mode [ 974.610186][T13064] peak_usb 8-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 974.638166][T16722] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 974.682246][T16725] batadv0: left allmulticast mode [ 974.692344][T16725] batadv0: left promiscuous mode [ 974.758956][T16732] SET target dimension over the limit! [ 974.787001][T13064] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -71 [ 974.838993][T13064] usb 8-1: USB disconnect, device number 49 [ 975.015707][ T9374] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 975.214712][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.278160][ T9374] usb 3-1: Using ep0 maxpacket: 16 [ 975.332842][ T9374] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 975.406579][ T9374] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 975.422868][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.437216][ T9374] usb 3-1: config 0 has no interface number 0 [ 975.453407][ T9374] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 975.539121][ T9374] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 975.608799][ T9374] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 975.629251][ T9374] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 975.664506][ T9374] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 975.708514][ T9374] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 975.761137][ T9374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.791728][ T9374] usb 3-1: config 0 descriptor?? [ 975.799576][T16732] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 975.822185][ T9374] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 976.092316][ T9374] usb 3-1: USB disconnect, device number 78 [ 976.092608][T13804] usb 5-1: USB disconnect, device number 78 [ 976.215829][ T7486] udevd[7486]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 976.264861][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.084517][T13804] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 977.106155][T16754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.114769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.124321][T16754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.146413][T16753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.161029][T16753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.171948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.296926][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.334843][ T9374] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 977.355865][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.382434][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.454880][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.540918][ T9374] usb 8-1: config 0 has no interfaces? [ 977.542447][T13804] usb 6-1: config 0 has no interfaces? [ 977.549059][ T9374] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 977.577560][T13804] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 977.586846][T13804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.604711][T13804] usb 6-1: Product: syz [ 977.609387][T13804] usb 6-1: Manufacturer: syz [ 977.623208][T13804] usb 6-1: SerialNumber: syz [ 977.713460][ T9374] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.722936][ T9374] usb 8-1: Product: syz [ 977.729608][ T9374] usb 8-1: Manufacturer: syz [ 977.741819][ T9374] usb 8-1: SerialNumber: syz [ 977.763143][ T9374] usb 8-1: config 0 descriptor?? [ 977.900056][T13804] usb 6-1: config 0 descriptor?? [ 978.064108][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.132447][ T30] audit: type=1326 audit(1746573915.815:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16778 comm="syz.3.2638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c23d8e969 code=0x0 [ 979.685143][T16759] vlan6: entered promiscuous mode [ 979.716438][T13019] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 979.774345][T13064] usb 8-1: USB disconnect, device number 50 [ 979.914173][T13019] usb 5-1: config 0 has no interfaces? [ 979.956860][T13019] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 980.040039][T13804] usb 6-1: USB disconnect, device number 79 [ 980.101799][T13019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.140178][T13019] usb 5-1: Product: syz [ 980.164949][T13019] usb 5-1: Manufacturer: syz [ 980.207791][T13019] usb 5-1: SerialNumber: syz [ 980.545970][T13019] usb 5-1: config 0 descriptor?? [ 982.739569][ T9374] usb 5-1: USB disconnect, device number 79 [ 982.808750][ T9373] net_ratelimit: 7 callbacks suppressed [ 982.808769][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.255180][ T30] audit: type=1326 audit(1746573919.885:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 983.354501][ T30] audit: type=1326 audit(1746573919.885:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 983.706904][ T30] audit: type=1326 audit(1746573920.205:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 983.788075][ T9374] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 983.845057][ T30] audit: type=1326 audit(1746573920.205:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 983.875055][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.963796][ T30] audit: type=1326 audit(1746573920.205:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 983.986791][ T30] audit: type=1326 audit(1746573920.205:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 983.995751][ T9374] usb 4-1: Using ep0 maxpacket: 16 [ 984.020357][ T30] audit: type=1326 audit(1746573920.205:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 984.077498][ T9374] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 984.092645][ T30] audit: type=1326 audit(1746573920.205:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 984.104560][ T9374] usb 4-1: config 252 has no interface number 0 [ 984.143789][ T9374] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 984.163545][ T30] audit: type=1326 audit(1746573920.205:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 984.271743][ T30] audit: type=1326 audit(1746573920.205:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 984.303471][ T30] audit: type=1326 audit(1746573920.205:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 985.147291][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.184525][ T30] audit: type=1326 audit(1746573920.205:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 985.203421][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.230910][ T30] audit: type=1326 audit(1746573920.205:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 985.334661][ T30] audit: type=1326 audit(1746573920.205:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 985.373070][ T9374] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 985.384633][ T9374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.392833][ T9374] usb 4-1: Product: syz [ 985.392856][ T9374] usb 4-1: Manufacturer: syz [ 985.392874][ T9374] usb 4-1: SerialNumber: syz [ 985.399043][ T30] audit: type=1326 audit(1746573920.205:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 985.399107][ T30] audit: type=1326 audit(1746573920.215:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 985.399156][ T30] audit: type=1326 audit(1746573920.215:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 985.405201][ T30] audit: type=1326 audit(1746573920.215:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16806 comm="syz.2.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x7ffc0000 [ 985.499554][ T9374] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 985.634705][T13064] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 985.867364][T13064] usb 3-1: config 0 has no interfaces? [ 985.880050][T13064] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 985.880075][T13064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.880090][T13064] usb 3-1: Product: syz [ 985.880101][T13064] usb 3-1: Manufacturer: syz [ 985.880113][T13064] usb 3-1: SerialNumber: syz [ 985.882388][T13064] usb 3-1: config 0 descriptor?? [ 986.551236][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.695467][ T2138] usb 4-1: Failed to submit usb control message: -110 [ 986.854457][ T2138] usb 4-1: unable to send the bmi data to the device: -110 [ 986.937186][ T2138] usb 4-1: unable to get target info from device [ 987.018843][ T2138] usb 4-1: could not get target info (-110) [ 987.056387][ T2138] usb 4-1: could not probe fw (-110) [ 987.310812][ T9373] usb 4-1: USB disconnect, device number 76 [ 987.504635][ T9374] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 987.618360][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.678047][ T9374] usb 5-1: config 0 has no interfaces? [ 987.791206][ T9374] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 987.820069][T13064] usb 3-1: USB disconnect, device number 79 [ 987.884538][ T9374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.915016][ T9374] usb 5-1: Product: syz [ 987.919299][ T9374] usb 5-1: Manufacturer: syz [ 987.924637][ T9374] usb 5-1: SerialNumber: syz [ 988.174652][T13064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.277720][ T9374] usb 5-1: config 0 descriptor?? [ 988.933093][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.097151][ T9374] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 989.134828][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.344078][ T9374] usb 4-1: config 0 has no interfaces? [ 989.428106][ T9374] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 989.481578][ T9374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.557653][ T9374] usb 4-1: Product: syz [ 989.561912][ T9374] usb 4-1: Manufacturer: syz [ 989.707214][ T9374] usb 4-1: SerialNumber: syz [ 989.759552][ T9374] usb 4-1: config 0 descriptor?? [ 990.031458][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.848857][T13804] usb 5-1: USB disconnect, device number 80 [ 991.054695][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.086949][T16895] ptrace attach of "./syz-executor exec"[10089] was attempted by "./syz-executor exec"[16895] [ 991.215028][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.094739][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.985128][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.991834][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.154310][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.445980][T16912] tipc: Enabled bearer , priority 0 [ 993.907607][T13804] usb 4-1: USB disconnect, device number 77 [ 994.103587][T16928] netlink: zone id is out of range [ 994.175125][ T9374] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 994.191964][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.265534][T13064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.368379][ T9374] usb 5-1: config 0 has no interfaces? [ 994.405965][ T9374] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 994.415894][ T9374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.471611][ T9374] usb 5-1: Product: syz [ 994.479148][ T9374] usb 5-1: Manufacturer: syz [ 994.484629][T13804] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 994.499829][ T9374] usb 5-1: SerialNumber: syz [ 994.836768][ T9374] usb 5-1: config 0 descriptor?? [ 994.880178][T13804] usb 4-1: config 0 has no interfaces? [ 994.895486][T13804] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 994.905794][T13804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.924870][T13804] usb 4-1: Product: syz [ 994.935746][T13804] usb 4-1: Manufacturer: syz [ 994.941345][T13804] usb 4-1: SerialNumber: syz [ 994.964009][T13804] usb 4-1: config 0 descriptor?? [ 995.257864][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.293675][T16935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2667'. [ 995.377732][T16936] usb usb8: usbfs: process 16936 (syz.7.2668) did not claim interface 0 before use [ 995.508098][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2667'. [ 996.056718][T13064] usb 5-1: USB disconnect, device number 81 [ 996.429286][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.181939][ T9373] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 997.300067][T13064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.365306][ T9373] usb 5-1: config 0 has no interfaces? [ 997.378370][ T9373] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 997.397316][ T9373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.405793][ T9373] usb 5-1: Product: syz [ 997.410053][ T9373] usb 5-1: Manufacturer: syz [ 997.451254][ T9373] usb 5-1: SerialNumber: syz [ 997.460874][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.486837][ T9373] usb 5-1: config 0 descriptor?? [ 998.097011][T13064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.358069][ T9374] usb 4-1: USB disconnect, device number 78 [ 998.501627][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.696045][T16982] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2675'. [ 999.076359][T13064] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 999.695777][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.729218][T13064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.759892][T13064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.787441][T13064] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 999.823365][T13064] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1000.138550][T13064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.177880][T13064] usb 3-1: config 0 descriptor?? [ 1000.343045][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.395015][ T9367] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1000.605482][ T9367] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1000.701595][ T9367] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1000.739086][T13064] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 1000.804543][ T9374] usb 5-1: USB disconnect, device number 82 [ 1000.828522][ T9367] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1000.839811][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.893937][ T9367] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1000.901925][T13064] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1000.934814][ T9367] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1000.961748][ T9367] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1001.096526][ T9367] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1001.206549][ T9367] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.246901][ T9367] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1001.286951][ T9367] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1001.334496][ T9374] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1001.357876][ T9367] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.393801][T16980] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 1001.403920][T16980] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 1001.465175][ T9367] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1001.513085][ T9374] usb 5-1: config 0 has no interfaces? [ 1001.540689][ T9367] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1001.559189][ T9367] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.574795][ T9367] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1001.594779][ T9367] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1001.607329][ T9367] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.617309][ T9367] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1001.617646][ T9374] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1001.628708][ T9367] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1001.630260][ T9367] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.674660][ T9367] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1001.730083][ T9374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.738515][ T9374] usb 5-1: Product: syz [ 1001.742751][ T9374] usb 5-1: Manufacturer: syz [ 1001.764893][ T9374] usb 5-1: SerialNumber: syz [ 1001.819075][ T9374] usb 5-1: config 0 descriptor?? [ 1001.833020][ T9367] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1001.842011][ T9367] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.851755][ T9367] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1001.883954][ T9367] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1001.884242][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.924225][ T9367] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1001.934143][ T9367] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1001.962953][ T9367] usb 6-1: Product: syz [ 1002.045966][ T9367] usb 6-1: Manufacturer: syz [ 1002.054089][ T9367] usb 6-1: SerialNumber: syz [ 1002.062045][ T9367] usb 6-1: config 0 descriptor?? [ 1002.098448][ T9367] yurex 6-1:0.0: USB YUREX device now attached to Yurex #1 [ 1002.836091][T13064] usb 3-1: reset high-speed USB device number 80 using dummy_hcd [ 1003.308223][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.354598][T13064] usb 3-1: device descriptor read/64, error -32 [ 1003.497849][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.700472][T13064] usb 3-1: reset high-speed USB device number 80 using dummy_hcd [ 1003.774998][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2679'. [ 1003.844615][T13064] usb 3-1: device descriptor read/64, error -32 [ 1003.898487][T17012] netlink: 'syz.5.2679': attribute type 1 has an invalid length. [ 1004.169923][T17015] netlink: 'syz.7.2682': attribute type 20 has an invalid length. [ 1004.184747][T13064] usb 3-1: reset high-speed USB device number 80 using dummy_hcd [ 1004.224299][T13064] usb 3-1: device descriptor read/8, error -32 [ 1004.430216][T17012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1004.515666][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.557072][T17014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1004.566160][T17014] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1004.583461][T17014] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 1004.654703][T13064] usb 3-1: reset high-speed USB device number 80 using dummy_hcd [ 1004.774779][T13064] usb 3-1: device descriptor read/8, error -32 [ 1005.075314][T13064] raw-gadget.0 gadget.2: failed to queue suspend event [ 1005.082814][T13811] usb 3-1: USB disconnect, device number 80 [ 1005.173380][ T9373] usb 5-1: USB disconnect, device number 83 [ 1005.360322][T13811] raw-gadget.0 gadget.2: failed to queue reset event [ 1005.444616][T13811] raw-gadget.0 gadget.2: failed to queue resume event [ 1005.539544][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.554324][T13811] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1005.564798][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1005.572195][T13811] raw-gadget.0 gadget.2: failed to queue reset event [ 1005.644574][T13811] raw-gadget.0 gadget.2: failed to queue resume event [ 1005.750091][T13811] usb 3-1: device descriptor read/64, error -32 [ 1005.842931][T16981] raw-gadget.0 gadget.2: failed to queue suspend event [ 1005.894878][T16981] raw-gadget.0 gadget.2: failed to queue disconnect event [ 1006.157969][T17025] netlink: 'syz.3.2685': attribute type 5 has an invalid length. [ 1006.511890][T17025] ip6erspan0: entered promiscuous mode [ 1006.574706][T13064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.582870][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.734296][ T9374] usb 6-1: USB disconnect, device number 80 [ 1006.955848][ T9374] yurex 6-1:0.0: USB YUREX #1 now disconnected [ 1007.544671][ T9373] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1007.618658][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.698817][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.823907][ T9373] usb 8-1: config 0 has no interfaces? [ 1007.835458][ T9373] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1007.847536][ T9373] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.943755][ T9373] usb 8-1: Product: syz [ 1007.953013][ T9373] usb 8-1: Manufacturer: syz [ 1007.964502][ T9373] usb 8-1: SerialNumber: syz [ 1008.068913][ T9373] usb 8-1: config 0 descriptor?? [ 1008.655447][T13811] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1008.710451][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.563753][T13811] usb 4-1: config 0 has no interfaces? [ 1009.730927][T13064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.885939][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.177827][T13811] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1010.188672][T13811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.214485][T13811] usb 4-1: Product: syz [ 1010.234816][T13811] usb 4-1: Manufacturer: syz [ 1010.246436][T13811] usb 4-1: SerialNumber: syz [ 1010.279192][T13811] usb 4-1: config 0 descriptor?? [ 1010.307773][T13064] usb 8-1: USB disconnect, device number 51 [ 1010.724538][T13811] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1011.105522][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.342566][T13811] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.369113][T13811] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1011.392787][T13811] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1011.420257][T13811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.205408][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.404585][T13064] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1012.564952][T13064] usb 6-1: Using ep0 maxpacket: 16 [ 1012.734783][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.037541][T17077] veth1_macvtap: left promiscuous mode [ 1013.043160][T17077] macsec0: entered promiscuous mode [ 1013.061462][T17077] veth1_macvtap: entered promiscuous mode [ 1013.067820][T17077] macsec0: left promiscuous mode [ 1013.245730][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.934825][ T9367] usb 4-1: USB disconnect, device number 79 [ 1014.305086][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.592027][T13811] usb 3-1: USB disconnect, device number 83 [ 1014.665075][ T9374] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1014.859083][ T9374] usb 4-1: config 0 has no interfaces? [ 1014.876738][ T9374] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1014.886256][ T9374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.906579][ T9374] usb 4-1: Product: syz [ 1014.910795][ T9374] usb 4-1: Manufacturer: syz [ 1014.964456][ T9374] usb 4-1: SerialNumber: syz [ 1014.977421][ T9374] usb 4-1: config 0 descriptor?? [ 1015.357581][T13064] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1015.378374][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.415108][ T9380] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1015.491321][T13064] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1015.548700][T13064] usb 6-1: can't read configurations, error -71 [ 1015.638160][ T9380] usb 8-1: config 0 has no interfaces? [ 1015.752311][ T9380] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1015.772656][ T9380] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.781494][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.841315][ T9380] usb 8-1: Product: syz [ 1015.849617][ T9380] usb 8-1: Manufacturer: syz [ 1015.862266][ T9380] usb 8-1: SerialNumber: syz [ 1016.075245][ T9380] usb 8-1: config 0 descriptor?? [ 1016.481177][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1016.481196][ T30] audit: type=1326 audit(1746573953.165:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.7.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1016.524565][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.536284][ T30] audit: type=1326 audit(1746573953.215:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.7.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd342b8d2d0 code=0x7ffc0000 [ 1016.614672][T17088] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2699'. [ 1016.640528][ T30] audit: type=1326 audit(1746573953.215:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.7.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1017.142403][ T30] audit: type=1326 audit(1746573953.215:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.7.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1017.219243][ T30] audit: type=1326 audit(1746573953.225:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.7.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1017.263494][ T30] audit: type=1326 audit(1746573953.225:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.7.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1017.294846][T13064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.408693][ T30] audit: type=1326 audit(1746573953.225:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.7.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1017.514677][ T30] audit: type=1326 audit(1746573953.225:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.7.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1017.544730][ T30] audit: type=1326 audit(1746573953.225:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.7.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1017.567891][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.576418][ T30] audit: type=1326 audit(1746573953.225:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.7.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1018.263605][ T9374] usb 4-1: USB disconnect, device number 80 [ 1018.284646][ T9380] usb 8-1: USB disconnect, device number 52 [ 1018.614732][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.090003][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.344606][ T9380] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1019.694649][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.749399][ T9380] usb 8-1: config 0 has no interfaces? [ 1019.884995][ T9380] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1019.910455][ T9380] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.223776][T17119] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1020.270313][ T9380] usb 8-1: Product: syz [ 1020.305987][ T9380] usb 8-1: Manufacturer: syz [ 1020.310655][ T9380] usb 8-1: SerialNumber: syz [ 1020.388698][ T9380] usb 8-1: config 0 descriptor?? [ 1020.797347][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.976200][T17131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.234847][T13064] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1021.535381][T13064] usb 3-1: config 0 has no interfaces? [ 1021.625130][T13064] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1021.659908][T13064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.693800][T13064] usb 3-1: Product: syz [ 1021.708384][T13064] usb 3-1: Manufacturer: syz [ 1021.713145][T13064] usb 3-1: SerialNumber: syz [ 1021.732810][T13064] usb 3-1: config 0 descriptor?? [ 1021.858179][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.347339][T13064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.694478][ T9374] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1022.887919][T13064] usb 8-1: USB disconnect, device number 53 [ 1022.896628][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.910357][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.925273][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.934124][ T9374] usb 6-1: config 0 has no interfaces? [ 1022.951397][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.088283][ T9374] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1023.217217][ T9374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.298517][T13811] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1023.457661][ T9374] usb 6-1: Product: syz [ 1023.483103][ T9374] usb 6-1: Manufacturer: syz [ 1023.504980][T13811] usb 5-1: config 0 has no interfaces? [ 1023.535050][T13811] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1023.551421][ T9374] usb 6-1: SerialNumber: syz [ 1023.585163][ T9374] usb 6-1: config 0 descriptor?? [ 1023.664008][T13811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.886034][T13811] usb 5-1: Product: syz [ 1023.931924][T17140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2710'. [ 1024.083196][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.097632][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1024.097648][ T30] audit: type=1326 audit(1746573960.605:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1024.180586][ T30] audit: type=1326 audit(1746573960.605:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1024.220321][ T30] audit: type=1326 audit(1746573960.605:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ac338d2d0 code=0x7ffc0000 [ 1024.234469][T13811] usb 5-1: Manufacturer: syz [ 1024.250797][ T30] audit: type=1326 audit(1746573960.605:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1024.348267][ T30] audit: type=1326 audit(1746573960.605:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1024.397858][T13811] usb 5-1: SerialNumber: syz [ 1024.435764][T13811] usb 5-1: config 0 descriptor?? [ 1024.514672][ T30] audit: type=1326 audit(1746573960.615:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1024.560537][ T30] audit: type=1326 audit(1746573960.615:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1024.685390][ T9374] usb 3-1: USB disconnect, device number 84 [ 1024.732185][ T30] audit: type=1326 audit(1746573960.615:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1024.811803][ T30] audit: type=1326 audit(1746573960.615:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1024.949312][ T30] audit: type=1326 audit(1746573960.615:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17137 comm="syz.5.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1025.190268][T13811] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1025.419786][T13811] usb 8-1: config 0 has no interfaces? [ 1025.432914][T13811] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1025.524574][T13064] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1025.540148][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.588276][T13811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.597132][ T9367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.655359][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.797467][T13811] usb 8-1: Product: syz [ 1025.808429][T13811] usb 8-1: Manufacturer: syz [ 1025.813467][T13811] usb 8-1: SerialNumber: syz [ 1025.836490][T13811] usb 8-1: config 0 descriptor?? [ 1026.108482][T13064] usb 3-1: config 0 has no interfaces? [ 1026.513469][T13064] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1026.657883][T13064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.683798][T13064] usb 3-1: Product: syz [ 1026.688300][T13064] usb 3-1: Manufacturer: syz [ 1026.692940][T13064] usb 3-1: SerialNumber: syz [ 1026.731053][T13064] usb 3-1: config 0 descriptor?? [ 1026.958614][T13064] usb 6-1: USB disconnect, device number 83 [ 1027.035920][T13804] net_ratelimit: 3 callbacks suppressed [ 1027.035938][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.184877][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 1027.196578][T17172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2713'. [ 1027.678272][ T9374] usb 5-1: USB disconnect, device number 84 [ 1027.707654][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.924816][ T9373] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1028.257250][ T9373] usb 6-1: config 0 has no interfaces? [ 1028.271756][ T9373] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1028.283805][ T9373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.303967][ T9373] usb 6-1: Product: syz [ 1028.315975][ T9374] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1028.369832][ T9373] usb 6-1: Manufacturer: syz [ 1028.381835][ T9373] usb 6-1: SerialNumber: syz [ 1028.402702][ T9373] usb 6-1: config 0 descriptor?? [ 1028.439990][ T9373] usb 8-1: USB disconnect, device number 54 [ 1028.484475][ T9374] usb 5-1: Using ep0 maxpacket: 16 [ 1028.491535][ T9374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.503925][ T9374] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1028.561007][ T9374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.629571][ T9374] usb 5-1: config 0 descriptor?? [ 1028.734880][T13064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.743110][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.818556][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.827829][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.836510][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.943662][ T9374] usbhid 5-1:0.0: can't add hid device: -71 [ 1028.950368][ T9374] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1029.011671][ T9374] usb 5-1: USB disconnect, device number 85 [ 1029.128501][T13804] usb 3-1: USB disconnect, device number 85 [ 1029.864738][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.579475][T13064] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1030.620657][T13064] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1030.954627][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.417202][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.564691][ T9374] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1031.624671][T13804] usb 6-1: USB disconnect, device number 84 [ 1031.968394][ T9374] usb 5-1: config 0 has no interfaces? [ 1032.073955][ T9373] net_ratelimit: 2 callbacks suppressed [ 1032.073970][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.095766][ T9374] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1032.134078][ T9374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.157073][ T9374] usb 5-1: Product: syz [ 1032.161303][ T9374] usb 5-1: Manufacturer: syz [ 1032.179060][ T9374] usb 5-1: SerialNumber: syz [ 1032.218619][ T9374] usb 5-1: config 0 descriptor?? [ 1033.137050][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.934942][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.943860][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.956542][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.250671][T13804] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1034.274753][T17242] netlink: 'syz.7.2730': attribute type 1 has an invalid length. [ 1034.446829][T13064] usb 5-1: USB disconnect, device number 86 [ 1034.467543][T13804] usb 4-1: config 0 has no interfaces? [ 1034.489440][T13804] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1034.641671][T13804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.650182][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.674237][T13804] usb 4-1: Product: syz [ 1034.683610][T13804] usb 4-1: Manufacturer: syz [ 1034.770574][T13804] usb 4-1: SerialNumber: syz [ 1034.965429][T13804] usb 4-1: config 0 descriptor?? [ 1034.991620][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.545813][T13804] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1035.627546][T17251] tipc: Started in network mode [ 1035.632466][T17251] tipc: Node identity , cluster identity 4711 [ 1035.685795][T17251] tipc: Failed to obtain node identity [ 1035.708149][T17251] tipc: Enabling of bearer rejected, failed to enable media [ 1035.717130][T13804] usb 5-1: Using ep0 maxpacket: 8 [ 1035.800645][T13804] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1035.827042][T13804] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1035.843438][T13804] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1035.854551][ T9373] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1035.919134][T13804] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1035.932014][T13804] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1035.968285][T13804] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1035.980598][T13804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.015874][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.154485][ T9373] usb 6-1: Using ep0 maxpacket: 32 [ 1036.175708][ T9373] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1036.228560][ T9373] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1036.234968][T13804] usb 5-1: GET_CAPABILITIES returned 0 [ 1036.250994][T13804] usbtmc 5-1:16.0: can't read capabilities [ 1036.294468][ T9373] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1036.320424][ T9373] usb 6-1: Product: syz [ 1036.328484][ T9373] usb 6-1: Manufacturer: syz [ 1036.335871][ T9373] usb 6-1: SerialNumber: syz [ 1036.343681][ T9373] usb 6-1: config 0 descriptor?? [ 1036.367691][T17252] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1036.502544][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.609639][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1036.609661][ T30] audit: type=1326 audit(1746573973.245:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17243 comm="syz.4.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2e78e969 code=0x7ffc0000 [ 1036.729687][T17252] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1036.791208][T17261] netlink: 'syz.7.2734': attribute type 13 has an invalid length. [ 1036.813635][ T30] audit: type=1326 audit(1746573973.245:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17243 comm="syz.4.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2e78e969 code=0x7ffc0000 [ 1036.877332][T17252] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1037.052236][T17261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.067439][T17261] bridge0: port 3(vlan2) entered blocking state [ 1037.073888][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.073905][T17261] bridge0: port 3(vlan2) entered forwarding state [ 1037.096504][T17264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1037.163977][T17261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.181976][T17261] bridge0: port 4(vlan5) entered blocking state [ 1037.189139][T17261] bridge0: port 4(vlan5) entered forwarding state [ 1037.202756][T17261] batman_adv: batadv0: Interface activated: dummy0 [ 1037.262418][T13811] usb 6-1: USB disconnect, device number 85 [ 1037.283306][ T9367] usb 5-1: USB disconnect, device number 87 [ 1037.297658][T17261] batadv0: mtu less than device minimum [ 1037.350085][T17261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.361662][T17261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.373122][T17261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.384618][T17261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.395974][T17261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.407320][T17261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.418760][T17261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.430269][T17261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.441818][T17261] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.504495][ T30] audit: type=1326 audit(1746573973.245:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17243 comm="syz.4.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2c2e78e969 code=0x7ffc0000 [ 1037.541590][ T9374] usb 4-1: USB disconnect, device number 81 [ 1037.691702][T17264] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1037.749654][T17264] bond0: (slave lo): Error: Device type is different from other slaves [ 1037.959236][ T30] audit: type=1326 audit(1746573973.245:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17243 comm="syz.4.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2e78e969 code=0x7ffc0000 [ 1038.068042][ T30] audit: type=1326 audit(1746573973.245:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17243 comm="syz.4.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2e78e969 code=0x7ffc0000 [ 1038.250621][ T9374] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1038.395264][T17272] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2737'. [ 1038.454951][ T9374] usb 4-1: Using ep0 maxpacket: 16 [ 1038.473432][ T9374] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1038.487224][ T9374] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1038.520687][ T9374] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1038.530206][ T9374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.539201][ T9374] usb 4-1: Product: syz [ 1038.545055][ T9374] usb 4-1: Manufacturer: syz [ 1038.549933][ T9374] usb 4-1: SerialNumber: syz [ 1038.674658][ T9380] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1038.856409][ T9380] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1038.867479][ T9380] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1038.912489][ T9380] usb 5-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 1039.127499][ T9380] usb 5-1: config 220 has no interface number 2 [ 1039.143210][ T9380] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1039.189743][ T9380] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1039.210393][ T9380] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1039.232352][ T9380] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1039.256814][ T9380] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1039.270308][ T9380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.279088][ T9380] usb 5-1: Product: syz [ 1039.283468][ T9380] usb 5-1: Manufacturer: syz [ 1039.292123][ T9380] usb 5-1: SerialNumber: syz [ 1039.520637][ T9380] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1039.532076][ T9380] usb 5-1: No valid video chain found. [ 1039.591742][ T9380] usb 5-1: selecting invalid altsetting 0 [ 1039.646953][ T9380] usb 5-1: selecting invalid altsetting 0 [ 1039.658338][ T9380] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1039.738021][ T9380] usb 5-1: USB disconnect, device number 88 [ 1041.968323][ T9374] usbhid 4-1:1.0: can't add hid device: -71 [ 1042.083606][ T9374] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1042.235257][ T9374] usb 4-1: USB disconnect, device number 82 [ 1043.515570][ T9374] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1043.775396][ T36] net_ratelimit: 19 callbacks suppressed [ 1043.775414][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.790422][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.799166][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.843728][ T9374] usb 3-1: config 0 has no interfaces? [ 1043.917878][ T9374] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1043.954518][ T9374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.995473][ T9374] usb 3-1: Product: syz [ 1044.004977][ T9374] usb 3-1: Manufacturer: syz [ 1044.027006][ T9374] usb 3-1: SerialNumber: syz [ 1044.066315][ T9374] usb 3-1: config 0 descriptor?? [ 1044.543833][T17319] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2749'. [ 1045.257342][T17325] macsec0: entered promiscuous mode [ 1045.264140][T17325] macsec0: left promiscuous mode [ 1046.095796][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.110811][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.119754][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.814811][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.900342][ T9374] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1047.064655][ T9374] usb 6-1: Using ep0 maxpacket: 8 [ 1047.072171][ T9374] usb 6-1: config 0 has no interfaces? [ 1047.085463][ T9374] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1047.095040][ T9374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.185514][ T9374] usb 6-1: Product: syz [ 1047.196584][ T9374] usb 6-1: Manufacturer: syz [ 1047.204736][ T9374] usb 6-1: SerialNumber: syz [ 1047.220634][ T9374] usb 6-1: config 0 descriptor?? [ 1047.520556][T13804] usb 3-1: USB disconnect, device number 86 [ 1047.588915][ T9374] usb 6-1: USB disconnect, device number 86 [ 1048.014864][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.023691][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.054082][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.214623][T13811] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1048.550968][T13811] usb 8-1: config 0 has no interfaces? [ 1048.637994][T13811] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1048.730276][T13811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.757556][T13811] usb 8-1: Product: syz [ 1048.774716][T13811] usb 8-1: Manufacturer: syz [ 1048.792318][T13811] usb 8-1: SerialNumber: syz [ 1048.901804][T13811] usb 8-1: config 0 descriptor?? [ 1049.138273][ T9374] net_ratelimit: 1 callbacks suppressed [ 1049.138291][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.311581][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.336825][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.349077][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.187968][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.919872][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2759'. [ 1051.215516][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.924918][ T2138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.933714][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.112781][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.414764][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.919006][ T9380] usb 8-1: USB disconnect, device number 55 [ 1053.075614][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2762'. [ 1053.112480][T17385] vlan3: entered allmulticast mode [ 1053.286113][T17392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2763'. [ 1054.409408][T17403] netlink: 'syz.3.2765': attribute type 12 has an invalid length. [ 1054.430131][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.496176][ T30] audit: type=1326 audit(1746573991.185:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17399 comm="syz.2.2766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0597b8e969 code=0x0 [ 1054.518171][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.541252][ T36] net_ratelimit: 5 callbacks suppressed [ 1054.541272][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.561768][ T9374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.571132][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.847154][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.864681][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.164502][ T9380] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1056.391414][ T9380] usb 3-1: config 0 has no interfaces? [ 1056.452305][ T9380] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1056.481864][ T9380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.541205][ T9380] usb 3-1: Product: syz [ 1056.549447][ T9380] usb 3-1: Manufacturer: syz [ 1056.554189][ T9380] usb 3-1: SerialNumber: syz [ 1056.592296][ T9380] usb 3-1: config 0 descriptor?? [ 1057.180430][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.638490][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.646924][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.655900][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.683613][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.325528][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2774'. [ 1059.541764][T17447] vivid-000: disconnect [ 1059.547954][T17447] net_ratelimit: 2 callbacks suppressed [ 1059.547973][T17447] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 1059.732440][T17432] vivid-000: reconnect [ 1060.327039][T13811] usb 3-1: USB disconnect, device number 87 [ 1060.404792][ T9380] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1060.417420][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.441451][T17453] wg1: entered promiscuous mode [ 1060.447828][T17453] wg1: entered allmulticast mode [ 1060.700558][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.721389][ T9380] usb 6-1: config 0 has no interfaces? [ 1060.774886][ T9380] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1060.790043][ T9380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.831011][T17454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.841051][ T9380] usb 6-1: Product: syz [ 1060.867194][ T9380] usb 6-1: Manufacturer: syz [ 1060.883287][ T9380] usb 6-1: SerialNumber: syz [ 1061.035368][ T9380] usb 6-1: config 0 descriptor?? [ 1061.234565][T13804] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1061.357298][T17451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.370610][T17451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.716362][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.793510][T13804] usb 5-1: Using ep0 maxpacket: 32 [ 1061.814631][T13804] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1061.900500][T13804] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1061.910620][T13804] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1061.919224][T13804] usb 5-1: Product: syz [ 1061.923440][T13804] usb 5-1: Manufacturer: syz [ 1061.989571][T13804] usb 5-1: SerialNumber: syz [ 1062.042076][T13804] usb 5-1: config 0 descriptor?? [ 1062.080346][T17457] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1062.564650][T13804] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1062.754259][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.773195][T13804] usb 3-1: config 0 has no interfaces? [ 1062.788492][T13804] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1062.798064][T13804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.826288][T13804] usb 3-1: Product: syz [ 1062.837584][T13804] usb 3-1: Manufacturer: syz [ 1062.904515][T13804] usb 3-1: SerialNumber: syz [ 1062.917571][T13804] usb 3-1: config 0 descriptor?? [ 1063.043376][T17475] loop2: detected capacity change from 0 to 7 [ 1063.080644][T17475] Dev loop2: unable to read RDB block 7 [ 1063.087953][T17475] loop2: unable to read partition table [ 1063.105515][T17475] loop2: partition table beyond EOD, truncated [ 1063.112016][T17475] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1063.375312][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.431920][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.471578][T13804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.801121][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.833531][ T9373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.134898][T13804] usb 5-1: USB disconnect, device number 89 [ 1064.266993][T13811] usb 6-1: USB disconnect, device number 87 [ 1064.894950][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.954451][T13811] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1065.338893][T13811] usb 6-1: config 0 has no interfaces? [ 1065.383360][ T9380] usb 3-1: USB disconnect, device number 88 [ 1065.489539][T13811] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1065.523833][T13811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.649195][T13811] usb 6-1: Product: syz [ 1065.671649][T13811] usb 6-1: Manufacturer: syz [ 1065.735378][T13811] usb 6-1: SerialNumber: syz [ 1066.004555][ T9380] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1066.178406][ T9380] usb 3-1: config 0 has no interfaces? [ 1066.212535][ T9380] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1066.222186][ T9380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.239932][T13019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.241100][T13811] usb 6-1: config 0 descriptor?? [ 1066.276853][ T9380] usb 3-1: Product: syz [ 1066.282387][ T9380] usb 3-1: Manufacturer: syz [ 1066.290246][ T9380] usb 3-1: SerialNumber: syz [ 1066.318050][ T9380] usb 3-1: config 0 descriptor?? [ 1066.815086][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.304607][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.182347][T13811] usb 6-1: USB disconnect, device number 88 [ 1068.344745][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.360852][T17519] batman_adv: batadv0: Adding interface: dummy0 [ 1068.384084][T17519] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1068.487322][T17519] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1068.724070][T17523] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1068.954528][T13811] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 1069.120144][T13811] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 1069.128755][T13811] usb 6-1: config 0 has no interface number 0 [ 1069.135640][T13811] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1069.171733][T13811] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1069.194692][T13064] usb 3-1: USB disconnect, device number 89 [ 1069.201756][T13811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.269264][T13811] usb 6-1: config 0 descriptor?? [ 1069.312929][T13811] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input49 [ 1069.377148][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.495898][T13811] usb 6-1: USB disconnect, device number 89 [ 1069.976134][T17537] ip6t_srh: unknown srh match flags B153 [ 1070.018791][T13811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.064191][T17536] netlink: 'syz.3.2794': attribute type 1 has an invalid length. [ 1070.345955][T17536] bond6: entered promiscuous mode [ 1070.352635][T17536] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1070.457967][T17537] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1070.550784][T17537] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1070.562516][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.614052][T17537] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1070.698774][T17537] bond6: (slave ip6gre1): making interface the new active one [ 1070.724713][T17537] ip6gre1: entered promiscuous mode [ 1070.969568][T17537] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 1072.335570][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2796'. [ 1074.491714][T17573] tipc: Started in network mode [ 1074.496934][T17573] tipc: Node identity 7f000001, cluster identity 4711 [ 1074.505488][T17573] tipc: New replicast peer: 0.0.0.0 [ 1074.511653][T17573] tipc: Enabled bearer , priority 10 [ 1075.256202][T17590] ptrace attach of "./syz-executor exec"[5855] was attempted by "./syz-executor exec"[17590] [ 1075.626519][T13804] tipc: Node number set to 2130706433 [ 1076.004770][ T9373] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1076.184574][ T9373] usb 6-1: Using ep0 maxpacket: 16 [ 1076.203598][ T9373] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1076.270751][ T9373] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1076.327521][ T9373] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1076.344476][ T9373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.386970][ T9373] usb 6-1: Product: syz [ 1076.391203][ T9373] usb 6-1: Manufacturer: syz [ 1076.419462][ T9373] usb 6-1: SerialNumber: syz [ 1076.457973][ T9373] usb 6-1: config 0 descriptor?? [ 1076.488363][ T9373] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1076.498442][ T9373] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1076.801194][T17593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.814984][T17593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.957479][T17602] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1077.178741][ T9373] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1077.188099][ T9373] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1077.378935][ T9373] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1077.396491][ T9373] em28xx 6-1:0.0: No AC97 audio processor [ 1077.446688][ T9373] usb 6-1: USB disconnect, device number 90 [ 1077.466047][ T9373] em28xx 6-1:0.0: Disconnecting em28xx [ 1077.505547][ T9373] em28xx 6-1:0.0: Freeing device [ 1078.348126][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 1078.585071][T13804] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1078.960222][T13804] usb 5-1: config 0 has no interfaces? [ 1078.982319][T13804] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1078.991861][T13804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.000396][T13804] usb 5-1: Product: syz [ 1079.015605][T13804] usb 5-1: Manufacturer: syz [ 1079.020360][T13804] usb 5-1: SerialNumber: syz [ 1079.261108][T13804] usb 5-1: config 0 descriptor?? [ 1079.314502][T13811] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1079.595459][ T9373] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1079.727344][T13811] usb 4-1: Using ep0 maxpacket: 16 [ 1079.784475][ T9373] usb 8-1: Using ep0 maxpacket: 8 [ 1080.027943][ T9373] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1080.048810][ T9373] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.086428][ T9373] usb 8-1: Product: syz [ 1080.110930][ T9373] usb 8-1: Manufacturer: syz [ 1080.132376][ T9373] usb 8-1: SerialNumber: syz [ 1080.527293][ T9373] usb 8-1: config 0 descriptor?? [ 1080.813264][ T30] audit: type=1326 audit(1746574017.475:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17608 comm="syz.5.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1080.881204][ T9373] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1081.004711][ T30] audit: type=1326 audit(1746574017.475:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17608 comm="syz.5.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1081.084221][ T30] audit: type=1326 audit(1746574017.475:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17608 comm="syz.5.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1081.509503][ T30] audit: type=1326 audit(1746574017.475:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17608 comm="syz.5.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ac332ab39 code=0x7ffc0000 [ 1081.751391][ T30] audit: type=1326 audit(1746574017.475:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17608 comm="syz.5.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ac332ab39 code=0x7ffc0000 [ 1081.854636][ T30] audit: type=1326 audit(1746574017.475:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17608 comm="syz.5.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1082.014661][ T30] audit: type=1326 audit(1746574017.475:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17608 comm="syz.5.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ac332ab39 code=0x7ffc0000 [ 1082.130157][ T30] audit: type=1326 audit(1746574017.475:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17608 comm="syz.5.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ac332ab39 code=0x7ffc0000 [ 1082.174182][ T30] audit: type=1326 audit(1746574017.475:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17608 comm="syz.5.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5ac332ab39 code=0x7ffc0000 [ 1082.240332][ T30] audit: type=1326 audit(1746574017.475:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17608 comm="syz.5.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ac338e969 code=0x7ffc0000 [ 1082.359565][ T9373] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1082.376987][ T9373] usb 8-1: USB disconnect, device number 56 [ 1082.509838][T13019] usb 5-1: USB disconnect, device number 90 [ 1083.094496][T13019] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1083.804545][T13019] usb 5-1: Using ep0 maxpacket: 16 [ 1083.817468][T13019] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1083.828863][T13019] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1083.842459][T13019] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1083.852163][T13019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.868468][T13019] usb 5-1: Product: syz [ 1083.883512][T13019] usb 5-1: Manufacturer: syz [ 1083.935979][T13019] usb 5-1: SerialNumber: syz [ 1084.621647][T13811] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1084.728212][T13811] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1084.868250][T13811] usb 4-1: can't read configurations, error -71 [ 1085.964731][ T9380] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1086.284679][ T9380] usb 3-1: config 0 has no interfaces? [ 1086.371729][ T9380] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1086.392492][ T9380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.433999][T13019] usbhid 5-1:1.0: can't add hid device: -71 [ 1086.460494][ T9380] usb 3-1: Product: syz [ 1086.487503][T13019] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1086.521957][ T9380] usb 3-1: Manufacturer: syz [ 1086.620909][ T9380] usb 3-1: SerialNumber: syz [ 1086.694460][T13811] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1086.761990][T13019] usb 5-1: USB disconnect, device number 91 [ 1086.853355][ T9380] usb 3-1: config 0 descriptor?? [ 1086.931910][T13811] usb 8-1: config 0 has no interfaces? [ 1087.531254][T13811] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1087.558351][T13811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.589629][T13811] usb 8-1: Product: syz [ 1087.640778][T13811] usb 8-1: Manufacturer: syz [ 1087.653240][T13811] usb 8-1: SerialNumber: syz [ 1087.688474][T13811] usb 8-1: config 0 descriptor?? [ 1088.233243][T17672] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1088.243582][T17672] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1089.317044][T17684] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2826'. [ 1089.965375][T13019] usb 3-1: USB disconnect, device number 90 [ 1090.007602][ T9380] usb 8-1: USB disconnect, device number 57 [ 1090.466772][T13019] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1090.564496][ T9380] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1090.754480][ T9373] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 1090.770867][T13019] usb 6-1: config 0 has no interfaces? [ 1090.779282][ T9380] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.790834][ T9380] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.822121][T13019] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1090.831565][ T9380] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1090.840836][T13019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.870176][T13019] usb 6-1: Product: syz [ 1090.874710][ T9380] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.889972][T13019] usb 6-1: Manufacturer: syz [ 1090.913048][ T9380] usb 8-1: config 0 descriptor?? [ 1090.920440][T13019] usb 6-1: SerialNumber: syz [ 1090.943101][T13019] usb 6-1: config 0 descriptor?? [ 1091.018538][ T9373] usb 5-1: not running at top speed; connect to a high speed hub [ 1091.029829][ T9373] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1091.048670][ T9373] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1091.058739][ T9373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.087112][ T9373] usb 5-1: Product: syz [ 1091.092014][ T9373] usb 5-1: Manufacturer: syz [ 1091.098484][ T9373] usb 5-1: SerialNumber: syz [ 1091.147692][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1091.147706][ T30] audit: type=1804 audit(1746574027.825:1468): pid=17693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2830" name="/newroot/357/file0" dev="tmpfs" ino=1881 res=1 errno=0 [ 1091.187641][T17693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1091.428575][ T9380] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 1091.473935][ T9380] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 1091.797323][ T9380] cp2112 0003:10C4:EA90.001B: error requesting version [ 1091.928171][ T9380] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -71 [ 1091.996438][ T9380] usb 8-1: USB disconnect, device number 58 [ 1092.629494][T17717] loop2: detected capacity change from 0 to 7 [ 1092.709769][T17717] loop2: [POWERTEC] p1 p2 p3 [ 1092.715221][ T9380] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1092.904998][T17717] loop2: p1 start 1600481121 is beyond EOD, truncated [ 1092.912586][T17717] loop2: p2 size 1680801792 extends beyond EOD, truncated [ 1092.930879][T17717] loop2: p3 start 4294967295 is beyond EOD, truncated [ 1092.985824][ T9380] usb 4-1: Using ep0 maxpacket: 32 [ 1093.017124][ T9380] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1093.026781][ T9380] usb 4-1: config 0 has no interface number 0 [ 1093.040290][ T8366] udevd[8366]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1093.050590][ T9380] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1093.082598][ T9380] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1093.113227][ T9380] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1093.134235][ T9380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.161489][ T9380] usb 4-1: Product: syz [ 1093.197829][ T9380] usb 4-1: Manufacturer: syz [ 1093.207982][ T9380] usb 4-1: SerialNumber: syz [ 1093.269231][ T9380] usb 4-1: config 0 descriptor?? [ 1093.756451][T13019] usb 6-1: USB disconnect, device number 91 [ 1093.889328][T17688] syz.2.2828 (17688): drop_caches: 2 [ 1093.937706][ T9373] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 1093.968593][ T9380] appletouch 4-1:0.85: Geyser mode initialized. [ 1094.004838][ T9380] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input50 [ 1094.146231][ T9373] usb 5-1: USB disconnect, device number 92 [ 1094.298551][ T9373] usblp0: removed [ 1094.508063][T17733] netlink: 'syz.4.2836': attribute type 27 has an invalid length. [ 1094.802207][ T9373] usb 4-1: USB disconnect, device number 85 [ 1094.978758][T17733] erspan0: left allmulticast mode [ 1095.121739][ T9373] appletouch 4-1:0.85: input: appletouch disconnected [ 1095.924486][T13811] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1096.134541][T13804] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1096.161867][T13811] usb 8-1: config 0 has no interfaces? [ 1096.189360][T13811] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1096.199008][T13811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.210250][T13811] usb 8-1: Product: syz [ 1096.214813][T13811] usb 8-1: Manufacturer: syz [ 1096.229805][T13811] usb 8-1: SerialNumber: syz [ 1096.245580][T13811] usb 8-1: config 0 descriptor?? [ 1096.296789][T13804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.310739][T13804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.321457][T13804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1096.382627][T13804] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1096.393202][T13804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.501203][T13804] usb 4-1: config 0 descriptor?? [ 1096.938411][T13804] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 1096.973745][T13804] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1097.237947][T17733] bond0: left promiscuous mode [ 1097.248425][T17733] macvlan2: left promiscuous mode [ 1097.270890][T17733] macvlan3: left promiscuous mode [ 1097.278452][T17733] veth5: left promiscuous mode [ 1097.407059][T17733] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.428529][T17733] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.438423][T17733] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.447899][T17733] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.459534][T17733] geneve2: left promiscuous mode [ 1097.654162][T17733] dummy0: left allmulticast mode [ 1097.666147][T17733] dummy0: left promiscuous mode [ 1097.676363][T17733] macvtap1: left promiscuous mode [ 1097.681772][T17733] macvtap1: left allmulticast mode [ 1097.927726][T17734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.957213][T17734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1098.048373][T17736] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1098.327545][T17756] IPVS: set_ctl: invalid protocol: 43 172.30.1.5:20006 [ 1098.343580][T17756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1098.374566][T13804] usb 4-1: reset high-speed USB device number 86 using dummy_hcd [ 1098.491822][ T9367] IPVS: starting estimator thread 0... [ 1098.584553][T17757] IPVS: using max 27 ests per chain, 64800 per kthread [ 1098.748880][T17761] xt_hashlimit: invalid interval [ 1098.760146][T17761] netlink: 'syz.4.2843': attribute type 27 has an invalid length. [ 1098.815267][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 1099.218656][T13811] usb 4-1: USB disconnect, device number 86 [ 1099.284504][ T9367] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1100.200970][T13804] usb 8-1: USB disconnect, device number 59 [ 1100.531998][ T9373] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1100.553231][T17778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1100.747730][ T9373] usb 3-1: config 0 has no interfaces? [ 1100.760756][ T9373] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1100.771492][ T9373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.782470][ T9373] usb 3-1: Product: syz [ 1100.787144][ T9373] usb 3-1: Manufacturer: syz [ 1100.797481][ T9373] usb 3-1: SerialNumber: syz [ 1100.820170][ T9373] usb 3-1: config 0 descriptor?? [ 1100.825540][T13019] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1100.984738][T13019] usb 8-1: Using ep0 maxpacket: 32 [ 1100.996209][T13019] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1101.055132][T13019] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1101.112537][T13019] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1101.184726][T13019] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1101.375142][T13019] usb 8-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 1101.406939][T17783] netlink: 'syz.4.2849': attribute type 9 has an invalid length. [ 1101.415805][T13019] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.535244][T13019] usb 8-1: Product: syz [ 1101.540060][T13019] usb 8-1: Manufacturer: syz [ 1101.571580][T13019] usb 8-1: SerialNumber: syz [ 1101.598187][T17788] vivid-000: disconnect [ 1101.619235][T13019] usb 8-1: config 0 descriptor?? [ 1101.636923][T13019] cypress_m8 8-1:0.0: HID->COM RS232 Adapter converter detected [ 1101.741439][ T30] audit: type=1326 audit(1746574038.345:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17780 comm="syz.4.2849" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c2e78e969 code=0x0 [ 1101.764564][T17783] netlink: 'syz.4.2849': attribute type 6 has an invalid length. [ 1101.793795][T13019] cyphidcom ttyUSB0: required endpoint is missing [ 1101.840278][T17778] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1101.959925][T17770] vivid-000: reconnect [ 1103.336296][T17801] IPv6: Can't replace route, no match found [ 1103.894469][T13804] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1104.133217][ T9367] usb 8-1: USB disconnect, device number 60 [ 1104.141414][ T9367] cypress_m8 8-1:0.0: device disconnected [ 1104.206149][T13804] usb 4-1: config 0 has no interfaces? [ 1104.261602][T13804] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1104.269208][T13019] usb 3-1: USB disconnect, device number 91 [ 1104.313242][T13804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.364549][T13804] usb 4-1: Product: syz [ 1104.368760][T13804] usb 4-1: Manufacturer: syz [ 1104.492939][T13804] usb 4-1: SerialNumber: syz [ 1104.523723][T13804] usb 4-1: config 0 descriptor?? [ 1104.675163][T17810] fuse: blksize only supported for fuseblk [ 1104.754587][ T9367] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1104.988017][ T9367] usb 8-1: Using ep0 maxpacket: 32 [ 1105.045098][T17814] vlan5: entered promiscuous mode [ 1105.050394][T17814] vlan4: entered promiscuous mode [ 1105.180146][ T9367] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1105.330183][ T9367] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1105.409321][ T9367] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.443076][ T9367] usb 8-1: Product: syz [ 1105.447720][ T9367] usb 8-1: Manufacturer: syz [ 1105.452744][ T9367] usb 8-1: SerialNumber: syz [ 1105.541512][ T9367] usb 8-1: config 0 descriptor?? [ 1105.616977][ T9367] gs_usb 8-1:0.0: Required endpoints not found [ 1105.718533][T17820] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1105.949435][T13019] usb 8-1: USB disconnect, device number 61 [ 1106.275532][ T9373] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1106.429912][ T9373] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1106.441716][ T9373] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1106.508316][ T9373] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1106.522468][ T9373] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1106.634725][ T9373] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1106.659699][ T9373] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1106.669202][ T9373] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1106.677816][ T9373] usb 3-1: Product: syz [ 1106.682041][ T9373] usb 3-1: Manufacturer: syz [ 1106.699060][ T9373] cdc_wdm 3-1:1.0: skipping garbage [ 1106.704739][ T9373] cdc_wdm 3-1:1.0: skipping garbage [ 1106.713952][ T9373] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1106.736571][ T9373] cdc_wdm 3-1:1.0: Unknown control protocol [ 1107.176191][ T9373] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1107.282428][T13019] usb 4-1: USB disconnect, device number 87 [ 1107.528502][ T9373] usb 6-1: config 0 has no interfaces? [ 1107.541064][ T9373] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1107.551025][ T9373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.559448][ T9373] usb 6-1: Product: syz [ 1107.565496][ T9373] usb 6-1: Manufacturer: syz [ 1107.571486][ T9373] usb 6-1: SerialNumber: syz [ 1107.604912][ T9373] usb 6-1: config 0 descriptor?? [ 1108.401429][T17844] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[17844] [ 1109.865766][ T9367] usb 3-1: USB disconnect, device number 92 [ 1110.140824][ T9373] usb 6-1: USB disconnect, device number 93 [ 1110.414750][ T9367] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1110.435493][T13804] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1110.645785][T13804] usb 8-1: config 0 has no interfaces? [ 1110.666996][T13804] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1110.689281][T13804] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.792681][T13804] usb 8-1: Product: syz [ 1110.809908][T13804] usb 8-1: Manufacturer: syz [ 1110.822906][ T9367] usb 3-1: config 0 has no interfaces? [ 1110.828695][T13804] usb 8-1: SerialNumber: syz [ 1110.848999][T13804] usb 8-1: config 0 descriptor?? [ 1110.867382][ T9367] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1110.884763][ T9367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.929260][ T9367] usb 3-1: Product: syz [ 1110.963469][ T9367] usb 3-1: Manufacturer: syz [ 1110.978746][ T9367] usb 3-1: SerialNumber: syz [ 1111.008901][ T9367] usb 3-1: config 0 descriptor?? [ 1111.122034][T13804] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1111.289605][T13804] usb 6-1: config 0 has no interfaces? [ 1111.670313][T13804] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1112.506601][T13804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.685947][T13804] usb 6-1: Product: syz [ 1112.697516][T13804] usb 6-1: Manufacturer: syz [ 1112.726093][T13804] usb 6-1: SerialNumber: syz [ 1113.024119][T13804] usb 6-1: config 0 descriptor?? [ 1114.061995][T13804] usb 3-1: USB disconnect, device number 93 [ 1114.393907][T13804] usb 8-1: USB disconnect, device number 62 [ 1114.642110][ T9373] usb 6-1: USB disconnect, device number 94 [ 1115.446097][T13804] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1115.785593][T13804] usb 6-1: Using ep0 maxpacket: 32 [ 1115.797322][T13804] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1115.797351][T13804] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1115.797371][T13804] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.799379][T13804] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1115.799401][T13804] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1115.799417][T13804] usb 6-1: Product: syz [ 1115.799428][T13804] usb 6-1: Manufacturer: syz [ 1115.799440][T13804] usb 6-1: SerialNumber: syz [ 1115.837640][T13804] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input51 [ 1115.861105][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.861177][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.483501][T13804] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1117.809899][T13804] usb 3-1: config 0 has no interfaces? [ 1117.827070][T13804] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1117.837493][T13804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.894531][ T9373] usb 6-1: USB disconnect, device number 95 [ 1117.910713][ T9373] appletouch 6-1:1.0: input: appletouch disconnected [ 1118.061242][T13804] usb 3-1: Product: syz [ 1118.076166][T13804] usb 3-1: Manufacturer: syz [ 1118.090042][T13804] usb 3-1: SerialNumber: syz [ 1118.177416][T13804] usb 3-1: config 0 descriptor?? [ 1118.615778][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2873'. [ 1119.744518][T13804] usb 8-1: new full-speed USB device number 63 using dummy_hcd [ 1119.908620][T13804] usb 8-1: config 0 has an invalid interface number: 128 but max is 0 [ 1119.954611][T13804] usb 8-1: config 0 has no interface number 0 [ 1119.960874][T13804] usb 8-1: config 0 interface 128 has no altsetting 0 [ 1119.987526][T13804] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 1119.997365][T13804] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.009669][T13804] usb 8-1: Product: syz [ 1120.017222][T13804] usb 8-1: Manufacturer: syz [ 1120.026369][T13804] usb 8-1: SerialNumber: syz [ 1120.055110][T13804] usb 8-1: config 0 descriptor?? [ 1120.070285][T13804] radio-si470x 8-1:0.128: could not find interrupt in endpoint [ 1120.081802][T13804] radio-si470x 8-1:0.128: probe with driver radio-si470x failed with error -5 [ 1120.105331][T13804] usbhid 8-1:0.128: couldn't find an input interrupt endpoint [ 1120.273265][ T9367] usb 8-1: USB disconnect, device number 63 [ 1120.504525][T13804] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1120.664749][T13019] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1120.707378][ T9367] usb 3-1: USB disconnect, device number 94 [ 1120.876551][T13019] usb 6-1: Using ep0 maxpacket: 16 [ 1120.947495][T13019] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1120.991006][T13019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.026007][T13019] usb 6-1: Product: syz [ 1121.030352][T13019] usb 6-1: Manufacturer: syz [ 1121.054455][T13019] usb 6-1: SerialNumber: syz [ 1121.064596][T13804] usb 4-1: config 0 has no interfaces? [ 1121.178978][T13804] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1121.190928][T13804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.206464][T13804] usb 4-1: Product: syz [ 1121.210887][T13804] usb 4-1: Manufacturer: syz [ 1121.216827][T13019] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1121.217276][T13804] usb 4-1: SerialNumber: syz [ 1121.263274][T13019] r8152-cfgselector 6-1: config 0 descriptor?? [ 1121.268280][T13804] usb 4-1: config 0 descriptor?? [ 1121.492846][T13019] r8152-cfgselector 6-1: Needed 2 retries to read version [ 1121.500518][T13019] r8152-cfgselector 6-1: Unknown version 0x5c90 [ 1121.518226][T13019] r8152-cfgselector 6-1: bad CDC descriptors [ 1121.531972][T17935] pim6reg9: entered allmulticast mode [ 1121.654470][ T9373] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1121.842382][ T9373] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.907393][ T9373] usb 8-1: config 0 has no interfaces? [ 1121.912959][ T9373] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1122.032296][ T9373] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.081743][ T9373] usb 8-1: config 0 descriptor?? [ 1122.547047][T17944] binder: 17936:17944 ioctl c0306201 0 returned -14 [ 1123.603292][T13804] usb 4-1: USB disconnect, device number 88 [ 1123.892054][T17966] input: syz1 as /devices/virtual/input/input52 [ 1124.045452][T17966] program syz.3.2888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1124.669935][T13804] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1124.860082][T13019] r8152-cfgselector 6-1: USB disconnect, device number 96 [ 1124.915369][T13804] usb 3-1: config 0 has no interfaces? [ 1125.034129][T13804] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1125.044427][T13804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.052609][T13804] usb 3-1: Product: syz [ 1125.180806][T13804] usb 3-1: Manufacturer: syz [ 1125.195211][T13804] usb 3-1: SerialNumber: syz [ 1125.210785][T13804] usb 3-1: config 0 descriptor?? [ 1125.419440][T17980] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2891'. [ 1126.192227][T13019] usb 8-1: USB disconnect, device number 64 [ 1126.442927][ T30] audit: type=1326 audit(1746574063.125:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1126.591969][ T30] audit: type=1326 audit(1746574063.125:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1126.659583][ T30] audit: type=1326 audit(1746574063.125:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1126.810216][ T30] audit: type=1326 audit(1746574063.125:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1126.845468][T13019] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1127.084579][T13019] usb 8-1: Using ep0 maxpacket: 16 [ 1127.093976][ T30] audit: type=1326 audit(1746574063.125:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1127.527647][ T30] audit: type=1326 audit(1746574063.125:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1127.566258][T13019] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1127.636655][T13019] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1127.656894][T13019] usb 8-1: can't read configurations, error -71 [ 1127.753021][T13804] usb 3-1: USB disconnect, device number 95 [ 1127.835525][ T30] audit: type=1326 audit(1746574063.125:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1127.917730][ T30] audit: type=1326 audit(1746574063.125:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1128.021602][ T30] audit: type=1326 audit(1746574063.125:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1128.065430][ T30] audit: type=1326 audit(1746574063.125:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17987 comm="syz.7.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd342b8e969 code=0x7ffc0000 [ 1128.118758][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2895'. [ 1128.234522][ T9373] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1128.374141][T18012] CIFS: VFS: Malformed UNC in devname [ 1128.437023][ T9373] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1128.449781][ T9373] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1128.550885][ T9373] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1128.560701][ T9373] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1128.610993][ T9373] usb 3-1: Product: syz [ 1128.625435][ T9373] usb 3-1: Manufacturer: syz [ 1128.680813][ T9373] usb 3-1: SerialNumber: syz [ 1128.738945][ T9373] usb 3-1: config 0 descriptor?? [ 1128.847336][ T9373] usb 3-1: selecting invalid altsetting 0 [ 1129.027469][T13019] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1129.157878][ T9373] usb 3-1: USB disconnect, device number 96 [ 1129.524848][T13019] usb 8-1: config 0 has no interfaces? [ 1129.566297][T13019] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1129.597075][T13019] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.611528][ T7486] udevd[7486]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1129.623897][T13019] usb 8-1: Product: syz [ 1129.633500][T13019] usb 8-1: Manufacturer: syz [ 1129.663465][T13019] usb 8-1: SerialNumber: syz [ 1129.691245][T13019] usb 8-1: config 0 descriptor?? [ 1130.224571][T13804] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1130.558153][T13804] usb 4-1: config 0 has no interfaces? [ 1130.780143][T13804] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1130.789375][T13804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.803272][T13804] usb 4-1: Product: syz [ 1130.809116][T13804] usb 4-1: Manufacturer: syz [ 1130.824069][T13804] usb 4-1: SerialNumber: syz [ 1130.838968][T13804] usb 4-1: config 0 descriptor?? [ 1130.904442][ T9367] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1131.071772][ T9367] usb 5-1: config 0 has no interfaces? [ 1131.100703][ T9367] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1131.112889][ T9367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.122056][ T9367] usb 5-1: Product: syz [ 1131.133010][ T9367] usb 5-1: Manufacturer: syz [ 1131.141925][ T9367] usb 5-1: SerialNumber: syz [ 1131.159733][ T9367] usb 5-1: config 0 descriptor?? [ 1131.304594][T13804] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1131.476589][T13804] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 1131.485125][T13804] usb 3-1: config 0 has no interface number 0 [ 1131.491609][T13804] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.853112][T13804] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.213014][T13804] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 1132.271042][T13804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.338886][T13804] usb 3-1: config 0 descriptor?? [ 1132.686006][T18040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.695333][T18040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.708487][T18040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2901'. [ 1133.099818][T13019] usb 8-1: USB disconnect, device number 67 [ 1133.902837][T18050] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2904'. [ 1134.460511][ T9367] usb 5-1: USB disconnect, device number 93 [ 1134.512917][T13811] usb 4-1: USB disconnect, device number 89 [ 1135.175782][T13811] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1135.349288][T13811] usb 4-1: config 0 has no interfaces? [ 1135.360666][T13811] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1135.370923][T13811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.380013][T13811] usb 4-1: Product: syz [ 1135.396209][T13811] usb 4-1: Manufacturer: syz [ 1135.445718][T13811] usb 4-1: SerialNumber: syz [ 1135.488488][T13811] usb 4-1: config 0 descriptor?? [ 1136.789306][T13804] usbhid 3-1:0.32: can't add hid device: -71 [ 1136.795832][T13804] usbhid 3-1:0.32: probe with driver usbhid failed with error -71 [ 1136.853461][T13804] usb 3-1: USB disconnect, device number 97 [ 1137.846322][T13804] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1138.044739][T13804] usb 3-1: Using ep0 maxpacket: 16 [ 1138.085115][T18053] block device autoloading is deprecated and will be removed. [ 1138.106375][T13804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1138.118957][T13804] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1138.141167][T13804] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1138.159668][T18053] syz.5.2905: attempt to access beyond end of device [ 1138.159668][T18053] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1138.204856][T13804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.224930][T13804] usb 3-1: Product: syz [ 1138.270379][T13804] usb 3-1: Manufacturer: syz [ 1138.309585][T13804] usb 3-1: SerialNumber: syz [ 1138.582463][ T9373] usb 4-1: USB disconnect, device number 90 [ 1138.756597][T18084] netlink: 23 bytes leftover after parsing attributes in process `syz.3.2912'. [ 1138.879508][T18084] caif0: left promiscuous mode [ 1138.898457][T18084] caif0: entered allmulticast mode [ 1139.101782][T18089] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2912'. [ 1139.153011][T18089] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1139.313615][T18092] netlink: 'syz.7.2913': attribute type 12 has an invalid length. [ 1140.986109][T13804] usbhid 3-1:1.0: can't add hid device: -71 [ 1141.154848][T13804] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1141.186159][T13804] usb 3-1: USB disconnect, device number 98 [ 1142.074544][ T9373] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1142.384768][T13804] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1142.590272][ T9373] usb 6-1: config 0 has no interfaces? [ 1142.611834][ T9373] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1142.701933][T18122] netlink: 'syz.3.2920': attribute type 13 has an invalid length. [ 1142.741858][T18122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1142.765382][ T9373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.991632][ T9373] usb 6-1: Product: syz [ 1143.013276][ T9373] usb 6-1: Manufacturer: syz [ 1143.047368][ T9373] usb 6-1: SerialNumber: syz [ 1143.086175][ T9373] usb 6-1: config 0 descriptor?? [ 1143.233949][T13804] usb 8-1: config 0 has no interfaces? [ 1143.976433][T13804] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1143.986389][T13804] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.000357][T13804] usb 8-1: Product: syz [ 1144.005444][T13804] usb 8-1: Manufacturer: syz [ 1144.014847][T13804] usb 8-1: SerialNumber: syz [ 1144.022602][T13804] usb 8-1: config 0 descriptor?? [ 1145.225297][T18142] ip6t_srh: unknown srh match flags B153 [ 1145.489872][T18142] netlink: 'syz.4.2923': attribute type 1 has an invalid length. [ 1145.714515][T13804] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1145.840613][ T9373] usb 8-1: USB disconnect, device number 68 [ 1145.864491][T13019] usb 6-1: USB disconnect, device number 97 [ 1145.976638][T13804] usb 3-1: config 0 has no interfaces? [ 1146.091941][T13804] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1146.150285][T13804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.188910][T18142] bond7: entered promiscuous mode [ 1146.195285][T18142] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1146.266911][T13804] usb 3-1: Product: syz [ 1146.283449][T13804] usb 3-1: Manufacturer: syz [ 1146.654397][T13804] usb 3-1: SerialNumber: syz [ 1146.688247][T13804] usb 3-1: config 0 descriptor?? [ 1146.724459][T13019] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1146.947469][T13019] usb 8-1: config 0 has no interfaces? [ 1146.966047][T13019] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1146.991126][T18143] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1146.998095][T13019] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.064440][T13019] usb 8-1: Product: syz [ 1147.068675][T13019] usb 8-1: Manufacturer: syz [ 1147.104857][T13019] usb 8-1: SerialNumber: syz [ 1147.144995][T18143] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1147.155548][T18143] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1147.186758][T13019] usb 8-1: config 0 descriptor?? [ 1147.261459][T18143] bond7: (slave ip6gre1): making interface the new active one [ 1147.283507][T18143] ip6gre1: entered promiscuous mode [ 1147.302274][T18143] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 1147.944601][T13019] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1148.097207][T13019] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.195179][T13019] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1148.223398][T13019] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1148.442843][T13019] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.558787][T13019] usb 3-1: USB disconnect, device number 99 [ 1149.634684][T13804] usb 8-1: USB disconnect, device number 69 [ 1149.968107][T18179] xt_hashlimit: invalid interval [ 1149.984867][T18179] netlink: 'syz.7.2930': attribute type 27 has an invalid length. [ 1150.066550][T18182] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2930'. [ 1150.134001][T18179] bridge0: port 4(vlan5) entered disabled state [ 1150.140653][T18179] bridge0: port 3(vlan2) entered disabled state [ 1150.191406][T18179] batman_adv: batadv0: Interface deactivated: dummy0 [ 1150.381975][T18179] vlan3: left allmulticast mode [ 1150.387632][T18179] veth1: left allmulticast mode [ 1150.474756][T13811] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1150.984781][T13811] usb 5-1: Using ep0 maxpacket: 16 [ 1151.022311][T18192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2932'. [ 1151.035017][T18189] ptrace attach of "./syz-executor exec"[6292] was attempted by "./syz-executor exec"[18189] [ 1151.045650][T18192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2932'. [ 1151.077418][T18189] dns_resolver: Unsupported server list version (0) [ 1151.165169][T13811] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1151.180639][T18192] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1151.248111][T13811] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1151.262930][T18192] bond2: entered allmulticast mode [ 1151.357805][T18192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1151.500676][T13811] usb 5-1: string descriptor 0 read error: -22 [ 1151.507379][T13811] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1151.517590][T13811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.878143][ T9380] usb 4-1: USB disconnect, device number 91 [ 1152.318944][T18200] loop2: detected capacity change from 0 to 7 [ 1152.329460][T18200] Dev loop2: unable to read RDB block 7 [ 1152.358867][T18200] loop2: unable to read partition table [ 1152.366799][T18200] loop2: partition table beyond EOD, truncated [ 1152.373302][T18200] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1152.663660][T18207] netlink: 'syz.7.2935': attribute type 4 has an invalid length. [ 1152.686272][T18207] netlink: 'syz.7.2935': attribute type 4 has an invalid length. [ 1152.712685][T18207] binder: 18206:18207 ioctl 4018620d 0 returned -22 [ 1152.723287][T18207] binder: 18206:18207 ioctl c0306201 2000000003c0 returned -14 [ 1153.035399][ T9380] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1153.407534][ T9380] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 1153.448263][ T9380] usb 8-1: config 0 has no interface number 0 [ 1153.500861][ T9380] usb 8-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1153.574428][ T9380] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1153.618638][ T9380] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1153.636848][ T9374] usb 5-1: USB disconnect, device number 94 [ 1153.653274][ T9380] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.682853][ T9380] usb 8-1: Product: syz [ 1153.721412][ T9380] usb 8-1: Manufacturer: syz [ 1153.750921][ T9380] usb 8-1: SerialNumber: syz [ 1153.767657][ T9380] usb 8-1: config 0 descriptor?? [ 1153.795646][T18211] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1153.827084][ T9380] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1153.867417][ T9380] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1153.902785][T18222] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1154.335377][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1154.558893][T13804] usb 8-1: USB disconnect, device number 70 [ 1154.636224][T13804] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1154.699368][T13804] cyberjack 8-1:0.69: device disconnected [ 1154.980386][T18229] block device autoloading is deprecated and will be removed. [ 1154.991957][T18229] syz.5.2939: attempt to access beyond end of device [ 1154.991957][T18229] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1155.223963][T18237] netlink: 'syz.4.2940': attribute type 12 has an invalid length. [ 1157.215079][T13804] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1157.374443][T13804] usb 6-1: Using ep0 maxpacket: 16 [ 1157.394534][T13811] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1157.436184][T13804] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1157.455861][T13804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1157.514005][T18243] syz.3.2942: attempt to access beyond end of device [ 1157.514005][T18243] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1157.612632][T13811] usb 3-1: Using ep0 maxpacket: 8 [ 1157.652639][T13811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.667706][T13811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1157.745466][T13804] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1157.780277][T13811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1157.797696][T13804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.843163][T13811] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1157.854146][T13804] usb 6-1: Product: syz [ 1157.868113][T13804] usb 6-1: Manufacturer: syz [ 1157.879026][T13811] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1157.894526][T13804] usb 6-1: SerialNumber: syz [ 1157.909317][T13811] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1157.922898][T13811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.257000][T13804] usb 6-1: config 0 descriptor?? [ 1158.324814][T13811] usb 3-1: config 0 descriptor?? [ 1158.331816][T13804] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1158.367096][T13804] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1158.548470][T18251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.592610][T18251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.775319][T13804] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1159.786109][T13804] em28xx 6-1:0.0: Config register raw data: 0x56 [ 1160.171875][T13804] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1160.201396][T13804] em28xx 6-1:0.0: No AC97 audio processor [ 1160.351305][T13804] usb 6-1: USB disconnect, device number 98 [ 1160.366057][T13804] em28xx 6-1:0.0: Disconnecting em28xx [ 1160.512346][T13804] em28xx 6-1:0.0: Freeing device [ 1160.744620][T13811] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1161.326495][ T9374] usb 3-1: USB disconnect, device number 100 [ 1161.456426][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2951'. [ 1161.604493][ T9380] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1161.639465][T13811] usb 4-1: config 0 has no interfaces? [ 1161.788553][ T9380] usb 5-1: config 0 has no interfaces? [ 1161.927271][T13811] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1161.937776][T13811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.953883][T13811] usb 4-1: Product: syz [ 1161.959119][T13811] usb 4-1: Manufacturer: syz [ 1161.963974][T13811] usb 4-1: SerialNumber: syz [ 1161.982572][ T9373] usb 8-1: new full-speed USB device number 71 using dummy_hcd [ 1161.993369][T13811] usb 4-1: config 0 descriptor?? [ 1162.064187][ T9380] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1162.078607][ T9380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.093171][ T9380] usb 5-1: Product: syz [ 1162.132746][ T9380] usb 5-1: Manufacturer: syz [ 1162.161001][ T9380] usb 5-1: SerialNumber: syz [ 1162.190307][ T9373] usb 8-1: config 0 has no interfaces? [ 1162.235781][ T9380] usb 5-1: config 0 descriptor?? [ 1162.525636][ T9373] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1162.535192][ T9373] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.544540][ T9373] usb 8-1: Product: syz [ 1162.557564][T18278] tipc: Disabling bearer [ 1162.563935][ T9373] usb 8-1: Manufacturer: syz [ 1162.750061][ T9373] usb 8-1: SerialNumber: syz [ 1162.841636][T18278] team0 (unregistering): Port device team_slave_0 removed [ 1162.849987][ T9373] usb 8-1: config 0 descriptor?? [ 1162.907419][T18278] team0 (unregistering): Port device team_slave_1 removed [ 1163.111257][T18278] team0 (unregistering): Port device geneve0 removed [ 1164.477974][ T9374] usb 8-1: USB disconnect, device number 71 [ 1164.623001][ T9373] usb 4-1: USB disconnect, device number 92 [ 1165.021208][T13804] usb 5-1: USB disconnect, device number 95 [ 1165.218013][ T9367] usb 8-1: new full-speed USB device number 72 using dummy_hcd [ 1165.548620][T18307] netlink: 'syz.3.2957': attribute type 1 has an invalid length. [ 1165.646709][T18314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2958'. [ 1165.711883][ T9367] usb 8-1: config 0 has an invalid interface number: 93 but max is 0 [ 1165.722391][ T9367] usb 8-1: config 0 has no interface number 0 [ 1166.016201][T18305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1166.207394][ T9367] usb 8-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1166.239102][ T9367] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.300220][ T9367] usb 8-1: Product: syz [ 1166.335674][ T9367] usb 8-1: Manufacturer: syz [ 1166.340301][ T9367] usb 8-1: SerialNumber: syz [ 1166.522881][ T9367] usb 8-1: config 0 descriptor?? [ 1166.712386][T18323] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1166.719516][T18323] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1166.737598][T18323] vhci_hcd vhci_hcd.0: Device attached [ 1166.754431][ T9373] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1166.820279][ T9367] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 1166.914583][ T9380] vhci_hcd: vhci_device speed not set [ 1166.943404][ T9373] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.968722][ T9367] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1166.977555][ T9380] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1167.013042][ T9373] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1167.013429][ T9367] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1167.042317][ T9373] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1167.167142][ T9367] usb 8-1: media controller created [ 1167.168470][ T9373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.294257][ T9367] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1167.315844][ T9373] usb 3-1: config 0 descriptor?? [ 1167.340805][ T9373] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1167.362798][ T9373] dvb-usb: bulk message failed: -22 (3/0) [ 1167.478416][T18324] vhci_hcd: connection reset by peer [ 1167.495325][ T9373] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1167.511841][ T12] vhci_hcd: stop threads [ 1167.532172][ T12] vhci_hcd: release socket [ 1167.563311][ T9373] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1167.602086][T18331] ------------[ cut here ]------------ [ 1167.607734][T18331] usb 8-1: BOGUS control dir, pipe 80004880 doesn't match bRequestType c0 [ 1167.661374][ T9373] usb 3-1: media controller created [ 1167.670000][ T9373] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1167.673543][T18331] WARNING: CPU: 0 PID: 18331 at drivers/usb/core/urb.c:413 usb_submit_urb+0x1112/0x1870 [ 1167.678737][ T12] vhci_hcd: disconnect device [ 1167.694024][T18331] Modules linked in: [ 1167.698895][T18331] CPU: 0 UID: 0 PID: 18331 Comm: syz.2.2960 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1167.711009][T18331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1167.721182][T18331] RIP: 0010:usb_submit_urb+0x1112/0x1870 [ 1167.727052][T18331] Code: 0f b6 44 05 00 84 c0 0f 85 38 06 00 00 45 0f b6 04 24 48 c7 c7 00 63 12 8c 48 8b 74 24 18 4c 89 fa 44 89 f1 e8 3f 42 6f fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 2b f4 ff ff 89 e9 80 [ 1167.746830][T18331] RSP: 0018:ffffc90004817850 EFLAGS: 00010246 [ 1167.752925][T18331] RAX: 3b39abbe0b63b700 RBX: ffff8881413bf700 RCX: 0000000000080000 [ 1167.760959][T18331] RDX: ffffc9000e7a9000 RSI: 0000000000004cf5 RDI: 0000000000004cf6 [ 1167.769035][T18331] RBP: 1ffff1100da44c2c R08: 0000000000000003 R09: 0000000000000004 [ 1167.777330][T18331] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff88806d226160 [ 1167.785822][T18331] R13: dffffc0000000000 R14: 0000000080004880 R15: ffff888031b968a0 [ 1167.793802][T18331] FS: 00007f0598a226c0(0000) GS:ffff8881260cb000(0000) knlGS:0000000000000000 [ 1167.802836][T18331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1167.809512][T18331] CR2: 000020000009f000 CR3: 000000003056c000 CR4: 00000000003526f0 [ 1167.817522][T18331] DR0: 000000000000000e DR1: 000000000000000c DR2: 000000000000000e [ 1167.825581][T18331] DR3: 00000000000000b4 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1167.833553][T18331] Call Trace: [ 1167.836883][T18331] [ 1167.839839][T18331] usb_start_wait_urb+0x114/0x4c0 [ 1167.844938][T18331] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1167.850522][T18331] usb_control_msg+0x232/0x3e0 [ 1167.855403][T18331] ? stack_depot_save_flags+0x40/0x910 [ 1167.860959][T18331] dib0700_i2c_xfer+0xba7/0xf70 [ 1167.865923][T18331] __i2c_transfer+0x871/0x2170 [ 1167.870713][T18331] ? lockdep_hardirqs_on+0x9c/0x150 [ 1167.875980][T18331] ? __pfx___i2c_transfer+0x10/0x10 [ 1167.881285][T18331] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1167.886720][T18331] ? i2c_transfer+0x11d/0x3a0 [ 1167.891867][T18331] i2c_transfer+0x25b/0x3a0 [ 1167.896451][T18331] ? __pfx_i2c_transfer+0x10/0x10 [ 1167.901506][T18331] ? _copy_from_user+0x94/0xb0 [ 1167.906354][T18331] i2cdev_ioctl_rdwr+0x460/0x740 [ 1167.911433][T18331] i2cdev_ioctl+0x64b/0x7f0 [ 1167.916145][T18331] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1167.921273][T18331] ? __fget_files+0x3a0/0x420 [ 1167.926047][T18331] ? __fget_files+0x2a/0x420 [ 1167.930681][T18331] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1167.935679][T18331] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1167.940719][T18331] __se_sys_ioctl+0xf9/0x170 [ 1167.945376][T18331] do_syscall_64+0xf6/0x210 [ 1167.949896][T18331] ? clear_bhb_loop+0x45/0xa0 [ 1167.954622][T18331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.960534][T18331] RIP: 0033:0x7f0597b8e969 [ 1167.965024][T18331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.984725][T18331] RSP: 002b:00007f0598a22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1167.993157][T18331] RAX: ffffffffffffffda RBX: 00007f0597db6080 RCX: 00007f0597b8e969 [ 1168.001280][T18331] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000007 [ 1168.009305][T18331] RBP: 00007f0597c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1168.017508][T18331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.025639][T18331] R13: 0000000000000000 R14: 00007f0597db6080 R15: 00007f0597edfa28 [ 1168.033662][T18331] [ 1168.036752][T18331] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1168.044089][T18331] CPU: 0 UID: 0 PID: 18331 Comm: syz.2.2960 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 1168.056168][T18331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1168.066230][T18331] Call Trace: [ 1168.069508][T18331] [ 1168.072439][T18331] dump_stack_lvl+0x99/0x250 [ 1168.077037][T18331] ? __asan_memcpy+0x40/0x70 [ 1168.081626][T18331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.086843][T18331] ? __pfx__printk+0x10/0x10 [ 1168.091439][T18331] panic+0x2db/0x790 [ 1168.095347][T18331] ? __pfx_panic+0x10/0x10 [ 1168.099836][T18331] __warn+0x31b/0x4b0 [ 1168.103821][T18331] ? usb_submit_urb+0x1112/0x1870 [ 1168.108866][T18331] ? usb_submit_urb+0x1112/0x1870 [ 1168.114017][T18331] report_bug+0x2be/0x4f0 [ 1168.118545][T18331] ? usb_submit_urb+0x1112/0x1870 [ 1168.123586][T18331] ? usb_submit_urb+0x1112/0x1870 [ 1168.128674][T18331] ? usb_submit_urb+0x1114/0x1870 [ 1168.133715][T18331] handle_bug+0x84/0x160 [ 1168.137973][T18331] exc_invalid_op+0x1a/0x50 [ 1168.142502][T18331] asm_exc_invalid_op+0x1a/0x20 [ 1168.147358][T18331] RIP: 0010:usb_submit_urb+0x1112/0x1870 [ 1168.152998][T18331] Code: 0f b6 44 05 00 84 c0 0f 85 38 06 00 00 45 0f b6 04 24 48 c7 c7 00 63 12 8c 48 8b 74 24 18 4c 89 fa 44 89 f1 e8 3f 42 6f fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 2b f4 ff ff 89 e9 80 [ 1168.172621][T18331] RSP: 0018:ffffc90004817850 EFLAGS: 00010246 [ 1168.178719][T18331] RAX: 3b39abbe0b63b700 RBX: ffff8881413bf700 RCX: 0000000000080000 [ 1168.186804][T18331] RDX: ffffc9000e7a9000 RSI: 0000000000004cf5 RDI: 0000000000004cf6 [ 1168.195477][T18331] RBP: 1ffff1100da44c2c R08: 0000000000000003 R09: 0000000000000004 [ 1168.203572][T18331] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff88806d226160 [ 1168.211643][T18331] R13: dffffc0000000000 R14: 0000000080004880 R15: ffff888031b968a0 [ 1168.219651][T18331] usb_start_wait_urb+0x114/0x4c0 [ 1168.224793][T18331] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1168.230455][T18331] usb_control_msg+0x232/0x3e0 [ 1168.235245][T18331] ? stack_depot_save_flags+0x40/0x910 [ 1168.240741][T18331] dib0700_i2c_xfer+0xba7/0xf70 [ 1168.245627][T18331] __i2c_transfer+0x871/0x2170 [ 1168.250432][T18331] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.255675][T18331] ? __pfx___i2c_transfer+0x10/0x10 [ 1168.260998][T18331] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1168.266398][T18331] ? i2c_transfer+0x11d/0x3a0 [ 1168.271151][T18331] i2c_transfer+0x25b/0x3a0 [ 1168.275688][T18331] ? __pfx_i2c_transfer+0x10/0x10 [ 1168.280745][T18331] ? _copy_from_user+0x94/0xb0 [ 1168.285524][T18331] i2cdev_ioctl_rdwr+0x460/0x740 [ 1168.290487][T18331] i2cdev_ioctl+0x64b/0x7f0 [ 1168.295179][T18331] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1168.300218][T18331] ? __fget_files+0x3a0/0x420 [ 1168.304906][T18331] ? __fget_files+0x2a/0x420 [ 1168.309503][T18331] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1168.314457][T18331] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1168.319490][T18331] __se_sys_ioctl+0xf9/0x170 [ 1168.324089][T18331] do_syscall_64+0xf6/0x210 [ 1168.328598][T18331] ? clear_bhb_loop+0x45/0xa0 [ 1168.333282][T18331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.339174][T18331] RIP: 0033:0x7f0597b8e969 [ 1168.343590][T18331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.363306][T18331] RSP: 002b:00007f0598a22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1168.371746][T18331] RAX: ffffffffffffffda RBX: 00007f0597db6080 RCX: 00007f0597b8e969 [ 1168.379734][T18331] RDX: 0000200000002580 RSI: 0000000000000707 RDI: 0000000000000007 [ 1168.387803][T18331] RBP: 00007f0597c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1168.395810][T18331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.404401][T18331] R13: 0000000000000000 R14: 00007f0597db6080 R15: 00007f0597edfa28 [ 1168.412409][T18331] [ 1168.415745][T18331] Kernel Offset: disabled [ 1168.420278][T18331] Rebooting in 86400 seconds..