last executing test programs: 12.731338979s ago: executing program 2 (id=1801): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ftruncate(0xffffffffffffffff, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) close(0x4) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=ANY=[@ANYBLOB], 0x11e4}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040000) 12.404085068s ago: executing program 3 (id=1802): r0 = socket$kcm(0x10, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0xff9e}) landlock_create_ruleset(&(0x7f0000000300)={0x2114, 0x0, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 11.892037257s ago: executing program 1 (id=1804): syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xf2, 0x6c, 0x44, 0x20, 0x84f, 0x1, 0xe0b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb2, 0x84, 0xbb}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.527831513s ago: executing program 0 (id=1805): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) 10.50332024s ago: executing program 3 (id=1806): syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd01"], 0xfdef) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 10.459798338s ago: executing program 4 (id=1808): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000480)='y\x10\xb5\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C\xbc\xee\xbc_r\b1\xb2\xcbk\xd5c\x83\xa8\xa7%\xd6\x97=O+`\x8eL\xe0-\x97lzU\x1bF\xdbY,\x8d\xf6K\xf0\xb3\x8eD\xef^\n\x84\x1b=U\xd8', 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa0001, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f00000000c0)={0x4102}, 0x18, 0x0) io_uring_setup(0x3cab, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20) 10.367650591s ago: executing program 2 (id=1809): r0 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x100}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902", @ANYRES16=r1], 0x0) inotify_init1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') lchown(0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ppoll(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$FIONREAD(r6, 0x80047456, &(0x7f0000002300)) 10.10355163s ago: executing program 4 (id=1810): syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') 9.842287086s ago: executing program 1 (id=1811): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @multicast2}, &(0x7f0000000240)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x3, &(0x7f0000000e00)=ANY=[@ANYRES32], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x40f00, 0x2, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'team_slave_0\x00', {0x2, 0x4e21, @broadcast}}) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$inet6(0xa, 0x803, 0x6) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r7}) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r5, r3}) sendmsg$inet(r5, 0x0, 0x240040c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020400) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x80) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES8=r0], 0x94}}, 0x8840) 8.463446123s ago: executing program 4 (id=1812): socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="2006"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) sendmsg$nl_route(r4, 0x0, 0x40010) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8c0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$video4linux(0x0, 0x2, 0x20) 8.411452275s ago: executing program 0 (id=1813): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x0, 0x3b, &(0x7f0000002080)={{0x12, 0x1, 0x110, 0x41, 0xa7, 0x38, 0x10, 0xd49, 0x7000, 0x6c67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x8, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0xc6, 0x9, 0x0, 0x91, 0xb0, 0x9b, 0xf6, [@uac_control={{0xa, 0x24, 0x1, 0x53, 0x6}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x3c}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x6, 0x1, [0x9], 0x4}]}]}}]}}]}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0xf, 0xa}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x84002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="bd1b5c7809"], 0x3c}}, 0x0) 7.190036049s ago: executing program 1 (id=1814): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r4, 0x40189206, &(0x7f0000000100)={&(0x7f0000000300), 0x0}) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCX_GETX(r6, 0x4018920a, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x0, 0x198, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bridge0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) 6.764487263s ago: executing program 3 (id=1815): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000300)=0x7) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000080)={0x3, 0x8ba, 0x4, {0x4, @win={{0x6417, 0x69f20258, 0x8, 0x8003}, 0x6, 0x1, &(0x7f0000000440)={{0x0, 0x8001, 0x859, 0x1}}, 0x8, 0x0, 0xc4}}, 0x9592}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={0x0, 0x0, 0x18}, 0x18) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x110, r3, 0x75bd3000) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0x40045612, &(0x7f00000016c0)={0xc, @sliced={0x6, [0x9, 0x0, 0x9, 0x1, 0x8000, 0x9, 0xdb, 0xffff, 0xa8de, 0xb, 0x1f, 0x5, 0x3aa, 0x6, 0x3, 0x7d, 0xaf, 0xfffb, 0x3, 0x109, 0x4, 0x4, 0x1, 0x7, 0xfffe, 0x9, 0x8000, 0x35, 0x4, 0x9, 0x5, 0xb8ec, 0x5, 0xfffb, 0x8, 0x1, 0x100, 0x6, 0x88, 0x6, 0x611, 0x10, 0x80, 0x3, 0x8, 0x26, 0x6, 0x3], 0x9}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, &(0x7f0000000080)='\x00') r4 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x40000000, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r5, &(0x7f0000000240)={0x78, 0xfffffffffffffffe, r6, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa000, 0x0, 0x0, 0x0, 0x0, 0x200000}}}, 0x78) 6.712122658s ago: executing program 2 (id=1816): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x7) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 5.673290098s ago: executing program 4 (id=1817): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x2025, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x400, 0x0, 0x3}, 0x18) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x54b102, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0x5, 0xfffffffc}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000200)={0xfffffffa, 0x7}) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_io_uring_setup(0x80024f6, 0x0, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 5.471532563s ago: executing program 1 (id=1818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000140001002a"], 0x2c}, 0x1, 0x0, 0x0, 0x20006054}, 0x24005040) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='%6b\xaa\xe3\x8fa\x8e\xdc\xcc\xb5\x05\x83?3\xf1\x9c\'\x84J\xd8\x04\x12\x9f\x05\x00\x00\x00\x83\xd8\xaa\xb4\xaa\x871Ojc\\Ox\xcc\xa0e\xb3\x86\v\x83\x84\x9c\v\xb9\x92\f\xb9\x82\xeb\x1bXA7y\xb4\x18g\xec\xe7\xd9h\xf2U\x83e\xba\xfe\x80\xbe\x92\xb5\xe2 !@\v\xe8\xc0\x9f\xaf\xcc\xc6\\\xa3^#\xccZ\x19\'OPH&s\x94\x91\x03\xf6\xd6\xa3$\x02\xf8^f\f`', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x1ffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r2, 0x4068aea3, &(0x7f00000002c0)) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0xdd52, 0xc, 0x40, 0xe0fd}, 0x0, 0x2, 0x0, 0xc, &(0x7f0000000380)="e378aa62443b7fd1abf0e38dfa83979c380d38b06d6c93ffd0470d6389f572ef4828329383", 0x6}}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) pipe2$watch_queue(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r7, r4, 0x0, 0x7ffffffd) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0x10}) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'dvmrp1\x00'}) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x28, &(0x7f0000000200)=[@dstype0, @dstype0={0x6, 0x4}], 0x2) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000400)=ANY=[@ANYBLOB="0500"]) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x8b) syz_open_dev$dmmidi(&(0x7f0000000340), 0x7f, 0x501042) 5.079085607s ago: executing program 0 (id=1819): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$admmidi(0x0, 0x20, 0x0) pread64(r0, &(0x7f0000000100)=""/78, 0x4e, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x20008051}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x400, 0x7, 0xfffffff8, 0x0, 0x6, 0x3, 0x2, 0x1, 0x101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) dup2(r3, r3) 5.032497233s ago: executing program 2 (id=1820): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0xffca}}, 0x1014) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000a80)={{r2}, "fad7b9428d93038f63c4dafa1da7e07527fe756bde6d960d81bfd34ba5cca803ad5bdebe227152d43a607faa0dc407fc189b0d7e7468ab55f146ff0337aed82849987da5e1ab963dda992d377e4eacce0e342581ab9962694df4a98aef6d7813fb8b796948ff95415e9d71a47ede207b1794f624b034487af5832e243034017f4f93e15abf71e2dc1e26f97de375b5a1f1a24f98467d2d07d33c06c55c3f89c8d5282a18faedb7595cdedc33c345c89deca5b925cf8467200094111705e71154b451ed8407d1c89255b27d9b243d3a333b099595c33db04682ac22a418c49f5c39a0918c015e8393d2cb7c20feb2c54c82b6387812412e3237e938369453e1e8030d49fcd1c91bf36f2422d1a72f49b31ec3889ebc0d28c929b0c6736f00b53b9ccfd3934a7d933a8202fd2bdb2a8b0d58d6180c1a69b7fb41255ce92795786d10a8c7d9e4f680517f4e34b1e8f884e81e09bd5ec5ecf38b7b8f1637afb0aee0e708c4074eec24e3141b9e12ced6b4beaedec6d55dbae69d5a63142b3e81997458d7151a84d0d7cd4ebd25d24f3d2a3b4c403ab707fe38aa61cab1b070d4730625f76dc37f201e8698204637fe62fe52ed11ae0d8f98f69d4f92762bcba03b8b42feeca7a9fa9300ca4759ff9d7e9162479f954b1316775fcbfc6640b91dd1cb976ceaf2f9f28040ecfdc0e28bb9705a1b985274c7d08bd96aacd6a00f865f3a22f86ef2ace146c4f40bb20798e0bc2db4ce62f0873c09a85e7892729489a7b9c8c9a2939812595942b1ca2d3260315bc723ac2edf24d88f0f49d586a8065817ad936dc8161e438eb5b845df96b2c9a56eb7535ee9e255f41def5d9e9720857fbfd84b4bf1c97c574f568933df8f25d6df5d74a374e4f9a6a2e76644df77da621a8c9ce947af8f20feda0e22ef467eb210665589823025c9144ec05d80276574d3cae61c639d3b12438e012ffe1ca3823b4b79185ce1896b7a41aa36a47776fade667af70c25d9543bc036f40aec1c521f39239cdbf2748883f86b89349ffee1f528f955bdf6f29686c57a49b66ebfc26ee604316f27f9547cf3c21c221581458246b04d627e29e8b846e099e5d8234ce0db1d3e77130147580622b8eeaa34707ea25369c250ce5f5adc14b7afcfbce3c25e5e65d04858dc056456e2f2d2bd6afb59afae8d63b7ab5b8b6ad3386d52dbcee60c7f0945517a77edeeda33789acdb3b7b3242704d6c51940c004cde1d3a342477607581a92a50716caf93495cbc1a6b2f1be20081f7ba8a013416e6b8433383299b752feabd1455bc336b868b38f5ad73f397f0381a51748ffa8550510837d9128ab095629b7a159c6b0dfadfd8a8bff53c80481c59d861954790c593524d8a53cd8b2f2c234b850ec7576a46074293453a86cb3c0c346a8cbbac65eda4a2130e00053f5a054603776ea1d2975e4badbaa83518dad9274c22ac17f20686f56315340e5581c787a2f71ab3a2063664bcc82c7380a13cc8eb106c036800c7b0f14ed667f39af9a5cc01dcdd5809b534fad505858508845d9c547e19c632cd8024ecd777e193c2258312b7a5998a875d33dd8b861500946852af487bbefa54e9b16a83b6131ac343eacb2558e759a9b6ce5db0f1ab173d457d144fd5a65f092e553e1d0e3f9972ec57d27bb48c78332c7a6fab0d5958c61898b3a5ae8810e2246ae36291cd5f79f9475e697c9da84d05cc8dc197485ad790d2a8da5400583dce8ffa3c8adfe276884ed5d33f0e7bc4fb1748e83884213c10ec673dbbbf55670da7fbdd6d8927cd41106064ce22cd2ae14084c439e8f07e4e261667507c0acb03033f30665dbf928d31ff9cf38f61a46d6d1286065bfad5839b0247c975673839f6f685ebaad9396c5f93b3a5f346202a40969ab5c72d0355fd609d33b9443093a53dfbf8052a405389ce269f71da8ae1fb39b30f6a701f56838ca11527de58850f17b4fcc6397614da8e2e331f06024f1ee7f6a8b2f910711526361244a585dfacb4bab57738d7938adb436cf17cfeceb95016e339aa5f2ba30515f289ba35118d32504f52710044e78666dd2834fc2d9fad35e2df29b10e0557ab4789c7dc718d2d03434062bb58fd824c13a0bc6298ed9bdc3d0cc79d008972fcc9f751af4824b2be0823313581cd2fd2b436f84b14719b93dd95a38941c11af5b51f3b0503f3db3569ac847a93ea9124622044b37b083fcf8882a788041289905296e1bf2eb12aadb5228f366a925269a20f7ca9db7f317d5117a70d93f90b402993a7f84328409bda0fdc6306dd5c126fdb179fde4e4d7314d2ee419c8635e62895f8dffdf73f38188121f7b24dae40531b6e43054d3b9b459df2f2613536819643e6b7038de55ffa43bc9edc72e2038e2bf9da70a4a24a3fce0b8673f7f8f5099fcf0d23ab90c7f8770bdfd23e6aaabf7d110768ff08c8754ff6d962e43ff215d78d2ebd882353490da27dabd92ab08291338eaacf3e1ebe6a7da8286d3d57e272b9eac7c70a9a1bd67fb3f4e3052779422a7e19b7cfb01760f949ce4562ce5ad5292cb607e42d513d1facd0903a87836d5c30c181b5728db474154d3cb4e524ba5e03336534ca9f6b093fd6d9e5b89ede5becc677996321d65e9022d1c00e2907767a51c75c9f0688e4e82e045dc972e6be8948c7fc8a84ca8e1a992d44ac8e7a962a931d8eb3d0c4756b838c1339758a4a563d108d35940366b582c48567b5ca539839fbd327361ed76f4204f8ec84ec6401079a189b271747129c3d0025ccc25c9d7fbea0aa4f6a0e5f10422e9866e42ab0f86d6e9022688652536eef7fd28dc5961670a4058eaec61ba3e11273111be9cc3da57edc16321e1382d20f4cf52827032b5f79e395e742113303b0aa595f7188a417ddfdc3b6259b56f9f8f7b133774bfb5c181f1288713e3144ac4ff69fc146cc633dc70c8aee1da2384b72115b49cdbdfe9508b2e06fcd02df78d895e12cf6f0cf4171c7570809b949c6bfbff07da4018935a186630be06d42a4844521428afbed6b3a34aa0226a948fa12e8bdfbb27d13fd5627093511f52a51a6dcd33e0122d2dd1736885c797e1d1c65c06739790767be42582349c147d52e377732742f176b79243edd2c6b585d5512702ce4a7395835e2ab038a5deff84f7ff0d4622aebcd31c58d2dbbaad54638473e5fb428b827a577215460489001af429b40d0dae3521be9a381913740ea72a8b707d2ed4a12f5791fc2d0ea9674d59d68ff02a7b7dda9b9a1917db6093bf8ba4a186c952434dfd664cf9607d9b194b874c24ad03b04148d6f1951d4127146b22783be7eceefc686c4bef899e6cce8ce1344e9e49cfc0d43633098983a40276b4b4fcbe4ce0b695d58471afcfcce714ff1da6e975bd1494d127fbcda25c0110f596e4e0882e01acc674446d2c6e3d08d8034eebd4432968b1aab2e825eba0f76612ae6617667ad6c823fb8234363d5bb341c440fe0a0cad018b6c36ca317e3473eedbcc5f6740a7fad23b55a6fb626d8093ea62d6f35d2babd391e138b24a4ddfa86fef5487a710289f2994f36e87fadd178a5e139455d398a8809e30d2569650ceee90ad6b68942087ae0e33c49c6f7952b08da8762be2c9066e56d27a69a926fc58c82565877e913bff08e0827c45f9e74c964f282d5023efb21e976b93177464a686150ef09a32c352505c534e467ce014fec144dbbdcc8e2d28b6bf619ddf63a48054406dfa33aa541cb9beafa70cabcd8600cabf93d138de261f6f5b63273691669e363e06bc583bdee1ed210179f2ab50a6bc0a727475551e90b0265e1e8ca02acabe93b596b7a782151d792a5679e21e730b7e964c38a49717d0a1385bbb1b0459916424133149720bf47ac38687178a8b351ae3f29bf4a6ea369c90f85f4f123416c8c09c3f25b133ddcdb71b1289821d81581b78ae66c075c535e30151ae1bd48e787b55cc45951c83b5ce097711df0764feab81f24d63940915c471479c24222bd5569201ac4c56577168b76c1f0684f981df516cf5ac5d4307ef2bf429d818c9809f6669f43b1eb160bdcb817154bc36cd8bd24cd6c75e037edab6fa0fe9a0f19b6dbaf99dd68f0318382ccf8d20fe2fdc08134a86b5b0794a534992751fca4ec726dfca985cc239bae2b04ce49416e07e14f752767d05f6584479b5da973fa22477be64fef48b5f3c07936c2be9fa8b92c9e8a0412a2718932edf53382efe2aa1531bbde87363fee5a15501a490c16d26354c0ffeeccf0d05705a6b68a0b88de1e15736092014273f7494474a24555e7e7a6b4e274a9dd4d534cac979a0e99758203f74309af7b221e925c592ad25e13c7907c1030fc79bb728bce4437047470cf97ebc48f45ef67695585caa73178057802a24e3e4fea0a55111275c738d2b09aa7e7a00e91be43ee507b6533c6c6e9d1848e708240d7547b08bb9121fc024caed12805a0a8bfb72f72c6787b760ccd3657328507050f8ad3e348597b38685ad6d44125266382dbf433a9628c548f89eea1691e92fc755502e4656d2faa2077ab1d749a3d2d0543cd5248db49cdb1a60f006ec8cb5b3ecfc1b6b38ed802a6885c6733dbdfbe9d6c0a0daacda38f9bdbd728bfae407e2be620cd8e66743c70073e38e87ede0daf00e7e6205bc0f5cc3ff5657ad559ad13a865d01357215e2e813153212d13d6817ff2badace7edac682ea459e30b476b98ea7ca540c9ec3f8a0550ab51340e04425e3eb0d36fcfa6612bfe947263322afb876ef4a86edf8adf41f4bf4fd617c2cc57c0639baa79f4e6468258e53b76ae51c83f37b6d128cbe4eaf3e58e7d24a7c24451289c991984bed04ce060e4ee13a0c0e43fc98baae2352366672075a6c8c26165aa538b1bac0765ffda39bfafaa401cea38646e418fc99704540acd08e128121bb0b8ab8e316f924cfdae1002d54e2ef3cf3477558d77881beaa3c31cb9cc2429eaf858ebaf06709910faf26d7433290a3250cca586c0e49c3d2456a6409da11259bc7b7e2345146a360404f3d7333487343d9dfbb2813bbeba56a1e1f90d421aca2d1e6ca075b1fcb5733df856fc45de7fe5dbe6174ebc4a6241576e46503a3f7e4ad18b5965c0525faa3d031b09b2b9aa1874285c874382359e93775a69701bb63fccc33d095aac42e79a74ec9700218add3c93114c0686f6897f3228cf3bee05ca63f709075df1b5e89e44c05feb00356c0de06190b84e09285443e58a361840e93da22a3ab64d8a4a0474466d13738c07c71847b6b2e47adb22db94e92524a08ca0dbb02de2e0eb5c2edb7e29d89ed5c2d76bb2fc5da5cd57b89bfd47465b5a57ebd72261ddfb443a141415670a59ae82acde715d73b4ab62602b9a347764a05a15159d25abfa2e26531efc90cce8692bb61d859ef6ecb4d9d6d44813085915e8d97916127241aa470b55cdf629ad52b7ad48d4253b2539726f26cf169c208a591ed4a3d4c0474446493a2da85d1226e58d988bcd484ed94d8b18f3298815be6627d1eb5bde9a2f8a3864b2e0c772502854afab501e8cbf1425028bebc3aece71cae8fc40f1606902d0ebcb124be02fcfb6a2810f580942e9f6a2871f9e9bd4a43bb3428c8e4cc16c5b7f3f6cf92bc0aec8c7826c2e759d6062c7409e2e770e3780bbff8e390bc9b551d12c5d295dda72b46cbf9a20c76f6881d69ec27a003b6edb5b2983483d06b246cc3cbd2c8524e601ce0d45c7441bb9e1dcd676ccb5ac3a9e59e6d65c4eee6b120b6bb71eafc80f9ca5de3529ff04fc2f3546"}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}}) sendmsg$nl_route(r8, 0x0, 0x0) 4.935704335s ago: executing program 0 (id=1821): socket$alg(0x26, 0x5, 0x0) mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0xfffffffffffffebb) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x29, 0x1c000, 0x0, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x240000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x70a, 0x41e3, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x80000, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42c, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3e8, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4.934926192s ago: executing program 1 (id=1822): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x9, 0x3, 0x0, 0x7ff, 0x0, "03880a17f2cd8bad"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c7056}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 3.595922623s ago: executing program 0 (id=1823): syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') 3.552584813s ago: executing program 3 (id=1824): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x5}, 0x1c) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r3, 0x204) socket$netlink(0x10, 0x3, 0x4) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 3.379836038s ago: executing program 4 (id=1825): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semop(r2, 0x0, 0x0) semop(r2, 0x0, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r7, 0xfffffffffffffff7, &(0x7f0000000240)={0x22, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x5, 0x0, 0x9, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 3.293070128s ago: executing program 2 (id=1826): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = io_uring_setup(0x157e, &(0x7f0000000380)={0x0, 0x9566, 0x400, 0x0, 0x3bd}) r5 = socket$rxrpc(0x21, 0x2, 0xa) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r6, 0x0, 0x0, 0x4001, 0x0) close_range(r4, r5, 0x0) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.079577861s ago: executing program 2 (id=1827): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x14, "00629a7d82090100000000000000f7fffffb00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = dup3(r1, r0, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/261, 0x105}], 0x1) socket(0x2b, 0x1, 0x1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) exit(0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x4000) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x80086601, 0x0) r6 = fsopen(&(0x7f0000000500)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000200), 0x4) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 1.967390299s ago: executing program 1 (id=1828): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fcntl$getflags(0xffffffffffffffff, 0x3) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0x5a62, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0}}, 0x10) 1.37583016s ago: executing program 3 (id=1829): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x1fc, &(0x7f00000002c0)=0x7, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab", 0xa9}], 0x2}}], 0x1, 0xc0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r4, 0x5100) sendto$inet(r2, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7) 1.364326881s ago: executing program 0 (id=1830): socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x7) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 158.846949ms ago: executing program 3 (id=1831): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r6, 0x0, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) mknod(0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1832): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x6}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000000d28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c52995560a99956bed40cf5a8c1dfd3db7e2378d5afd35f4c16827f55b3af4d07fce7fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af915600020000000000000000000000000000004900", 0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'team_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x29, 0x3, 0x3}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x200, 0x3d) lseek(r5, 0xfffffffffffffffd, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="8c", 0x1}], 0x1, &(0x7f0000000040)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4800) kernel console output (not intermixed with test programs): pecified [ 616.771809][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.169986][T11922] binder: 11921:11922 ioctl c00c620f 200000000500 returned -22 [ 617.381494][T11926] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[11926] [ 617.432297][T11926] netlink: 'syz.2.1354': attribute type 2 has an invalid length. [ 619.080501][ T8985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.270168][ T8976] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 619.458413][ T8976] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 619.461341][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1363'. [ 619.480890][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 619.495957][ T8976] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 619.559974][ T8976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 619.575560][ T8976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 619.586636][ T8976] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.611015][ T8976] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 619.623463][ T8976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.632873][ T8976] usb 4-1: Product: syz [ 619.637097][ T8976] usb 4-1: Manufacturer: syz [ 619.645029][ T8976] usb 4-1: SerialNumber: syz [ 619.659836][ T8976] usb 4-1: config 0 descriptor?? [ 619.705086][ T8976] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 622.030206][ T5891] usb 4-1: USB disconnect, device number 52 [ 622.121597][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.275019][T11981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1368'. [ 622.318375][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'. [ 622.326725][T11984] netlink: 'syz.4.1368': attribute type 10 has an invalid length. [ 622.440711][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.450297][ T5891] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 622.622727][ T5891] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 622.633246][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.652123][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.684611][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 622.704657][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.717861][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.756095][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 622.776778][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.789497][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.829783][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 622.852594][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.862803][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.878462][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 622.899111][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.910839][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.936356][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 622.964001][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 622.973144][ T8966] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 622.982146][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 622.994556][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 623.003016][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 623.016086][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 623.038359][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 623.069851][ T5891] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 623.487485][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.500155][ T8966] usb 5-1: Using ep0 maxpacket: 32 [ 623.528993][ T5891] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 623.540776][ T8966] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 623.549840][ T8966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.565505][ T8966] usb 5-1: Product: syz [ 623.569836][ T8966] usb 5-1: Manufacturer: syz [ 623.576917][ T8966] usb 5-1: SerialNumber: syz [ 623.584204][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0 [ 623.594826][ T8966] usb 5-1: config 0 descriptor?? [ 623.606882][ T5891] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 623.618640][ T8966] empeg 5-1:0.0: empeg converter detected [ 623.673972][ T5891] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 623.693302][ T8966] usb 5-1: active config #0 != 1 ?? [ 623.727542][ T5891] usb 4-1: Product: syz [ 623.752914][ T5891] usb 4-1: Manufacturer: syz [ 623.766440][ T5891] usb 4-1: SerialNumber: syz [ 623.816439][ T5891] usb 4-1: config 0 descriptor?? [ 623.835775][ T5891] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 624.286177][ T5891] usb 4-1: USB disconnect, device number 53 [ 624.293958][ T5891] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 624.365419][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.372245][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.860883][T12023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 625.218077][T12023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 625.248768][T12023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 625.258979][T12023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 625.265557][T12023] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 625.530475][ T5891] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 625.693268][ T5891] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 625.712512][ T8982] usb 5-1: USB disconnect, device number 57 [ 625.755639][ T5891] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.788788][ T5891] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.820016][ T5891] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 625.851707][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.900994][ T5891] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.063871][ T5891] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 626.067755][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.477670][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 626.632172][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.641035][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.782668][ T8976] usb 3-1: USB disconnect, device number 45 [ 626.997377][ T8982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.240483][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 627.320928][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 627.327467][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 627.333867][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 627.535465][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.561234][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.569986][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.578752][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.518883][T12066] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.528928][T12066] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.538220][T12066] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.548742][T12066] geneve3: entered promiscuous mode [ 628.554258][T12066] geneve3: entered allmulticast mode [ 628.581299][T12066] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.590432][T12066] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.620187][T12066] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.320314][ T8976] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 630.540244][ T8976] usb 3-1: Using ep0 maxpacket: 32 [ 630.553079][T12088] tipc: Enabling of bearer rejected, failed to enable media [ 630.565708][ T8976] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 630.691106][ T8976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.709049][ T8976] usb 3-1: Product: syz [ 630.713561][ T8982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.728244][ T8976] usb 3-1: Manufacturer: syz [ 630.850609][ T5891] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 631.435597][ T8976] usb 3-1: SerialNumber: syz [ 631.464589][ T8976] usb 3-1: config 0 descriptor?? [ 631.513261][ T8976] empeg 3-1:0.0: empeg converter detected [ 631.551944][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.562582][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.586917][ T5891] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 631.599755][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.614975][ T8976] usb 3-1: active config #0 != 1 ?? [ 631.623788][ T5891] usb 2-1: Product: syz [ 631.628076][ T5891] usb 2-1: Manufacturer: syz [ 631.648752][ T5891] usb 2-1: SerialNumber: syz [ 631.862141][ T8976] usb 3-1: USB disconnect, device number 46 [ 632.054283][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.411097][ T5891] usb 2-1: 0:2 : does not exist [ 632.463453][ T5891] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 632.520823][ T5891] usb 2-1: USB disconnect, device number 61 [ 632.963133][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1394'. [ 633.001039][T12112] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[12112] [ 633.014919][T12112] dns_resolver: Unsupported server list version (0) [ 633.100194][ T8966] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 633.270156][ T8966] usb 3-1: Using ep0 maxpacket: 16 [ 633.363185][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.371533][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.380531][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.389961][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.402782][ T8966] usb 3-1: unable to get BOS descriptor or descriptor too short [ 633.799194][ T8966] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.910576][ T8966] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 633.920174][ T8982] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 634.072524][ T8982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.083344][ T8982] usb 2-1: config 0 has no interfaces? [ 634.093027][ T8982] usb 2-1: New USB device found, idVendor=7d25, idProduct=3f11, bcdDevice= 0.6e [ 634.103885][ T8982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.117159][ T8982] usb 2-1: Product: syz [ 634.126344][ T8982] usb 2-1: Manufacturer: syz [ 634.136727][ T8982] usb 2-1: SerialNumber: syz [ 634.168131][ T8982] usb 2-1: config 0 descriptor?? [ 634.199517][ T8966] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 634.211396][ T8966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.226982][ T8966] usb 3-1: Product: syz [ 634.255100][ T8966] usb 3-1: Manufacturer: syz [ 634.261108][ T8966] usb 3-1: SerialNumber: syz [ 634.422154][T12121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1396'. [ 634.499701][T12125] program syz.0.1397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.616773][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.381024][ T5891] usb 2-1: USB disconnect, device number 62 [ 635.753448][T12130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.090193][ T8976] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 636.283069][ T8966] usb 3-1: USB disconnect, device number 47 [ 636.310228][ T8976] usb 5-1: Using ep0 maxpacket: 32 [ 636.367227][ T8976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 636.388254][ T8976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 636.398157][ T8982] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 636.501001][ T8985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.590467][ T8976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 636.642435][ T8976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 636.844805][ T8982] usb 4-1: Using ep0 maxpacket: 32 [ 637.025292][ T8982] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 637.190222][ T8982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.198321][ T8982] usb 4-1: Product: syz [ 637.218826][ T8982] usb 4-1: Manufacturer: syz [ 637.223867][ T8976] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 637.308249][ T8976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.333622][ T8982] usb 4-1: SerialNumber: syz [ 637.503457][ T8982] usb 4-1: config 0 descriptor?? [ 637.523716][ T8976] usb 5-1: Product: syz [ 637.536735][ T8985] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 637.554793][ T8976] usb 5-1: Manufacturer: syz [ 637.565891][ T8982] empeg 4-1:0.0: empeg converter detected [ 637.587150][ T8976] usb 5-1: SerialNumber: syz [ 637.659017][ T8982] usb 4-1: active config #0 != 1 ?? [ 637.694929][ T8976] usb 5-1: config 0 descriptor?? [ 637.839415][ T8985] usb 3-1: Using ep0 maxpacket: 32 [ 637.913833][ T8985] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 637.923062][ T8985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.931229][ T8985] usb 3-1: Product: syz [ 637.935439][ T8985] usb 3-1: Manufacturer: syz [ 637.940032][ T8985] usb 3-1: SerialNumber: syz [ 637.951777][ T8976] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 637.960424][ T8976] cyphidcom ttyUSB0: required endpoint is missing [ 637.973912][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.983060][ T8985] usb 3-1: config 0 descriptor?? [ 638.008692][ T8985] empeg 3-1:0.0: empeg converter detected [ 638.022624][ T8985] usb 3-1: active config #0 != 1 ?? [ 638.424718][ T8985] usb 3-1: USB disconnect, device number 48 [ 639.080966][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.089577][ T9793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.099623][ T8985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.110677][ T8966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.401986][ T8976] usb 4-1: USB disconnect, device number 54 [ 639.558555][ T8982] usb 5-1: USB disconnect, device number 58 [ 639.573183][ T8985] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 639.585236][ T8982] cypress_m8 5-1:0.0: device disconnected [ 639.762900][ T8985] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 639.796376][ T8985] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 639.822653][ T8985] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 639.853459][ T8985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.889893][ T8985] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 641.079614][ T8985] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 641.104048][T12160] delete_channel: no stack [ 641.144868][ T8966] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 641.176245][ T8985] usb 3-1: USB disconnect, device number 49 [ 641.192368][T12175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1409'. [ 641.326354][ T8966] usb 2-1: Using ep0 maxpacket: 32 [ 641.431110][ T8966] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 641.463703][ T8966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.525831][ T8966] usb 2-1: Product: syz [ 641.557933][ T8966] usb 2-1: Manufacturer: syz [ 641.590274][ T8966] usb 2-1: SerialNumber: syz [ 641.623454][ T8966] usb 2-1: config 0 descriptor?? [ 641.640561][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.663714][ T8966] empeg 2-1:0.0: empeg converter detected [ 641.685206][ T8966] usb 2-1: active config #0 != 1 ?? [ 641.862599][T12186] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 641.874771][T12186] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 642.206862][ T8985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.116353][ T8985] usb 2-1: USB disconnect, device number 63 [ 643.279826][ T30] audit: type=1326 audit(1749544773.568:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe38e929 code=0x7ffc0000 [ 643.339648][ T8982] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 643.622913][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.688675][ T30] audit: type=1326 audit(1749544773.598:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fe8fe38e929 code=0x7ffc0000 [ 643.759906][ T30] audit: type=1326 audit(1749544773.598:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe38e929 code=0x7ffc0000 [ 643.797696][T12214] input: syz1 as /devices/virtual/input/input18 [ 643.806329][ T8982] usb 5-1: config 0 has no interfaces? [ 643.828054][T12214] program syz.3.1417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.853678][ T8982] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 643.880571][ T8982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.933356][ T8982] usb 5-1: Product: syz [ 643.937589][ T30] audit: type=1326 audit(1749544773.598:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe8fe38e929 code=0x7ffc0000 [ 643.965378][ T8982] usb 5-1: Manufacturer: syz [ 644.148548][ T8982] usb 5-1: SerialNumber: syz [ 644.179875][ T8982] usb 5-1: config 0 descriptor?? [ 644.266005][ T30] audit: type=1326 audit(1749544773.598:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe38e929 code=0x7ffc0000 [ 644.288435][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.600287][ T30] audit: type=1326 audit(1749544773.598:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe38e929 code=0x7ffc0000 [ 644.626001][ T30] audit: type=1326 audit(1749544773.598:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8fe38e929 code=0x7ffc0000 [ 644.781274][ T30] audit: type=1326 audit(1749544773.598:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe38e929 code=0x7ffc0000 [ 644.842536][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.852021][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.860202][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.864014][ T30] audit: type=1326 audit(1749544773.598:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8fe38e929 code=0x7ffc0000 [ 644.892566][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.967362][ T30] audit: type=1326 audit(1749544773.598:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8fe390847 code=0x7ffc0000 [ 645.879630][T12229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.171755][ T8985] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 646.351656][ T8985] usb 4-1: Using ep0 maxpacket: 32 [ 646.522495][ T8985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 646.583355][ T8985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 646.696637][ T8985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 646.721790][ T8985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 647.393552][ T8985] usb 4-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 647.430334][ T8985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.438342][ T8985] usb 4-1: Product: syz [ 647.450958][ T8982] usb 5-1: USB disconnect, device number 59 [ 647.511786][ T8985] usb 4-1: Manufacturer: syz [ 647.516464][ T8985] usb 4-1: SerialNumber: syz [ 647.533353][ T8985] usb 4-1: config 0 descriptor?? [ 647.577301][ T8985] cypress_m8 4-1:0.0: HID->COM RS232 Adapter converter detected [ 647.593460][ T8985] cyphidcom ttyUSB0: required endpoint is missing [ 647.960374][ T8982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.090277][ T5891] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 648.250688][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 648.268973][ T5891] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 648.278809][ T5891] usb 5-1: config 0 has no interface number 0 [ 648.336325][ T5891] usb 5-1: config 0 interface 184 has no altsetting 0 [ 648.359089][ T5891] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 648.368840][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.377372][ T5891] usb 5-1: Product: syz [ 648.812043][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.831312][ T5891] usb 5-1: Manufacturer: syz [ 648.837408][ T5891] usb 5-1: SerialNumber: syz [ 649.056959][ T8966] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 649.093628][ T5891] usb 5-1: config 0 descriptor?? [ 649.112099][ T5891] smsc75xx v1.0.0 [ 649.115795][ T5891] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 649.126253][ T5891] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 649.221477][ T8966] usb 2-1: Using ep0 maxpacket: 32 [ 649.231451][ T8966] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.243011][ T8966] usb 2-1: config 0 has no interfaces? [ 649.248501][ T8966] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 649.360604][ T8966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.376671][ T8966] usb 2-1: config 0 descriptor?? [ 649.404164][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.460227][ T8982] usb 4-1: USB disconnect, device number 55 [ 649.468081][ T8982] cypress_m8 4-1:0.0: device disconnected [ 649.807743][T12249] team0: Device gtp0 is of different type [ 649.864549][T12252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.993133][T12252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.044777][ T917] kworker/1:2 (917) used greatest stack depth: 19656 bytes left [ 650.097036][ T24] kworker/1:0 (24) used greatest stack depth: 15928 bytes left [ 650.161333][T12252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.301099][T12252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.610764][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.619588][ T9793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.628437][ T8982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.641792][ T8966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.991814][ T5891] usb 5-1: USB disconnect, device number 60 [ 651.971223][ T8982] usb 2-1: USB disconnect, device number 64 [ 652.400785][T12293] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 653.449415][ T5891] hid-generic 0000:0003:0000.0009: item fetching failed at offset 0/2 [ 653.460894][ T5891] hid-generic 0000:0003:0000.0009: probe with driver hid-generic failed with error -22 [ 653.720533][ T8982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.130163][ T8966] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 654.696966][T12316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1438'. [ 654.706503][T12316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1438'. [ 654.848920][ T8966] usb 3-1: Using ep0 maxpacket: 32 [ 654.867524][ T8966] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 654.877344][ T8966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.972401][ T8966] usb 3-1: Product: syz [ 654.980291][ T8966] usb 3-1: Manufacturer: syz [ 654.984939][ T8966] usb 3-1: SerialNumber: syz [ 655.043577][ T8966] usb 3-1: config 0 descriptor?? [ 655.097780][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.162280][ T8966] empeg 3-1:0.0: empeg converter detected [ 655.168283][ T8966] usb 3-1: active config #0 != 1 ?? [ 655.798679][T12327] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1441'. [ 656.160188][ T8985] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 656.336790][ T8985] usb 4-1: config 0 has no interfaces? [ 656.345629][ T8985] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 656.356235][ T8985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.364776][ T9793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.373335][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.383445][ T8966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.392095][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.400857][ T8985] usb 4-1: Product: syz [ 656.401149][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.405226][ T8985] usb 4-1: Manufacturer: syz [ 656.424166][ T8985] usb 4-1: SerialNumber: syz [ 656.435691][ T8985] usb 4-1: config 0 descriptor?? [ 656.882002][T12327] : entered promiscuous mode [ 657.551201][ T8966] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 657.564909][T12332] usb 3-1: USB disconnect, device number 50 [ 657.735564][ T8966] usb 2-1: config 0 has no interfaces? [ 657.747701][ T8966] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 657.758850][ T8966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.800853][ T8966] usb 2-1: Product: syz [ 657.841670][ T8966] usb 2-1: Manufacturer: syz [ 657.872981][ T8966] usb 2-1: SerialNumber: syz [ 658.002565][ T8966] usb 2-1: config 0 descriptor?? [ 658.242042][T12319] delete_channel: no stack [ 659.014509][ T8966] usb 4-1: USB disconnect, device number 56 [ 659.259167][T12357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.492230][ T8985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.261751][ T9793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.404314][ T8966] usb 2-1: USB disconnect, device number 65 [ 662.024362][ T8985] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 662.251229][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.290219][ T8985] usb 5-1: Using ep0 maxpacket: 8 [ 662.304073][ T8985] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 662.313518][ T8985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.340244][ T8985] usb 5-1: Product: syz [ 662.376804][ T8985] usb 5-1: Manufacturer: syz [ 662.426858][ T8985] usb 5-1: SerialNumber: syz [ 662.520405][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.596401][ T8985] usb 5-1: config 0 descriptor?? [ 662.823014][ T8985] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 663.087299][T12398] program syz.2.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.230251][ T8966] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 663.405536][T12332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.493825][ T8966] usb 4-1: config 0 has no interfaces? [ 663.502944][ T8966] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 663.512875][ T8966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.531226][ T8966] usb 4-1: Product: syz [ 663.540259][ T8966] usb 4-1: Manufacturer: syz [ 663.546215][ T8966] usb 4-1: SerialNumber: syz [ 663.566302][ T8966] usb 4-1: config 0 descriptor?? [ 664.051499][T12396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.063849][T12396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.375555][ T8976] usb 4-1: USB disconnect, device number 57 [ 664.435170][ T8985] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 664.457804][ T8985] usb 5-1: USB disconnect, device number 61 [ 664.810244][ T8966] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 664.980258][ T8966] usb 2-1: Using ep0 maxpacket: 32 [ 665.002390][ T8966] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 665.027673][ T8966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.046729][ T8966] usb 2-1: Product: syz [ 665.051276][ T8966] usb 2-1: Manufacturer: syz [ 665.056235][ T8966] usb 2-1: SerialNumber: syz [ 665.076814][ T8966] usb 2-1: config 0 descriptor?? [ 665.087748][ T8966] empeg 2-1:0.0: empeg converter detected [ 665.094321][ T8966] usb 2-1: active config #0 != 1 ?? [ 665.590765][ T8985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.006117][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.020245][ T8966] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 667.210199][ T8966] usb 4-1: Using ep0 maxpacket: 32 [ 667.318485][ T8966] usb 4-1: config 2 has an invalid interface number: 117 but max is 0 [ 667.329257][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.347658][ T8966] usb 4-1: config 2 has no interface number 0 [ 667.472396][ T8966] usb 4-1: config 2 interface 117 has no altsetting 0 [ 667.507443][ T8966] usb 4-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 667.624007][ T8985] usb 2-1: USB disconnect, device number 66 [ 667.626786][ T8966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.719895][ T8966] usb 4-1: Product: syz [ 667.729338][ T8966] usb 4-1: Manufacturer: syz [ 667.737333][ T8966] usb 4-1: SerialNumber: syz [ 668.130600][ T8966] usb-storage 4-1:2.117: USB Mass Storage device detected [ 668.141486][ T8966] usb-storage 4-1:2.117: Quirks match for vid 0781 pid 0100: 1 [ 668.600360][ T8985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.370890][ T8966] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 669.547863][ T8966] usb 2-1: Using ep0 maxpacket: 16 [ 669.557767][ T8966] usb 2-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.572227][ T8966] usb 2-1: config 0 interface 0 has no altsetting 0 [ 669.580403][ T8966] usb 2-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 669.595615][ T8966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.752852][ T8966] usb 2-1: config 0 descriptor?? [ 669.805360][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 669.805379][ T30] audit: type=1326 audit(1749544800.088:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 669.974288][ T30] audit: type=1326 audit(1749544800.088:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 670.054363][ T8985] usb 4-1: USB disconnect, device number 58 [ 670.129314][ T30] audit: type=1326 audit(1749544800.088:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 670.173261][T12482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.194295][T12482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.256494][ T8966] logitech 0003:046D:C219.000A: unknown main item tag 0x2 [ 670.286920][ T30] audit: type=1326 audit(1749544800.088:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 670.318995][ T8966] logitech 0003:046D:C219.000A: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.1-1/input0 [ 670.445636][T12332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.456984][T12482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.478413][ T8966] logitech 0003:046D:C219.000A: no inputs found [ 670.520190][T12518] program syz.4.1464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 670.533306][T12518] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 670.570393][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1464'. [ 670.593799][ T30] audit: type=1326 audit(1749544800.088:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 670.697940][T12482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.872872][ T30] audit: type=1326 audit(1749544800.148:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 670.898501][ T30] audit: type=1326 audit(1749544800.148:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 671.476758][T12528] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 672.000368][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.021346][ T9793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.239431][ T8985] usb 2-1: USB disconnect, device number 67 [ 672.338447][ T30] audit: type=1326 audit(1749544802.618:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.4.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74678e929 code=0x7ffc0000 [ 672.440307][ T30] audit: type=1326 audit(1749544802.618:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.4.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb74678e929 code=0x7ffc0000 [ 672.470596][ T30] audit: type=1326 audit(1749544802.618:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.4.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74678e929 code=0x7ffc0000 [ 672.537716][T12535] netlink: 'syz.4.1472': attribute type 10 has an invalid length. [ 673.000740][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.700144][ T8985] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 673.750173][ T8966] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 673.820803][ T8976] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 673.908501][T12553] netlink: 'syz.0.1477': attribute type 13 has an invalid length. [ 673.970162][ T8966] usb 4-1: Using ep0 maxpacket: 32 [ 673.971709][ T8985] usb 2-1: Using ep0 maxpacket: 32 [ 673.986839][ T8985] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 674.006236][ T8985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.018908][ T8985] usb 2-1: Product: syz [ 674.029959][ T8985] usb 2-1: Manufacturer: syz [ 674.034863][ T8976] usb 3-1: Using ep0 maxpacket: 8 [ 674.044302][ T8976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.063500][ T8985] usb 2-1: SerialNumber: syz [ 674.069210][ T8966] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 674.082668][ T8966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.086335][ T8976] usb 3-1: config 0 has no interfaces? [ 674.091254][ T8966] usb 4-1: Product: syz [ 674.103019][ T8966] usb 4-1: Manufacturer: syz [ 674.107649][ T8966] usb 4-1: SerialNumber: syz [ 674.107679][ T8985] usb 2-1: config 0 descriptor?? [ 674.122066][ T8976] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 674.138156][ T8976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.148267][ T8985] empeg 2-1:0.0: empeg converter detected [ 674.157819][ T8985] usb 2-1: active config #0 != 1 ?? [ 674.158528][ T8966] usb 4-1: config 0 descriptor?? [ 674.182363][ T8966] empeg 4-1:0.0: empeg converter detected [ 674.984495][ T8966] usb 4-1: active config #0 != 1 ?? [ 675.008587][T12553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.037951][ T8976] usb 3-1: config 0 descriptor?? [ 675.084356][ T8982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.373830][T12555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.515202][ T8976] usb 3-1: string descriptor 0 read error: -71 [ 675.534116][ T8976] usb 3-1: USB disconnect, device number 51 [ 676.455710][T12332] usb 4-1: USB disconnect, device number 59 [ 676.505358][ T8976] usb 2-1: USB disconnect, device number 68 [ 676.544730][ T8966] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 676.760142][ T8966] usb 3-1: Using ep0 maxpacket: 16 [ 677.480754][T12332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.536120][ T9793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.120457][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.762659][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.478471][T12608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1488'. [ 680.120684][T12613] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[12613] [ 680.152861][T12613] netlink: 'syz.4.1489': attribute type 2 has an invalid length. [ 680.544031][ T8966] usb 3-1: unable to get BOS descriptor or descriptor too short [ 680.559201][ T8966] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 680.700924][ T8966] usb 3-1: can't read configurations, error -71 [ 681.583743][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.975881][T12625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.997500][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 682.430882][ T8976] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 682.830186][ T8976] usb 3-1: Using ep0 maxpacket: 32 [ 682.883477][T12625] team0 (unregistering): Port device bond0 removed [ 682.911094][ T8976] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 682.928233][ T8976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.970260][ T8976] usb 3-1: Product: syz [ 682.974078][T12625] team0 (unregistering): Port device geneve0 removed [ 682.981614][ T8976] usb 3-1: Manufacturer: syz [ 682.993116][ T8976] usb 3-1: SerialNumber: syz [ 683.003302][ T8976] usb 3-1: config 0 descriptor?? [ 683.251101][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.391898][ T8976] empeg 3-1:0.0: empeg converter detected [ 683.410625][ T8976] usb 3-1: active config #0 != 1 ?? [ 684.520413][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.529037][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.600349][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.194680][ T8976] usb 3-1: USB disconnect, device number 54 [ 685.304652][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1500'. [ 685.390258][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 685.486911][ T5834] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 685.660196][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 685.673452][ T5834] usb 5-1: config 0 has no interfaces? [ 685.735038][ T5834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 685.816491][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.820197][ T8976] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 685.823076][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.840205][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 685.848244][ T5834] usb 5-1: SerialNumber: syz [ 685.861095][ T5834] usb 5-1: config 0 descriptor?? [ 686.090361][ T8976] usb 3-1: Using ep0 maxpacket: 32 [ 686.400166][ T8976] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 686.409453][ T8976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.439995][ T8976] usb 3-1: Product: syz [ 686.500647][ T8976] usb 3-1: Manufacturer: syz [ 686.508845][ T8976] usb 3-1: SerialNumber: syz [ 686.535196][ T8976] usb 3-1: config 0 descriptor?? [ 686.559108][T12670] overlayfs: missing 'lowerdir' [ 686.578217][ T8976] empeg 3-1:0.0: empeg converter detected [ 686.610914][ T8976] usb 3-1: active config #0 != 1 ?? [ 686.840372][ T5834] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 687.140180][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 687.176485][ T5834] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 687.188976][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=8 [ 687.205051][ T5834] usb 4-1: SerialNumber: syz [ 687.222374][ T5834] usb 4-1: config 0 descriptor?? [ 687.590404][ T8976] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 687.650336][ T8985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.740672][ T8976] usb 2-1: Using ep0 maxpacket: 32 [ 687.748434][ T8976] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 687.756949][ T8976] usb 2-1: config 0 has no interface number 0 [ 687.763569][ T8976] usb 2-1: config 0 interface 184 has no altsetting 0 [ 687.774114][ T8976] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 687.783539][ T8976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.792058][ T8976] usb 2-1: Product: syz [ 687.802871][ T8976] usb 2-1: Manufacturer: syz [ 687.812226][ T8976] usb 2-1: SerialNumber: syz [ 687.825680][ T8976] usb 2-1: config 0 descriptor?? [ 687.833158][ T8976] smsc75xx v1.0.0 [ 687.836950][ T8976] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 687.849161][ T8976] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 688.052547][T12684] batman_adv: batadv0: Interface deactivated: dummy0 [ 688.061045][T12684] batman_adv: batadv0: Removing interface: dummy0 [ 688.081561][T12684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.091614][T12684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.109683][T12684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.117843][T12684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.211662][ T8976] usb 5-1: USB disconnect, device number 62 [ 688.448215][T12686] fuse: Invalid rootmode [ 688.618811][ T8976] usb 3-1: USB disconnect, device number 55 [ 688.829491][ T5834] usb_8dev 4-1:0.0 can0: sending command message failed [ 689.050209][ T9793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.059544][ T5834] usb_8dev 4-1:0.0 can0: can't get firmware version [ 689.237845][ T5834] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22 [ 689.445745][ T5834] usb 4-1: USB disconnect, device number 60 [ 689.668102][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.714815][T12705] PKCS7: Unknown OID: [5] (bad) [ 689.719889][T12705] PKCS7: Only support pkcs7_signedData type [ 689.730979][T12705] usb usb8: usbfs: process 12705 (syz.3.1508) did not claim interface 0 before use [ 690.570524][ T8976] usb 2-1: USB disconnect, device number 69 [ 690.686856][ T8985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.796260][T12715] hsr0: entered promiscuous mode [ 690.802657][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1509'. [ 690.977060][T12715] hsr_slave_0: left promiscuous mode [ 691.031025][ T8976] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 691.164481][T12715] hsr0 (unregistering): left promiscuous mode [ 691.290172][ T8976] usb 2-1: Using ep0 maxpacket: 16 [ 691.302956][ T8976] usb 2-1: config 0 has no interfaces? [ 691.310732][ T8976] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 691.333901][ T8976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.393045][T12722] netlink: 'syz.3.1513': attribute type 3 has an invalid length. [ 691.839054][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.909840][ T8976] usb 2-1: Product: syz [ 691.982107][ T8976] usb 2-1: Manufacturer: syz [ 691.986896][ T8976] usb 2-1: SerialNumber: syz [ 692.016344][ T8976] usb 2-1: config 0 descriptor?? [ 692.096421][T12723] netlink: 'syz.2.1512': attribute type 13 has an invalid length. [ 692.178981][T12723] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.198639][T12723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.243464][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.256920][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.293958][T12714] program syz.1.1511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 692.356974][ T8976] usb 2-1: USB disconnect, device number 70 [ 693.855383][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.201278][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.840909][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.025371][T12767] xt_connbytes: Forcing CT accounting to be enabled [ 696.036398][T12767] Cannot find add_set index 0 as target [ 697.090313][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.660154][ T8976] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 697.840006][ T8976] usb 5-1: config 0 has no interfaces? [ 697.858354][ T8976] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 697.867893][ T8976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.876769][ T8976] usb 5-1: Product: syz [ 697.882263][ T8976] usb 5-1: Manufacturer: syz [ 697.886871][ T8976] usb 5-1: SerialNumber: syz [ 697.934364][ T8976] usb 5-1: config 0 descriptor?? [ 698.114091][T12783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 699.580646][ T8966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.880711][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.209388][ T8985] usb 5-1: USB disconnect, device number 63 [ 700.216213][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.520750][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.070311][ T8966] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 702.260128][ T8966] usb 2-1: Using ep0 maxpacket: 32 [ 702.413435][ T8966] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 702.430137][ T8966] usb 2-1: config 0 has no interface number 0 [ 702.443812][ T8966] usb 2-1: config 0 interface 184 has no altsetting 0 [ 702.480312][ T8966] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 702.496172][ T8966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.510028][ T8966] usb 2-1: Product: syz [ 702.514535][ T8966] usb 2-1: Manufacturer: syz [ 702.539425][ T8966] usb 2-1: SerialNumber: syz [ 702.630477][ T8966] usb 2-1: config 0 descriptor?? [ 702.642258][ T8966] smsc75xx v1.0.0 [ 702.646431][ T8966] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 702.657008][ T8966] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 702.913028][T12831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.936619][T12831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.244728][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.582985][T12852] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1540'. [ 704.241169][ T8976] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 704.327037][ T8985] usb 2-1: USB disconnect, device number 71 [ 704.490009][ T8976] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 704.498133][ T8976] usb 3-1: config 0 has no interface number 0 [ 704.504288][ T8976] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 704.513845][ T8976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.531039][ T8976] usb 3-1: config 0 descriptor?? [ 704.585625][ T8976] usb 3-1: selecting invalid altsetting 1 [ 704.594297][T12864] futex_wake_op: syz.4.1539 tries to shift op by -33; fix this program [ 704.609205][ T8976] dvb_ttusb_budget: ttusb_init_controller: error [ 704.664405][ T8976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 705.388129][ T8976] DVB: Unable to find symbol cx22700_attach() [ 705.419618][ T8976] DVB: Unable to find symbol tda10046_attach() [ 705.426399][ T8976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 705.641882][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.348151][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.395244][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.648199][T12873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.923388][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.293522][ T8976] usb 3-1: USB disconnect, device number 56 [ 707.935838][T12900] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 707.983056][T12900] picdev_read: 2038 callbacks suppressed [ 707.983080][T12900] kvm: pic: non byte read [ 707.997840][T12900] kvm: pic: non byte read [ 708.007015][T12900] kvm: pic: non byte read [ 708.050386][ T8976] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 708.087529][T12900] kvm: pic: level sensitive irq not supported [ 708.090353][T12900] kvm: pic: non byte read [ 708.505635][ T8976] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 708.516825][ T8976] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 708.543142][ T8976] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 708.597225][ T8976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.906168][T12897] kAFS: unable to lookup cell '.,' [ 709.310193][ T8976] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 709.410554][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.513364][ T8976] usb 5-1: Using ep0 maxpacket: 16 [ 709.527670][ T8976] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.609414][ T8976] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 709.641974][ T8976] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 709.651615][ T8976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.669545][ T8976] usb 5-1: config 0 descriptor?? [ 709.687931][ T8976] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 710.799379][ T8976] usb 3-1: USB disconnect, device number 57 [ 711.302884][T12938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.401421][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.900144][ T8976] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 712.040518][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.101842][ T8976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 712.114239][ T8976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 712.129056][ T8976] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 712.145074][ T8976] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 712.171555][ T8976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.183796][ T8977] usb 5-1: USB disconnect, device number 64 [ 712.207470][ T8976] usb 2-1: config 0 descriptor?? [ 712.224371][ T8976] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 712.240552][ T8976] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 712.437790][T12924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.447054][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.459058][T12924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.494166][ T8966] usb 2-1: USB disconnect, device number 72 [ 712.571781][ T5834] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 712.597671][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 712.597688][ T30] audit: type=1326 audit(1749544842.888:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab678e929 code=0x7ffc0000 [ 712.626823][ T30] audit: type=1326 audit(1749544842.908:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fcab678e929 code=0x7ffc0000 [ 712.649771][ T30] audit: type=1326 audit(1749544842.908:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab678e929 code=0x7ffc0000 [ 712.675488][ T30] audit: type=1326 audit(1749544842.908:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab678e929 code=0x7ffc0000 [ 712.711183][ T30] audit: type=1326 audit(1749544842.908:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcab678e929 code=0x7ffc0000 [ 712.748665][ T30] audit: type=1326 audit(1749544842.948:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab678e929 code=0x7ffc0000 [ 712.790572][ T5834] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 712.799832][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.818364][ T30] audit: type=1326 audit(1749544842.948:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12948 comm="syz.3.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcab678e929 code=0x7ffc0000 [ 712.862937][ T5834] usb 3-1: config 0 descriptor?? [ 713.076256][T12956] netlink: 'syz.2.1563': attribute type 3 has an invalid length. [ 713.091824][ T5834] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 713.367496][ T5834] [drm:udl_init] *ERROR* Selecting channel failed [ 713.420015][ T5834] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 713.426970][ T5834] [drm] Initialized udl on minor 2 [ 713.479087][ T5834] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 713.490477][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'. [ 713.526341][ T5834] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 713.550389][T12969] netlink: 972 bytes leftover after parsing attributes in process `syz.4.1566'. [ 713.572369][ T8966] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 713.584813][ T5834] usb 3-1: USB disconnect, device number 58 [ 713.608304][ T8966] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 713.883540][T12972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 713.953864][T12972] bond0: (slave bond1): Enslaving as an active interface with a down link [ 713.963439][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.750607][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.505004][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.160503][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.773021][T13033] No such timeout policy "syz1" [ 717.910457][ T5834] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 718.070202][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 718.094595][ T5834] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 718.108652][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.128753][ T5834] usb 2-1: Product: syz [ 718.331285][ T5834] usb 2-1: Manufacturer: syz [ 718.339032][ T5834] usb 2-1: SerialNumber: syz [ 718.362504][ T5834] usb 2-1: config 0 descriptor?? [ 718.380175][ T8966] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 718.560259][ T8966] usb 3-1: Using ep0 maxpacket: 32 [ 718.576115][ T5834] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 718.586211][ T5834] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 718.600483][ T8966] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 718.650643][ T8966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.658710][ T8966] usb 3-1: Product: syz [ 718.665635][ T8966] usb 3-1: Manufacturer: syz [ 718.673377][ T8966] usb 3-1: SerialNumber: syz [ 718.690934][ T8966] usb 3-1: config 0 descriptor?? [ 718.708710][ T8966] empeg 3-1:0.0: empeg converter detected [ 718.723153][ T8966] usb 3-1: active config #0 != 1 ?? [ 718.760597][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.092654][ T8966] usb 3-1: USB disconnect, device number 59 [ 720.408960][ T8966] usb 2-1: USB disconnect, device number 73 [ 721.000352][ T8966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.504926][T13084] overlayfs: missing 'lowerdir' [ 721.810477][ T8976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.876681][T13087] batman_adv: batadv0: Adding interface: dummy0 [ 721.887994][T13087] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.933708][T13087] batman_adv: batadv0: Interface activated: dummy0 [ 721.964329][T13089] batadv0: mtu less than device minimum [ 721.988456][T13089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 721.999677][T13089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.010871][T13089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.022009][T13089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.033194][T13089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.044360][T13089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.055546][T13089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.066767][T13089] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 722.495623][T13093] batman_adv: batadv0: Interface deactivated: dummy0 [ 722.507532][T13093] batman_adv: batadv0: Removing interface: dummy0 [ 722.530259][T13093] bond0: (slave bond_slave_0): Releasing backup interface [ 722.570617][T13093] bond0: (slave bond_slave_1): Releasing backup interface [ 722.619295][T13093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.643673][T13093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.677077][T13093] bond0: (slave bond1): Releasing backup interface [ 722.830157][ T5834] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 722.992136][ T5834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 723.004125][ T5834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 723.023032][ T5834] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 723.049325][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 723.062733][ T5834] usb 5-1: SerialNumber: syz [ 723.620226][ T8966] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 723.900270][ T8966] usb 3-1: Using ep0 maxpacket: 16 [ 724.065742][ T5834] usb 5-1: 0:2 : does not exist [ 724.096479][ T5834] usb 5-1: USB disconnect, device number 65 [ 724.182259][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.680513][ T8976] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 724.893973][ T8976] usb 2-1: Using ep0 maxpacket: 16 [ 724.905925][ T8976] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 724.914295][ T8976] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 724.925983][ T8976] usb 2-1: config 4 has no interface number 0 [ 725.037475][ T8976] usb 2-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 725.166119][ T8976] usb 2-1: config 4 interface 51 has no altsetting 0 [ 725.187319][ T8976] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 725.196715][ T8976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.205214][ T8976] usb 2-1: Product: syz [ 725.209549][ T8976] usb 2-1: Manufacturer: syz [ 725.214351][ T8976] usb 2-1: SerialNumber: syz [ 725.232573][ T8976] cdc_eem 2-1:4.51: probe with driver cdc_eem failed with error -22 [ 725.280459][ T8977] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 725.516153][ T8977] usb 5-1: config 0 has no interfaces? [ 725.529454][ T8977] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 725.540215][ T8977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.548376][ T8977] usb 5-1: Product: syz [ 725.552676][ T8977] usb 5-1: Manufacturer: syz [ 725.558571][ T8977] usb 5-1: SerialNumber: syz [ 725.666717][ T8977] usb 5-1: config 0 descriptor?? [ 725.978126][T13121] netlink: 'syz.4.1599': attribute type 21 has an invalid length. [ 726.103482][ T8966] usb 3-1: unable to get BOS descriptor or descriptor too short [ 726.135351][ T8966] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 726.143921][ T8966] usb 3-1: can't read configurations, error -71 [ 726.284028][T13130] netlink: 'syz.2.1600': attribute type 3 has an invalid length. [ 727.466767][T12332] usb 2-1: USB disconnect, device number 74 [ 727.620597][ T8966] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 727.637995][ T5834] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 727.845985][ T8966] usb 4-1: config 0 has no interfaces? [ 727.857824][ T8966] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 727.868388][ T8966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.883505][ T8966] usb 4-1: Product: syz [ 727.893480][ T8966] usb 4-1: Manufacturer: syz [ 727.898271][ T8966] usb 4-1: SerialNumber: syz [ 727.970674][ T8977] net_ratelimit: 14 callbacks suppressed [ 727.970695][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.981319][ T5834] usb 3-1: config 0 has no interfaces? [ 727.997701][ T5834] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 728.007873][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.019660][ T8966] usb 4-1: config 0 descriptor?? [ 728.056783][T12332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.081427][ T5834] usb 3-1: Product: syz [ 728.087366][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.095533][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.098553][ T5834] usb 3-1: Manufacturer: syz [ 728.121786][ T5834] usb 3-1: SerialNumber: syz [ 728.136955][ T5834] usb 3-1: config 0 descriptor?? [ 728.195959][ T5834] usb 5-1: USB disconnect, device number 66 [ 729.180259][ T8977] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 729.408937][ T8977] usb 2-1: config 0 has no interfaces? [ 729.424172][ T8977] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 729.489199][ T8977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.516955][ T8977] usb 2-1: Product: syz [ 729.537338][ T8977] usb 2-1: Manufacturer: syz [ 729.557780][ T8977] usb 2-1: SerialNumber: syz [ 729.593006][ T8977] usb 2-1: config 0 descriptor?? [ 729.983965][T13162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.019449][T13162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.703885][ T5834] usb 4-1: USB disconnect, device number 61 [ 730.747504][ T8977] usb 3-1: USB disconnect, device number 62 [ 731.007430][ T8985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.015555][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 731.082625][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 731.169220][ T5834] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 731.355715][ T5834] usb 4-1: config 0 has no interfaces? [ 731.379907][ T5834] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 731.392179][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.441612][ T5834] usb 4-1: Product: syz [ 731.530736][ T5834] usb 4-1: Manufacturer: syz [ 731.685328][ T5834] usb 4-1: SerialNumber: syz [ 731.814562][ T5834] usb 4-1: config 0 descriptor?? [ 732.099834][T13177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.110107][T13177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.139257][ T5834] usb 2-1: USB disconnect, device number 75 [ 733.389521][ T8985] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 733.548631][T13211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.558866][T13211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.567681][T13211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.576475][T13211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.585262][T13211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.593922][T13211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.602713][T13211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.611394][T13211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.620178][T13211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.628923][T13211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.652684][ T8985] usb 2-1: Using ep0 maxpacket: 16 [ 735.913105][ T8977] usb 4-1: USB disconnect, device number 62 [ 735.950515][T12332] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 736.156727][T12332] usb 5-1: config 0 has no interfaces? [ 736.165986][T12332] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 736.177334][T12332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.177381][T12332] usb 5-1: Product: syz [ 736.177396][T12332] usb 5-1: Manufacturer: syz [ 736.177410][T12332] usb 5-1: SerialNumber: syz [ 736.197533][T12332] usb 5-1: config 0 descriptor?? [ 736.251494][T13229] netlink: 'syz.0.1623': attribute type 27 has an invalid length. [ 736.853167][ T8985] usb 2-1: unable to get BOS descriptor or descriptor too short [ 736.866763][ T8985] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 736.881193][ T8985] usb 2-1: can't read configurations, error -71 [ 737.139050][T13239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1625'. [ 738.793755][ T8985] usb 5-1: USB disconnect, device number 67 [ 738.911059][T12332] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 738.951333][T13257] xt_CT: No such helper "snmp" [ 739.071863][T12332] usb 2-1: config 0 has no interfaces? [ 739.080339][T12332] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 739.092926][T12332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.122711][T12332] usb 2-1: Product: syz [ 739.126923][T12332] usb 2-1: Manufacturer: syz [ 739.138148][T12332] usb 2-1: SerialNumber: syz [ 739.158558][T12332] usb 2-1: config 0 descriptor?? [ 739.310187][ T8985] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 739.320730][ T8977] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 739.394628][T12332] usb 2-1: USB disconnect, device number 78 [ 739.474636][ T8985] usb 5-1: config 0 has no interfaces? [ 739.488012][ T8977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.498934][ T8985] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 739.508351][ T8985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.517964][ T8985] usb 5-1: Product: syz [ 739.523514][ T8985] usb 5-1: Manufacturer: syz [ 739.528896][ T8977] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 739.538500][ T8977] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 739.546883][ T8985] usb 5-1: SerialNumber: syz [ 739.552400][ T8977] usb 4-1: Manufacturer: syz [ 739.557054][ T8977] usb 4-1: SerialNumber: syz [ 739.562896][ T36] net_ratelimit: 1019 callbacks suppressed [ 739.562910][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.576874][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.588887][ T8985] usb 5-1: config 0 descriptor?? [ 739.596814][ T8977] usb 4-1: config 0 descriptor?? [ 739.608512][ T8977] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 739.630762][ T8977] usb 4-1: No valid video chain found. [ 739.825524][T13263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.836464][T13263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.892625][ T8977] usb 4-1: USB disconnect, device number 63 [ 740.200344][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.236088][T13276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.339314][T13279] netlink: 'syz.2.1635': attribute type 27 has an invalid length. [ 741.483408][T13286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1635'. [ 741.501446][ T8977] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 741.670947][ T8977] usb 4-1: Using ep0 maxpacket: 16 [ 741.678193][ T8977] usb 4-1: config 0 has no interfaces? [ 741.687690][ T8977] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 741.857527][ T8977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.890015][ T8977] usb 4-1: Product: syz [ 741.893110][T13288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1637'. [ 741.894413][ T8977] usb 4-1: Manufacturer: syz [ 741.911262][ T8977] usb 4-1: SerialNumber: syz [ 741.918261][ T8977] usb 4-1: config 0 descriptor?? [ 742.041045][T13279] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.051576][T13279] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.061853][T13279] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.071815][T13279] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.149936][T13284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.161489][T13284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.173123][T13279] wireguard0: left promiscuous mode [ 742.184562][T13279] wireguard0: left allmulticast mode [ 742.204020][T13284] program syz.3.1636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 742.292530][T12332] usb 4-1: USB disconnect, device number 64 [ 742.355644][ T8977] usb 5-1: USB disconnect, device number 68 [ 742.760953][ T5834] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 742.890837][T12332] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 742.920322][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 742.927087][ T5834] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 742.937195][ T5834] usb 3-1: config 0 has no interface number 0 [ 742.943777][ T5834] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 742.955406][ T5834] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024 [ 742.971338][ T5834] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 742.981248][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 742.990030][ T5834] usb 3-1: Product: syz [ 742.994457][ T5834] usb 3-1: SerialNumber: syz [ 743.112693][T12332] usb 5-1: Using ep0 maxpacket: 32 [ 743.179253][T12332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.263934][ T5834] usb 3-1: config 0 descriptor?? [ 743.269253][T12332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.288028][T12332] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 743.300982][ T5834] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 743.307911][T12332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.332656][ T5834] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input20 [ 743.392244][T12332] usb 5-1: config 0 descriptor?? [ 743.551414][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 743.936418][T12332] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 744.910288][ T8985] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 745.167805][ T8985] usb 2-1: config 0 has no interfaces? [ 745.179588][ T8985] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 745.189467][ T8985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.199211][ T8985] usb 2-1: Product: syz [ 745.203905][ T8985] usb 2-1: Manufacturer: syz [ 745.208623][ T8985] usb 2-1: SerialNumber: syz [ 745.219921][ T8985] usb 2-1: config 0 descriptor?? [ 745.370241][ T8985] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 745.465636][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 745.467784][ T8976] usb 3-1: USB disconnect, device number 63 [ 745.472614][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 745.586233][ T8976] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 745.795176][T13329] fuse: Bad value for 'fd' [ 746.260213][ T8976] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 746.663436][ T8982] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 746.766541][ T8976] usb 3-1: config 0 has no interfaces? [ 746.778816][ T8976] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 746.831946][ T8976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.874493][ T8976] usb 3-1: Product: syz [ 746.893694][ T8976] usb 3-1: Manufacturer: syz [ 746.907548][ T8976] usb 3-1: SerialNumber: syz [ 746.913759][ T8982] usb 4-1: Using ep0 maxpacket: 16 [ 747.056210][ T8977] usb 5-1: USB disconnect, device number 69 [ 747.203937][ T8982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 747.227312][ T8982] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 747.238239][ T8976] usb 3-1: config 0 descriptor?? [ 747.247444][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.253831][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.298284][ T8982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.395455][ T8982] usb 4-1: Product: syz [ 747.524026][ T8982] usb 4-1: Manufacturer: syz [ 747.529906][ T8982] usb 4-1: SerialNumber: syz [ 747.536651][ T8982] usb 4-1: config 0 descriptor?? [ 747.553184][ T8982] hub 4-1:0.0: bad descriptor, ignoring hub [ 747.569887][ T8982] hub 4-1:0.0: probe with driver hub failed with error -5 [ 747.620649][T13330] pimreg: entered allmulticast mode [ 747.635488][T13330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.808774][ T8982] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 747.863335][ T8982] input: failed to attach handler mousedev to device input21, error: -5 [ 748.009663][ T5834] usb 2-1: USB disconnect, device number 79 [ 748.125094][T13343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1649'. [ 748.211579][ T8982] usb 4-1: USB disconnect, device number 65 [ 748.742199][T13357] netlink: 'syz.3.1653': attribute type 27 has an invalid length. [ 749.371178][ T8982] usb 3-1: USB disconnect, device number 64 [ 749.531214][T13357] vxcan0: left allmulticast mode [ 749.537339][T13357] vxcan1: left allmulticast mode [ 749.580451][T13357] veth0: left allmulticast mode [ 749.585551][T13357] veth1: left allmulticast mode [ 749.693210][T13357] wg0: left allmulticast mode [ 749.698170][T13357] wg1: left allmulticast mode [ 749.740359][T13357] wg2: left allmulticast mode [ 749.791849][T13357] veth0_to_bridge: left allmulticast mode [ 749.820582][ T8982] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 749.843892][T13357] bridge_slave_0: left allmulticast mode [ 749.880469][T13357] veth1_to_bridge: left allmulticast mode [ 749.889692][T13357] bridge_slave_1: left allmulticast mode [ 749.902968][T13357] veth0_to_bond: left allmulticast mode [ 749.911819][T13357] bond_slave_0: left allmulticast mode [ 749.920711][T13357] veth1_to_bond: left allmulticast mode [ 749.928387][T13357] bond_slave_1: left allmulticast mode [ 749.961696][T13357] veth0_to_team: left allmulticast mode [ 749.977500][T13357] team_slave_0: left allmulticast mode [ 750.001282][T13357] veth1_to_team: left allmulticast mode [ 750.020228][ T8982] usb 3-1: Using ep0 maxpacket: 32 [ 750.033249][T13357] team_slave_1: left allmulticast mode [ 750.044799][ T8982] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 750.057941][ T8982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.069272][T13357] veth0_to_batadv: left allmulticast mode [ 750.076792][T13357] batadv_slave_0: left allmulticast mode [ 750.082746][ T8982] usb 3-1: Product: syz [ 750.108572][ T8982] usb 3-1: Manufacturer: syz [ 750.125769][T13357] veth1_to_batadv: left allmulticast mode [ 750.131640][ T8982] usb 3-1: SerialNumber: syz [ 750.202873][ T8982] usb 3-1: config 0 descriptor?? [ 750.210843][T13357] batadv_slave_1: left allmulticast mode [ 750.227828][T13357] xfrm0: left allmulticast mode [ 750.236890][ T8982] empeg 3-1:0.0: empeg converter detected [ 750.250376][ T8982] usb 3-1: active config #0 != 1 ?? [ 750.251847][T13357] veth0_to_hsr: left allmulticast mode [ 750.272151][T13357] veth1_to_hsr: left allmulticast mode [ 750.388001][T13357] hsr0: left allmulticast mode [ 750.395830][T13357] hsr_slave_0: left allmulticast mode [ 750.402587][T13357] hsr_slave_1: left allmulticast mode [ 750.408322][T13357] veth1_virt_wifi: left allmulticast mode [ 750.426705][T13357] veth0_virt_wifi: left allmulticast mode [ 750.442345][T13357] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 750.472553][T13357] veth1_macvtap: left allmulticast mode [ 750.479877][T13371] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 750.487599][T13371] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 750.534318][T13357] veth0_macvtap: left allmulticast mode [ 750.554489][ T8982] usb 3-1: USB disconnect, device number 65 [ 750.581791][T13357] macvtap0: left allmulticast mode [ 750.587587][T13357] macsec0: left allmulticast mode [ 750.595502][T13357] geneve0: left allmulticast mode [ 750.646532][T13357] geneve1: left allmulticast mode [ 750.669065][T13357] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 750.720231][T13357] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 750.750127][T13357] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 750.760383][T13357] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 750.770795][T13357] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 750.838465][T13357] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 750.892415][T13357] veth2: left allmulticast mode [ 750.938162][T13357] veth3: left allmulticast mode [ 750.970184][T13357] ip6erspan0: left allmulticast mode [ 750.975708][T13357] wireguard0: left allmulticast mode [ 750.990795][T13357] bridge0: left allmulticast mode [ 750.998168][T13357] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 751.006172][T13357] bond1: left allmulticast mode [ 751.011537][T13357] ip6gretap1: left allmulticast mode [ 751.017082][T13357] veth4: left allmulticast mode [ 751.022657][T13357] veth5: left allmulticast mode [ 751.028212][T13357] mac80211_hwsim hwsim13 wlan2: left allmulticast mode [ 751.578795][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.586238][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.630215][ T8982] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 751.680783][T13389] team0: Port device bridge0 removed [ 751.751843][T13389] bridge_slave_0: left allmulticast mode [ 751.757745][T13389] bridge_slave_0: left promiscuous mode [ 751.767883][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.831162][ T8982] usb 3-1: device descriptor read/64, error -71 [ 751.918567][T13389] bridge_slave_1: left allmulticast mode [ 751.930251][T13389] bridge_slave_1: left promiscuous mode [ 751.961884][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.091908][T13389] bond0: (slave bond_slave_0): Releasing backup interface [ 752.130207][ T8977] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 752.138035][ T8982] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 752.164520][T13389] bond0: (slave bond_slave_1): Releasing backup interface [ 752.179742][T13389] team0: Port device team_slave_0 removed [ 752.190386][T13389] team0: Port device team_slave_1 removed [ 752.204695][T13389] bond1: (slave vlan2): Releasing active interface [ 752.216481][T13389] bond2: (slave geneve2): Releasing active interface [ 752.228386][T13389] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 752.241517][T13389] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 752.260576][T13389] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 752.270320][ T8982] usb 3-1: device descriptor read/64, error -71 [ 752.290440][T13389] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 752.326722][ T8977] usb 4-1: config 0 has no interfaces? [ 752.530492][ T8977] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 752.540269][ T8982] usb usb3-port1: attempt power cycle [ 752.547026][ T8977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.638918][ T8977] usb 4-1: Product: syz [ 752.649058][ T8977] usb 4-1: Manufacturer: syz [ 752.669330][ T8977] usb 4-1: SerialNumber: syz [ 752.695030][ T8977] usb 4-1: config 0 descriptor?? [ 752.940372][ T8982] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 752.981963][ T8982] usb 3-1: device descriptor read/8, error -71 [ 753.069621][ T5834] usb 4-1: USB disconnect, device number 66 [ 753.325680][T13412] macsec0: entered promiscuous mode [ 753.330194][ T8982] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 753.386766][ T8982] usb 3-1: device descriptor read/8, error -71 [ 753.412926][T13414] macsec0: left promiscuous mode [ 753.561089][ T8982] usb usb3-port1: unable to enumerate USB device [ 754.722578][T13431] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[13431] [ 758.188663][T13465] program syz.0.1677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 758.746243][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'. [ 758.783849][T13473] : entered promiscuous mode [ 759.244311][ T8977] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 759.728235][ T8977] usb 3-1: config 0 has no interfaces? [ 759.768673][ T8977] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 759.791308][ T8977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.810843][ T8977] usb 3-1: Product: syz [ 759.815357][ T8977] usb 3-1: Manufacturer: syz [ 759.820970][ T8977] usb 3-1: SerialNumber: syz [ 759.843016][ T8977] usb 3-1: config 0 descriptor?? [ 759.850480][T13477] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 760.907190][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 760.933020][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1682'. [ 761.231149][T13501] kAFS: unable to lookup cell '.,' [ 761.370168][ T5834] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 761.660164][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 761.668762][ T5834] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 761.681753][ T5834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.692031][ T5834] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.727858][ T5834] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 761.737034][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.327594][ T8977] usb 3-1: USB disconnect, device number 70 [ 763.580208][ T8966] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 763.842598][ T8966] usb 3-1: Using ep0 maxpacket: 32 [ 764.008408][ T8966] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 764.107528][ T5834] usb 5-1: 0:2 : does not exist [ 764.152637][ T8966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 764.287202][ T8966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 764.298835][ T5834] usb 5-1: USB disconnect, device number 70 [ 764.322055][ T8966] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 764.467867][ T8966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 764.629822][ T8966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 764.717470][ T8966] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 764.779317][ T8966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.955111][ T8966] usb 3-1: Product: syz [ 764.966109][ T8966] usb 3-1: Manufacturer: syz [ 764.974565][ T8966] usb 3-1: SerialNumber: syz [ 764.987302][ T8966] usb 3-1: config 0 descriptor?? [ 765.402750][T13535] bond2 (unregistering): Released all slaves [ 766.710897][T13545] Cannot find add_set index 1 as target [ 767.152521][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 767.162306][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 767.171474][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 767.180754][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 767.189865][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 767.199265][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 767.208471][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 767.223968][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 767.224940][T13551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1695'. [ 767.276172][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1695'. [ 767.655350][T13564] overlayfs: missing 'lowerdir' [ 767.917386][ T8977] usb 3-1: USB disconnect, device number 71 [ 769.651476][ T8982] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 769.930302][ T8966] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 770.098407][ T8966] usb 2-1: config 0 has no interfaces? [ 770.104859][ T8982] usb 5-1: config 0 has no interfaces? [ 770.223315][ T8966] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 770.332509][ T8966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.332584][ T8982] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 770.380130][ T8982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.417165][ T8966] usb 2-1: Product: syz [ 770.424484][ T8982] usb 5-1: Product: syz [ 770.452669][ T8982] usb 5-1: Manufacturer: syz [ 770.460199][ T8966] usb 2-1: Manufacturer: syz [ 770.466059][ T8982] usb 5-1: SerialNumber: syz [ 770.492852][ T8982] usb 5-1: config 0 descriptor?? [ 770.506051][ T8966] usb 2-1: SerialNumber: syz [ 770.595825][ T8966] usb 2-1: config 0 descriptor?? [ 771.080617][T13585] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[13585] [ 772.781209][T13617] __nla_validate_parse: 41 callbacks suppressed [ 772.781222][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'. [ 772.798027][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'. [ 773.028033][T13619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.263384][ T8966] usb 2-1: USB disconnect, device number 80 [ 773.670207][ T5834] usb 5-1: USB disconnect, device number 71 [ 775.375936][T13645] netlink: 'syz.3.1714': attribute type 1 has an invalid length. [ 775.412752][T13645] bond2: entered promiscuous mode [ 775.418892][T13645] 8021q: adding VLAN 0 to HW filter on device bond2 [ 775.490206][ T8966] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 775.533978][T13648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 775.543388][T13648] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 775.554215][T13648] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 775.567232][T13648] bond2: (slave ip6gre1): making interface the new active one [ 775.575195][T13648] ip6gre1: entered promiscuous mode [ 775.589081][T13648] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 775.632012][ T30] audit: type=1326 audit(1749544905.928:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 775.708199][ T8966] usb 3-1: config 0 has no interfaces? [ 775.751105][ T8966] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 775.959979][ T8966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.980284][ T30] audit: type=1326 audit(1749544905.928:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 776.172857][ T8966] usb 3-1: Product: syz [ 776.188353][ T8966] usb 3-1: Manufacturer: syz [ 776.197000][ T8966] usb 3-1: SerialNumber: syz [ 776.211599][ T8966] usb 3-1: config 0 descriptor?? [ 776.238799][ T30] audit: type=1326 audit(1749544905.928:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 776.305033][ T30] audit: type=1326 audit(1749544905.928:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 776.730174][ T30] audit: type=1326 audit(1749544905.948:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 776.780173][ T8966] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 776.809769][ T30] audit: type=1326 audit(1749544905.948:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 776.898639][ T30] audit: type=1326 audit(1749544905.948:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 776.944795][ T8966] usb 2-1: config 0 has no interfaces? [ 776.995635][ T8966] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 777.045763][ T30] audit: type=1326 audit(1749544905.948:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 777.077059][ T8966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.110141][ T8966] usb 2-1: Product: syz [ 777.117821][ T8966] usb 2-1: Manufacturer: syz [ 777.130133][ T8966] usb 2-1: SerialNumber: syz [ 777.155812][ T8966] usb 2-1: config 0 descriptor?? [ 777.270223][ T30] audit: type=1326 audit(1749544905.948:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f59f118e929 code=0x7ffc0000 [ 778.890130][T13681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.899954][T13681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.914071][T13681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.923764][T13681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.934384][T13681] geneve2: entered promiscuous mode [ 778.939789][T13681] geneve2: entered allmulticast mode [ 779.420469][T13681] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.436219][T13681] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.509723][T13681] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.627881][T13681] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.794940][ T8966] usb 3-1: USB disconnect, device number 72 [ 779.819684][ T5834] usb 2-1: USB disconnect, device number 81 [ 779.964477][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 779.974509][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 780.925884][T13702] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1723'. [ 784.000268][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1736'. [ 784.572538][T13750] loop6: detected capacity change from 0 to 63 [ 784.584689][T13750] buffer_io_error: 370 callbacks suppressed [ 784.584708][T13750] Buffer I/O error on dev loop6, logical block 0, async page read [ 784.598841][T13750] Buffer I/O error on dev loop6, logical block 1, async page read [ 784.606929][T13750] Buffer I/O error on dev loop6, logical block 2, async page read [ 784.615655][T13750] Buffer I/O error on dev loop6, logical block 3, async page read [ 784.623866][T13750] Buffer I/O error on dev loop6, logical block 0, async page read [ 784.632063][T13750] Buffer I/O error on dev loop6, logical block 1, async page read [ 784.640367][T13750] Buffer I/O error on dev loop6, logical block 2, async page read [ 784.648406][T13750] Buffer I/O error on dev loop6, logical block 3, async page read [ 784.659350][T13750] Buffer I/O error on dev loop6, logical block 0, async page read [ 784.667700][T13750] Buffer I/O error on dev loop6, logical block 1, async page read [ 786.318651][T13758] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[13758] [ 786.358009][T13758] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1738'. [ 786.376068][T13758] netlink: 'syz.3.1738': attribute type 21 has an invalid length. [ 786.384296][T13758] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1738'. [ 786.413532][T13758] netlink: 'syz.3.1738': attribute type 4 has an invalid length. [ 786.468668][T13758] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1738'. [ 786.650143][ T8982] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 786.850439][ T8977] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 786.866458][ T8982] usb 5-1: config 0 has no interfaces? [ 786.878746][ T8982] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 786.888572][ T8982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.898210][ T8982] usb 5-1: Product: syz [ 786.902932][ T8982] usb 5-1: Manufacturer: syz [ 786.910022][ T8982] usb 5-1: SerialNumber: syz [ 786.934030][ T8982] usb 5-1: config 0 descriptor?? [ 787.070417][ T8977] usb 3-1: Using ep0 maxpacket: 32 [ 787.102501][ T8977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.114978][ T8977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.126767][ T8977] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 787.207190][ T8977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.285326][ T8977] usb 3-1: config 0 descriptor?? [ 787.622006][T13776] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1745'. [ 787.640875][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 787.892118][ T8977] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 788.152536][ T8977] usb 3-1: USB disconnect, device number 73 [ 790.051482][ T8977] usb 5-1: USB disconnect, device number 72 [ 790.627096][T13801] hub 2-0:1.0: USB hub found [ 790.644983][T13801] hub 2-0:1.0: 1 port detected [ 791.310147][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 791.346492][T13813] netlink: 'syz.3.1755': attribute type 3 has an invalid length. [ 791.367771][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 793.950224][ T5834] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 794.165393][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 794.980672][ T5834] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 794.989954][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.008326][ T5834] usb 3-1: Product: syz [ 795.233128][ T5834] usb 3-1: Manufacturer: syz [ 795.261163][ T5834] usb 3-1: SerialNumber: syz [ 795.403044][ T5834] usb 3-1: config 0 descriptor?? [ 795.453027][ T5834] empeg 3-1:0.0: empeg converter detected [ 795.460538][ T5834] usb 3-1: active config #0 != 1 ?? [ 795.913977][T13862] delete_channel: no stack [ 796.675758][T13867] Cannot find set identified by id 0 to match [ 796.855433][ T8982] usb 3-1: USB disconnect, device number 74 [ 796.876082][ T8977] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 797.043732][ T8977] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 797.080405][ T8977] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 797.175444][T13877] netlink: 'syz.2.1768': attribute type 1 has an invalid length. [ 797.341591][ T8977] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.410922][T13877] bond1: entered promiscuous mode [ 797.416451][T13877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 797.456036][ T8977] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 797.545414][T13881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 797.576570][T13881] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 797.587448][T13881] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 797.610811][T13881] bond1: (slave ip6gre1): making interface the new active one [ 797.618558][T13881] ip6gre1: entered promiscuous mode [ 797.632042][T13881] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 797.666134][T13886] macsec0: entered promiscuous mode [ 797.682091][ T8977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.704791][T13885] macsec0: left promiscuous mode [ 798.281219][ T8977] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 798.318627][T13862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.357077][ T8977] usb 2-1: invalid MIDI out EP 0 [ 798.436643][ T5986] udevd[5986]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 798.459264][ T5986] udevd[5986]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 798.665965][T13862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.688735][ T8977] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 799.620159][ T8966] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 799.878202][ T8966] usb 5-1: config 0 has no interfaces? [ 799.909814][ T8966] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 799.919941][ T8966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.929218][ T8966] usb 5-1: Product: syz [ 799.936670][ T8966] usb 5-1: Manufacturer: syz [ 799.943325][ T8966] usb 5-1: SerialNumber: syz [ 799.961359][ T8966] usb 5-1: config 0 descriptor?? [ 799.990742][T13906] loop6: detected capacity change from 0 to 524287999 [ 800.191331][T13900] netlink: 'syz.4.1774': attribute type 12 has an invalid length. [ 800.199372][T13900] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1774'. [ 801.078371][ T8966] usb 2-1: USB disconnect, device number 82 [ 801.512078][T13922] xt_hashlimit: size too large, truncated to 1048576 [ 801.714818][ T8966] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 802.050243][ T8966] usb 2-1: Using ep0 maxpacket: 32 [ 802.379172][ T8966] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 802.429301][ T8966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.810464][ T8966] usb 2-1: Product: syz [ 802.840932][ T8966] usb 2-1: Manufacturer: syz [ 802.849644][ T8966] usb 2-1: SerialNumber: syz [ 802.864000][ T8966] usb 2-1: config 0 descriptor?? [ 802.919097][ T8966] empeg 2-1:0.0: empeg converter detected [ 802.940244][ T8966] usb 2-1: active config #0 != 1 ?? [ 802.979814][ T8977] usb 5-1: USB disconnect, device number 73 [ 803.150289][T13932] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 803.176712][T13932] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 803.451054][T13935] syz.4.1782: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 803.475731][T13935] CPU: 0 UID: 0 PID: 13935 Comm: syz.4.1782 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 803.475755][T13935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 803.475767][T13935] Call Trace: [ 803.475773][T13935] [ 803.475779][T13935] dump_stack_lvl+0x189/0x250 [ 803.475800][T13935] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.475817][T13935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.475840][T13935] warn_alloc+0x214/0x310 [ 803.475852][T13935] ? stack_depot_save_flags+0x40/0x900 [ 803.475869][T13935] ? __pfx_warn_alloc+0x10/0x10 [ 803.475883][T13935] ? kasan_save_track+0x4f/0x80 [ 803.475897][T13935] ? xskq_create+0x56/0x170 [ 803.475910][T13935] ? xsk_init_queue+0xb0/0x110 [ 803.475921][T13935] ? xsk_setsockopt+0x43f/0x710 [ 803.475932][T13935] ? do_sock_setsockopt+0x257/0x3e0 [ 803.475945][T13935] ? __x64_sys_setsockopt+0x18b/0x220 [ 803.475955][T13935] ? do_syscall_64+0xfa/0x3b0 [ 803.475963][T13935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.475981][T13935] __vmalloc_node_range_noprof+0x125/0x12f0 [ 803.476028][T13935] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 803.476058][T13935] ? __kasan_kmalloc+0x93/0xb0 [ 803.476079][T13935] vmalloc_user_noprof+0xad/0xf0 [ 803.476099][T13935] ? xskq_create+0xbf/0x170 [ 803.476131][T13935] xskq_create+0xbf/0x170 [ 803.476158][T13935] xsk_init_queue+0xb0/0x110 [ 803.476185][T13935] xsk_setsockopt+0x43f/0x710 [ 803.476212][T13935] ? __pfx_xsk_setsockopt+0x10/0x10 [ 803.476235][T13935] ? __lock_acquire+0xab9/0xd20 [ 803.476270][T13935] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 803.476292][T13935] ? __pfx_xsk_setsockopt+0x10/0x10 [ 803.476318][T13935] do_sock_setsockopt+0x257/0x3e0 [ 803.476344][T13935] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 803.476371][T13935] ? __fget_files+0x2a/0x420 [ 803.476399][T13935] __x64_sys_setsockopt+0x18b/0x220 [ 803.476428][T13935] do_syscall_64+0xfa/0x3b0 [ 803.476444][T13935] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.476469][T13935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.476487][T13935] ? clear_bhb_loop+0x60/0xb0 [ 803.476509][T13935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.476531][T13935] RIP: 0033:0x7fb74678e929 [ 803.476551][T13935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.476568][T13935] RSP: 002b:00007fb747682038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 803.476589][T13935] RAX: ffffffffffffffda RBX: 00007fb7469b5fa0 RCX: 00007fb74678e929 [ 803.476603][T13935] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 803.476614][T13935] RBP: 00007fb746810b39 R08: 0000000000000052 R09: 0000000000000000 [ 803.476626][T13935] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.476638][T13935] R13: 0000000000000000 R14: 00007fb7469b5fa0 R15: 00007fb746adfa28 [ 803.476684][T13935] [ 803.476733][T13935] Mem-Info: [ 803.880602][T13935] active_anon:8511 inactive_anon:24 isolated_anon:0 [ 803.880602][T13935] active_file:13897 inactive_file:4077 isolated_file:0 [ 803.880602][T13935] unevictable:768 dirty:459 writeback:0 [ 803.880602][T13935] slab_reclaimable:9340 slab_unreclaimable:152195 [ 803.880602][T13935] mapped:32531 shmem:1394 pagetables:1473 [ 803.880602][T13935] sec_pagetables:5 bounce:0 [ 803.880602][T13935] kernel_misc_reclaimable:0 [ 803.880602][T13935] free:1284985 free_pcp:18952 free_cma:0 [ 804.029538][T13935] Node 0 active_anon:34832kB inactive_anon:96kB active_file:55588kB inactive_file:16176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130124kB dirty:1860kB writeback:0kB shmem:4040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12212kB pagetables:5764kB sec_pagetables:20kB all_unreclaimable? no Balloon:0kB [ 804.205082][T13946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.217499][T13946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.242796][T13946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.253067][T13935] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 804.286735][T13946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.306845][T13935] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 804.310357][T13946] geneve2: entered promiscuous mode [ 804.469104][T13946] geneve2: entered allmulticast mode [ 804.491067][T13935] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 804.497416][T13935] Node 0 DMA32 free:1232500kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33536kB inactive_anon:96kB active_file:55548kB inactive_file:14648kB unevictable:1536kB writepending:1860kB present:3129332kB managed:2561044kB mlocked:0kB bounce:0kB free_pcp:46384kB local_pcp:20352kB free_cma:0kB [ 804.554498][T13946] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.584390][T13935] lowmem_reserve[]: 0 0 [ 804.584420][ T8966] usb 2-1: USB disconnect, device number 83 [ 804.600376][T13935] 1 1 1 [ 804.638742][T13935] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:188kB inactive_anon:0kB active_file:40kB inactive_file:1528kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:108kB local_pcp:12kB free_cma:0kB [ 804.676265][T13946] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.812241][T13946] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.831861][T13946] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.911158][T13935] lowmem_reserve[]: 0 0 0 0 0 [ 804.919869][T13935] Node 1 Normal free:3896476kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:25460kB local_pcp:11316kB free_cma:0kB [ 805.135498][T13935] lowmem_reserve[]: 0 0 0 0 0 [ 805.160275][T13935] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 805.217390][T13935] Node 0 DMA32: 1425*4kB (UM) 635*8kB (UME) 476*16kB (UME) 580*32kB (UME) 247*64kB (UME) 107*128kB (UME) 27*256kB (UME) 49*512kB (UME) 16*1024kB (UM) 8*2048kB (UM) 270*4096kB (UM) = 1237148kB [ 805.235906][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1785'. [ 805.867457][T13935] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 805.943556][T13935] Node 1 Normal: 211*4kB (UME) 58*8kB (UME) 42*16kB (UME) 161*32kB (UME) 47*64kB (UME) 12*128kB (UME) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (UM) = 3896476kB [ 806.047891][T13935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 806.085367][T13935] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 806.099101][T13935] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 806.112073][T13935] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 806.123461][T13935] 19388 total pagecache pages [ 806.128184][T13935] 24 pages in swap cache [ 806.135695][T13935] Free swap = 124900kB [ 806.141512][T13935] Total swap = 124996kB [ 806.145906][T13935] 2097051 pages RAM [ 806.149744][T13935] 0 pages HighMem/MovableOnly [ 806.154485][T13935] 424684 pages reserved [ 806.158729][T13935] 0 pages cma reserved [ 806.180500][ T5834] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 806.344614][T13968] hsr0: entered promiscuous mode [ 806.351280][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1789'. [ 806.363328][T13968] hsr_slave_0: left promiscuous mode [ 806.369647][T13968] hsr_slave_1: left promiscuous mode [ 806.380386][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 806.417961][ T5834] usb 4-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 806.482958][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.521969][ T5834] usb 4-1: Product: syz [ 806.526205][ T5834] usb 4-1: Manufacturer: syz [ 806.573292][ T5834] usb 4-1: SerialNumber: syz [ 806.596125][ T5834] usb 4-1: config 0 descriptor?? [ 806.609573][ T5834] empeg 4-1:0.0: empeg converter detected [ 806.876190][ T5834] usb 4-1: active config #0 != 1 ?? [ 806.925490][T13968] hsr0 (unregistering): left promiscuous mode [ 807.169344][ T5834] usb 4-1: USB disconnect, device number 67 [ 807.610349][ T8982] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 807.793927][ T8982] usb 5-1: Using ep0 maxpacket: 32 [ 807.807710][ T8982] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 807.818026][ T8982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.878508][ T8982] usb 5-1: Product: syz [ 807.889960][ T8982] usb 5-1: Manufacturer: syz [ 808.053840][ T8982] usb 5-1: SerialNumber: syz [ 808.112485][ T8982] usb 5-1: config 0 descriptor?? [ 808.120436][ T5834] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 808.230183][ T8977] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 808.268405][ T8982] empeg 5-1:0.0: empeg converter detected [ 808.293531][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.306893][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 808.325716][ T8982] usb 5-1: active config #0 != 1 ?? [ 808.406901][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 808.684443][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.737930][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.754087][ T5834] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 808.767578][ T5834] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 808.780202][ T5834] usb 4-1: Manufacturer: syz [ 808.792946][ T5834] usb 4-1: config 0 descriptor?? [ 808.958806][ T8977] usb 3-1: config 0 has no interfaces? [ 809.191851][ T8977] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 809.254015][ T8977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.294393][ T8977] usb 3-1: Product: syz [ 809.304510][ T8977] usb 3-1: Manufacturer: syz [ 809.314983][ T8977] usb 3-1: SerialNumber: syz [ 809.338095][ T8977] usb 3-1: config 0 descriptor?? [ 809.620565][ T8977] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 809.900142][ T8977] usb 2-1: Using ep0 maxpacket: 32 [ 809.910267][ T8977] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 809.919381][ T8977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.927467][ T8977] usb 2-1: Product: syz [ 809.931933][ T8977] usb 2-1: Manufacturer: syz [ 809.936600][ T8977] usb 2-1: SerialNumber: syz [ 809.969071][ T8977] usb 2-1: config 0 descriptor?? [ 809.987393][ T8977] empeg 2-1:0.0: empeg converter detected [ 809.999248][ T8977] usb 2-1: active config #0 != 1 ?? [ 810.274305][ T8977] usb 5-1: USB disconnect, device number 74 [ 810.374051][T14006] sg_write: data in/out 524252/14 bytes for SCSI command 0x1-- guessing data in; [ 810.374051][T14006] program syz.3.1792 not setting count and/or reply_len properly [ 811.859104][ T5834] usb 3-1: USB disconnect, device number 75 [ 812.146001][T14018] macsec0: entered promiscuous mode [ 812.188357][T14018] macsec0: left promiscuous mode [ 812.360573][ T8982] usb 4-1: USB disconnect, device number 68 [ 812.386839][ T8966] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 812.439031][ T8977] usb 2-1: USB disconnect, device number 84 [ 812.475632][T14026] netlink: 'syz.0.1807': attribute type 1 has an invalid length. [ 812.564044][ T8966] usb 5-1: config 0 has no interfaces? [ 812.577523][ T8966] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 812.586992][ T8966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.595482][ T8966] usb 5-1: Product: syz [ 812.600267][ T8966] usb 5-1: Manufacturer: syz [ 812.604925][ T8966] usb 5-1: SerialNumber: syz [ 812.625272][ T8966] usb 5-1: config 0 descriptor?? [ 812.655202][T14026] bond2: entered promiscuous mode [ 812.908210][T14026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 813.093188][T14021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 813.128920][T14021] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 813.489804][T14021] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 813.509270][T14021] bond2: (slave ip6gre1): making interface the new active one [ 813.517383][T14021] ip6gre1: entered promiscuous mode [ 813.528095][T14021] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 815.034261][T14053] netlink: 'syz.3.1802': attribute type 10 has an invalid length. [ 815.044077][T14053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1802'. [ 815.062948][T14053] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 815.169776][T14049] tc_dump_action: action bad kind [ 815.205573][ T8966] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 815.400193][ T8966] usb 2-1: Using ep0 maxpacket: 32 [ 815.648225][ T8966] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 815.719406][ T8966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.747686][ T8966] usb 2-1: Product: syz [ 815.771948][ T8966] usb 2-1: Manufacturer: syz [ 815.785903][ T8966] usb 2-1: SerialNumber: syz [ 815.821459][ T8966] usb 2-1: config 0 descriptor?? [ 815.845758][ T8966] empeg 2-1:0.0: empeg converter detected [ 815.887628][ T8966] usb 2-1: active config #0 != 1 ?? [ 816.255844][ T8977] usb 5-1: USB disconnect, device number 75 [ 816.283242][ T8982] usb 2-1: USB disconnect, device number 85 [ 816.850484][ T30] audit: type=1800 audit(1749544947.128:983): pid=14070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1805" name="bus" dev="ramfs" ino=54232 res=0 errno=0 [ 816.980301][ T8982] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 817.140178][ T8966] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 817.202279][ T8982] usb 4-1: config 0 has no interfaces? [ 817.372093][ T8982] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 817.376856][ T8966] usb 3-1: config 0 has no interfaces? [ 817.397389][ T8966] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 817.461832][ T8982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.471154][ T8966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.497386][ T8966] usb 3-1: Product: syz [ 817.514510][ T8966] usb 3-1: Manufacturer: syz [ 817.516171][ T8982] usb 4-1: config 0 descriptor?? [ 817.537772][ T8966] usb 3-1: SerialNumber: syz [ 817.563593][ T8966] usb 3-1: config 0 descriptor?? [ 817.990588][ T8982] usb 4-1: USB disconnect, device number 69 [ 818.072407][T14067] delete_channel: no stack [ 818.904050][T14092] random: crng reseeded on system resumption [ 819.987238][ T8966] usb 3-1: USB disconnect, device number 76 [ 820.677758][ T5834] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 820.886384][ T5834] usb 4-1: config 0 has no interfaces? [ 820.922011][ T5834] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 820.932152][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.941708][ T5834] usb 4-1: Product: syz [ 820.946069][ T5834] usb 4-1: Manufacturer: syz [ 820.960288][ T5834] usb 4-1: SerialNumber: syz [ 820.973248][ T5834] usb 4-1: config 0 descriptor?? [ 822.299966][T14126] sctp: [Deprecated]: syz.2.1820 (pid 14126) Use of int in maxseg socket option. [ 822.299966][T14126] Use struct sctp_assoc_value instead [ 822.443903][T14128] input: syz0 as /devices/virtual/input/input23 [ 823.189547][ T5834] usb 4-1: USB disconnect, device number 70 [ 824.940179][ T8982] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 825.100257][ T8982] usb 3-1: Using ep0 maxpacket: 8 [ 825.107125][ T8982] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 825.126314][ T8982] usb 3-1: config 179 has no interface number 0 [ 825.146560][ T8982] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 825.167973][ T8982] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 825.196052][ T8982] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 825.220124][ T8982] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 825.242605][ T8982] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 825.291719][ T8982] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 825.306337][ T8982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.325987][T14156] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 827.838791][ T5834] usb 3-1: USB disconnect, device number 77 [ 827.838843][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 827.853308][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 827.862649][ C0] ================================================================== [ 827.870734][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 827.878529][ C0] Read of size 4 at addr ffff88807c56b05c by task swapper/0/0 [ 827.885966][ C0] [ 827.888277][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 827.888291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 827.888298][ C0] Call Trace: [ 827.888305][ C0] [ 827.888311][ C0] dump_stack_lvl+0x189/0x250 [ 827.888329][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 827.888340][ C0] ? rcu_is_watching+0x15/0xb0 [ 827.888354][ C0] ? __kasan_check_byte+0x12/0x40 [ 827.888366][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.888379][ C0] ? rcu_is_watching+0x15/0xb0 [ 827.888393][ C0] ? lock_release+0x4b/0x3e0 [ 827.888411][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 827.888421][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 827.888431][ C0] print_report+0xd2/0x2b0 [ 827.888444][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 827.888454][ C0] kasan_report+0x118/0x150 [ 827.888464][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 827.888476][ C0] do_raw_spin_lock+0x23d/0x290 [ 827.888487][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 827.888499][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 827.888511][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 827.888528][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 827.888553][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 827.888579][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 827.888604][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 827.888621][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 827.888632][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 827.888644][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 827.888661][ C0] dummy_timer+0x862/0x4550 [ 827.888677][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 827.888694][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 827.888705][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 827.888714][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 827.888724][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 827.888743][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 827.888757][ C0] ? read_tsc+0x9/0x20 [ 827.888769][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 827.888785][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 827.888796][ C0] handle_softirqs+0x286/0x870 [ 827.888810][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 827.888825][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 827.888839][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 827.888852][ C0] __irq_exit_rcu+0xca/0x1f0 [ 827.888865][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 827.888881][ C0] irq_exit_rcu+0x9/0x30 [ 827.888893][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 827.888908][ C0] [ 827.888912][ C0] [ 827.888916][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 827.888928][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 827.888942][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 25 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 827.888952][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 827.888962][ C0] RAX: cdeda717f71d1400 RBX: ffffffff81976058 RCX: cdeda717f71d1400 [ 827.888970][ C0] RDX: 0000000000000001 RSI: ffffffff8d9810f7 RDI: ffffffff8be28300 [ 827.888977][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 827.888985][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa108f0 [ 827.888992][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 827.889000][ C0] ? do_idle+0x1e8/0x510 [ 827.889011][ C0] default_idle+0x13/0x20 [ 827.889021][ C0] default_idle_call+0x74/0xb0 [ 827.889031][ C0] do_idle+0x1e8/0x510 [ 827.889041][ C0] ? __pfx_do_idle+0x10/0x10 [ 827.889053][ C0] cpu_startup_entry+0x44/0x60 [ 827.889061][ C0] rest_init+0x2de/0x300 [ 827.889072][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 827.889085][ C0] start_kernel+0x47d/0x500 [ 827.889103][ C0] x86_64_start_reservations+0x24/0x30 [ 827.889115][ C0] x86_64_start_kernel+0x143/0x1c0 [ 827.889127][ C0] common_startup_64+0x13e/0x147 [ 827.889141][ C0] [ 827.889146][ C0] [ 828.274664][ C0] Allocated by task 8982: [ 828.278968][ C0] kasan_save_track+0x3e/0x80 [ 828.283634][ C0] __kasan_kmalloc+0x93/0xb0 [ 828.288201][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 828.293557][ C0] xpad_probe+0x428/0x1fc0 [ 828.297959][ C0] usb_probe_interface+0x641/0xbc0 [ 828.303048][ C0] really_probe+0x26a/0x9a0 [ 828.307528][ C0] __driver_probe_device+0x18c/0x2f0 [ 828.312801][ C0] driver_probe_device+0x4f/0x430 [ 828.317932][ C0] __device_attach_driver+0x2ce/0x530 [ 828.323298][ C0] bus_for_each_drv+0x251/0x2e0 [ 828.328144][ C0] __device_attach+0x2b8/0x400 [ 828.332897][ C0] bus_probe_device+0x185/0x260 [ 828.337737][ C0] device_add+0x7b6/0xb50 [ 828.342049][ C0] usb_set_configuration+0x1a87/0x20e0 [ 828.347504][ C0] usb_generic_driver_probe+0x8d/0x150 [ 828.352964][ C0] usb_probe_device+0x1c1/0x390 [ 828.357803][ C0] really_probe+0x26a/0x9a0 [ 828.362313][ C0] __driver_probe_device+0x18c/0x2f0 [ 828.367748][ C0] driver_probe_device+0x4f/0x430 [ 828.372759][ C0] __device_attach_driver+0x2ce/0x530 [ 828.378110][ C0] bus_for_each_drv+0x251/0x2e0 [ 828.382941][ C0] __device_attach+0x2b8/0x400 [ 828.387769][ C0] bus_probe_device+0x185/0x260 [ 828.392606][ C0] device_add+0x7b6/0xb50 [ 828.396920][ C0] usb_new_device+0xa39/0x16c0 [ 828.401672][ C0] hub_event+0x2941/0x4a00 [ 828.406063][ C0] process_scheduled_works+0xae1/0x17b0 [ 828.411587][ C0] worker_thread+0x8a0/0xda0 [ 828.416150][ C0] kthread+0x70e/0x8a0 [ 828.420196][ C0] ret_from_fork+0x3fc/0x770 [ 828.424764][ C0] ret_from_fork_asm+0x1a/0x30 [ 828.429505][ C0] [ 828.431807][ C0] Freed by task 5834: [ 828.435848][ C0] kasan_save_track+0x3e/0x80 [ 828.440515][ C0] kasan_save_free_info+0x46/0x50 [ 828.445538][ C0] __kasan_slab_free+0x62/0x70 [ 828.450281][ C0] kfree+0x18e/0x440 [ 828.454250][ C0] xpad_disconnect+0x350/0x480 [ 828.458996][ C0] usb_unbind_interface+0x26b/0x8f0 [ 828.464172][ C0] device_release_driver_internal+0x4d9/0x7c0 [ 828.470218][ C0] bus_remove_device+0x34d/0x410 [ 828.475136][ C0] device_del+0x511/0x8e0 [ 828.479440][ C0] usb_disable_device+0x3e9/0x8a0 [ 828.484446][ C0] usb_disconnect+0x330/0x910 [ 828.489103][ C0] hub_event+0x1cdb/0x4a00 [ 828.493499][ C0] process_scheduled_works+0xae1/0x17b0 [ 828.499026][ C0] worker_thread+0x8a0/0xda0 [ 828.503591][ C0] kthread+0x70e/0x8a0 [ 828.507638][ C0] ret_from_fork+0x3fc/0x770 [ 828.512210][ C0] ret_from_fork_asm+0x1a/0x30 [ 828.516951][ C0] [ 828.519253][ C0] The buggy address belongs to the object at ffff88807c56b000 [ 828.519253][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 828.533293][ C0] The buggy address is located 92 bytes inside of [ 828.533293][ C0] freed 1024-byte region [ffff88807c56b000, ffff88807c56b400) [ 828.547081][ C0] [ 828.549391][ C0] The buggy address belongs to the physical page: [ 828.555787][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c56c800 pfn:0x7c568 [ 828.566178][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 828.574655][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 828.582630][ C0] page_type: f5(slab) [ 828.586588][ C0] raw: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001 [ 828.595156][ C0] raw: ffff88807c56c800 000000000010000a 00000000f5000000 0000000000000000 [ 828.603721][ C0] head: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001 [ 828.612392][ C0] head: ffff88807c56c800 000000000010000a 00000000f5000000 0000000000000000 [ 828.621044][ C0] head: 00fff00000000003 ffffea0001f15a01 00000000ffffffff 00000000ffffffff [ 828.629699][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 828.638353][ C0] page dumped because: kasan: bad access detected [ 828.644741][ C0] page_owner tracks the page as allocated [ 828.650463][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6046, tgid 6046 (syz-executor), ts 91392973273, free_ts 91353671122 [ 828.669742][ C0] post_alloc_hook+0x240/0x2a0 [ 828.674495][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 828.680022][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 828.685823][ C0] alloc_pages_mpol+0x232/0x4a0 [ 828.690662][ C0] allocate_slab+0x8a/0x3b0 [ 828.695150][ C0] ___slab_alloc+0xbfc/0x1480 [ 828.699805][ C0] __kmalloc_noprof+0x305/0x4f0 [ 828.704632][ C0] ieee802_11_parse_elems_full+0x152/0x2b20 [ 828.710507][ C0] ieee80211_inform_bss+0x10c/0x10a0 [ 828.715777][ C0] cfg80211_inform_single_bss_data+0xd02/0x1ac0 [ 828.721999][ C0] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 828.727617][ C0] cfg80211_inform_bss_frame_data+0x417/0x7b0 [ 828.733687][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 828.739321][ C0] ieee80211_scan_rx+0x593/0xa20 [ 828.744269][ C0] ieee80211_rx_list+0x22fc/0x2d80 [ 828.749380][ C0] ieee80211_rx_napi+0x1a8/0x3d0 [ 828.754303][ C0] page last free pid 5846 tgid 5846 stack trace: [ 828.760612][ C0] __free_frozen_pages+0xc71/0xe70 [ 828.765704][ C0] __slab_free+0x326/0x400 [ 828.770102][ C0] qlist_free_all+0x97/0x140 [ 828.774672][ C0] kasan_quarantine_reduce+0x148/0x160 [ 828.780111][ C0] __kasan_slab_alloc+0x22/0x80 [ 828.784933][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 828.790377][ C0] getname_flags+0xb8/0x540 [ 828.794870][ C0] __x64_sys_unlinkat+0xac/0xf0 [ 828.799694][ C0] do_syscall_64+0xfa/0x3b0 [ 828.804175][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.810052][ C0] [ 828.812364][ C0] Memory state around the buggy address: [ 828.817969][ C0] ffff88807c56af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 828.826004][ C0] ffff88807c56af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 828.834042][ C0] >ffff88807c56b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 828.842109][ C0] ^ [ 828.849019][ C0] ffff88807c56b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 828.857054][ C0] ffff88807c56b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 828.865101][ C0] ================================================================== [ 828.873148][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 828.880408][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 828.892022][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 828.902062][ C0] Call Trace: [ 828.905329][ C0] [ 828.908153][ C0] dump_stack_lvl+0x99/0x250 [ 828.912734][ C0] ? __asan_memcpy+0x40/0x70 [ 828.917308][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 828.922507][ C0] ? __pfx__printk+0x10/0x10 [ 828.927087][ C0] panic+0x2db/0x790 [ 828.931058][ C0] ? __pfx_panic+0x10/0x10 [ 828.935468][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 828.941355][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 828.947666][ C0] ? print_memory_metadata+0x314/0x400 [ 828.953109][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 828.958119][ C0] check_panic_on_warn+0x89/0xb0 [ 828.963038][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 828.968040][ C0] end_report+0x78/0x160 [ 828.972263][ C0] kasan_report+0x129/0x150 [ 828.976742][ C0] ? do_raw_spin_lock+0x23d/0x290 [ 828.981751][ C0] do_raw_spin_lock+0x23d/0x290 [ 828.986584][ C0] ? __wake_up_common_lock+0x2f/0x1f0 [ 828.991945][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 828.997298][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 829.002488][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 829.008364][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 829.013284][ C0] __wake_up_common_lock+0x2f/0x1f0 [ 829.018490][ C0] __usb_hcd_giveback_urb+0x4d7/0x690 [ 829.023842][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 829.029628][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 829.035513][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 829.040868][ C0] dummy_timer+0x862/0x4550 [ 829.045359][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 829.050718][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 829.055638][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 829.060561][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 829.065475][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 829.070670][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 829.076385][ C0] ? read_tsc+0x9/0x20 [ 829.080441][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 829.086235][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 829.091336][ C0] handle_softirqs+0x286/0x870 [ 829.096089][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 829.100836][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 829.106105][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 829.111381][ C0] __irq_exit_rcu+0xca/0x1f0 [ 829.115953][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 829.121137][ C0] irq_exit_rcu+0x9/0x30 [ 829.125362][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 829.131000][ C0] [ 829.133914][ C0] [ 829.136833][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 829.142797][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 829.148502][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 25 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 829.168187][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 829.174254][ C0] RAX: cdeda717f71d1400 RBX: ffffffff81976058 RCX: cdeda717f71d1400 [ 829.182236][ C0] RDX: 0000000000000001 RSI: ffffffff8d9810f7 RDI: ffffffff8be28300 [ 829.190201][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 829.198187][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa108f0 [ 829.206147][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 829.214106][ C0] ? do_idle+0x1e8/0x510 [ 829.218350][ C0] default_idle+0x13/0x20 [ 829.222665][ C0] default_idle_call+0x74/0xb0 [ 829.227416][ C0] do_idle+0x1e8/0x510 [ 829.231554][ C0] ? __pfx_do_idle+0x10/0x10 [ 829.236124][ C0] cpu_startup_entry+0x44/0x60 [ 829.240870][ C0] rest_init+0x2de/0x300 [ 829.245093][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 829.250622][ C0] start_kernel+0x47d/0x500 [ 829.255113][ C0] x86_64_start_reservations+0x24/0x30 [ 829.260554][ C0] x86_64_start_kernel+0x143/0x1c0 [ 829.265645][ C0] common_startup_64+0x13e/0x147 [ 829.270565][ C0] [ 829.273851][ C0] Kernel Offset: disabled [ 829.278166][ C0] Rebooting in 86400 seconds..