last executing test programs: 3m50.467579766s ago: executing program 0 (id=451): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x800000000000000, 0x0, 0x0) 3m49.238082688s ago: executing program 0 (id=457): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3, 0x8}, {0x0, 0x8100}}}, 0x24}}, 0x20040000) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r2}, 0x10) 3m49.009920045s ago: executing program 0 (id=460): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000002100010326bd7078fadbdf2505"], 0x14}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x97, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003020000402505a1a44000010203010902"], &(0x7f00000003c0)={0x0, 0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="020f"]}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079ea01ec000109021b0001000003000904005801785ecc00090585020004"], 0x0) 3m47.750011245s ago: executing program 0 (id=463): mprotect(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x1) rt_sigprocmask(0x1, &(0x7f0000000080)={[0x3]}, &(0x7f0000000200), 0x8) 3m47.66401354s ago: executing program 0 (id=465): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000406d0404ca0000000000010902"], 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m46.131936582s ago: executing program 0 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}}, 0x20000800) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "6c9a6b16ac188643c5355f13912437da2e98cbbe871aab1cd101abddb29137f1", "f4a077c40f0217433b467b43ed12372a", {"e7baa1eb7f341c4cd4a89686d880b9a2", "c60f54acb2bca1200ef9c4ed878880bf"}}}}}, 0x86) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000020000100a7bd7000000000000a00004000000000000000001400030068"], 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) 3m45.319481564s ago: executing program 32 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}}, 0x20000800) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "6c9a6b16ac188643c5355f13912437da2e98cbbe871aab1cd101abddb29137f1", "f4a077c40f0217433b467b43ed12372a", {"e7baa1eb7f341c4cd4a89686d880b9a2", "c60f54acb2bca1200ef9c4ed878880bf"}}}}}, 0x86) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000020000100a7bd7000000000000a00004000000000000000001400030068"], 0x30}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) 9.766910357s ago: executing program 2 (id=1604): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc)=0x3, 0x5, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x5000002) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES16=r0, @ANYRES16=r2, @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 9.606082192s ago: executing program 4 (id=1605): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffb7feff1eff0086dd674a9e6c00442f8200000000000000000000000000000000ff02000000000000000000000000000104206558000000030c0008000c0086dd88ca88be1200000415030735010000000000c289080022eb000000012e0059040200000000000003000485150800655800000004a0b2"], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x8cff) setxattr$system_posix_acl(&(0x7f0000000480)='./bus\x00', &(0x7f0000000400)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) rmdir(0x0) r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x533a81, 0x1d0, 0x8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x0, 0x100, 0x3ff, 0xa1, 0x1}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x6210}, {0x0, 0x30}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 8.579052947s ago: executing program 2 (id=1607): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) 7.778027628s ago: executing program 4 (id=1609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00007f2000/0x1000)=nil, 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x14}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "29d2f731874499ae02050000d4"}}}}, 0x3f) 5.958646992s ago: executing program 2 (id=1619): openat$sysfs(0xffffffffffffff9c, 0x0, 0x181000, 0x21) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='Q3M'], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 5.834357017s ago: executing program 5 (id=1620): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e21, 0x3, 'fo\x00', 0x5, 0xa7e, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x9, @loopback}, 0x1c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.83395827s ago: executing program 4 (id=1621): syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 5.72539299s ago: executing program 5 (id=1622): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0xa4, [0x46, 0x76a8, 0x8, 0x8, 0x79, 0x3], 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f00000002c0)=""/164}, &(0x7f0000000040)=0x78) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0x6e) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000080)={0x8, 0x0}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000100)) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r5, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r5, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') 5.686871054s ago: executing program 4 (id=1623): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000500)=0xc) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xe7) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=@orangefs_parent={0x28, 0x2, {{"ae11574bd2d8bb275ed18f7cde028247", 0x200}, {"143a6ac77a6e7e20d9dd31203abb9f34", 0x2}}}, &(0x7f0000000300), 0x1000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4040020}, 0x40) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) r3 = getpid() syz_pidfd_open(r3, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r4, &(0x7f0000001580)=ANY=[@ANYBLOB='target PCI:', @ANYRES8=r4], 0x13) 5.574921086s ago: executing program 3 (id=1625): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002"], 0x50}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 5.463959321s ago: executing program 5 (id=1627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x1, 0x80) write$binfmt_format(r1, &(0x7f00000079c0)='-1\x00', 0x3) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x1000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x10000) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) timer_settime(0x0, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000020a010200000000000000000a00000108000240000000010c00044000000000000000010c000440000000000000000208000240000000010900010073797a30000000000800024000000002080002400000000080010000000a01020000000000000000020000020900010073797a30000000000c00044000000000000000054f000600eed4527852f780d25cadb3c99d256f6001497dd50360ca85fe6168c6a3175f02803a159f0c5fe031ed98a715ac8bca1c10fe11a1dd154105455bfb0709007ab52c3c96eb29de44afc8e224000800024000000000e8009e35837276db379d443270874c4496936525e3ecc38021b15c17487fd9549e5f5e3a8bfe030e85e7de99224541fb88935d8f79856f264913d48790019507fd18d055ef249e71397c6e2f40f6098a924b6e1c8100695bb9e3a15126294971af34d42659962d9329397f4fac45369fbf67d58c4bb0fc6e3feabf81a8c22a987cafbc183422d59ae2629456a444a50f866c618d32ef42bd4bebc62739c3bb2b8277e27fb75839af04538fc28a3a94f99abbbf2c7d0afa5b03e34e77224e6b171bfb93c15349aa2e1f40070212a61570b4c446fd934e66dc9237b608000240000000020900010073797a310000000014000000090a010400000000000000000a000003140000001100010000000000000000000200000a"], 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x20008011) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) r3 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.453802677s ago: executing program 3 (id=1628): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000140)=0xfff) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000040)={0x4, 0x0, 0xcd6, 0x4000000000000e9, 0x1000000, 0x10000}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8, 0x17, 0x2}]}, 0x2c}}, 0x4000054) timer_settime(0x0, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) mmap(&(0x7f00001e7000/0x4000)=nil, 0x4000, 0x100000b, 0x10, 0xffffffffffffffff, 0x369e2000) open(0x0, 0x100000, 0x0) 5.346552727s ago: executing program 3 (id=1629): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) 4.361274263s ago: executing program 5 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = open(0x0, 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004000625eca60a2f7240b5b73827a942e2801"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000001c0), 0x4) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x51}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x1c}}}}, [@beacon, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x58}}, 0x0) 3.84593443s ago: executing program 4 (id=1631): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844) syz_usb_control_io(r0, 0x0, 0x0) unshare(0x6020400) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(0x4) accept4(r2, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000001c0)=0x80, 0x80800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x480}, 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa483, 0x0, 0x0, 0x0, 0x2120}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6aa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x65, '\x00', r4, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x10b99, 0xffffffffffffffff, 0x4, &(0x7f0000000880)=[0x1, r5, r5, r5, r5, r5, r5], &(0x7f00000008c0)=[{0x1, 0x4, 0x8, 0x9}, {0x1, 0x1, 0xd, 0x3}, {0x1, 0x3, 0xc, 0x8}, {0x5, 0x3, 0x1, 0xa}], 0x10, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x83, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000000c000000181618e600000001000000ef00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbc, &(0x7f0000000200)=""/188, 0x0, 0x53, '\x00', r7, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "6271be4d"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x5, "08bdb12a6d"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0xf}}) 3.804024991s ago: executing program 1 (id=1632): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.500039625s ago: executing program 1 (id=1633): mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000954c53400d051b0105000000000109022d00010000000009040100000202ff"], 0x0) 2.601931403s ago: executing program 1 (id=1634): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r0, 0x0}]) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$kcm(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) mq_timedreceive(r0, &(0x7f0000000400)=""/215, 0xd7, 0x0, 0x0) 2.464602749s ago: executing program 1 (id=1635): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x400000000000001) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) pwritev2(r3, &(0x7f0000001540)=[{&(0x7f00000001c0)="0581fc2293e03f7a1591d59c83e4181ff43cf48ddbed70166f3c096e15a535d7c01beb09987d561eaa9e2d79121b68b3efae32ae1cdc13570839d04cfb5c1526", 0x40}, {0x0}], 0x2, 0xe576, 0x73f500, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000344f97b403a0000000021bf0580971d110177795882310102030109021b0001850810070904be03014ef0c40909050f0000029a0402"], &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0}) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x82}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x87}}}], 0x18}, 0x24004800) setsockopt$sock_void(r0, 0x1, 0x2d, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r6 = dup3(r5, r1, 0x80000) syz_fuse_handle_req(r6, &(0x7f0000009b40)="e73bb177d12df8b63f6ef4d318abe73fdab6efd5fbccca5ff467e9e0f724880a3573c759b24801e9e209ac81d9b6abba81a539202ff3f375d9ec118f5fce4eede48c9059762f7d5d625554b8969057b93e2eddd33df8bfcc297fb780f72785f1d23d0778e0f499a6fe9617066c3025a3a0fcfc7340ae05c31743b09a9a78e48ba71a89ed9aa6376c9d77cf62f81c098ea908e7fa859137cf1c0e3ba4ee832fae326c5201b58f47e1af36f7bf078fd778788ec37b13fc283db8f55fdcdd051e101475856f80b55ccaa87e5f512a185183de59cfef9909f441a62f36e19a51ab1b4825664ea8b9e1975e05fb7b6ca20cc2d56729046b7135b39515ddbbf5c17344c1a10db313e8fe61d2fa34c72e002746847b34bacaba7b83a5f54904d9032464aaef629732e12526e33c37df48986f26f6099da9862f3227a5119dd5bebbeb08fbf78c78f214481407f4e3a1686a7ec79a508307aa39f5888efd38571ec313963467c47b25fd2974511082e56f08b76c99228d4809bad9dc81f177b915e1dfa61abffe491923f822bc96b2015fa9608f33ceb06550907ccdb2723a8d2279d1778665b351d46b751f37ce6646c876f47f12fd0fe04eb422404352aa7e49b6f52aea0df68767a2f4cb421afb7df64e6019f1c48e5e3cae01f7c01e43e72cb8921a845796fa9e3dd0acd80ee5230218ec145d395896f4998fd871a282c3332c2dcef68729372150ec373326968d5e30feb76543852ef7b371b9092ededd3b89f1a6ca32febfff812780c0cc74d4aecf2e867d93a6b462791512559b7f32216c971dc309ae28e68682d66302c814e7d5987ebd68a09296a39822d99a6887f26eab65024bc75534a2f035f682d150030602ee4c243dbf47f05d1edc3bf17909f712eddf607b40910ba3bbe62e725070c19c614c53e02e3d0d99d10ece2612cfae97451bc4282694ceeddf22072ad11d79320fa66439f04a94389f9eef4e5d6d4d67c7bd1a76efd4e85a20d75a5817ae6f5a9527e78036366d660b0ff2b595f6dbda07347ab22905731b9f6f8f803b0335473c236b521b8bd50cedba14b2d4a732c71e80af3b0e253b7b3f0f696189520ba4a65cba023d34498ea42d930373937c40132cebb305e3537e1a38698008f58d0dcfff9a2198c9f4c2cdb0f6ae0f2559ea77abe3e24e6e441074185116ebd42d2f6c85ec0d1a9a1c3918eb41bdbdd55a19591fca1bb47a95046a1d0e62978719b530e13706910fb026952a4086aa54276aacddafbb6fa16c17415b141b3a12791d08f67c0a026fc43349cd8403300c5bc99858d8ccd2428622a0c6f16f8e7c4e7632969fcbd25f89577bdc5b5e4994311067776adf5fed74098aaf21d4be6524b901e94a627faaaec5dc114e146ef98e157454253099592f8f23a2c2f4143f566a0ed6e4e003b98240cd11aa1da3b5d5adcda1d6bd278701f544bb215a7a4a9bb2d91b908f8ac2487cbe91bae7ab4048358eb352426ae02815d0bf2910fac2f39532d8bb4aefb3e54b3f387c50acc188a892269595bfd59aa09bdb9519b027116d47b0037ad6e8fd1c82179a14491702fb25f3ae232e6b87536d3f82cf1beed4117f9da4f81267ec4f0e98fbeb9d2178c08063dff606133631e6629f15347983ade84084631ee9b77f6cdcda463ca6aa96e192a5a5f188f29a964b9698ea05a5d98700f96a6375daa8fb3b2f7962fd28b3787e5ef4007550be4dfeadac624f96205c8cb52a264f4b92e5c5a19adeb577129962658bf48a4d6aac0a849f842f95ef62c835536ea6f3019df1c9d4c3c2d79c86d2ff0b74d1a76163d43c7b3b1ce7e45332dbc608bbbfa093330a7ec7c8b2626ff3918064731d685319ead1961a9bdd5c76338979d7463425c374be06d59cfbcaac8ae44f63cf85bbceb8b854e108c5cbfe78b12195e2875baf8e6ac0e3ee30eef7ec12a011633d2ceb78236755bca958e0f6ec5878f92b810043f562982fe73d6a50a9dc66e60687771804e02a2f48c01a8477bffad603e1dc10ae3a8e64fa58cc22d3d162fa2b97bdf2c51b6ad6171bcd1fbf3f0dc20b86d809546e451ffef9511bade5f87a45c60a9dc6007cb35994b085f003b09ce6e98e85580089ba43fe0b4724cb93668cedf9e0dbad57d38008166c67fab8be9738300eb4acdff92e483a950796f4c893c78f61585111380932259dd26afe28233ebe33850f6d2d4f5cbd113ab47cc44950b408c8e4ec82b34cba56112a1338f97aa22d58cb2430103282a6cde3a8666ad7e7b789fe5d3faad2ae8d8d9ed1a49c9765ec5b6d298ed667a2bba038228a26437c0a09b45c95c84c7e8777d5e98e22cee6d22464af8a4b5dab2261cc818ecaebaa113db8562e61c0f9b43f5dc2b2253e03c8c4c669d2c16f55af444d599b71df77f6c1d64cfbabab5c47f8bbcf7f7c4331d23cdd1e66fc0bcaf14e2bc6612f4a08a7254243569e9b9d4a2e15d14888ddc2f53ae8793c33bc74a68b0339e1824888a3bad28436a384826f660e8212d368c8401d8257eeb493adbb5defed5254e2cec9f9ba51b9802e41a5f87d719dc4cef708c45579c5b18891199e48bbbc7621ec6b95d5a68d89db11e83889000ea90ff14fe67e5cfe1b15b2454b9c787de503fe41b188611492d867d61474d6a9045ba0bc7a4cd6fac67dd1b9015f45320771d3e12878550ee1084268c45bf8c31e5a4efbd2d167bf05bcdefeeceaf251e23bb8b8683e008de6c190349b3913b5b38d606918125552f80e4add04a22c476df4f7bb1da5cf2e9dbfe807d0d930e1f6216ee1b7a4c47deaa2986fe80a1f0cab68bc55399199c7bfdc01b649c624f2e2308dfe0abd722b9409eb472694fbd7cf00f5c6d66417c2fc4e41eb6686da3dc35e5936de48367f8f6fa65641c908aeaa915b8e5c88586e0981b26dfb6bb2f8d92cec23383ed94fb2d14aef8af1f7b663cf6cbe094009d25a610d811c4fe4a1a604a6456b1e8fea8b952336b3cbf08cfca3efcdfc3e52dd0731821940035a0fb61611b3ed91818f5ccd6d6f6c093d697193bdf90d8c84e02deb1ba424ff886871c6a558f195a5a46b9f1a7c1d401f4213d26217dfbe531a0cbf13ef28ff23ebcc846911838d6f10bf69685e1743a07d8c9a44e96876520024a69bd87cd546c9dfd3e053284733a5953f7b8840f3645725732b779613398dc968291044d19941db923be0bae91ce5256afe6383ca54efde8d42cab660ecd3eb8ebe2ba5e9472116d3c9b98d4037d83152fe8539c0214b1d3a551a0c2a44e12bebb79f11114885f1db63986b7bee5479d4720198c1cce242e1d412667b9578eb501c78055c39809425c5a6a6837c3c8fce089985563066ea2ea76117f055326e0e05894436dec4f5c5e40d4f542c0670b5ede0092d56aff284df0a6d3f4a02bd9e7266ecdea60238689c814f86513668be04b9ecdfbcfe8a5d313b2e97222f7f7c8752061d4fc951052249963cbd6f30be055e8ca07d09efcac61a99e5a201e9273f7cd2ededa4d92d57bf353e70187df6609c37c1084e3bb2b408cc7d5615aed7a83fe338b682b1746efd49fdd33f49a86615fa36237b7d934aa41fba7602a6b59e9a9c9780087c3ef75add0bb3e4e1366cc2cdd231b4150e8ee65f5c6ed4981959cf5f69a2186d8b1c0cbfd1a82e84c35b9faa311df4edad319d2a0543ad307b8bbcc8bdb4af12d0dfdecfd8a62a81d798420d0134088089ec9b0bbd45788bd0b96f1f5f94f3c5436585a94e70e4a2146446524de5885551534095a8c336882322e84bbb252fdcdea81849478ffdd4078efd57e3950ad1a526a5c15859ab98753f2108d081620330a29d5abd81aec5a2b33b1ef7aa4b6d40d31f87e819c5a0b3d84561e6b0331f017db4ac1b74fecf5796ac860f575e389626644cba1e9e03989b849cc02a7a15e10ba59e7122c1b4c953c67f037bca55138b4ebc9c18dffe5d978f151e22ef00e6a5ce318eca366c0e13b6de3c150da3c1285fd12f0bd88b7d0ee898149c1088f661b72e9302031413a299c2c4c1c78b9803b21ff85f7296aed39f704372f886288eeb8646ea68182fde0f871dac923d549b953fbcab91b840023d2c54224adb494379dc429677cb8956f32f41aab12e1a5e72b0ed309bd059b476579bd2d764b9eabfbb84fd3c0afb24bbaa179e6810b0f00e93dec07a4ef08093599063292f964ccc293d95e87aa10fc47839376c91ab91ba8eafeff0bdca2cf872fcbba011514e2373b4ee897a8e93e172b895a2b7ff0cebf3f71d329d41bd828a2c1190c7d51775eb9ef1865c0851876458beb4d8471c393dc1a1a23e3b1b59e4cfcdccd0785d218a7a0b499d03bb2330922711b9c6003fb3d390b35dab8be6a3cbe1ee3bfa815e9d414789ceeb1a46a9a162d7c23dff2d3584a8b1dbbd5386d27946723bfa954cb0f238a81afdc4ced593bfef8cd1ccada6fd49911eb6c97ba6072529d034af78a1f2a08dc72502d00f5d0938596a30a3d64a172e912458b55cd159173d4a261d44591cb45f2bf85ea7758fbf84955614c4fe322eb896b7ec795ec7b039f08fc0e639094152e6338e948d99e4b31c32578a6eb620b933102e230c2cfcaff6313b08fe94910522107f45578410f26491e3cb36ea77ac9d76de9d97e871816017563382f5f23a2b3e14652036e235ed7bd8ce454a8afc9c2a5a58e6bbc2e57ae576f6bf706644f17639508e1b3a0da397e409a43facfc75481d0ae0c54613377bad5a28d25f0bf35712f5fb2a1a84615fcd19bbe04b216970b606d31b77b8cee29e9f57465c7a2f83d3894d449c86c74952e9c9d23606b28cd9ecf783bfd5329ffe3c7034b5a0316da8b8bb14c8eaf89380a8adca2b0ad60d9be4ab6d912fba215f36d84e2c4233be1b791e99e5b041fd4616a3cbb26332ca69a21a6e16e81381dd5baf664a5e97a53f0926f00405d486ce7c91cbc28255245fe3b6d8752ef6960e9a20e581a90f273f6fcebe5b160e69e229389964eab999681b172ee8c9dc234d67c973f572d15921f63bfff822726eaa34f3fd43e2babf98a5c949667981baa416632ec42b0b61a3938f524c6d76357326e6b02d3071e9e8360c2f2c8b5bc70b98f82db93b8f57bad59f837d461f236fa4785a70a1c876e23e068bf1ef9cd74b6b0a413c5473f1d50fc587f3bfd507205f40f98497968967a257191414e3e8d4ccf5126f3ac1d6bd6c14093c86d67153d2cc2491612c1810739aaa4fc26b5730c2ef379916251cb73c478330ce2ee857e3de8929e996b99194c090d5e0458eae394e4ce5b02701a0fc620afbe7b4c027dba541840127124b462f4fc138b54d28c11d1f93e7842534bcecef31df5e996c59b24e77a602c58411c9e6fca53d2bad3b45edf88fe31841ddabd7b37d20f1e84c99f72b8b2abdd27fbdec38e9b13254e43e354f2a154853253eadfc82abd94413cd83e7f73b3a85afc08b02439eb23d72ba78b55041f12f40ba1d21901d3e9241836fda56b26ef552bd1104dd5d7557f2996a949be0dcdc0275e9c1df6a75a590b5943ed97ecd49bbca876c6ea44bfee0cfa73e750ecfdaf6bd9126b8abc8f2780ba10fe583dee09d315b1c740283cb7ba52c2f85b83e0d0c9eb42fb1223970eba23b580387db238a58bf3cfeb1cd87ae293a04586d6943ded85d179c299877770b8452983d01ee977f22df2d87b3fd980f5be1b66ed0ca075bf73abacb36f5d58c482a69f42009e02a7e1eeb01becf45a7df91aa641d3fa2aaae963da383415006f8502b5a4cbb5b4cc1bfc6fffd4d97b3e455c23069c7f870c2f20d6f80afe6af00b7a44e742c0afeb3dbf319ba7464f94e2df61f7ba9536e1ba110ac81db760b1e636fe9aa0c466ea3e7fdb46ba65cb578e1acafd3643051b633764b08aa4aefdd4c4f5b7882a54cdc6242990e8b09be79bf493b2260d80e17f5e3a41871e590fcd7b05ff705e626e91d817fb661eaa6c4dc9f3c3db48020aea13b98712843d515cef8fc9a7c14978fa3cb896da47a2ddf8fccf45cebe8124c7e1106d22cc8a8aed29ae1d50c9af8ec71fb84fe646c8a7abf136efa6d03a0bca9b69edb86cabda1bc0dcf7f4364b1aabaa611fcf8e50c265f4f85ab5d51635a4c4dd459a1aecfd1c92763f6b100327f8edccc51bc8f9ceca8782dfa491d6547a9748726d8f2d938e57dd57caff64832faa75b9741cd0542e73cca823118f92f933a8c851326b370f52fbca38d723a6ac1df3b59bc206404ae46872a88b71d222107ef9cb74053e0040c6a8253221d8aa0e5a9a0ece9803f076298af9ec053485f0e1cde22588da671fb83c0d12163105a9496e18a2b5e454d19a18e38c003477a3bc012f8e459811b8e0d318f7292258cffb1ef63c2ae6ab1aed5d89df2fe586f0e412ffd5a0f6bb90e993e18b6707fba225d05b2fb6fe723e169bbccc92b1fa51dc377766f0e9a6042f24f989f5ebd31ab3a69562bf6ed26754bdc8be119e05cdcdf81e79b216529e72ba836b5109f59fe1a5c08cbe8d32a3690a6d5895d4a1cb87443c8c814ee85e67a1b91c83f4574302784bee74ebaef534da0840bee83ecc6dd506dce1530acdc5cd4635b96181b95f85ccbba05441a5a4cfb453721d0a864627da9c319b43008934285d478dce820053c346b24a9a33575317bc3e40f970f6559869ce938e456d6c4b99c742f3b78c890421ba7ba9d90762d14403c052006157158964ac1b436c3add5a663ea452ea6676eae5d3b2dca627262e129c59cd7075c3a539ffbb90c26577ee9ce609b081dcc38bcd3cfb4f430fa1626cd65635e3aceeb42f8479783d96fa2f2b349a124d424611d34eb399d80a6cfb94e00f8ca1d62ad2c41c4e52310c8f12371bdace54984fc157ab0311e43179149018eb160d04624b079bb6d0c0c9d41cd76ce45a1b6d8b05342d402f3e0e81e3285e8fb120cad4e7b880bc8bed2910535b5a929fec2d6367af4757f3188b925c6b6e365efee9a0a9a8bce6b7e50fdfb78b7afad74b51f0d46afc12d5d02dc5feb1b22506f46dd2e0da3092778b12528c3f6deb7f2a7a7268cdfd174aed908dcb3cb086ac8fedcb7f68b9ce9593303a04eaafde45c5fd192bc9af8083c604b64f3c884f134cb5ea7c28f6147974db594806bc9ab4577f445ba92a65d51bbc417d1322d6fb7e73f25c56245ca38b4021b7a3628f9f940c5fa4988456038121130a53a2e846236cd09bb9e4f7a47cf0f1961dedaffaab980255c96f273bafbadbbef7be0cbed1447de0c8034bfcb5c5bcd01c9bcb10e65834294979d9dd7c8d8666ded1bec09182c48beeda316f44279887defb793367c62d94568af80139b5d731e1611860880aa7157df1d5cabdabf6f356610e27f4bf666f36db605fc24258758c2d46721b87ee7224c34a8a87994a59f308f5378f305c57dc8925d741936301746e3a5954314753cbc8baed1823c6473cce79d6225c996bd3aa5f73655793bc11f536247d90995ab71cb019b7ee61fddd0b1a4f67000c9cb6c3296bdc9c879788f03d9109efe902ef276fd341575618c016ea638482a5acd80ffd64165c8425880572e0f6b995b450b3c7b23e6e7b893907f5d2ac9a57b66f7cc19dcb931f142277ab20606f4d4c45750ff991179978a5017e9e8ba4c03b2db3528f0c672819b672c1aebdd51c63adb2f2176476aca1ab68f40c02e7a4a7ca92740969b1232d67de881b199298f1a094ed290dc8c80e4dbc3f7d08d7dbfec08113ba0c26c0870c31770b3c670a7e0afdbc2119965f3fe2708751dfa68d22af63728889098c72a872ca25f2642814e88905130061e6be6c070e1686b7a8e69b13cbd368ba8021b5731d68cfd2f64228ca623473450f1f370ccc71767e650456d9f290378ded13bff2120ebd49f0e6cd593ab48e3f28c6f5747f680b7c58a70006725d63cf2292c946b37a414ff20e56a695809450617ed5665b38ee1fd55f53e1479dc6e4ada811881b3288870670ac83e6367914db15d0cd3c02afa4bae666bb4a1ba5e294bcab8bfcfd028e01265f8a56edcf2e2edb8c361265bb1d79a4e803b673388770f05483bf1778e3735e8cb246e0fa6b57410b17c933b32be85260c7c08ce3e977cfcc5a7b00b176c894020c8dd98fb906dd12c7425d63608043f7d4cb28aea00d2e01a14118d4a4226c0cd0c2c6b011915b7e21b631ec1ff87eafe08a4ec8d793c82f846796212ddd26e870ee798f5fadd692b3ab122836423d1d891a3486cbca9b3c7d8ee7f964e08857a1547a2981d7e02ca529914f19a1cd6ff3308c47e1409d352fcdc3a942c0147fbae39a812a166f51332ce5c6eabbd5b8b61a0ad8380c73740b8ac8d9876a8c7c13fb0f8c28d28aa32bd782429523cd33d5efc2c2f0ac54160e5e35e288b7aa1dd68e8b730bfb54c385ef817fa82ad9265cee7d4a5353b6d0ff27091f40c1da68bfc5e4e1b400b9f84a565ba1c099e2cb4e500284197f89c8b6483992f0682dc760b161a48d621cc14ae8f6b581b1f647649b8a40b7d2bd4fd47600227fc43df6e9fc2f9f4b51b89705bd43f0794bfd0e70da3c87d33ef939f63ccfc48511a9038d19980790e5d1845ef1606dfd2c9db7fc2aea904fe6ba1809ced78922a44d2ad9aa33cae5fbad1bb3cf5e9e76878ffbda29dd83b6048052f6db1bf5672e9a56750630ee2eafaca43346448b42296b383b9e5c55015bcbd27eabecb8bd2ce4902afa8d4fe7474370407d01373e8bb1666ea4328d794c827cb53a94dc337be1267e8a7df1ebb7a1c8857659b24b3fc7b09023e25aa59ec4ab76f030c171a6818fcbdd82cdabd2291d2c281518e4a025bba04d8cd98f5c1242137ceee2b8414666b184c9175f2f4046f4b8e7ee5dd6cee9118c6744494a0da8ce37eb84b6b81170ae426ab87f835ef3524a211dac24bc41ad6d24a7104ba63c461d263763d7d8af5561d497df244a10f329efebbce77260d41a0d818f50b22bff6fa2e726813eaa35d5baa3971cf9816a6722480976ac21e5f258d3d8140d5e5cdca402c0e28460be90d9ff151172a21928b73bfdd5ce8ad0b3df0871f6df211bc96772587901dc16a51dbc02d7ee8f8d80c412faea4a7dba5f81590a8273c10f28766627c6e352bae8ddb465597937a65679ae8e00ebe456fad26f4288ecd196591fac825faf72a43ab50c7104fff7c86cb71b7d476f4799c6b5bada1f4624a7f4f1ac83711c39a6afc9b5bc1a0f3e19a5bf741675851c468457b9c3b3455ea53aab709607f4a567ad0f734fae1d83884fb793af9fde6e5f1b8cbe0c26544e2a6b5971ef768d6c07924ed8b7ca43e092a1cee6d156a326ff57f5ee1758ed00592cccd043dabee32245ce8ae39c21fd14f61534991cc89335c0166286546cde076a99a21c476d961e1591943580ab030ba0cd2d4ebdf1054aeb28bd3e1e4b68ded8ed4c4d96e95b9478bb6ffe537b2e228c3754aef6210e0701455da2bceff84e5509f6c748151417ee2a6754b79e37805dc6fcfdb7b2bd8c986c93c8e5ac6012c25be0cd285760fa87d9010eef2d1017ead451d5ed87db01008fb6583ce76ea3a515743851e78a3227069cf21d9f86a1a92c303844d78addd92d33024e86c478be81f2fff79bf3a6c4864371758bdac50eece6b05db894d95a07a51204499483b911393a312faa4be1d92890353370763f844e1205322da9946bde34ca1c676d8194773817bd64bbc87f551d67afe1b9410b1ab712c3c07f999a07c4e134f034f07adbecba9d66e5907885e5d547cf18388845d6c8891b0332bca1dfdbccf12021d83105275d46771f8307e1882f4e92cec49a23c007cd65a1fa4ac0b08f6a9dd5636dd5ed9056d3b1b4dc7aac4e4a5f70ad136d7369fb1670c2028b5205eb04346087ef8218715e668781a53b97c588d9fe59b69ba32814c9905af7ee1048e98f5d2cdae7b9ae802ebc828e46bc64ff77c8106e82cf91d9b380111f75de9ebf280f54071b979263bb9d829c7b863d1af25d1ff3ebebf2fe8923c8dc5e472223e4ab6f466fd05ccf8e6678aa020c11f14ac49e80a978b960f19ca347d669eb6577dc07cf3e3ee8cd734a27e83408360d2d05aafcbd3403e90382430852b6551c54c1a112bbc82b6d7f1cd9b5e274cd3ffc942a6bbb18fc72625e84ac4a23622a71aa77cc542490ad521b747c13bc6f92ef18a987a84e5cae6d0d9a60ce88887b6f9f1874d2a33a03242cede6e2bd9460b30a0c8aae70d626fa143b30d77a45b4f912b96adb097800a804f7832665118bd151af35d087636c8713c59ff0a476ae76164be0afe747a0d0299eae631c32c510e40c22fbe5c0afc57c5f4f7e3f0aca097e9f687396e780042ad4c8bdad6efc76150d0bc9d9142ad04f567848db98ff76d32a384b4cd67ac78a32a7f97e6f0cf846715cce3ae15d4f34cea58170afc716bf0cf06823aae0779e9eb0d76d0b8491a8144ca6c91cb1fab65c667f0870e49f1ff5a298b0eac86f46f3b8942d8b53f94b720edb40918575142eddff7708865135de5b8b6554de4b9afeb9efca99a1bebfcc7cfe81de251920503e988b29f1276640c1350cfa151db21af200a031c9867a563b489322d39d3bf1df2bd2f294db8ee6b7180556769f700a107896927e4d3ee981f3e60cbacd59e4d350278543640266d693270e82ef8ef55dcf4f373563003a0bf86d4ce9ab1afa4f2dddaa18387eb9e9c352c97264a1e6fb8db89e7b672cec02c27ead584206a636ce98b1935d0df48f143b377ab251f492000e5462fdc099b5eb7361900b127210c84257ee6a251169166ccb0019c1c30561e670279f372d8fbffa0d6e7098ae049f761c3393f5af2fe4392cc85f7d42c7ecbc136331af13e18e8baf63fc2813520fb651600f6881d1ef28002febedce30ea1168435aefb677c444c6467afed2d513cb20018db67f0aabd75f517f31188446ce8856f6d2630e0538f60da760ca7db865cc969b379d01f3640091e066e1d453e912ef28f5faa1d00487c8d5142c4433eac11428b4fb4db684935ed631d5f89fcfba745c1d9a0f24ffd57b8079efc3d657ba96d48b850cbf2260711688f1dcfcb23e5d1234f9686a9979b3969fd2be75d37d878e2087b70c3a8f556d4999dc9be02482f50c33d51687a7be9e77f1e53676acda7939b139ad331431c999c0e52d0b0778d266480d4ed71c808c790131347ca079962e9f9126a77a018945515bb1fe62924890f1790908540d17b5f58b9375ab9a466be75f2e550666ee2ed01cd06eb349a670c5501cd0854f54aa934fb199d87ef257d01e9b7f354dd509bfba321f5fc1b9920315c3c8994a07cb97979cc7a32766fc74fbbee00155549b196eab33b9c5e20d36684294f975b60f44e15b5c6f6424f741861724d2c353c3ce1c0edd8c7fc3e521f9df94a9bc8f26707e73b9b0e1daacdecf1c1f14e33dab7bf074182141112ab6cdafd1f60dad18581dafef4719ec08fc016dc110193390a05b551841cac677a27b9d18f54cbf421cf9f4212388955bd2d70c150a974d93d5c1347dbc0fdab345a9a6ea2cbf5cb3e8eec2c7133fe79c500b601859713263749ef9d2e817a67221521fd40fcc082f7c2", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x4, 0x4, 0x410, 0x0, 0x130, 0x130, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010101, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x8, 0xd, 0x8, 0xe8, 0x6, 'wg2\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10000, 0x6, 0xff0c, 0x0, 0x0, "2e3db46bbd54492c3b8b94a26d2b6f09949a2c5d377e1886c36b8e355354a160d73a311a2ee6b7547689bb9a515857b39523fadabc9d55f111b9f1dbe8567b8a"}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0x64c, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x81, 0xff03}}}, {{@arp={@multicast2, @local, 0x0, 0xff000000, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local, {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @remote, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x600, 0x80, 0x0, 0x287) 1.751277612s ago: executing program 3 (id=1636): r0 = socket$igmp(0x2, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x58}, 0x4) 1.699634763s ago: executing program 1 (id=1637): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000007c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x2, 0x302, 0x7fff, 0x3}, 0x9c) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x290804a, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.69641172s ago: executing program 5 (id=1638): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002"], 0x50}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.679292608s ago: executing program 2 (id=1639): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) syz_io_uring_setup(0x1a39, &(0x7f0000002c80)={0x0, 0xe3d3, 0x0, 0x800005, 0x21ed}, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000140)=0xfff) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000040)={0x4, 0x0, 0xcd6, 0x4000000000000e9, 0x1000000, 0x10000}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2e00}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8, 0x17, 0x2}]}, 0x2c}}, 0x4000054) timer_settime(0x0, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) mmap(&(0x7f00001e7000/0x4000)=nil, 0x4000, 0x100000b, 0x10, 0xffffffffffffffff, 0x369e2000) open(0x0, 0x100000, 0x0) 1.542441094s ago: executing program 3 (id=1640): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x1, 0x80) write$binfmt_format(r1, &(0x7f00000079c0)='-1\x00', 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x10000) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) timer_settime(0x0, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x8000}, 0x20008011) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) r3 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.479075688s ago: executing program 5 (id=1641): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000500)=0xc) set_mempolicy(0x0, &(0x7f00000000c0)=0x5, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xe7) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=@orangefs_parent={0x28, 0x2, {{"ae11574bd2d8bb275ed18f7cde028247", 0x200}, {"143a6ac77a6e7e20d9dd31203abb9f34", 0x2}}}, &(0x7f0000000300), 0x1000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4040020}, 0x40) syz_usb_connect(0x5, 0x3e, &(0x7f0000002780)={{0x12, 0x1, 0x201, 0xc0, 0xdb, 0x16, 0x10, 0x12d1, 0xb9f, 0x5adf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x7, 0x0, 0x80, 0x7, "", [{{0x9, 0x4, 0xbc, 0x3, 0x0, 0xe, 0x1, 0x0, 0xfd, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x45f, 0x1000, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf, 0x4, 0x9, 0x80}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb3, 0x5, 0x0, 0x5c, 0x8}]}]}}]}}]}}, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x800) r3 = getpid() syz_pidfd_open(r3, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r4, &(0x7f0000001580)=ANY=[@ANYBLOB='target PCI:', @ANYRES8=r4], 0x13) 1.397868838s ago: executing program 1 (id=1642): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0xfe00) syz_open_dev$dri(0x0, 0x1ff, 0x80800) 1.382168941s ago: executing program 2 (id=1643): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.244409915s ago: executing program 2 (id=1644): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0xfdbd) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000001200), 0x0, 0x40800) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) r6 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r8, 0x1, &(0x7f0000000900)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$binfmt_elf32(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c46040700030800000f0000000002000300080000000d03000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000000200000009"], 0x58) close(r6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f0000000300)="38a0c8665697ca63032ec420fa93f408c3fd7406ebd4b1e7c9e8f1649ff111475426a8bd130f693ed12c10b8d6dc1f5e5717f40c727844c27367f0d0c93d15e470a4ece506627beea51ff1d54f40d8f1a4c13cfdff6cff5d19d526f553c3b9c5ef73afb61fc9181b247a3522d9d9d859bf4c1525b2155d5e0789ce3cc33e5edfc00da88afacb059699c293393f4a3bec8207eb6d21fb36bfaa2af845e8bd391cac04a48ab4d4b311a9fd6cc7aaf6129c9caa6030dc95f68e0a0158fc8369e539b55dbb31fd52471b3be610714aee7040f905", &(0x7f0000000400)=""/252, &(0x7f0000000040)="f1c308b2f29c4e404676c68ba6f0800e3090ad838002b0592f107e3868fa1f4817534226ee1d", &(0x7f0000000100)="174316b819874a82ece4ea4e38fb32cec552af15f07b84bce519f6a657d05cd0a2dac213e3d22fcd1bb6df5375eb64a8852497027627b28dc0467e1bacc45fd67a3854cfdc1ef0f105a1afbaedeec3852f6bdbf4", 0x1, r6}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000002c0)=0x80, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fchmod(0xffffffffffffffff, 0x184) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x8, r10}, 0x10) 1.044096882s ago: executing program 4 (id=1645): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d00000002000001090224000100000000090400000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="00031200000012", @ANYRESHEX=r0], 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x2a, 0xf0]) 0s ago: executing program 3 (id=1646): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) 0s ago: executing program 1 (id=1647): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) kernel console output (not intermixed with test programs): ing ep0 maxpacket: 32 [ 325.819071][ T5892] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 325.827441][ T5892] usb 4-1: config 0 has no interface number 0 [ 325.835943][ T5892] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 325.845248][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.853440][ T5892] usb 4-1: Product: syz [ 325.857860][ T5892] usb 4-1: Manufacturer: syz [ 325.862677][ T5892] usb 4-1: SerialNumber: syz [ 325.871396][ T5892] usb 4-1: config 0 descriptor?? [ 326.075850][T10218] binder: 10217:10218 ioctl c0306201 200000000080 returned -14 [ 326.092301][ T5892] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 326.108950][T10218] binder: 10217:10218 ioctl c0189376 200000000080 returned -22 [ 326.116671][ T5892] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 326.189921][T10220] futex_wake_op: syz.1.1320 tries to shift op by 36; fix this program [ 326.208847][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.244800][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.295784][ T5892] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 326.315351][ T24] appletouch 5-1:0.85: Failed to request geyser raw mode [ 326.335529][ T5892] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 326.340257][ T1212] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 326.346453][ T24] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 326.416217][ T24] usb 5-1: USB disconnect, device number 65 [ 326.521914][ T1212] usb 3-1: Using ep0 maxpacket: 16 [ 326.536816][ T1212] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 326.544985][ T1212] usb 3-1: config 0 has no interface number 0 [ 326.551113][ T1212] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 326.565329][ T1212] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 326.578155][ T1212] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 326.587783][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.595926][ T1212] usb 3-1: Product: syz [ 326.600293][ T1212] usb 3-1: Manufacturer: syz [ 326.605004][ T1212] usb 3-1: SerialNumber: syz [ 326.619613][ T1212] usb 3-1: config 0 descriptor?? [ 326.633738][T10216] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 326.638062][ T5892] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 326.641398][T10216] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 326.746781][T10234] Cannot find add_set index 0 as target [ 326.756538][T10234] netdevsim netdevsim4: Direct firmware load for / [ 326.756538][T10234] failed with error -2 [ 326.768804][T10234] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 326.768804][T10234] [ 326.804389][ T5892] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 326.819902][ T24] usb 4-1: USB disconnect, device number 54 [ 326.835307][ T5892] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 326.888242][ T5892] usb 6-1: config 8 has no interface number 0 [ 326.906487][ T5892] usb 6-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 327.040729][ T5892] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 327.060068][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.096127][ T5892] usb 6-1: NFC: intf ffff888029d03000 id ffffffff8f1d1600 [ 327.130605][ T1212] asix 3-1:0.34: probe with driver asix failed with error -71 [ 327.175043][ T1212] usb 3-1: USB disconnect, device number 61 [ 327.303528][T10222] fuse: Invalid rootmode [ 328.281998][ T24] net_ratelimit: 10 callbacks suppressed [ 328.282014][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.296029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.552247][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.560975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.242956][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.251264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.276546][ T1212] usb 6-1: USB disconnect, device number 37 [ 329.337318][ T24] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 329.369965][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.378545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.501843][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 329.517561][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 329.531863][ T24] usb 4-1: config 7 has an invalid interface number: 188 but max is 0 [ 329.543991][ T24] usb 4-1: config 7 has no interface number 0 [ 329.550103][ T24] usb 4-1: config 7 interface 188 has no altsetting 0 [ 329.573293][ T24] usb 4-1: New USB device found, idVendor=12d1, idProduct=0b9f, bcdDevice=5a.df [ 329.587551][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.721893][ T24] usb 4-1: Product: syz [ 329.731853][ T1212] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 329.746633][ T24] usb 4-1: Manufacturer: syz [ 329.751280][ T24] usb 4-1: SerialNumber: syz [ 329.911846][ T1212] usb 5-1: Using ep0 maxpacket: 8 [ 329.934393][ T1212] usb 5-1: config 1 has an invalid interface number: 222 but max is 0 [ 329.952936][ T1212] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 329.961669][ T1212] usb 5-1: config 1 has no interface number 0 [ 329.987146][ T1212] usb 5-1: too many endpoints for config 1 interface 222 altsetting 245: 158, using maximum allowed: 30 [ 330.009688][T10270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.018699][T10270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.053257][ T1212] usb 5-1: config 1 interface 222 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 158 [ 330.066824][ T24] uvcvideo 4-1:7.188: Found multiple Units with ID 1 [ 330.089973][ T1212] usb 5-1: config 1 interface 222 has no altsetting 0 [ 330.091715][ T24] uvcvideo 4-1:7.188: Found UVC 0.00 device syz (12d1:0b9f) [ 330.130268][ T24] uvcvideo 4-1:7.188: No valid video chain found. [ 330.143344][ T1212] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 330.157966][ T24] usb 4-1: USB disconnect, device number 55 [ 330.172172][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.185393][ T1212] usb 5-1: Product: syz [ 330.189600][ T1212] usb 5-1: Manufacturer: syz [ 330.241916][ T1212] usb 5-1: SerialNumber: syz [ 330.442458][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.450916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.499954][ T1212] usb 5-1: USB disconnect, device number 66 [ 331.473229][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 331.681935][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 331.689037][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 331.701839][ T24] usb 5-1: config 0 has no interface number 0 [ 331.729433][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 331.772228][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.841905][ T24] usb 5-1: Product: syz [ 331.842671][ T10] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 331.848088][ T24] usb 5-1: Manufacturer: syz [ 331.868813][ T24] usb 5-1: SerialNumber: syz [ 331.901503][ T24] usb 5-1: config 0 descriptor?? [ 331.917311][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 332.032209][ T10] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 332.054818][ T1220] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 332.074459][ T10] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 332.094867][ T10] usb 6-1: config 8 has no interface number 0 [ 332.111371][ T10] usb 6-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 332.141818][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 332.153843][ T10] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 332.165697][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 332.178683][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.224840][ T10] usb 6-1: NFC: intf ffff88807b555000 id ffffffff8f1d1600 [ 332.232146][ T1220] usb 3-1: Using ep0 maxpacket: 32 [ 332.238494][ T1212] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 332.259458][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.282189][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.300419][ T1220] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 332.311509][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.323229][ T1220] usb 3-1: config 0 descriptor?? [ 332.421692][T10309] fuse: Invalid rootmode [ 332.426164][ T1212] usb 4-1: Using ep0 maxpacket: 16 [ 332.435662][ T1212] usb 4-1: unable to get BOS descriptor or descriptor too short [ 332.445621][ T1212] usb 4-1: config 7 has an invalid interface number: 188 but max is 0 [ 332.454584][ T1212] usb 4-1: config 7 has no interface number 0 [ 332.460804][ T1212] usb 4-1: config 7 interface 188 has no altsetting 0 [ 332.471911][ T1212] usb 4-1: New USB device found, idVendor=12d1, idProduct=0b9f, bcdDevice=5a.df [ 332.481316][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.489843][ T1212] usb 4-1: Product: syz [ 332.494389][ T1212] usb 4-1: Manufacturer: syz [ 332.499219][ T1212] usb 4-1: SerialNumber: syz [ 332.532717][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 332.534156][ T10] usb 5-1: USB disconnect, device number 67 [ 332.566435][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 332.587066][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 332.600882][ T10] quatech2 5-1:0.51: device disconnected [ 332.716705][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.728434][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.753406][ T1212] uvcvideo 4-1:7.188: Found multiple Units with ID 1 [ 332.763327][ T1212] uvcvideo 4-1:7.188: Found UVC 0.00 device syz (12d1:0b9f) [ 332.788906][ T1220] koneplus 0003:1E7D:2D51.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 332.810581][ T1212] uvcvideo 4-1:7.188: No valid video chain found. [ 332.829772][ T1212] usb 4-1: USB disconnect, device number 56 [ 332.971365][T10327] tipc: Enabling of bearer rejected, already enabled [ 333.186453][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.203156][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.562627][ T43] net_ratelimit: 10 callbacks suppressed [ 333.562644][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.576639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.642184][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.650696][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.659065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.667567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.756159][ T1220] usb 3-1: USB disconnect, device number 62 [ 333.858741][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.869714][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.885254][T10346] syzkaller0: entered promiscuous mode [ 333.891146][T10346] syzkaller0: entered allmulticast mode [ 334.156961][T10354] FAULT_INJECTION: forcing a failure. [ 334.156961][T10354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.177914][T10354] CPU: 0 UID: 0 PID: 10354 Comm: syz.2.1366 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.177946][T10354] Tainted: [L]=SOFTLOCKUP [ 334.177953][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 334.177964][T10354] Call Trace: [ 334.177972][T10354] [ 334.177980][T10354] dump_stack_lvl+0xe8/0x150 [ 334.178012][T10354] should_fail_ex+0x412/0x560 [ 334.178041][T10354] _copy_from_user+0x2d/0xb0 [ 334.178070][T10354] ___sys_sendmsg+0x1c6/0x360 [ 334.178105][T10354] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.178167][T10354] ? __fget_files+0x2a/0x420 [ 334.178193][T10354] ? __fget_files+0x3a0/0x420 [ 334.178229][T10354] __x64_sys_sendmsg+0x1bd/0x2a0 [ 334.178260][T10354] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.178298][T10354] ? __pfx_ksys_write+0x10/0x10 [ 334.178329][T10354] do_syscall_64+0x14d/0xf80 [ 334.178345][T10354] ? trace_irq_disable+0x3b/0x150 [ 334.178376][T10354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.178390][T10354] ? clear_bhb_loop+0x40/0x90 [ 334.178409][T10354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.178423][T10354] RIP: 0033:0x7f7977f9c799 [ 334.178436][T10354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.178448][T10354] RSP: 002b:00007f7978e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.178463][T10354] RAX: ffffffffffffffda RBX: 00007f7978215fa0 RCX: 00007f7977f9c799 [ 334.178491][T10354] RDX: 0000000000006014 RSI: 0000200000000300 RDI: 0000000000000003 [ 334.178501][T10354] RBP: 00007f7978e12090 R08: 0000000000000000 R09: 0000000000000000 [ 334.178510][T10354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.178518][T10354] R13: 00007f7978216038 R14: 00007f7978215fa0 R15: 00007f797833fa48 [ 334.178540][T10354] [ 334.365073][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.373789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.412129][ T43] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 334.445579][ T1212] usb 6-1: USB disconnect, device number 38 [ 334.605841][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.614249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.641905][ T43] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 334.660149][ T43] usb 5-1: config 0 has no interface number 0 [ 334.681366][ T43] usb 5-1: config 0 interface 101 has no altsetting 0 [ 334.704107][ T43] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 334.731926][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.754183][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.763670][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.767146][ T43] usb 5-1: config 0 descriptor?? [ 334.802848][T10362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.811887][T10362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.824904][ T43] cp210x 5-1:0.101: cp210x converter detected [ 335.027066][ T1212] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 335.194332][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 335.210600][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.239220][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.251841][ T1212] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 335.271929][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.294223][ T1212] usb 3-1: config 0 descriptor?? [ 335.602927][T10390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.616144][T10390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.626138][T10390] fuse: Invalid rootmode [ 335.657890][ T43] cp210x 5-1:0.101: failed to get vendor val 0x000e size 3: -32 [ 335.737244][ T1212] koneplus 0003:1E7D:2D51.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 335.876748][ T43] cp210x 5-1:0.101: GPIO initialisation failed: -19 [ 335.890559][ T43] usb 5-1: cp210x converter now attached to ttyUSB0 [ 336.271835][ T43] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 336.421901][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 336.429749][ T43] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 336.438658][ T43] usb 4-1: config 0 has no interface number 0 [ 336.445208][ T43] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.456459][ T43] usb 4-1: config 0 interface 85 has no altsetting 0 [ 336.465269][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 336.475133][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.483276][ T43] usb 4-1: Product: syz [ 336.487489][ T43] usb 4-1: Manufacturer: syz [ 336.492373][ T43] usb 4-1: SerialNumber: syz [ 336.499489][ T43] usb 4-1: config 0 descriptor?? [ 336.687282][ T1212] usb 3-1: USB disconnect, device number 63 [ 336.807087][T10401] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1380' sets config #1 [ 336.921465][ T43] appletouch 4-1:0.85: Geyser mode initialized. [ 336.929966][ T43] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input57 [ 337.181931][ T1212] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 337.331945][ T1212] usb 3-1: Using ep0 maxpacket: 16 [ 337.341243][ T1212] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 337.350844][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.358980][ T1212] usb 3-1: Product: syz [ 337.363593][ T1212] usb 3-1: Manufacturer: syz [ 337.368271][ T1212] usb 3-1: SerialNumber: syz [ 337.376079][ T1212] usb 3-1: config 0 descriptor?? [ 337.384097][ T1212] hub 3-1:0.0: bad descriptor, ignoring hub [ 337.390159][ T1212] hub 3-1:0.0: probe with driver hub failed with error -5 [ 337.574099][ T24] usb 5-1: USB disconnect, device number 68 [ 337.604897][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 337.613958][ T24] cp210x 5-1:0.101: device disconnected [ 338.252390][T10424] SET target dimension over the limit! [ 338.271838][T10424] netdevsim netdevsim5: Direct firmware load for / [ 338.271838][T10424] failed with error -2 [ 338.283601][T10424] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 338.283601][T10424] [ 338.357270][T10428] PM: Enabling pm_trace changes system date and time during resume. [ 338.357270][T10428] PM: Correct system time has to be restored manually after resume. [ 338.762763][ T24] net_ratelimit: 12 callbacks suppressed [ 338.762779][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.776939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.791265][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.799782][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.808264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.816646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.173625][ T24] usb 3-1: USB disconnect, device number 64 [ 339.221209][ T1220] usb 4-1: USB disconnect, device number 57 [ 339.255803][ T1220] appletouch 4-1:0.85: input: appletouch disconnected [ 339.353028][T10437] syzkaller0: entered promiscuous mode [ 339.361945][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 339.369114][T10437] syzkaller0: entered allmulticast mode [ 339.420503][T10437] tipc: Enabled bearer , priority 0 [ 339.522105][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 339.536192][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.547512][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.558816][ T5892] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 339.579216][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 339.611919][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.627976][ T24] usb 5-1: config 0 descriptor?? [ 339.736228][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 339.741973][ T1220] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 339.760413][ T5892] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 339.777131][ T5892] usb 3-1: config 0 has no interface number 0 [ 339.786542][T10444] netlink: 'syz.1.1396': attribute type 21 has an invalid length. [ 339.787293][ T5892] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 339.795803][T10444] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1396'. [ 339.804051][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.821577][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.830091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.840070][ T5892] usb 3-1: Product: syz [ 339.849740][ T5892] usb 3-1: Manufacturer: syz [ 339.854679][ T5892] usb 3-1: SerialNumber: syz [ 339.865474][ T5892] usb 3-1: config 0 descriptor?? [ 339.879679][ T5892] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 339.914804][ T1220] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 339.926127][ T1220] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 339.938247][ T1220] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 339.951674][ T1220] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 339.961026][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.976023][T10446] Lens A: ================= START STATUS ================= [ 339.983876][T10446] Lens A: Focus, Absolute: 0 [ 339.989442][T10446] Lens A: ================== END STATUS ================== [ 340.003247][T10446] netlink: 'syz.5.1395': attribute type 2 has an invalid length. [ 340.012013][T10446] Lens A: ================= START STATUS ================= [ 340.019467][T10446] Lens A: Focus, Absolute: 0 [ 340.024214][T10446] Lens A: ================== END STATUS ================== [ 340.095811][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.098182][ T24] koneplus 0003:1E7D:2D51.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 340.104148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.208925][ T5892] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 340.260111][ T5892] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 340.274257][T10451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.284029][T10451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.327059][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1395'. [ 340.444278][ T1220] ath6kl: Failed to submit usb control message: -71 [ 340.451331][T10436] tipc: Resetting bearer [ 340.467326][ T1220] ath6kl: unable to send the bmi data to the device: -71 [ 340.483603][ T1220] ath6kl: Unable to send get target info: -71 [ 340.503184][T10436] tipc: Disabling bearer [ 340.519926][ T1220] ath6kl: Failed to init ath6kl core: -71 [ 340.555650][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 340.565409][ T24] usb 3-1: USB disconnect, device number 65 [ 340.569694][ T1220] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 340.602104][ T1220] usb 4-1: USB disconnect, device number 58 [ 340.628896][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 340.648891][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 340.662419][ T24] quatech2 3-1:0.51: device disconnected [ 341.036033][ T24] usb 5-1: USB disconnect, device number 69 [ 341.270942][T10465] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 341.341422][T10458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.372683][T10458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.426415][T10458] fuse: Bad value for 'rootmode' [ 341.531512][T10469] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 341.592689][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1401'. [ 341.595559][T10469] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 341.612034][T10479] PM: Enabling pm_trace changes system date and time during resume. [ 341.612034][T10479] PM: Correct system time has to be restored manually after resume. [ 341.702026][T10473] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1401'. [ 341.794526][T10465] bond7: (slave bridge7): Enslaving as an active interface with a down link [ 341.856419][T10470] macvlan2: entered promiscuous mode [ 341.866562][T10470] macvlan2: entered allmulticast mode [ 341.895680][T10470] bond7: entered promiscuous mode [ 341.901402][T10470] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 341.949834][T10470] bond7: left promiscuous mode [ 341.996547][T10483] syzkaller0: entered promiscuous mode [ 342.004790][T10483] syzkaller0: entered allmulticast mode [ 343.302289][ T1220] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 343.371855][ T1212] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 343.461949][ T1220] usb 6-1: Using ep0 maxpacket: 16 [ 343.471642][ T1220] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 343.481874][ T1220] usb 6-1: config 0 has no interface number 0 [ 343.488139][ T1220] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 343.500340][ T1220] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 343.513429][ T1220] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 343.523153][ T1220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.531154][ T1220] usb 6-1: Product: syz [ 343.535528][ T1212] usb 3-1: Using ep0 maxpacket: 8 [ 343.540721][ T1220] usb 6-1: Manufacturer: syz [ 343.545554][ T1220] usb 6-1: SerialNumber: syz [ 343.551453][ T1212] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 343.564800][ T1220] usb 6-1: config 0 descriptor?? [ 343.571872][T10495] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 343.579240][T10495] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 343.590914][ T1212] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 343.600057][ T1212] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 343.609576][ T1212] usb 3-1: Product: syz [ 343.613836][ T1212] usb 3-1: Manufacturer: syz [ 343.618492][ T1212] usb 3-1: SerialNumber: syz [ 343.712141][ T5901] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 343.821349][T10495] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 343.828869][T10495] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 343.840283][ T1212] usb 3-1: palm_os_3_probe - error -32 getting connection information [ 343.853829][ T1212] visor 3-1:1.0: probe with driver visor failed with error -32 [ 343.873122][ T1212] usb 3-1: USB disconnect, device number 66 [ 343.913737][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 343.920930][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.932391][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.942290][ T5901] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 343.953415][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.962503][ T24] net_ratelimit: 14 callbacks suppressed [ 343.962520][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.976683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.985406][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.993961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.001000][ T5901] usb 4-1: config 0 descriptor?? [ 344.039628][ T1220] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 344.051488][ T1220] asix 6-1:0.34: probe with driver asix failed with error -71 [ 344.069692][ T1220] usb 6-1: USB disconnect, device number 39 [ 344.295132][T10505] syzkaller0: entered promiscuous mode [ 344.300844][T10505] syzkaller0: entered allmulticast mode [ 344.323574][T10505] tipc: Enabled bearer , priority 0 [ 344.433098][ T5901] koneplus 0003:1E7D:2D51.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 344.526142][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.534581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.573088][ T5892] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 344.735035][ T5892] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 344.746312][ T5892] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 344.759458][ T5892] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 344.775096][ T5892] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 344.785982][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.794263][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 344.916048][T10518] SET target dimension over the limit! [ 344.930522][T10518] netdevsim netdevsim5: Direct firmware load for / [ 344.930522][T10518] failed with error -2 [ 344.943498][T10518] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 344.943498][T10518] [ 344.971880][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 344.979986][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 344.988885][ T24] usb 3-1: config 0 has no interface number 0 [ 344.998625][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 345.009963][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.018214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.030054][ T5892] ath6kl: Failed to submit usb control message: -71 [ 345.037009][T10504] tipc: Resetting bearer [ 345.042873][ T5892] ath6kl: unable to send the bmi data to the device: -71 [ 345.049940][ T5892] ath6kl: Unable to send get target info: -71 [ 345.071416][ T5892] ath6kl: Failed to init ath6kl core: -71 [ 345.077276][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.088545][ T5892] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 345.097681][ T24] usb 3-1: Product: syz [ 345.104099][T10504] tipc: Disabling bearer [ 345.112207][ T24] usb 3-1: Manufacturer: syz [ 345.128201][ T5892] usb 5-1: USB disconnect, device number 70 [ 345.134593][ T24] usb 3-1: SerialNumber: syz [ 345.149329][ T24] usb 3-1: config 0 descriptor?? [ 345.168557][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 345.419052][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 345.486495][ T5892] usb 4-1: USB disconnect, device number 59 [ 345.499129][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 345.805638][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 345.814584][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.822934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.844585][ T24] usb 3-1: USB disconnect, device number 67 [ 345.871150][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 345.995922][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 346.033825][ T24] quatech2 3-1:0.51: device disconnected [ 346.167795][T10531] Cannot find add_set index 0 as target [ 346.180465][T10531] netdevsim netdevsim3: Direct firmware load for / [ 346.180465][T10531] failed with error -2 [ 346.204652][T10531] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 346.204652][T10531] [ 346.421399][T10543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.436391][T10543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.506962][T10538] fuse: Bad value for 'rootmode' [ 346.682215][ T1220] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 346.861350][ T1220] usb 5-1: unable to get BOS descriptor or descriptor too short [ 346.878883][ T1220] usb 5-1: not running at top speed; connect to a high speed hub [ 346.937096][ T1220] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 346.976160][ T1220] usb 5-1: config 1 interface 0 has no altsetting 0 [ 347.029803][ T1220] usb 5-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 347.058080][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.089896][ T1220] usb 5-1: Product: syz [ 347.100225][ T1220] usb 5-1: Manufacturer: syz [ 347.110205][ T1220] usb 5-1: SerialNumber: syz [ 347.127236][T10539] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 347.151852][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 347.311871][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 347.321894][ T1212] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 347.324720][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 347.349358][ T24] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 347.368365][ T1220] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.380258][ T24] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 347.384757][ T1220] usb 5-1: MIDIStreaming interface descriptor not found [ 347.408009][ T24] usb 3-1: Product: syz [ 347.412946][ T24] usb 3-1: Manufacturer: syz [ 347.417676][ T24] usb 3-1: SerialNumber: syz [ 347.493210][ T1220] usb 5-1: USB disconnect, device number 71 [ 347.524395][ T1212] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 347.542774][ T1212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.565601][ T1212] usb 6-1: config 0 descriptor?? [ 347.594774][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.636846][ T24] usb 3-1: palm_os_3_probe - error -32 getting connection information [ 347.646802][ T24] visor 3-1:1.0: probe with driver visor failed with error -32 [ 347.670061][ T24] usb 3-1: USB disconnect, device number 68 [ 347.831888][ T5901] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 347.981859][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 347.989797][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.001156][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.011368][ T1212] hackrf 6-1:0.0: Board ID: 00 [ 348.016346][ T5901] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 348.025542][ T1212] hackrf 6-1:0.0: Firmware version: [ 348.034050][ T1212] hackrf 6-1:0.0: Registered as swradio24 [ 348.039819][ T1212] videodev: could not get a free minor [ 348.045804][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.056707][ T5901] usb 4-1: config 0 descriptor?? [ 348.063168][ T1212] hackrf 6-1:0.0: Failed to register as video device (-23) [ 348.091620][ T1212] hackrf 6-1:0.0: probe with driver hackrf failed with error -23 [ 348.244272][ T24] usb 6-1: USB disconnect, device number 40 [ 348.256471][T10563] syzkaller0: entered promiscuous mode [ 348.262265][T10563] syzkaller0: entered allmulticast mode [ 348.291592][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 348.533443][ T5901] koneplus 0003:1E7D:2D51.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 349.169653][ T24] net_ratelimit: 14 callbacks suppressed [ 349.169670][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.183694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.475165][ T5901] usb 4-1: USB disconnect, device number 60 [ 349.646285][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.654805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.207446][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.215906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.284366][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.293141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.375612][T10591] SET target dimension over the limit! [ 350.679313][T10591] netdevsim netdevsim5: Direct firmware load for / [ 350.679313][T10591] failed with error -2 [ 350.729119][T10591] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 350.729119][T10591] [ 350.922000][ T5901] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 350.930509][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.938858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.012357][ T43] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 351.217156][ T5892] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 351.242306][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 351.253392][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 351.286012][ T43] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 351.295711][ T43] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 351.316962][ T43] usb 4-1: Product: syz [ 351.331315][ T43] usb 4-1: Manufacturer: syz [ 351.340460][ T43] usb 4-1: SerialNumber: syz [ 351.354748][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 351.381917][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 351.456836][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 351.477645][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 351.530545][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 351.566407][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 351.591907][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 351.632233][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 351.650032][ T43] usb 4-1: palm_os_3_probe - error -32 getting connection information [ 351.660308][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 351.694520][ T43] visor 4-1:1.0: probe with driver visor failed with error -32 [ 351.723577][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 351.738979][ T43] usb 4-1: USB disconnect, device number 61 [ 351.754669][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 351.784802][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 351.820567][ T5901] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 351.823592][ T5892] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 351.867739][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.869569][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.919452][ T5892] usb 3-1: Product: syz [ 351.933397][ T5892] usb 3-1: Manufacturer: syz [ 351.940588][ T5901] usb 5-1: Product: syz [ 351.951940][ T5892] usb 3-1: SerialNumber: syz [ 351.964113][ T5901] usb 5-1: Manufacturer: syz [ 351.981455][ T5892] usb 3-1: config 0 descriptor?? [ 352.005924][ T5892] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 352.016941][ T5892] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 352.032282][ T5901] usb 5-1: SerialNumber: syz [ 352.063476][ T5901] usb 5-1: config 0 descriptor?? [ 352.102787][ T5901] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 352.133974][ T5901] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 352.144574][T10612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.174750][T10612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.273420][T10612] fuse: Bad value for 'rootmode' [ 352.576780][T10616] FAULT_INJECTION: forcing a failure. [ 352.576780][T10616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.591363][T10616] CPU: 1 UID: 0 PID: 10616 Comm: syz.5.1446 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.591395][T10616] Tainted: [L]=SOFTLOCKUP [ 352.591403][T10616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.591416][T10616] Call Trace: [ 352.591478][T10616] [ 352.591513][T10616] dump_stack_lvl+0xe8/0x150 [ 352.591658][T10616] should_fail_ex+0x412/0x560 [ 352.591846][T10616] _copy_from_user+0x2d/0xb0 [ 352.591917][T10616] ___sys_sendmsg+0x1c6/0x360 [ 352.592033][T10616] ? get_pid_task+0x20/0x1f0 [ 352.592079][T10616] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.592128][T10616] ? sb_end_write+0xe9/0x1c0 [ 352.592197][T10616] ? __pfx_vfs_write+0x10/0x10 [ 352.592233][T10616] __x64_sys_sendmsg+0x1bd/0x2a0 [ 352.592267][T10616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.592306][T10616] ? __pfx_ksys_write+0x10/0x10 [ 352.592337][T10616] do_syscall_64+0x14d/0xf80 [ 352.592417][T10616] ? trace_irq_disable+0x3b/0x150 [ 352.592458][T10616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.592497][T10616] ? clear_bhb_loop+0x40/0x90 [ 352.592521][T10616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.592541][T10616] RIP: 0033:0x7f32ed59c799 [ 352.592582][T10616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.592600][T10616] RSP: 002b:00007f32ee3ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.592647][T10616] RAX: ffffffffffffffda RBX: 00007f32ed815fa0 RCX: 00007f32ed59c799 [ 352.592662][T10616] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 352.592674][T10616] RBP: 00007f32ee3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 352.592686][T10616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.592697][T10616] R13: 00007f32ed816038 R14: 00007f32ed815fa0 R15: 00007f32ed93fa48 [ 352.592728][T10616] [ 352.964243][ T5901] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 353.152003][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 353.169047][ T5901] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 353.178712][ T5901] usb 4-1: config 0 has no interface number 0 [ 353.199780][ T5901] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.212000][ T5901] usb 4-1: config 0 interface 85 has no altsetting 0 [ 353.220711][ T5901] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 353.237534][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.246776][ T5901] usb 4-1: Product: syz [ 353.250966][ T5901] usb 4-1: Manufacturer: syz [ 353.276038][ T5901] usb 4-1: SerialNumber: syz [ 353.289645][ T5901] usb 4-1: config 0 descriptor?? [ 353.792086][ T1220] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 353.971891][ T1220] usb 6-1: Using ep0 maxpacket: 8 [ 353.979124][ T1220] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 353.988218][ T1220] usb 6-1: config 0 has no interface number 0 [ 353.994655][ T1220] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.005918][ T1220] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 354.020242][ T1220] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.033717][ T1220] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 354.044948][ T1220] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 354.058500][ T1220] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 354.067849][ T1220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.079392][ T1220] usb 6-1: config 0 descriptor?? [ 354.091520][ T1220] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 354.169735][ T5892] usb 5-1: USB disconnect, device number 72 [ 354.360576][ T24] usb 3-1: USB disconnect, device number 69 [ 354.448514][ T43] net_ratelimit: 14 callbacks suppressed [ 354.448599][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.462781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.875708][ T1220] usb 6-1: USB disconnect, device number 41 [ 354.916268][ T1220] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 355.428491][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.436929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.502390][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.510681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.557674][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.566119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.594556][ T5901] appletouch 4-1:0.85: Failed to request geyser raw mode [ 355.599240][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 355.642426][ T5901] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 355.699717][ T5901] usb 4-1: USB disconnect, device number 62 [ 355.781910][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 355.789555][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 355.790523][T10648] loop5: detected capacity change from 0 to 7 [ 355.819366][ T24] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 355.838496][ T24] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 355.868298][ T24] usb 5-1: Product: syz [ 355.889489][ T24] usb 5-1: Manufacturer: syz [ 356.051294][ T24] usb 5-1: SerialNumber: syz [ 356.064713][T10653] gre0: entered promiscuous mode [ 356.069842][T10653] gre0: entered allmulticast mode [ 356.271912][ T5901] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 356.338142][ T24] usb 5-1: palm_os_3_probe - error -32 getting connection information [ 356.356784][ T24] visor 5-1:1.0: probe with driver visor failed with error -32 [ 356.395950][ T24] usb 5-1: USB disconnect, device number 73 [ 356.434730][T10648] Dev loop5: unable to read RDB block 7 [ 356.444743][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 356.454830][ C0] buffer_io_error: 14 callbacks suppressed [ 356.454841][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 356.462548][T10648] loop5: unable to read partition table [ 356.470323][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 356.484030][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 356.503266][ T5901] usb 4-1: config 7 has an invalid interface number: 188 but max is 0 [ 356.509139][T10648] loop5: partition table beyond EOD, [ 356.514349][ T5901] usb 4-1: config 7 has no interface number 0 [ 356.528086][ T5901] usb 4-1: config 7 interface 188 has no altsetting 0 [ 356.547938][ T5901] usb 4-1: New USB device found, idVendor=12d1, idProduct=0b9f, bcdDevice=5a.df [ 356.548773][T10648] truncated [ 356.557646][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.568426][ T5901] usb 4-1: Product: syz [ 356.573177][ T5901] usb 4-1: Manufacturer: syz [ 356.578690][ T5901] usb 4-1: SerialNumber: syz [ 356.606977][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.615375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.630082][T10648] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 356.792041][T10651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.800937][T10651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.817779][ T5901] uvcvideo 4-1:7.188: Found multiple Units with ID 1 [ 356.833570][ T5901] uvcvideo 4-1:7.188: Found UVC 0.00 device syz (12d1:0b9f) [ 356.841090][ T5901] uvcvideo 4-1:7.188: No valid video chain found. [ 356.885771][ T5901] usb 4-1: USB disconnect, device number 63 [ 356.957063][ T5194] Dev loop5: unable to read RDB block 7 [ 356.965075][ T5194] loop5: unable to read partition table [ 356.971070][ T5194] loop5: partition table beyond EOD, truncated [ 357.198615][T10663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.211469][T10663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.221276][T10663] fuse: Unknown parameter 'use00000000000000000000' [ 357.314733][T10674] tipc: Failed to remove unknown binding: 66,1,1/1418090483:157977195/157977197 [ 357.362009][ T1220] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 357.523699][ T1220] usb 6-1: Using ep0 maxpacket: 8 [ 357.532512][ T1220] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 357.540823][ T1220] usb 6-1: config 0 has no interface number 0 [ 357.550487][T10679] Cannot find del_set index 2 as target [ 357.565428][ T5901] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 357.576371][ T1220] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.587775][ T1220] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 357.649870][ T1220] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 357.690813][ T1220] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 357.722179][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 357.734559][ T5901] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.744766][ T1220] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 357.769486][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 357.780553][ T1220] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 357.792614][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.809506][ T1220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.836137][ T1220] usb 6-1: config 0 descriptor?? [ 357.858013][ T1220] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 358.630097][ T24] usb 6-1: USB disconnect, device number 42 [ 358.648482][ T24] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 358.730639][ T29] audit: type=1800 audit(1772512392.549:365): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1472" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 358.752895][ T5952] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 358.763122][ T1220] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 358.774793][T10687] program syz.5.1472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.911819][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 358.919344][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.930966][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.940895][ T5952] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 358.950116][ T1220] usb 3-1: Using ep0 maxpacket: 32 [ 358.955364][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.965297][ T1220] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 358.974434][ T1220] usb 3-1: config 0 has no interface number 0 [ 358.981621][ T5952] usb 4-1: config 0 descriptor?? [ 358.986920][ T1220] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.999738][ T1220] usb 3-1: config 0 interface 85 has no altsetting 0 [ 359.013163][ T1220] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 359.022564][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.030667][ T1220] usb 3-1: Product: syz [ 359.035543][ T1220] usb 3-1: Manufacturer: syz [ 359.040222][ T1220] usb 3-1: SerialNumber: syz [ 359.049912][ T1220] usb 3-1: config 0 descriptor?? [ 359.171856][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 359.322000][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 359.330420][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 359.343181][ T24] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 359.352590][ T24] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 359.360806][ T24] usb 6-1: Product: syz [ 359.365370][ T24] usb 6-1: Manufacturer: syz [ 359.370084][ T24] usb 6-1: SerialNumber: syz [ 359.436775][ T5952] koneplus 0003:1E7D:2D51.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 359.589461][ T24] usb 6-1: palm_os_3_probe - error -32 getting connection information [ 359.604182][ T24] visor 6-1:1.0: probe with driver visor failed with error -32 [ 359.623502][ T24] usb 6-1: USB disconnect, device number 43 [ 359.727600][ T43] net_ratelimit: 10 callbacks suppressed [ 359.727621][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.741681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.892595][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.901312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.268092][ T5901] usb 5-1: string descriptor 0 read error: -71 [ 360.284177][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.307486][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.365612][ T5901] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 360.404945][ T5901] usb 5-1: no configuration chosen from 1 choice [ 360.427297][ T43] usb 4-1: USB disconnect, device number 64 [ 360.437024][ T5901] usb 5-1: USB disconnect, device number 74 [ 360.501220][T10699] PM: Enabling pm_trace changes system date and time during resume. [ 360.501220][T10699] PM: Correct system time has to be restored manually after resume. [ 360.767351][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.775757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.801848][ T24] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 360.941854][ T43] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 360.971809][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 360.979337][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 360.989156][ T24] usb 6-1: config 7 has an invalid interface number: 188 but max is 0 [ 360.997663][ T24] usb 6-1: config 7 has no interface number 0 [ 361.006542][ T24] usb 6-1: config 7 interface 188 has no altsetting 0 [ 361.017911][ T24] usb 6-1: New USB device found, idVendor=12d1, idProduct=0b9f, bcdDevice=5a.df [ 361.028035][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.036312][ T24] usb 6-1: Product: syz [ 361.040771][ T24] usb 6-1: Manufacturer: syz [ 361.045604][ T24] usb 6-1: SerialNumber: syz [ 361.108003][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 361.120023][ T43] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 361.135980][ T43] usb 4-1: config 0 has no interface number 0 [ 361.150060][ T43] usb 4-1: config 0 interface 184 has no altsetting 0 [ 361.163306][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.171639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.180320][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.188763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.205526][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 361.230105][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.250578][ T43] usb 4-1: Product: syz [ 361.259808][ T43] usb 4-1: Manufacturer: syz [ 361.266726][T10701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.299989][T10701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.312163][ T43] usb 4-1: SerialNumber: syz [ 361.332537][ T43] usb 4-1: config 0 descriptor?? [ 361.361137][ T24] uvcvideo 6-1:7.188: Found multiple Units with ID 1 [ 361.392233][ T24] uvcvideo 6-1:7.188: Found UVC 0.00 device syz (12d1:0b9f) [ 361.414947][ T24] uvcvideo 6-1:7.188: No valid video chain found. [ 361.439094][ T24] usb 6-1: USB disconnect, device number 44 [ 361.531660][T10706] xt_NFQUEUE: number of total queues is 0 [ 361.574913][T10703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.599968][T10703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.621720][T10703] xt_cgroup: invalid path, errno=-2 [ 361.659357][ T1220] appletouch 3-1:0.85: Failed to request geyser raw mode [ 361.678008][ T1220] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 361.692063][ T1220] usb 3-1: USB disconnect, device number 70 [ 361.866829][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.902432][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.106801][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 362.122556][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 362.136579][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 362.152020][ T5892] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 362.160592][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 362.170995][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 362.183464][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 362.197685][ T43] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 362.229707][ T43] usb 4-1: USB disconnect, device number 65 [ 362.261987][ T1220] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 362.321857][ T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 362.331833][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 362.339542][ T5892] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 362.355612][ T5892] usb 5-1: config 0 has no interface number 0 [ 362.366852][ T5892] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 362.386744][ T5892] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 362.412507][ T5892] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 362.421602][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.438533][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 362.462277][ T5892] usb 5-1: Product: syz [ 362.466815][ T5892] usb 5-1: Manufacturer: syz [ 362.471499][ T5892] usb 5-1: SerialNumber: syz [ 362.476248][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 362.478563][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 362.487012][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 362.528603][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 362.534839][ T24] usb 6-1: config 7 has an invalid interface number: 188 but max is 0 [ 362.539161][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 362.567707][ T5892] usb 5-1: config 0 descriptor?? [ 362.573726][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 362.586944][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 362.598329][ T24] usb 6-1: config 7 has no interface number 0 [ 362.610977][T10716] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 362.618792][T10716] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 362.629275][ T24] usb 6-1: config 7 interface 188 has no altsetting 0 [ 362.632438][ T1220] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 362.648597][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.657271][ T1220] usb 3-1: Product: syz [ 362.661462][ T1220] usb 3-1: Manufacturer: syz [ 362.667284][ T24] usb 6-1: New USB device found, idVendor=12d1, idProduct=0b9f, bcdDevice=5a.df [ 362.669782][ T1220] usb 3-1: SerialNumber: syz [ 362.697229][ T1220] usb 3-1: config 0 descriptor?? [ 362.737726][ T1220] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 362.747992][ T1220] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 362.752484][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.818057][ T24] usb 6-1: Product: syz [ 362.827841][ T24] usb 6-1: Manufacturer: syz [ 362.848641][ T24] usb 6-1: SerialNumber: syz [ 362.933404][T10716] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 362.982229][T10716] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 362.994237][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.018343][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.030534][T10725] fuse: Unknown parameter 'use00000000000000000000' [ 363.090091][T10718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.099073][T10718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.107090][ T5901] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 363.133962][ T24] uvcvideo 6-1:7.188: Found multiple Units with ID 1 [ 363.141714][ T24] uvcvideo 6-1:7.188: Found UVC 0.00 device syz (12d1:0b9f) [ 363.150625][ T24] uvcvideo 6-1:7.188: No valid video chain found. [ 363.163484][ T24] usb 6-1: USB disconnect, device number 45 [ 363.214944][ T5892] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 363.231358][ T5892] asix 5-1:0.34: probe with driver asix failed with error -71 [ 363.250331][ T5892] usb 5-1: USB disconnect, device number 75 [ 363.261911][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 363.269716][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 363.282917][ T5901] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 363.298288][ T5901] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 363.322163][ T5901] usb 4-1: Product: syz [ 363.330794][ T5901] usb 4-1: Manufacturer: syz [ 363.338811][ T5901] usb 4-1: SerialNumber: syz [ 363.558095][ T5901] usb 4-1: palm_os_3_probe - error -32 getting connection information [ 363.570618][ T5901] visor 4-1:1.0: probe with driver visor failed with error -32 [ 363.584437][ T5901] usb 4-1: USB disconnect, device number 66 [ 363.916408][T10734] netlink: 'syz.5.1490': attribute type 1 has an invalid length. [ 363.995518][T10734] bond5: (slave bridge4): making interface the new active one [ 364.005653][T10734] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 364.031652][T10734] macvlan2: entered promiscuous mode [ 364.039068][T10734] macvlan2: entered allmulticast mode [ 364.047479][T10734] bond5: entered promiscuous mode [ 364.052980][T10734] bridge4: entered promiscuous mode [ 364.058956][T10734] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 364.067010][T10734] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 364.083737][T10734] bond5: left promiscuous mode [ 364.088675][T10734] bridge4: left promiscuous mode [ 364.382064][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 364.405402][T10745] binder: 10743:10745 ioctl c0306201 0 returned -14 [ 364.536862][ T24] usb 4-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 364.547320][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.558294][ T24] usb 4-1: Product: syz [ 364.567494][ T24] usb 4-1: Manufacturer: syz [ 364.573664][ T24] usb 4-1: SerialNumber: syz [ 364.834536][ T24] usb 4-1: unit 10 not found! [ 364.948272][ T5892] net_ratelimit: 10 callbacks suppressed [ 364.948286][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.962397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.008117][ T43] usb 3-1: USB disconnect, device number 71 [ 365.112096][ T5917] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 365.311824][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 365.328365][ T5917] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 365.351290][ T5917] usb 5-1: config 0 has no interface number 0 [ 365.359518][ T5917] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 365.380217][ T5917] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 365.395154][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 365.417194][ T24] usb 4-1: USB disconnect, device number 67 [ 365.433599][ T5917] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 365.470532][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.486895][ T5917] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 365.520913][T10753] Cannot find add_set index 0 as target [ 365.532327][T10753] netdevsim netdevsim2: Direct firmware load for / [ 365.532327][T10753] failed with error -2 [ 365.543081][T10753] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 365.543081][T10753] [ 365.567064][ T5917] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 365.613886][ T5917] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 365.647335][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.655601][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.664004][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.682716][ T5917] usb 5-1: config 0 descriptor?? [ 365.817872][ T5917] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 365.965640][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.974047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.082217][ T5917] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 366.295425][T10745] syz.5.1494 (10745): drop_caches: 2 [ 366.366080][ T5917] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 366.378707][T10762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.387252][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.402459][ T5917] usb 4-1: config 0 descriptor?? [ 366.503757][T10762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.544927][T10764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1502'. [ 366.546472][ T5901] usb 5-1: USB disconnect, device number 76 [ 366.581628][ T5901] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 366.690739][T10756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.710706][T10756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.756502][T10756] netlink: 'syz.3.1498': attribute type 32 has an invalid length. [ 366.781361][ T5917] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 366.922403][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.930789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.939450][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.947926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.992344][ T5917] [drm:udl_init] *ERROR* Selecting channel failed [ 367.033824][ T5917] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 367.059311][ T5917] [drm] Initialized udl on minor 2 [ 367.088273][ T5917] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 367.109701][ T5917] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 367.131831][ T5892] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 367.141517][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 367.161066][ T5917] usb 4-1: USB disconnect, device number 68 [ 367.170463][ T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 367.312173][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 367.358178][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.384804][T10782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.386803][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.411971][ T5892] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 367.422142][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.443868][T10782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.471052][ T5892] usb 5-1: config 0 descriptor?? [ 367.517248][T10782] fuse: Unknown parameter 'use00000000000000000000' [ 367.597795][ T5952] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 367.807545][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 367.825917][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 367.877956][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 367.948458][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 367.967208][ T5892] koneplus 0003:1E7D:2D51.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 368.104620][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 368.117860][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 368.196185][ T5952] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 368.230139][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.312337][ T5952] usb 3-1: Product: syz [ 368.331018][ T5952] usb 3-1: Manufacturer: syz [ 368.349655][ T5952] usb 3-1: SerialNumber: syz [ 368.390680][ T5952] usb 3-1: config 0 descriptor?? [ 368.432465][ T5952] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 368.446987][ T5952] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 368.461870][ T5901] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 368.613416][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 368.621433][ T5901] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 368.631656][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.644618][ T5901] usb 4-1: config 0 has no interface number 0 [ 368.689227][ T5901] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 368.698607][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.706990][ T5901] usb 4-1: Product: syz [ 368.711350][ T5901] usb 4-1: Manufacturer: syz [ 368.716076][ T5901] usb 4-1: SerialNumber: syz [ 368.727434][ T5901] usb 4-1: config 0 descriptor?? [ 368.957918][ T24] usb 5-1: USB disconnect, device number 77 [ 369.082374][ T5901] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 369.089747][ T5901] uvcvideo 4-1:0.31: No valid video chain found. [ 369.280957][ T5901] usb 4-1: USB disconnect, device number 69 [ 369.351820][ T5917] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 369.492414][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 369.513055][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 369.527330][ T5917] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 369.546046][ T5917] usb 6-1: config 0 has no interface number 0 [ 369.556798][ T5917] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 369.579343][ T5917] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 369.602763][ T5917] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 369.613876][ T5917] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 369.624951][ T5917] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 369.639018][ T5917] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 369.648458][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.661960][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 369.673671][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.691509][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.711490][ T5917] usb 6-1: config 0 descriptor?? [ 369.722141][ T24] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.735829][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.746679][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 369.746925][ T5917] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 369.767684][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.784751][ T24] usb 5-1: config 0 descriptor?? [ 370.312854][T10804] fuse: Bad value for 'fd' [ 370.479141][ T5901] usb 3-1: USB disconnect, device number 72 [ 370.539182][ T5917] usb 6-1: USB disconnect, device number 46 [ 370.593784][ T5917] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 370.764652][ T35] net_ratelimit: 10 callbacks suppressed [ 370.764672][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.778818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.791291][T10822] loop2: detected capacity change from 0 to 7 [ 370.810171][T10822] loop2: [ 370.813569][T10822] loop2: partition table partially beyond EOD, truncated [ 371.693997][ T5194] loop2: [ 371.699316][ T5194] loop2: partition table partially beyond EOD, truncated [ 371.808904][ T29] audit: type=1800 audit(1772512405.619:366): pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1521" name="bus" dev="tmpfs" ino=1085 res=0 errno=0 [ 372.042980][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.051309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.052059][T10836] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 372.280246][T10840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.312388][T10840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.405569][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 372.411632][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 372.458329][ T24] usb 5-1: USB disconnect, device number 78 [ 372.548361][T10841] bond10: (slave bridge9): making interface the new active one [ 372.639869][T10841] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 372.682776][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.691144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.706172][T10836] macvlan3: entered promiscuous mode [ 372.711642][T10836] macvlan3: entered allmulticast mode [ 372.717729][T10836] bond10: entered promiscuous mode [ 372.729123][T10836] bridge9: entered promiscuous mode [ 372.736545][T10836] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 372.772105][T10836] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 372.802746][T10836] bond10: left promiscuous mode [ 372.807659][T10836] bridge9: left promiscuous mode [ 372.914219][T10852] netlink: 'syz.5.1527': attribute type 1 has an invalid length. [ 372.993344][T10852] bond6: (slave bridge5): making interface the new active one [ 373.003803][T10852] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 373.021922][ T5901] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 373.034289][T10852] macvlan2: entered promiscuous mode [ 373.039649][T10852] macvlan2: entered allmulticast mode [ 373.050431][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.064236][T10852] bond6: entered promiscuous mode [ 373.069331][T10852] bridge5: entered promiscuous mode [ 373.075089][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.085957][T10852] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 373.111387][T10852] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 373.164911][T10852] bond6: left promiscuous mode [ 373.177823][T10852] bridge5: left promiscuous mode [ 373.213391][ T5901] usb 5-1: config 8 has an invalid interface number: 80 but max is 0 [ 373.221573][ T5901] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 373.238034][ T5901] usb 5-1: config 8 has no interface number 0 [ 373.246971][ T5901] usb 5-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 373.265256][ T5901] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 373.281805][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.309214][T10864] Cannot find add_set index 0 as target [ 373.316883][T10864] netdevsim netdevsim2: Direct firmware load for / [ 373.316883][T10864] failed with error -2 [ 373.353025][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.361209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.374448][ T5901] usb 5-1: NFC: intf ffff88802ab5e000 id ffffffff8f1d1600 [ 373.422180][ T1220] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 373.448005][T10864] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 373.448005][T10864] [ 373.585369][T10845] fuse: Unknown parameter 'user_i00000000000000000000' [ 373.597007][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 373.608677][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 373.624158][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 373.634111][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 373.647179][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 373.658741][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 373.676452][ T1220] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 373.685860][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.694316][ T1220] usb 4-1: Product: syz [ 373.698853][ T1220] usb 4-1: Manufacturer: syz [ 373.704134][ T1220] usb 4-1: SerialNumber: syz [ 373.715139][ T1220] usb 4-1: config 0 descriptor?? [ 373.727764][ T1220] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 373.741451][ T1220] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 373.972207][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.980544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.713742][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1537'. [ 375.026395][T10885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.036478][T10885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.192299][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1541'. [ 375.205688][T10890] netlink: 496 bytes leftover after parsing attributes in process `syz.5.1541'. [ 375.392040][ T1220] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 375.551859][ T1220] usb 3-1: Using ep0 maxpacket: 32 [ 375.559332][ T1220] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.569912][ T1220] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 375.579240][ T5901] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 375.589691][ T1220] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 375.599289][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.608933][ T1220] usb 3-1: Product: syz [ 375.615097][ T1220] usb 3-1: Manufacturer: syz [ 375.619836][ T1220] usb 3-1: SerialNumber: syz [ 375.628996][ T1220] usb 3-1: config 0 descriptor?? [ 375.674468][ T24] usb 5-1: USB disconnect, device number 79 [ 375.738212][T10895] PM: Enabling pm_trace changes system date and time during resume. [ 375.738212][T10895] PM: Correct system time has to be restored manually after resume. [ 375.751931][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 375.768848][ T5901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 375.778644][ T5901] usb 6-1: config 7 has an invalid interface number: 188 but max is 0 [ 375.790939][ T5901] usb 6-1: config 7 has no interface number 0 [ 375.802631][ T5901] usb 6-1: config 7 interface 188 has no altsetting 0 [ 375.813319][ T5901] usb 6-1: New USB device found, idVendor=12d1, idProduct=0b9f, bcdDevice=5a.df [ 375.822915][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.831386][ T5901] usb 6-1: Product: syz [ 375.837239][ T5901] usb 6-1: Manufacturer: syz [ 375.856528][ T5901] usb 6-1: SerialNumber: syz [ 376.046284][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 376.059878][T10899] syzkaller0: entered promiscuous mode [ 376.065592][T10899] syzkaller0: entered allmulticast mode [ 376.102953][T10893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.124466][T10893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.208286][ T5901] uvcvideo 6-1:7.188: Found multiple Units with ID 1 [ 376.213137][ T24] usb 4-1: USB disconnect, device number 70 [ 376.241066][ T5901] uvcvideo 6-1:7.188: Found UVC 0.00 device syz (12d1:0b9f) [ 376.251611][ T5901] uvcvideo 6-1:7.188: No valid video chain found. [ 376.265348][ T5901] usb 6-1: USB disconnect, device number 47 [ 376.523225][ T35] net_ratelimit: 3 callbacks suppressed [ 376.523245][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.537188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.978162][T10916] Cannot find add_set index 0 as target [ 377.020394][ T1220] usb 3-1: USB disconnect, device number 73 [ 377.141914][ T43] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 377.295084][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 377.307678][ T43] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 377.316224][ T43] usb 6-1: config 0 has no interface number 0 [ 377.323004][ T43] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 377.333611][ T43] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 377.357827][ T43] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 377.368283][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.376807][ T43] usb 6-1: Product: syz [ 377.381105][ T43] usb 6-1: Manufacturer: syz [ 377.392982][ T43] usb 6-1: SerialNumber: syz [ 377.417777][ T43] usb 6-1: config 0 descriptor?? [ 377.428417][T10914] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 377.436620][T10914] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 377.697549][T10914] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 377.707449][T10914] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 377.715323][T10921] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1551'. [ 377.818408][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.826835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.933542][ T43] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 377.949213][ T43] asix 6-1:0.34: probe with driver asix failed with error -71 [ 377.977476][ T43] usb 6-1: USB disconnect, device number 48 [ 378.446226][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.447236][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.452726][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.461228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.737072][T10916] netdevsim netdevsim1: Direct firmware load for / [ 378.737072][T10916] failed with error -2 [ 378.758227][T10916] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 378.758227][T10916] [ 378.811940][ T43] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 378.974242][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 378.983339][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.011901][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.032040][ T43] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 379.041188][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.083959][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.092273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.123272][T10934] Cannot find add_set index 0 as target [ 379.129544][ T43] usb 6-1: config 0 descriptor?? [ 379.182763][T10934] netdevsim netdevsim4: Direct firmware load for / [ 379.182763][T10934] failed with error -2 [ 379.195208][T10934] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 379.195208][T10934] [ 379.207350][T10935] FAULT_INJECTION: forcing a failure. [ 379.207350][T10935] name failslab, interval 1, probability 0, space 0, times 0 [ 379.220266][T10935] CPU: 1 UID: 0 PID: 10935 Comm: syz.1.1556 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.220298][T10935] Tainted: [L]=SOFTLOCKUP [ 379.220306][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.220324][T10935] Call Trace: [ 379.220333][T10935] [ 379.220341][T10935] dump_stack_lvl+0xe8/0x150 [ 379.220380][T10935] should_fail_ex+0x412/0x560 [ 379.220411][T10935] should_failslab+0xa8/0x100 [ 379.220462][T10935] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 379.220489][T10935] ? __alloc_skb+0x186/0x7d0 [ 379.220565][T10935] ? __alloc_skb+0x1d0/0x7d0 [ 379.220590][T10935] ? __local_bh_enable_ip+0xd0/0x130 [ 379.220622][T10935] __alloc_skb+0x1d0/0x7d0 [ 379.220655][T10935] netlink_sendmsg+0x5d4/0xb40 [ 379.220738][T10935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.220769][T10935] ? aa_sock_msg_perm+0xf1/0x1b0 [ 379.220863][T10935] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 379.220901][T10935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.220925][T10935] ____sys_sendmsg+0xa68/0xad0 [ 379.220965][T10935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.221004][T10935] ? import_iovec+0x73/0xa0 [ 379.221055][T10935] ___sys_sendmsg+0x2a5/0x360 [ 379.221085][T10935] ? get_pid_task+0x20/0x1f0 [ 379.221109][T10935] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.221161][T10935] ? sb_end_write+0xe9/0x1c0 [ 379.221200][T10935] ? __pfx_vfs_write+0x10/0x10 [ 379.221232][T10935] __x64_sys_sendmsg+0x1bd/0x2a0 [ 379.221274][T10935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.221314][T10935] ? __pfx_ksys_write+0x10/0x10 [ 379.221347][T10935] do_syscall_64+0x14d/0xf80 [ 379.221367][T10935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.221388][T10935] ? clear_bhb_loop+0x40/0x90 [ 379.221413][T10935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.221438][T10935] RIP: 0033:0x7fd5e9f9c799 [ 379.221458][T10935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.221476][T10935] RSP: 002b:00007fd5eaee5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.221499][T10935] RAX: ffffffffffffffda RBX: 00007fd5ea215fa0 RCX: 00007fd5e9f9c799 [ 379.221515][T10935] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 379.221528][T10935] RBP: 00007fd5eaee5090 R08: 0000000000000000 R09: 0000000000000000 [ 379.221541][T10935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.221553][T10935] R13: 00007fd5ea216038 R14: 00007fd5ea215fa0 R15: 00007fd5ea33fa48 [ 379.221585][T10935] [ 379.758125][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.766524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.878414][ T43] koneplus 0003:1E7D:2D51.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 380.312384][ T5901] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 380.363504][T10948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.396613][T10948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.412733][T10948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.421551][T10948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.452954][T10951] PM: Enabling pm_trace changes system date and time during resume. [ 380.452954][T10951] PM: Correct system time has to be restored manually after resume. [ 380.494952][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.508568][ T5901] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 380.518241][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.527638][ T5901] usb 4-1: Product: syz [ 380.532779][ T5901] usb 4-1: Manufacturer: syz [ 380.537605][ T5901] usb 4-1: SerialNumber: syz [ 380.560418][ T5901] usb 4-1: config 0 descriptor?? [ 380.577374][ T5901] ljca 4-1:0.0: bulk endpoints not found [ 380.780899][ T43] usb 4-1: USB disconnect, device number 71 [ 380.882411][ T5952] usb 6-1: USB disconnect, device number 49 [ 380.939073][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1561'. [ 381.209320][T10963] syzkaller0: entered promiscuous mode [ 381.223889][T10963] syzkaller0: entered allmulticast mode [ 381.242650][T10967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1565'. [ 381.682678][ T5952] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 381.853568][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 381.863910][ T5952] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 381.873834][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 381.902360][ T5952] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 381.911825][ T5952] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 381.920186][ T5952] usb 5-1: Manufacturer: syz [ 381.943595][ T5952] usb 5-1: config 0 descriptor?? [ 381.959901][ T5952] smsusb:smsusb_probe: board id=9, interface number 0 [ 381.977995][ T5952] smsusb:smsusb_probe: Device initialized with return code -19 [ 382.177615][ T5952] usb 5-1: USB disconnect, device number 80 [ 382.213757][T10992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.226711][T10992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.283017][ T13] net_ratelimit: 2 callbacks suppressed [ 382.283037][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.297092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.392082][ T1220] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 382.564373][ T1220] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 382.572632][ T1220] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 382.582823][ T1220] usb 3-1: config 8 has no interface number 0 [ 382.594738][ T1220] usb 3-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 382.607936][ T1220] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 382.617137][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.656791][ T1220] usb 3-1: NFC: intf ffff888077238000 id ffffffff8f1d1600 [ 382.860609][T10988] fuse: Unknown parameter 'user_i00000000000000000000' [ 382.880248][T10996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.895570][T10996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.909731][T10996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.921453][T10996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.197783][T10981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1570'. [ 383.367488][T11004] syzkaller0: entered promiscuous mode [ 383.373749][T11004] syzkaller0: entered allmulticast mode [ 383.381195][T11004] FAULT_INJECTION: forcing a failure. [ 383.381195][T11004] name failslab, interval 1, probability 0, space 0, times 0 [ 383.399339][T11004] CPU: 0 UID: 0 PID: 11004 Comm: syz.4.1577 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.399372][T11004] Tainted: [L]=SOFTLOCKUP [ 383.399381][T11004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 383.399394][T11004] Call Trace: [ 383.399403][T11004] [ 383.399413][T11004] dump_stack_lvl+0xe8/0x150 [ 383.399447][T11004] should_fail_ex+0x412/0x560 [ 383.399489][T11004] should_failslab+0xa8/0x100 [ 383.399517][T11004] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 383.399540][T11004] ? __alloc_skb+0x186/0x7d0 [ 383.399567][T11004] ? __alloc_skb+0x1d0/0x7d0 [ 383.399594][T11004] ? __local_bh_enable_ip+0xd0/0x130 [ 383.399626][T11004] __alloc_skb+0x1d0/0x7d0 [ 383.399660][T11004] alloc_skb_with_frags+0xca/0x890 [ 383.399779][T11004] ? __lock_acquire+0x6b5/0x2cf0 [ 383.399837][T11004] sock_alloc_send_pskb+0x878/0x990 [ 383.399863][T11004] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 383.399926][T11004] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 383.399951][T11004] ? dev_get_by_index+0x22/0x2e0 [ 383.399994][T11004] ? dev_get_by_index+0x22/0x2e0 [ 383.400021][T11004] packet_sendmsg+0x33e5/0x50f0 [ 383.400099][T11004] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 383.400129][T11004] ? __lock_acquire+0x6b5/0x2cf0 [ 383.400183][T11004] ? aa_sk_perm+0x6d5/0x900 [ 383.400205][T11004] ? __pfx_packet_sendmsg+0x10/0x10 [ 383.400241][T11004] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 383.400304][T11004] ? aa_sock_msg_perm+0xf1/0x1b0 [ 383.400334][T11004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.400357][T11004] ? __pfx_packet_sendmsg+0x10/0x10 [ 383.400385][T11004] ____sys_sendmsg+0xa68/0xad0 [ 383.400423][T11004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.400470][T11004] ? import_iovec+0x73/0xa0 [ 383.400503][T11004] ___sys_sendmsg+0x2a5/0x360 [ 383.400539][T11004] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.400603][T11004] ? __fget_files+0x2a/0x420 [ 383.400645][T11004] ? __fget_files+0x3a0/0x420 [ 383.400682][T11004] __x64_sys_sendmsg+0x1bd/0x2a0 [ 383.400715][T11004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.400755][T11004] ? __pfx_ksys_write+0x10/0x10 [ 383.400788][T11004] do_syscall_64+0x14d/0xf80 [ 383.400807][T11004] ? trace_irq_disable+0x3b/0x150 [ 383.400836][T11004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.400858][T11004] ? clear_bhb_loop+0x40/0x90 [ 383.400883][T11004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.400903][T11004] RIP: 0033:0x7f09d8f9c799 [ 383.400923][T11004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.400940][T11004] RSP: 002b:00007f09d9eed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.400962][T11004] RAX: ffffffffffffffda RBX: 00007f09d9215fa0 RCX: 00007f09d8f9c799 [ 383.400977][T11004] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000005 [ 383.400990][T11004] RBP: 00007f09d9eed090 R08: 0000000000000000 R09: 0000000000000000 [ 383.401002][T11004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.401014][T11004] R13: 00007f09d9216038 R14: 00007f09d9215fa0 R15: 00007f09d933fa48 [ 383.401045][T11004] [ 383.710595][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.719001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.741435][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.749730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.799160][T11007] Cannot find add_set index 0 as target [ 383.885584][T11007] netdevsim netdevsim3: Direct firmware load for / [ 383.885584][T11007] failed with error -2 [ 383.897059][T11007] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 383.897059][T11007] [ 383.984261][T11010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.065951][T11010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.285374][T11013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.319002][T11013] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 384.348581][T11016] FAULT_INJECTION: forcing a failure. [ 384.348581][T11016] name failslab, interval 1, probability 0, space 0, times 0 [ 384.361542][T11016] CPU: 1 UID: 0 PID: 11016 Comm: syz.5.1580 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.361569][T11016] Tainted: [L]=SOFTLOCKUP [ 384.361576][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.361589][T11016] Call Trace: [ 384.361597][T11016] [ 384.361605][T11016] dump_stack_lvl+0xe8/0x150 [ 384.361636][T11016] should_fail_ex+0x412/0x560 [ 384.361661][T11016] should_failslab+0xa8/0x100 [ 384.361686][T11016] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 384.361705][T11016] ? __alloc_skb+0x1d0/0x7d0 [ 384.361732][T11016] ? __local_bh_enable_ip+0xd0/0x130 [ 384.361757][T11016] __alloc_skb+0x1d0/0x7d0 [ 384.361793][T11016] netlink_dump+0x1ef/0xe80 [ 384.361818][T11016] ? __netlink_lookup+0xc6/0x8b0 [ 384.361843][T11016] ? __pfx_netlink_dump+0x10/0x10 [ 384.361860][T11016] ? __netlink_lookup+0x7e4/0x8b0 [ 384.361894][T11016] ? netlink_lookup+0x30/0x200 [ 384.361913][T11016] ? netlink_lookup+0x30/0x200 [ 384.361930][T11016] ? netlink_lookup+0x30/0x200 [ 384.361955][T11016] __netlink_dump_start+0x5cb/0x7e0 [ 384.361981][T11016] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 384.362130][T11016] ? __pfx_neigh_dump_info+0x10/0x10 [ 384.362174][T11016] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 384.362194][T11016] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 384.362213][T11016] ? ref_tracker_free+0x693/0x840 [ 384.362233][T11016] ? __pfx_neigh_dump_info+0x10/0x10 [ 384.362257][T11016] ? __skb_clone+0x63/0x7a0 [ 384.362290][T11016] netlink_rcv_skb+0x232/0x4b0 [ 384.362310][T11016] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 384.362332][T11016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.362361][T11016] ? netlink_deliver_tap+0x2e/0x1b0 [ 384.362385][T11016] netlink_unicast+0x80f/0x9b0 [ 384.362408][T11016] ? __pfx_netlink_unicast+0x10/0x10 [ 384.362427][T11016] ? netlink_sendmsg+0x650/0xb40 [ 384.362446][T11016] ? skb_put+0x11b/0x210 [ 384.362471][T11016] netlink_sendmsg+0x813/0xb40 [ 384.362498][T11016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.362521][T11016] ? aa_sock_msg_perm+0xf1/0x1b0 [ 384.362542][T11016] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.362563][T11016] sock_write_iter+0x503/0x550 [ 384.362583][T11016] ? __pfx_sock_write_iter+0x10/0x10 [ 384.362608][T11016] ? bpf_lsm_file_permission+0x9/0x20 [ 384.362627][T11016] ? security_file_permission+0x75/0x260 [ 384.362691][T11016] vfs_write+0x61d/0xb90 [ 384.362719][T11016] ? __pfx_vfs_write+0x10/0x10 [ 384.362746][T11016] ? __fget_files+0x2a/0x420 [ 384.362810][T11016] ksys_write+0x150/0x270 [ 384.362834][T11016] ? __pfx_ksys_write+0x10/0x10 [ 384.362867][T11016] do_syscall_64+0x14d/0xf80 [ 384.362886][T11016] ? trace_irq_disable+0x3b/0x150 [ 384.362913][T11016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.362934][T11016] ? clear_bhb_loop+0x40/0x90 [ 384.362959][T11016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.362980][T11016] RIP: 0033:0x7f32ed59c799 [ 384.362999][T11016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.363017][T11016] RSP: 002b:00007f32ee3ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.363038][T11016] RAX: ffffffffffffffda RBX: 00007f32ed815fa0 RCX: 00007f32ed59c799 [ 384.363052][T11016] RDX: 0000000000000024 RSI: 0000200000000800 RDI: 0000000000000004 [ 384.363065][T11016] RBP: 00007f32ee3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 384.363077][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.363089][T11016] R13: 00007f32ed816038 R14: 00007f32ed815fa0 R15: 00007f32ed93fa48 [ 384.363121][T11016] [ 384.852644][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.861001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.870724][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.879001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.961353][T11013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 384.983580][T11013] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 385.006174][T11013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.012437][T11013] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 385.021203][T11013] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 385.029999][T11013] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 385.051556][ T1220] usb 3-1: USB disconnect, device number 74 [ 385.061546][T11013] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 385.075965][T11013] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 385.102978][T11010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.122046][T11010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.155505][T11025] PM: Enabling pm_trace changes system date and time during resume. [ 385.155505][T11025] PM: Correct system time has to be restored manually after resume. [ 385.391921][ T1220] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 385.425389][T11028] syzkaller0: entered promiscuous mode [ 385.434101][T11028] syzkaller0: entered allmulticast mode [ 385.477414][T11033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1587'. [ 385.578390][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 385.599542][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 385.727636][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 385.744032][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 385.774292][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 385.788678][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 385.805934][T11035] x_tables: duplicate underflow at hook 2 [ 385.838971][ T1220] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 385.848543][ T1220] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.860057][ T1220] usb 6-1: Product: syz [ 385.868549][ T1220] usb 6-1: Manufacturer: syz [ 385.878651][ T1220] usb 6-1: SerialNumber: syz [ 385.921978][ T1220] usb 6-1: config 0 descriptor?? [ 385.939421][ T1220] ti_usb_3410_5052 6-1:0.0: TI USB 5052 2 port adapter converter detected [ 385.969812][ T1220] ti_usb_3410_5052 6-1:0.0: missing endpoints [ 386.366894][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 386.797265][T11052] Cannot find add_set index 0 as target [ 387.011978][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 387.094431][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 387.100603][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 387.107594][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 387.323154][ T1157] net_ratelimit: 2 callbacks suppressed [ 387.323170][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.337101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.177525][ T1220] usb 6-1: USB disconnect, device number 50 [ 388.402393][T11052] netdevsim netdevsim3: Direct firmware load for / [ 388.402393][T11052] failed with error -2 [ 388.422165][T11052] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 388.422165][T11052] [ 388.443941][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 388.682776][ T1220] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 388.772696][T11074] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1600'. [ 388.813671][T11073] PM: Enabling pm_trace changes system date and time during resume. [ 388.813671][T11073] PM: Correct system time has to be restored manually after resume. [ 388.874988][ T1220] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 388.929476][ T1220] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.941190][ T1220] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.990927][ T1220] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 389.001269][ T1220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.046207][ T1220] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 389.060522][ T1220] usb 6-1: invalid MIDI out EP 0 [ 389.083703][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 389.161833][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 389.167979][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 389.168002][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 389.181586][T11079] netlink: 'syz.2.1604': attribute type 1 has an invalid length. [ 389.270587][T11086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1604'. [ 389.336030][T11088] Cannot find add_set index 0 as target [ 389.359605][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.367952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.377103][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.385408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.411900][ T1220] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 389.747629][T11088] netdevsim netdevsim1: Direct firmware load for / [ 389.747629][T11088] failed with error -2 [ 389.780100][T11092] macvlan3: entered promiscuous mode [ 389.791882][T11092] macvlan3: entered allmulticast mode [ 389.799463][T11088] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 389.799463][T11088] [ 389.822794][T11092] bond11: entered promiscuous mode [ 389.828837][T11092] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 389.843461][T11092] bond11: left promiscuous mode [ 389.848713][T11096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 390.070676][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.079006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.294768][T11098] syzkaller0: entered promiscuous mode [ 390.328183][T11098] syzkaller0: entered allmulticast mode [ 390.414421][ T43] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 390.576645][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 390.586595][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.602862][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.611098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.629717][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.671822][ T43] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 390.703828][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.763121][ T43] usb 4-1: config 0 descriptor?? [ 391.076348][T11105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.105225][T11105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.165048][T11106] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1609'. [ 391.204319][ T43] koneplus 0003:1E7D:2D51.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 391.364371][ T24] usb 6-1: USB disconnect, device number 51 [ 392.189302][ T24] usb 4-1: USB disconnect, device number 72 [ 392.255805][T11127] PM: Enabling pm_trace changes system date and time during resume. [ 392.255805][T11127] PM: Correct system time has to be restored manually after resume. [ 392.386728][T11129] netlink: 'syz.3.1617': attribute type 1 has an invalid length. [ 392.524447][ T1157] net_ratelimit: 2 callbacks suppressed [ 392.524468][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.538806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.742042][T11130] bond8: (slave bridge8): making interface the new active one [ 392.773245][T11130] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 392.824252][T11131] macvlan2: entered promiscuous mode [ 392.829605][T11131] macvlan2: entered allmulticast mode [ 392.853951][T11131] bond8: entered promiscuous mode [ 392.859048][T11131] bridge8: entered promiscuous mode [ 392.870802][T11131] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 392.879649][T11131] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 392.896450][T11131] bond8: left promiscuous mode [ 392.901380][T11131] bridge8: left promiscuous mode [ 392.907709][T11138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.916822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.980727][T11136] syzkaller0: entered promiscuous mode [ 392.999665][T11136] syzkaller0: entered allmulticast mode [ 393.201097][T11154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.210877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.282087][ T5901] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 393.306590][ T1220] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 393.324772][T11160] PM: Enabling pm_trace changes system date and time during resume. [ 393.324772][T11160] PM: Correct system time has to be restored manually after resume. [ 393.385086][T11161] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 393.394718][T11161] team0: Port device batadv1 added [ 393.425360][T11161] hub 9-0:1.0: USB hub found [ 393.431884][T11161] hub 9-0:1.0: 1 port detected [ 393.631194][ T1220] usb 5-1: Using ep0 maxpacket: 16 [ 393.639113][ T5901] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 393.650772][ T5901] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 393.669773][ T1220] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.680189][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 393.717982][ T5901] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 393.732931][T11163] syzkaller0: entered promiscuous mode [ 393.738445][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 393.749790][ T5901] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 393.763209][T11163] syzkaller0: entered allmulticast mode [ 393.770224][ T1220] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 393.785682][ T5901] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 393.797287][ T1220] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.821664][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.831393][ T1220] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 393.890515][ T1220] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 393.916833][ T1220] usb 5-1: Manufacturer: syz [ 393.946721][ T1220] usb 5-1: config 0 descriptor?? [ 394.275287][ T5901] ath6kl: Failed to submit usb control message: -71 [ 394.284006][ T5901] ath6kl: unable to send the bmi data to the device: -71 [ 394.291081][ T5901] ath6kl: Unable to send get target info: -71 [ 394.350622][ T5901] ath6kl: Failed to init ath6kl core: -71 [ 394.362210][ T1220] rc_core: IR keymap rc-hauppauge not found [ 394.368149][ T1220] Registered IR keymap rc-empty [ 394.384695][ T5901] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 394.394459][ T1220] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.424959][ T5901] usb 3-1: USB disconnect, device number 75 [ 394.432014][ T1220] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.483953][ T1220] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 394.646412][T11170] SET target dimension over the limit! [ 394.681211][ T1220] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input60 [ 394.762158][ T1220] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.832045][ T1220] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.893227][ T1220] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.912429][ T1220] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.942828][ T1220] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 394.978153][ T1220] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 395.006126][ T1220] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 395.042515][ T1220] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 395.052921][T11177] IPVS: rr: FWM 3 0x00000003 - no destination available [ 395.083017][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.091250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.099889][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.109275][ T1220] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 395.134858][ T1220] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 395.176188][ T1220] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 395.320128][ T1220] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 395.421851][ T1220] usb 5-1: USB disconnect, device number 81 [ 395.467226][T11179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.487974][T11179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.861915][ T1220] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 396.031929][ T1220] usb 5-1: Using ep0 maxpacket: 32 [ 396.042883][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.061881][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.081387][ T1220] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 396.091022][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.109479][ T1220] usb 5-1: config 0 descriptor?? [ 396.252828][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.266426][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.303349][T11183] input: syz0 as /devices/virtual/input/input61 [ 396.561223][ T1220] koneplus 0003:1E7D:2D51.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 396.856101][T11170] netdevsim netdevsim5: Direct firmware load for / [ 396.856101][T11170] failed with error -2 [ 396.866965][T11170] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 396.866965][T11170] [ 397.025344][ T29] audit: type=1326 audit(1772512430.849:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e9f9c799 code=0x7ffc0000 [ 397.050757][T11188] ======================================================= [ 397.050757][T11188] WARNING: The mand mount option has been deprecated and [ 397.050757][T11188] and is ignored by this kernel. Remove the mand [ 397.050757][T11188] option from the mount to silence this warning. [ 397.050757][T11188] ======================================================= [ 397.101819][ T29] audit: type=1326 audit(1772512430.849:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e9f9c799 code=0x7ffc0000 [ 397.147210][T11188] fuse: Bad value for 'fd' [ 397.166730][ T29] audit: type=1326 audit(1772512430.849:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd5e9f9c799 code=0x7ffc0000 [ 397.208642][ T29] audit: type=1326 audit(1772512430.849:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e9f9c799 code=0x7ffc0000 [ 397.235115][ T29] audit: type=1326 audit(1772512430.849:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e9f9c799 code=0x7ffc0000 [ 397.297974][T11196] PM: Enabling pm_trace changes system date and time during resume. [ 397.297974][T11196] PM: Correct system time has to be restored manually after resume. [ 397.322123][ T29] audit: type=1326 audit(1772512430.849:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fd5e9f9c799 code=0x7ffc0000 [ 397.475395][ T29] audit: type=1326 audit(1772512430.849:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e9f9c799 code=0x7ffc0000 [ 397.524857][ T29] audit: type=1326 audit(1772512430.849:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e9f9c799 code=0x7ffc0000 [ 397.547716][ T1220] usb 5-1: USB disconnect, device number 82 [ 397.574104][ T29] audit: type=1326 audit(1772512430.849:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd5e9f9c799 code=0x7ffc0000 [ 397.631075][ T24] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 397.699080][ T29] audit: type=1326 audit(1772512430.849:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11186 comm="syz.1.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e9f9c799 code=0x7ffc0000 [ 397.721971][ C0] net_ratelimit: 12 callbacks suppressed [ 397.721991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.736271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.831862][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 397.846786][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 397.855978][ T24] usb 6-1: config 7 has an invalid interface number: 188 but max is 0 [ 397.864446][ T24] usb 6-1: config 7 has no interface number 0 [ 397.870715][ T24] usb 6-1: config 7 interface 188 has no altsetting 0 [ 397.884789][ T24] usb 6-1: New USB device found, idVendor=12d1, idProduct=0b9f, bcdDevice=5a.df [ 397.907234][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.926891][ T24] usb 6-1: Product: syz [ 397.937709][ T24] usb 6-1: Manufacturer: syz [ 397.942494][ T5917] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 397.960385][ T24] usb 6-1: SerialNumber: syz [ 398.071867][ T5917] usb 3-1: device descriptor read/64, error -71 [ 398.121900][ T1220] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 398.175411][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.186299][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.213959][ T24] uvcvideo 6-1:7.188: Found multiple Units with ID 1 [ 398.231612][ T24] uvcvideo 6-1:7.188: Found UVC 0.00 device syz (12d1:0b9f) [ 398.245865][ T24] uvcvideo 6-1:7.188: No valid video chain found. [ 398.264934][ T24] usb 6-1: USB disconnect, device number 52 [ 398.282285][ T1157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.290558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.303057][ T1220] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.312394][ T5917] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 398.342464][ T1220] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 398.369514][ T1220] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 398.382990][ T1220] usb 5-1: Manufacturer: syz [ 398.394707][ T1220] usb 5-1: config 0 descriptor?? [ 398.405232][ T1220] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 398.491914][ T5917] usb 3-1: device descriptor read/64, error -71 [ 398.602140][ T5917] usb usb3-port1: attempt power cycle [ 398.726704][T11215] ================================================================== [ 398.734897][T11215] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x350 [ 398.742680][T11215] Read of size 8 at addr ffff88802bddea18 by task syz.1.1647/11215 [ 398.750608][T11215] [ 398.753047][T11215] CPU: 0 UID: 0 PID: 11215 Comm: syz.1.1647 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.753126][T11215] Tainted: [L]=SOFTLOCKUP [ 398.753135][T11215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.753151][T11215] Call Trace: [ 398.753161][T11215] [ 398.753172][T11215] dump_stack_lvl+0xe8/0x150 [ 398.753209][T11215] print_report+0xba/0x230 [ 398.753248][T11215] ? dvb_device_open+0xc4/0x350 [ 398.753272][T11215] kasan_report+0x117/0x150 [ 398.753302][T11215] ? dvb_device_open+0xc4/0x350 [ 398.753331][T11215] dvb_device_open+0xc4/0x350 [ 398.753356][T11215] ? do_raw_spin_unlock+0xf5/0x210 [ 398.753382][T11215] chrdev_open+0x4cd/0x5e0 [ 398.753412][T11215] ? __pfx_chrdev_open+0x10/0x10 [ 398.753439][T11215] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 398.753480][T11215] ? __pfx_chrdev_open+0x10/0x10 [ 398.753507][T11215] do_dentry_open+0x785/0x14e0 [ 398.753545][T11215] vfs_open+0x3b/0x340 [ 398.753574][T11215] ? path_openat+0x2df0/0x3860 [ 398.753607][T11215] path_openat+0x2e08/0x3860 [ 398.753642][T11215] ? __pfx_stack_trace_save+0x10/0x10 [ 398.753685][T11215] ? stack_depot_save_flags+0x33/0x810 [ 398.753721][T11215] ? __pfx_path_openat+0x10/0x10 [ 398.753744][T11215] ? __x64_sys_openat+0x138/0x170 [ 398.753776][T11215] ? do_syscall_64+0x14d/0xf80 [ 398.753798][T11215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.753828][T11215] ? __lock_acquire+0x6b5/0x2cf0 [ 398.753863][T11215] do_file_open+0x23e/0x4a0 [ 398.753890][T11215] ? __pfx_do_file_open+0x10/0x10 [ 398.753926][T11215] ? _raw_spin_unlock+0x28/0x50 [ 398.754001][T11215] ? alloc_fd+0x64b/0x6c0 [ 398.754040][T11215] do_sys_openat2+0x113/0x200 [ 398.754074][T11215] ? __pfx_do_sys_openat2+0x10/0x10 [ 398.754106][T11215] ? exc_page_fault+0x6a/0xc0 [ 398.754169][T11215] ? do_user_addr_fault+0xc6f/0x1340 [ 398.754210][T11215] __x64_sys_openat+0x138/0x170 [ 398.754247][T11215] do_syscall_64+0x14d/0xf80 [ 398.754270][T11215] ? trace_irq_disable+0x3b/0x150 [ 398.754303][T11215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.754328][T11215] ? clear_bhb_loop+0x40/0x90 [ 398.754355][T11215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.754379][T11215] RIP: 0033:0x7fd5e9f5cfce [ 398.754402][T11215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 398.754424][T11215] RSP: 002b:00007fd5eaee4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 398.754452][T11215] RAX: ffffffffffffffda RBX: 00007fd5eaee56c0 RCX: 00007fd5e9f5cfce [ 398.754471][T11215] RDX: 0000000000000002 RSI: 00007fd5eaee4c00 RDI: ffffffffffffff9c [ 398.754488][T11215] RBP: 00007fd5eaee4c00 R08: 0000000000000000 R09: 0000000000000000 [ 398.754503][T11215] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 398.754519][T11215] R13: 00007fd5ea216038 R14: 00007fd5ea215fa0 R15: 00007fd5ea33fa48 [ 398.754547][T11215] [ 398.754556][T11215] [ 399.041849][T11215] Allocated by task 10960: [ 399.046342][T11215] kasan_save_track+0x3e/0x80 [ 399.051037][T11215] __kasan_kmalloc+0x93/0xb0 [ 399.055642][T11215] __kmalloc_noprof+0x35c/0x760 [ 399.060525][T11215] __register_sysctl_table+0xba1/0x1340 [ 399.066106][T11215] __addrconf_sysctl_register+0x331/0x4d0 [ 399.071910][T11215] addrconf_sysctl_register+0x168/0x1c0 [ 399.077507][T11215] ipv6_add_dev+0xd26/0x13a0 [ 399.082117][T11215] addrconf_notify+0x771/0x1050 [ 399.086983][T11215] notifier_call_chain+0x1be/0x400 [ 399.092128][T11215] register_netdevice+0x173a/0x1cf0 [ 399.097343][T11215] tun_set_iff+0x844/0xf00 [ 399.101839][T11215] __tun_chr_ioctl+0x7bb/0x1e10 [ 399.106716][T11215] __se_sys_ioctl+0xfc/0x170 [ 399.111319][T11215] do_syscall_64+0x14d/0xf80 [ 399.115925][T11215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.121835][T11215] [ 399.124166][T11215] Freed by task 11087: [ 399.128240][T11215] kasan_save_track+0x3e/0x80 [ 399.132938][T11215] kasan_save_free_info+0x46/0x50 [ 399.137982][T11215] __kasan_slab_free+0x5c/0x80 [ 399.142756][T11215] __rcu_free_sheaf_prepare+0x129/0x290 [ 399.148315][T11215] rcu_free_sheaf+0x31/0x200 [ 399.152914][T11215] rcu_core+0x7cd/0x1070 [ 399.157179][T11215] handle_softirqs+0x22a/0x870 [ 399.161962][T11215] __irq_exit_rcu+0x5f/0x150 [ 399.166581][T11215] irq_exit_rcu+0x9/0x30 [ 399.170845][T11215] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 399.176514][T11215] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.182512][T11215] [ 399.184853][T11215] The buggy address belongs to the object at ffff88802bddea00 [ 399.184853][T11215] which belongs to the cache kmalloc-256 of size 256 [ 399.199003][T11215] The buggy address is located 24 bytes inside of [ 399.199003][T11215] freed 256-byte region [ffff88802bddea00, ffff88802bddeb00) [ 399.212734][T11215] [ 399.215083][T11215] The buggy address belongs to the physical page: [ 399.221575][T11215] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bdde [ 399.230357][T11215] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 399.238902][T11215] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 399.246468][T11215] page_type: f5(slab) [ 399.250468][T11215] raw: 00fff00000000040 ffff88813fea8b40 dead000000000100 dead000000000122 [ 399.259066][T11215] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 399.267662][T11215] head: 00fff00000000040 ffff88813fea8b40 dead000000000100 dead000000000122 [ 399.276343][T11215] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 399.285021][T11215] head: 00fff00000000001 ffffea0000af7781 00000000ffffffff 00000000ffffffff [ 399.293791][T11215] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 399.302469][T11215] page dumped because: kasan: bad access detected [ 399.308917][T11215] page_owner tracks the page as allocated [ 399.314645][T11215] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16064290788, free_ts 0 [ 399.334369][T11215] post_alloc_hook+0x231/0x280 [ 399.339175][T11215] get_page_from_freelist+0x24dc/0x2580 [ 399.344736][T11215] __alloc_frozen_pages_noprof+0x18d/0x380 [ 399.350558][T11215] allocate_slab+0x77/0x660 [ 399.355083][T11215] refill_objects+0x331/0x3c0 [ 399.359784][T11215] __pcs_replace_empty_main+0x2b9/0x620 [ 399.365349][T11215] __kmalloc_cache_noprof+0x392/0x660 [ 399.370739][T11215] bus_add_driver+0x162/0x670 [ 399.375500][T11215] driver_register+0x23a/0x320 [ 399.380441][T11215] usb_register_driver+0x1e4/0x390 [ 399.385615][T11215] do_one_initcall+0x250/0x8d0 [ 399.390398][T11215] do_initcall_level+0x104/0x190 [ 399.395431][T11215] do_initcalls+0x59/0xa0 [ 399.399777][T11215] kernel_init_freeable+0x2a6/0x3e0 [ 399.405014][T11215] kernel_init+0x1d/0x1d0 [ 399.409373][T11215] ret_from_fork+0x51e/0xb90 [ 399.413996][T11215] page_owner free stack trace missing [ 399.419374][T11215] [ 399.421708][T11215] Memory state around the buggy address: [ 399.427403][T11215] ffff88802bdde900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.435478][T11215] ffff88802bdde980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.443597][T11215] >ffff88802bddea00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.451675][T11215] ^ [ 399.456537][T11215] ffff88802bddea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.464609][T11215] ffff88802bddeb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.472686][T11215] ================================================================== [ 399.483880][ T5917] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 399.499439][T11213] syzkaller0: entered promiscuous mode [ 399.505108][T11213] syzkaller0: entered allmulticast mode [ 399.506247][T11215] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 399.506317][T11215] CPU: 0 UID: 0 PID: 11215 Comm: syz.1.1647 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.506390][T11215] Tainted: [L]=SOFTLOCKUP [ 399.506420][T11215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.506460][T11215] Call Trace: [ 399.506484][T11215] [ 399.506512][T11215] vpanic+0x56c/0xa60 [ 399.506621][T11215] ? __pfx_vpanic+0x10/0x10 [ 399.506722][T11215] ? __pfx___schedule+0x10/0x10 [ 399.506833][T11215] panic+0xc5/0xd0 [ 399.506907][T11215] ? __pfx_panic+0x10/0x10 [ 399.506986][T11215] ? preempt_schedule_thunk+0x16/0x30 [ 399.507057][T11215] ? dvb_device_open+0xc4/0x350 [ 399.507120][T11215] check_panic_on_warn+0x89/0xb0 [ 399.507209][T11215] ? dvb_device_open+0xc4/0x350 [ 399.507262][T11215] end_report+0x73/0x180 [ 399.507332][T11215] ? dvb_device_open+0xc4/0x350 [ 399.507378][T11215] kasan_report+0x128/0x150 [ 399.507449][T11215] ? dvb_device_open+0xc4/0x350 [ 399.507511][T11215] dvb_device_open+0xc4/0x350 [ 399.507571][T11215] ? do_raw_spin_unlock+0xf5/0x210 [ 399.507644][T11215] chrdev_open+0x4cd/0x5e0 [ 399.507741][T11215] ? __pfx_chrdev_open+0x10/0x10 [ 399.507805][T11215] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 399.507909][T11215] ? __pfx_chrdev_open+0x10/0x10 [ 399.507981][T11215] do_dentry_open+0x785/0x14e0 [ 399.508110][T11215] vfs_open+0x3b/0x340 [ 399.508205][T11215] ? path_openat+0x2df0/0x3860 [ 399.508267][T11215] path_openat+0x2e08/0x3860 [ 399.508341][T11215] ? __pfx_stack_trace_save+0x10/0x10 [ 399.508397][T11215] ? stack_depot_save_flags+0x33/0x810 [ 399.508479][T11215] ? __pfx_path_openat+0x10/0x10 [ 399.508531][T11215] ? __x64_sys_openat+0x138/0x170 [ 399.508608][T11215] ? do_syscall_64+0x14d/0xf80 [ 399.508660][T11215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.508731][T11215] ? __lock_acquire+0x6b5/0x2cf0 [ 399.508803][T11215] do_file_open+0x23e/0x4a0 [ 399.508881][T11215] ? __pfx_do_file_open+0x10/0x10 [ 399.508965][T11215] ? _raw_spin_unlock+0x28/0x50 [ 399.509036][T11215] ? alloc_fd+0x64b/0x6c0 [ 399.509113][T11215] do_sys_openat2+0x113/0x200 [ 399.509194][T11215] ? __pfx_do_sys_openat2+0x10/0x10 [ 399.509267][T11215] ? exc_page_fault+0x6a/0xc0 [ 399.509349][T11215] ? do_user_addr_fault+0xc6f/0x1340 [ 399.509442][T11215] __x64_sys_openat+0x138/0x170 [ 399.509537][T11215] do_syscall_64+0x14d/0xf80 [ 399.509587][T11215] ? trace_irq_disable+0x3b/0x150 [ 399.509670][T11215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.509729][T11215] ? clear_bhb_loop+0x40/0x90 [ 399.509790][T11215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.509860][T11215] RIP: 0033:0x7fd5e9f5cfce [ 399.509911][T11215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 399.509961][T11215] RSP: 002b:00007fd5eaee4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 399.510029][T11215] RAX: ffffffffffffffda RBX: 00007fd5eaee56c0 RCX: 00007fd5e9f5cfce [ 399.510071][T11215] RDX: 0000000000000002 RSI: 00007fd5eaee4c00 RDI: ffffffffffffff9c [ 399.510112][T11215] RBP: 00007fd5eaee4c00 R08: 0000000000000000 R09: 0000000000000000 [ 399.510154][T11215] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 399.510195][T11215] R13: 00007fd5ea216038 R14: 00007fd5ea215fa0 R15: 00007fd5ea33fa48 [ 399.510265][T11215] [ 399.511266][T11215] Kernel Offset: disabled