last executing test programs: 7.333516201s ago: executing program 0 (id=953): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000200081dc000000000300000002"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x81}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 7.165754096s ago: executing program 3 (id=954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x87) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20000400) r5 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r5, 0x8c5d47e95537ac9b) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="080002002a3c309ee065749552ab1c45551f82992ca221a8dd504bf0604f2db4a2505a404aac59907dd7a634bad063ee26d7a3487ca0", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="33f5defb", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES32=0xee01, @ANYRES32=r2], 0x54, 0x0) futex(&(0x7f000000cffc), 0x5, 0xf2, 0x0, &(0x7f0000048000), 0x21000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff46040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r6, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe6e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/diskstats\x00', 0x0, 0x0) lseek(r8, 0x4, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @remote}], 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000240)=0x4, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) 6.792347322s ago: executing program 4 (id=956): sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x100, 0x5, 0x4, {0x2, @raw_data="e65c2a3b82b47e2d31c4d67e581c486a286493d5917251a779fc90b58546b8fb3ad7f97464748d5f5863a9035a20cae5815fadfe22c76a6ecd657c7df8df34a9f00197b08ea472306ab80d8122e63938a08001750d0f036c3af514c6d2a00284d8fb140e71f4d3573676de713a6da51b4c12c897fea134aa15d9cdce16d6f6726d80b5b1248dac2af2d766299bdd524fa6b58ef1dc2aacfb16c937c4e4bd7706be0787b0d79b5518d4583a2495c1291e00000000000000000000000000000000fbff00"}, 0x5}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) 6.572472943s ago: executing program 4 (id=957): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8c0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 6.326788638s ago: executing program 4 (id=959): r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xfffffffffffffff1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e28, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000006c0)={{0x5, 0x3, 0x3, 0x6, 'syz1\x00', 0x101}, 0x0, [0xa9, 0x8001, 0x7, 0x10, 0x1, 0x8, 0x101, 0x5, 0x7, 0x3, 0x0, 0x1, 0x5, 0x1, 0x10, 0x9, 0xa60, 0x7, 0x9, 0x2, 0x9, 0x7fffffff, 0x0, 0x4, 0x2, 0x4, 0x3b2, 0xffffffffffffffff, 0x7f, 0x200, 0x3, 0x5, 0x5, 0x2, 0x4070000000000000, 0x6, 0xc, 0x2, 0x4, 0xffffffffffffffff, 0x1, 0xffffffffffffc4c0, 0x9, 0x9, 0x4, 0x5, 0x7, 0x5, 0x8, 0x1, 0x3, 0x1586, 0x6, 0x8000000000000001, 0x100000000, 0x4, 0x0, 0x1, 0xbce0, 0x3, 0x78, 0x6, 0x24000, 0x10, 0x7, 0x1000, 0x6, 0x100000001, 0x101, 0x80000000, 0x6, 0x0, 0x800, 0x8, 0x2, 0x3, 0x100, 0xa26, 0x3, 0x3, 0x1, 0x5d65740b, 0x2, 0xc, 0x5, 0x2, 0x8, 0x4, 0x2, 0x6, 0xfffffffffffffffa, 0x8, 0x8001, 0x6, 0x7, 0x8, 0x1, 0x9, 0x9, 0x200, 0x5, 0xff, 0x9, 0x90ca, 0x6, 0xfffffffffffffffd, 0xffffffff, 0x10001, 0x3, 0x2, 0x0, 0x5, 0x1, 0x1, 0x6eef, 0xffff, 0x0, 0x193, 0x3, 0x9, 0x3, 0x6, 0x80000000, 0x1, 0xffff, 0xc6, 0x5ab7, 0x5]}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x18088, 0x80}}}}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x8}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x439, 0x0, 0xfffffffe, {0x0, 0x0, 0xe403, 0x0, 0x5280}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x19}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010100}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x3596}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000844}, 0x8880) 5.063376239s ago: executing program 3 (id=963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 4.861184307s ago: executing program 4 (id=964): syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$midi(0x4, 0x32, &(0x7f00000000c0)={{0x12, 0x1, 0x600, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x1, 0x70, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x29, [@midi_out_jack={0x7, 0x24, 0x3, 0x3, 0xff, 0x0, [], 0x8}, @ms_header={0x7, 0x24, 0x1, 0xfffa, 0x7}]}}}}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}}, 0x14}}, 0x4000040) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4.859875106s ago: executing program 3 (id=965): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073"], 0xdc}}, 0x4004) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508150100", @ANYRES32=r2, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x6e) 4.634924898s ago: executing program 3 (id=967): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r3) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000008000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={0x0}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x53, 0xa033, 0xfffffffb, 0x9, 0x9, 0x8c3, 0x2, 0x1}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc050) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000000080)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xbd, 0x6}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) 4.507588203s ago: executing program 0 (id=968): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x100, 0x5, 0x4, {0x2, @raw_data="e65c2a3b82b47e2d31c4d67e581c486a286493d5917251a779fc90b58546b8fb3ad7f97464748d5f5863a9035a20cae5815fadfe22c76a6ecd657c7df8df34a9f00197b08ea472306ab80d8122e63938a08001750d0f036c3af514c6d2a00284d8fb140e71f4d3573676de713a6da51b4c12c897fea134aa15d9cdce16d6f6726d80b5b1248dac2af2d766299bdd524fa6b58ef1dc2aacfb16c937c4e4bd7706be0787b0d79b5518d4583a2495c1291e00000000000000000000000000000000fbff00"}, 0x5}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) 4.365826301s ago: executing program 0 (id=969): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8c0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 3.891093415s ago: executing program 0 (id=970): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0xf01c, 0x141000) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f0006ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x20042894}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000180)={0x2, @vbi={0x20b4, 0x9, 0x40, 0x50424752, [0x1, 0x3], [0x6a, 0xffff7fff], 0x108}}) syz_emit_ethernet(0x15, &(0x7f0000003ac0)=ANY=[@ANYBLOB="aaaaaa1e060000bbabbbbbbb8100130008b95908fbc797767f41937e60d630ef7d5a5e5c7c8c03ebc8a130e08b0402bcfcf86cc2712eb06250b4af2d0bd678f98fffefd7fafb770b309b1c1517324ac682efc41162784dc2d283ab64117ee0108065c73cf06f46e6c74ee0ed8b232f9c8333c6bb0f0eae23463a8e5d195bffa1adae2ba5fb20bfbe4d6e4bd27cda7416c683aa32fc32811bec"], 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000015c0)={0x0}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000003b80), 0x8e4c0, 0x0) write$nci(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="faff09004b995d1de5012b30a2b025de5f72d41f0ec0090070004079c0109cb5e1961437f8a1bd5522a3ef3f99e92cdc5fe92f66"], 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f00000017c0)={r4, 0x7}) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\x95\\4\x150xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) creat(&(0x7f0000000100)='./file1/../file0\x00', 0x44) r7 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000005c0)=r7, 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r11, &(0x7f00000000c0), 0x12) 3.415094896s ago: executing program 2 (id=972): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000010000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 3.267274009s ago: executing program 4 (id=973): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0)=0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0) close(r4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x19}], 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000003000000e27f00000100000001010000", @ANYBLOB="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", @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000006000000"], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x8, 0x800, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r9) bind$can_j1939(r9, &(0x7f0000000140)={0x1d, r8, 0x2, {0x0, 0xf0, 0x1}, 0x1}, 0x18) 3.266880783s ago: executing program 2 (id=974): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x87) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20000400) r5 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r5, 0x8c5d47e95537ac9b) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="080002002a3c309ee065749552ab1c45551f82992ca221a8dd504bf0604f2db4a2505a404aac59907dd7a634bad063ee26d7a3487ca0", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="33f5defb", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES32=0xee01, @ANYRES32=r2], 0x54, 0x0) futex(&(0x7f000000cffc), 0x5, 0xf2, 0x0, &(0x7f0000048000), 0x21000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r6, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe6e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/diskstats\x00', 0x0, 0x0) lseek(r8, 0x4, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @remote}], 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000240)=0x4, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) 2.861487231s ago: executing program 1 (id=975): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x35d8, 0xc000, 0x7, 0x337}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4046855) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast2, 0x74f2}}, {{0xa, 0x801, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x4c, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'gretap0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000801) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}], 0x2}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/87, 0x2}, {&(0x7f0000000540)=""/87, 0x57}], 0x2}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r7 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x20000000}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="ffa8", 0x2}, {&(0x7f0000000400)="3cd9", 0x2}], 0x2}, 0x40810) 2.591538958s ago: executing program 1 (id=976): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03ef000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x4100000000000000}, 0x0) 2.585098722s ago: executing program 3 (id=977): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073"], 0xdc}}, 0x4004) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe800000000000000000000000000015083f0100", @ANYRES32=r2, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x6e) 1.910878139s ago: executing program 1 (id=978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a600", 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x597e, 0x9, 0x0, {0x5, 0xfffffffffffffffe, 0xbdd6, 0x401, 0x10000, 0x1, 0x9d1f, 0x5, 0x7, 0xa000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x10) r2 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r:'], 0xff) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x6, 0x4) r8 = syz_open_dev$video(&(0x7f0000000180), 0xc407, 0x800) r9 = fsmount(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000380), &(0x7f00000002c0)=r9}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa02000d00000060230000002ea5d4b374266cfc2314fa991f1cbb6a4a4ef2905d6f83545198a443e397b0fe217fbc71636fc78107d3c159353b1aebdab224269287398ba8248c13df5dae5c"], 0x0) write$cgroup_subtree(r9, &(0x7f0000000400)={[{0x0, 'cpuset'}, {0x2d, 'hugetlb'}, {0x2b, 'freezer'}, {0x2b, 'memory'}, {0x2b, 'cpuset'}, {0x2d, 'pids'}, {0x2b, 'hugetlb'}, {0x2d, 'cpuacct'}]}, 0x42) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000040)={0x0, 0x5, 0x1, {0x9, @pix_mp={0x96, 0x1, 0x5eec3288416e45e, 0x2, 0x9, [{0x0, 0x1}, {0xfffffffc, 0x40}, {0x8, 0x49}, {0x1ff}, {0x12f8, 0x5}, {}, {0x3, 0x8}, {0x3, 0x7}], 0x3, 0x5, 0x3, 0x0, 0x5}}, 0x10000}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006080)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0xfff3}, {0xffe7, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x1000, 0x5, 0x81, {0xbe, 0x2, 0x140, 0x7, 0xf018, 0x7fff}, {0x8, 0x0, 0x8, 0x0, 0x401, 0x2e}, 0xf9, 0x199, 0x10}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc858}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0x9}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1001, 0x1, 0x4, 0x3, 0x5}}}}]}, 0x58}}, 0x4000) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40081}, 0x800) 1.824855315s ago: executing program 3 (id=979): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r0, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140094c216b1010000000000000000000000000a28000000000a0101401f2f3aad0a9090e70000000900010073787a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002008300000008000340000000d50800044000000001080006400000000208000140000000130900010073797a3000af59000900020073797a32"], 0x94}}, 0x8000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000700ffffff", @ANYRES8], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r5, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f0102030109021200"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$I2C(0x0, 0x1, 0x402) pwrite64(r6, 0x0, 0x0, 0x26c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000000, &(0x7f0000006680)) sync() 1.585420327s ago: executing program 1 (id=980): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8c0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5f3a, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) (fail_nth: 1) 1.22312162s ago: executing program 0 (id=981): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) r1 = epoll_create1(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mq_notify(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000000}) 995.740935ms ago: executing program 2 (id=982): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 506.474197ms ago: executing program 4 (id=983): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) (async) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) (async) 455.867821ms ago: executing program 1 (id=984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000003f500000000070000040900010073797a300000001288000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000008000340000001", @ANYRESDEC], 0xd0}, 0x1, 0x0, 0x0, 0x1000000}, 0x20050800) 437.368863ms ago: executing program 2 (id=985): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000240)={0x2a, 0xffffffff, 0x4000}, 0xc) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 369.460929ms ago: executing program 1 (id=986): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x8025}, 0x0) syz_usb_disconnect(r0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x22) r4 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r4, 0x900000}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) 308.147538ms ago: executing program 2 (id=987): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000ffffffffffff", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 88.928327ms ago: executing program 2 (id=988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x87) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20000400) r5 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r5, 0x8c5d47e95537ac9b) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="080002002a3c309ee065749552ab1c45551f82992ca221a8dd504bf0604f2db4a2505a404aac59907dd7a634bad063ee26d7a3487ca0", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="33f5defb", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES32=0xee01, @ANYRES32=r2], 0x54, 0x0) futex(&(0x7f000000cffc), 0x5, 0xf2, 0x0, &(0x7f0000048000), 0x21000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff46040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r6, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe6e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) lseek(0xffffffffffffffff, 0x4, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @remote}], 0x20) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000240)=0x4, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) 0s ago: executing program 0 (id=989): syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x6, 0x10, 0x2, {0x8, 0xb, 0x1, 0xa, 0x1, 0x4, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x11, 0x7, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4, 0x6c, 0x5, {0x8, 0x25, 0x1, 0x80, 0xc, 0x12, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x3, 0xc4, {0x8, 0x25, 0x1, 0x80, 0xc, 0xfc}}}}}}}}]}}, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0xc0, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x28, 0x3, 0x7f}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7, 0x7, 0xa2, 0xff, 0x80}, 0x1b, &(0x7f0000000080)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x7, 0x2, 0x3ff, 0x8}]}, 0x1, [{0xf5, &(0x7f0000000100)=@string={0xf5, 0x3, "030edbe6f599730f1eef875b15b4c402380a0bb66215b650bb3c59136321c730121827156d68aca32f2a7440b8120b75e194fe2bb28d8b626ce08d75d561dd10d20e09c0461ea0a2e9822f5e43611ac3b89abbc1e7c706d3073caf6fb69c21b64da2d7605988df13ad03e471266f56d9125b147f643ea95f4dc0d963b07b9e82b6fd3492c9b5f2e07ae6072eda3c234407ca650e528e69e6040652a5a310a80524cba45ab8ab96ee5e120efc1f081eb23d5b44047ddbaee14e2399054f58185edbb7fcb90698f1f3288631a47e423964c233e86473e223b4df9a88f9c989967d2ac033eff5bf2157c045c1c15b0beed402d990"}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x129300) pread64(r0, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r1, &(0x7f0000000280)=@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, 0x80) kernel console output (not intermixed with test programs): queue, screwing up backlog [ 262.760035][ T5821] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 262.931024][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 262.945396][ T5821] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.958863][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.990350][ T5821] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 262.999466][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.073180][ T5821] usbhid 1-1:128.0: couldn't find an input interrupt endpoint [ 263.170615][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.450825][ T5821] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 263.614397][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 263.628819][ T5821] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 263.638384][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.662658][ T5821] usb 2-1: Product: syz [ 263.674956][ T5821] usb 2-1: Manufacturer: syz [ 263.689139][ T5821] usb 2-1: SerialNumber: syz [ 263.712778][ T5821] usb 2-1: config 0 descriptor?? [ 263.739197][ T5821] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 263.981013][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.188860][ T5821] usb 2-1: clie_3_5_startup: get interface number bad return length: 0 [ 264.241311][ T5821] visor 2-1:0.0: probe with driver visor failed with error -5 [ 264.433721][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.455657][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.483187][ T5821] usb 2-1: USB disconnect, device number 63 [ 264.514526][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.590583][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.799451][ T5910] usb 1-1: USB disconnect, device number 48 [ 265.310599][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.378802][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.595261][ T8236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.649'. [ 265.674681][ T8236] bridge0: entered promiscuous mode [ 265.848387][ T8243] loop2: detected capacity change from 0 to 7 [ 265.859368][ T8243] loop2: [POWERTEC] p1 p2 [ 265.864004][ T5919] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 265.885037][ T8243] loop2: p1 start 1764718181 is beyond EOD, truncated [ 265.892575][ T8243] loop2: p2 size 786432 extends beyond EOD, truncated [ 265.955188][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 266.079650][ T5931] net_ratelimit: 2 callbacks suppressed [ 266.079666][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.115224][ T5919] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 266.125706][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 266.130656][ T5821] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 266.280252][ T5821] usb 1-1: device descriptor read/64, error -71 [ 266.528775][ T5919] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 266.538867][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 266.549015][ T5919] usb 4-1: Product: syz [ 266.555782][ T5919] usb 4-1: Manufacturer: syz [ 266.563540][ T5919] usb 4-1: SerialNumber: syz [ 266.600827][ T5919] usb 4-1: config 0 descriptor?? [ 266.684785][ T5919] usb 4-1: selecting invalid altsetting 0 [ 266.785745][ T5821] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 266.897637][ T8234] netlink: 'syz.3.647': attribute type 23 has an invalid length. [ 266.948255][ T5919] usb 4-1: USB disconnect, device number 51 [ 266.961277][ T5821] usb 1-1: device descriptor read/64, error -71 [ 267.102956][ T5821] usb usb1-port1: attempt power cycle [ 267.119586][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.738448][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.902394][ T5821] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 267.930789][ T5821] usb 1-1: device descriptor read/8, error -71 [ 268.120489][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.280236][ T5821] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 268.330990][ T5821] usb 1-1: device descriptor read/8, error -71 [ 268.440609][ T5821] usb usb1-port1: unable to enumerate USB device [ 268.761790][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.946031][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.213340][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.555721][ T8298] loop2: detected capacity change from 0 to 7 [ 269.578300][ T5850] loop2: [POWERTEC] p1 p2 [ 269.584082][ T5850] loop2: p1 start 1764718181 is beyond EOD, truncated [ 269.594491][ T5850] loop2: p2 size 786432 extends beyond EOD, truncated [ 269.618060][ T8298] loop2: [POWERTEC] p1 p2 [ 269.623127][ T8298] loop2: p1 start 1764718181 is beyond EOD, truncated [ 269.630796][ T8298] loop2: p2 size 786432 extends beyond EOD, truncated [ 269.673063][ T5196] loop2: [POWERTEC] p1 p2 [ 269.677676][ T5196] loop2: p1 start 1764718181 is beyond EOD, truncated [ 269.691871][ T5196] loop2: p2 size 786432 extends beyond EOD, truncated [ 269.789311][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 269.898784][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 270.008809][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 270.034753][ T5910] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 270.246985][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.258244][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.319167][ T5910] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.339716][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.431172][ T5910] usb 5-1: config 0 descriptor?? [ 270.505493][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.682489][ T8300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.720098][ T796] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 270.721050][ T8300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.781539][ T8300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.817157][ T8300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.867638][ T8300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.890459][ T8300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.952142][ T796] usb 2-1: Using ep0 maxpacket: 32 [ 270.980259][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 270.986332][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 270.997371][ T796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.015061][ T796] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 271.024573][ T5910] usb 5-1: USB disconnect, device number 63 [ 271.038968][ T796] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 271.057162][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.065485][ T796] usb 2-1: Product: syz [ 271.071839][ T796] usb 2-1: Manufacturer: syz [ 271.078986][ T796] usb 2-1: SerialNumber: syz [ 271.099144][ T796] usb 2-1: config 0 descriptor?? [ 271.760168][ T5910] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 271.810273][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.818551][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.942426][ T5910] usb 5-1: device descriptor read/64, error -71 [ 272.206981][ T5910] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 272.410982][ T5910] usb 5-1: device descriptor read/64, error -71 [ 272.531402][ T5910] usb usb5-port1: attempt power cycle [ 272.590211][ T796] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 272.683604][ T5821] usb 2-1: USB disconnect, device number 64 [ 272.778475][ T796] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 272.798139][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.848619][ T796] usb 1-1: config 0 descriptor?? [ 272.881514][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.897472][ T8341] Invalid argument reading file caps for ./file0 [ 272.937447][ T8343] loop2: detected capacity change from 0 to 7 [ 272.998219][ T5850] loop2: [POWERTEC] p1 p2 [ 273.014906][ T5850] loop2: p1 start 1764718181 is beyond EOD, truncated [ 273.040455][ T5850] loop2: p2 size 786432 extends beyond EOD, truncated [ 273.103295][ T8339] syzkaller1: entered promiscuous mode [ 273.108887][ T8339] syzkaller1: entered allmulticast mode [ 273.115521][ T8343] loop2: [POWERTEC] p1 p2 [ 273.155840][ T796] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 273.165298][ T8343] loop2: p1 start 1764718181 is beyond EOD, truncated [ 273.182379][ T8343] loop2: p2 size 786432 extends beyond EOD, truncated [ 273.329850][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 273.401203][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.419056][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 273.500724][ T5910] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 273.547125][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.592265][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.641156][ T5910] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 273.679531][ T5910] usb 5-1: config 0 has an invalid interface number: 81 but max is 2 [ 273.698364][ T796] [drm:udl_init] *ERROR* Selecting channel failed [ 273.716114][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.767583][ T5910] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 273.782812][ T796] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 273.789779][ T796] [drm] Initialized udl on minor 2 [ 273.805430][ T5910] usb 5-1: config 0 has no interface number 0 [ 274.050355][ T5910] usb 5-1: config 0 interface 81 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.075949][ T796] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 274.112470][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.118469][ T5910] usb 5-1: config 0 interface 81 has no altsetting 0 [ 274.170588][ T796] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 274.239662][ T5910] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.7a [ 274.274819][ T5905] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 274.292866][ T796] usb 1-1: USB disconnect, device number 53 [ 274.299117][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.324352][ T5905] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 274.356337][ T5910] usb 5-1: config 0 descriptor?? [ 274.680849][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.840923][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.165993][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.219657][ T8376] bond2 (unregistering): Released all slaves [ 275.270192][ T5931] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 275.350174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 275.387704][ T8381] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.687'. [ 275.476378][ T8381] netlink: Unknown conntrack attr (type=14828, max=9) [ 275.487816][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short [ 275.537280][ T5931] usb 2-1: too many configurations: 124, using maximum allowed: 8 [ 275.567122][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 275.599496][ T5931] usb 2-1: can't read configurations, error -71 [ 275.808236][ T8388] raw_sendmsg: syz.0.689 forgot to set AF_INET. Fix it! [ 276.239504][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.276568][ T5910] usb 5-1: string descriptor 0 read error: -71 [ 276.346562][ T5910] cdc_ether 5-1:0.81: skipping garbage [ 276.366871][ T5910] cdc_ether 5-1:0.81: skipping garbage [ 276.379081][ T5910] usb 5-1: bad CDC descriptors [ 276.391354][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 276.401811][ T5910] usb 5-1: unsupported MDLM descriptors [ 276.732764][ T5910] usb 5-1: USB disconnect, device number 67 [ 276.743197][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 276.780106][ T5931] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 276.822965][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.852320][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.870281][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.904632][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.960583][ T10] usb 1-1: config 0 descriptor?? [ 276.980399][ T5931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.008314][ T10] hub 1-1:0.0: USB hub found [ 277.019733][ T5931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.039627][ T5931] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 277.049008][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 277.091845][ T5931] usb 2-1: SerialNumber: syz [ 277.234375][ T5910] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 277.249725][ T10] hub 1-1:0.0: 1 port detected [ 277.260046][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.356867][ T5931] usb 2-1: 0:2 : does not exist [ 277.452635][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.464056][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.486116][ T5910] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 277.495764][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 277.510845][ T5910] usb 4-1: SerialNumber: syz [ 277.700609][ T5931] usb 2-1: USB disconnect, device number 66 [ 277.835028][ T5910] usb 4-1: 0:2 : does not exist [ 277.865342][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.881509][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.049224][ T5910] usb 4-1: USB disconnect, device number 52 [ 278.172555][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.272586][ T10] hub 1-1:0.0: activate --> -90 [ 278.321803][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.520560][ T1094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.754833][ T8416] fuse: Invalid uid '00000000000000000000003' [ 279.280232][ T5931] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 279.415577][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.450818][ T29] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 279.460027][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 279.467988][ T5931] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 279.477367][ T5931] usb 2-1: config 0 has no interface number 0 [ 279.484026][ T5931] usb 2-1: config 0 interface 12 has no altsetting 0 [ 279.581748][ T5931] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 279.598553][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.624707][ T5931] usb 2-1: Product: syz [ 279.636919][ T5931] usb 2-1: Manufacturer: syz [ 279.642048][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 279.652786][ T29] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 279.662517][ T29] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 279.673716][ T5931] usb 2-1: SerialNumber: syz [ 279.691036][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 279.701245][ T5931] usb 2-1: config 0 descriptor?? [ 279.723546][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 279.740831][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 279.750797][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 279.766196][ T29] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 279.894534][ T8429] @: renamed from veth0_vlan (while UP) [ 279.929042][ T8430] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 279.952138][ T5892] usb 1-1: USB disconnect, device number 54 [ 280.056753][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.114264][ T29] usb 5-1: config 0 descriptor?? [ 280.331669][ T29] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 280.376741][ T29] usb 5-1: USB disconnect, device number 68 [ 280.392194][ T29] usblp0: removed [ 280.463131][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.473068][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.483487][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.498603][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.550937][ T8434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 280.559135][ T8434] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 280.591198][ T8434] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.597384][ T8434] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 280.633313][ T8434] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.639529][ T8434] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 280.650740][ T8434] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 280.656935][ T8434] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 280.722014][ T8434] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 280.729430][ T8434] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 280.747933][ T8434] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 280.986233][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.040156][ T5892] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 281.210118][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 281.231258][ T5892] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.255405][ T5892] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.278570][ T5892] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.290545][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.311840][ T5892] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.340057][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.373237][ T5892] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 281.408039][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.446771][ T5892] usb 5-1: config 0 descriptor?? [ 281.610248][ T8441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.704'. [ 281.619384][ T8441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.704'. [ 281.659911][ T5892] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 281.724854][ T8443] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 281.982122][ T5931] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 282.018523][ T5931] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 282.045526][ T5931] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 282.080213][ T5931] f81534 2-1:0.12: probe with driver f81534 failed with error -32 [ 282.143224][ T5931] usb 2-1: USB disconnect, device number 67 [ 282.226942][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.254881][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.288544][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.360182][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 282.370705][ T8444] net_ratelimit: 720 callbacks suppressed [ 282.370729][ T8444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.395758][ T8444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.419897][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.430139][ T8444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.439467][ T5910] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 282.459277][ T8444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.470432][ T8455] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 282.478205][ T8455] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 282.486090][ T8455] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 282.511899][ T8455] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 282.526877][ T8444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.544661][ T8455] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 282.556843][ T8444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.652500][ T8444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.661245][ T8455] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 282.667303][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.683865][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 282.690112][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 282.692822][ T8455] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 282.696632][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 282.712433][ T8455] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 282.720642][ T8444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.730661][ T8444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.740260][ T5910] usb 4-1: device descriptor read/64, error -71 [ 282.760179][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 282.768752][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 282.798262][ T8455] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 282.830107][ T8455] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 282.980256][ T5910] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 283.047742][ T5931] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 283.120075][ T5910] usb 4-1: device descriptor read/64, error -71 [ 283.211446][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 283.226547][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short [ 283.240577][ T5910] usb usb4-port1: attempt power cycle [ 283.260786][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 283.286777][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 283.309813][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 283.330165][ T5931] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 283.354660][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 283.377583][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 283.404676][ T5931] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 283.424225][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.443082][ T5931] usb 2-1: Product: syz [ 283.452351][ T5931] usb 2-1: Manufacturer: syz [ 283.465132][ T5931] usb 2-1: SerialNumber: syz [ 283.481238][ T5931] usb 2-1: config 0 descriptor?? [ 283.489682][ T8462] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 283.550972][ T5821] usb 5-1: USB disconnect, device number 69 [ 283.557927][ T5931] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.605138][ T5821] usblp0: removed [ 283.662382][ T5910] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 283.693670][ T5910] usb 4-1: device descriptor read/8, error -71 [ 283.800178][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 283.829255][ T5931] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 283.874648][ T5931] usb 2-1: USB disconnect, device number 68 [ 283.950062][ T5910] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 283.964597][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.010742][ T5910] usb 4-1: device descriptor read/8, error -71 [ 284.070098][ T5821] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 284.119484][ T8469] cgroup: fork rejected by pids controller in /syz0 [ 284.137867][ T5910] usb usb4-port1: unable to enumerate USB device [ 284.176404][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.187493][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.263177][ T5821] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.274861][ T5821] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.318297][ T5821] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 284.330985][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 284.339550][ T5821] usb 5-1: SerialNumber: syz [ 284.440931][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 284.588249][ T5821] usb 5-1: 0:2 : does not exist [ 284.761084][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 284.767399][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 284.775335][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 284.841263][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 284.848549][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.713'. [ 284.900750][ T8585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.921384][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.939057][ T5821] usb 5-1: USB disconnect, device number 70 [ 285.002922][ T8585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.130043][ T10] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 285.281326][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.377490][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.539714][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.673307][ T8597] input: syz0 as /devices/virtual/input/input18 [ 285.844129][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.855588][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.865347][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.874505][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.883379][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.950321][ T5821] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 286.134171][ T5821] usb 2-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 286.145075][ T5821] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 286.166579][ T5821] usb 2-1: config 1 has no interface number 0 [ 286.190069][ T5821] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.235872][ T43] bridge_slave_1: left allmulticast mode [ 286.244216][ T43] bridge_slave_1: left promiscuous mode [ 286.254756][ T5821] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.264642][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.273394][ T5821] usb 2-1: Product: syz [ 286.276104][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.285381][ T5821] usb 2-1: Manufacturer: syz [ 286.295303][ T5821] usb 2-1: SerialNumber: syz [ 286.312181][ T43] bridge_slave_0: left allmulticast mode [ 286.340879][ T5821] cdc_ncm 2-1:1.1: skipping garbage [ 286.348099][ T5821] usb 2-1: selecting invalid altsetting 1 [ 286.354214][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 286.366657][ T43] bridge_slave_0: left promiscuous mode [ 286.382275][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.532539][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.546291][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.569867][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 286.595703][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 286.654472][ T10] usb 4-1: SerialNumber: syz [ 286.900822][ T10] usb 4-1: 0:2 : does not exist [ 286.920190][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 286.950793][ T8595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.100366][ T10] usb 4-1: USB disconnect, device number 58 [ 287.119620][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.140890][ T5821] cdc_ncm 2-1:1.1: SET_CRC_MODE failed [ 287.161971][ T5821] usb 2-1: selecting invalid altsetting 1 [ 287.167854][ T5821] cdc_ncm 2-1:1.1: bind() failure [ 287.185870][ T43] bond_slave_0: left promiscuous mode [ 287.207211][ T5821] usb 2-1: USB disconnect, device number 69 [ 287.213904][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.235421][ T43] bond_slave_1: left promiscuous mode [ 287.266942][ T43] bond0 (unregistering): Released all slaves [ 287.302363][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.873010][ T8616] fuse: Bad value for 'fd' [ 287.978659][ T5147] Bluetooth: hci4: command tx timeout [ 288.031310][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 288.077576][ T8615] ip6gretap0: entered promiscuous mode [ 288.282712][ T5919] net_ratelimit: 312 callbacks suppressed [ 288.282730][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.627294][ T5919] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 288.960186][ T5931] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 289.031872][ T8602] chnl_net:caif_netlink_parms(): no params data found [ 289.140481][ T5919] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.149162][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.166725][ T43] hsr_slave_0: left promiscuous mode [ 289.191354][ T43] hsr_slave_1: left promiscuous mode [ 289.211753][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 289.228111][ T5919] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.229182][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.309389][ T5919] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 289.320357][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.331346][ T5931] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.349829][ T5931] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 289.349867][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.377536][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.397166][ T5931] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.406723][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.421487][ T5919] usb 2-1: Product: syz [ 289.425730][ T5919] usb 2-1: Manufacturer: syz [ 289.441808][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.494265][ T5919] cdc_wdm 2-1:1.0: skipping garbage [ 289.499564][ T5919] cdc_wdm 2-1:1.0: skipping garbage [ 289.515257][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.525613][ T8629] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 289.555254][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.594201][ T5919] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 289.603623][ T5931] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.647772][ T43] veth1_macvtap: left promiscuous mode [ 289.710065][ T43] veth0_macvtap: left promiscuous mode [ 289.715873][ T43] veth1_vlan: left promiscuous mode [ 289.727974][ T8619] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 289.880727][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.904332][ T5931] usb 5-1: USB disconnect, device number 71 [ 289.995741][ T43] veth0_vlan: left promiscuous mode [ 290.049157][ T5147] Bluetooth: hci4: command tx timeout [ 290.361540][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.730146][ T5931] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 290.898238][ T43] team0 (unregistering): Port device team_slave_1 removed [ 290.919173][ T43] team0 (unregistering): Port device team_slave_0 removed [ 290.944503][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.955519][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.984720][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.034724][ T5931] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.048641][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.062431][ T5931] usb 4-1: config 0 descriptor?? [ 291.069481][ T5821] usb 2-1: USB disconnect, device number 70 [ 291.402821][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.524266][ T5931] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 291.605577][ T8602] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.607373][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.607587][ T8602] bridge_slave_0: entered allmulticast mode [ 291.635801][ T8602] bridge_slave_0: entered promiscuous mode [ 291.639101][ T8602] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.639280][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.639439][ T8602] bridge_slave_1: entered allmulticast mode [ 291.644361][ T8602] bridge_slave_1: entered promiscuous mode [ 291.732512][ T8602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.737771][ T8602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.781129][ T5910] usb 4-1: USB disconnect, device number 59 [ 291.974938][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.996904][ T8662] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1213556182 (19416898912 ns) > initial count (4369324544 ns). Using initial count to start timer. [ 292.058278][ T8602] team0: Port device team_slave_0 added [ 292.098524][ T8602] team0: Port device team_slave_1 added [ 292.120274][ T5147] Bluetooth: hci4: command tx timeout [ 292.184631][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.184664][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.184692][ T8602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.262206][ T8602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.269327][ T8602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.304897][ T8602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.440174][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.730051][ T5919] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 292.776823][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 292.776843][ T30] audit: type=1326 audit(1774906571.272:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.3.731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f910fd9c819 code=0x0 [ 292.834324][ T8602] hsr_slave_0: entered promiscuous mode [ 292.862356][ T8602] hsr_slave_1: entered promiscuous mode [ 292.870030][ T5919] usb 5-1: device descriptor read/64, error -71 [ 292.920509][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.130119][ T5919] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 293.160316][ T5821] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 293.200085][ T5910] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 293.270880][ T5919] usb 5-1: device descriptor read/64, error -71 [ 293.331822][ T5821] usb 4-1: config index 0 descriptor too short (expected 42047, got 18) [ 293.340890][ T5910] usb 2-1: device descriptor read/64, error -71 [ 293.350827][ T5821] usb 4-1: config 169 has too many interfaces: 227, using maximum allowed: 32 [ 293.360083][ T5821] usb 4-1: config 169 has an invalid descriptor of length 116, skipping remainder of the config [ 293.371198][ T5821] usb 4-1: config 169 has 0 interfaces, different from the descriptor's value: 227 [ 293.384764][ T5821] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 293.394326][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.402965][ T5821] usb 4-1: Product: syz [ 293.408021][ T5919] usb usb5-port1: attempt power cycle [ 293.408540][ T5821] usb 4-1: Manufacturer: syz [ 293.418575][ T5821] usb 4-1: SerialNumber: syz [ 293.492157][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.590558][ T5910] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 293.618830][ T30] audit: type=1326 audit(1774906572.112:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189e19c819 code=0x7ffc0000 [ 293.689182][ T30] audit: type=1326 audit(1774906572.112:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189e19c819 code=0x7ffc0000 [ 293.749126][ T5910] usb 2-1: device descriptor read/64, error -71 [ 293.762307][ T30] audit: type=1326 audit(1774906572.152:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f189e19c819 code=0x7ffc0000 [ 293.791396][ T5919] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 293.802670][ T30] audit: type=1326 audit(1774906572.152:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189e19c819 code=0x7ffc0000 [ 293.830435][ T8680] bond0: (slave dummy0): Releasing backup interface [ 293.837205][ T30] audit: type=1326 audit(1774906572.152:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189e19c819 code=0x7ffc0000 [ 293.837289][ T5919] usb 5-1: device descriptor read/8, error -71 [ 293.869534][ T30] audit: type=1326 audit(1774906572.152:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f189e19c819 code=0x7ffc0000 [ 293.894788][ T5910] usb usb2-port1: attempt power cycle [ 293.902409][ T30] audit: type=1326 audit(1774906572.152:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189e19c819 code=0x7ffc0000 [ 293.925013][ T30] audit: type=1326 audit(1774906572.152:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f189e19c819 code=0x7ffc0000 [ 293.980649][ T30] audit: type=1326 audit(1774906572.152:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f189e19c819 code=0x7ffc0000 [ 294.100041][ T5919] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 294.130690][ T5919] usb 5-1: device descriptor read/8, error -71 [ 294.144007][ T8602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.156932][ T8602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.176088][ T8602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.189393][ T8602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.200113][ T5147] Bluetooth: hci4: command tx timeout [ 294.240827][ T5910] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 294.247741][ T5919] usb usb5-port1: unable to enumerate USB device [ 294.263422][ T5910] usb 2-1: device descriptor read/8, error -71 [ 294.364084][ T8602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.452376][ T8602] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.472845][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.480293][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.512012][ T5910] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 294.539714][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.547001][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.561675][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.572893][ T5910] usb 2-1: device descriptor read/8, error -71 [ 294.597099][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.615153][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.690504][ T5910] usb usb2-port1: unable to enumerate USB device [ 294.719879][ T8602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.787539][ T8602] veth0_vlan: entered promiscuous mode [ 294.805285][ T8602] veth1_vlan: entered promiscuous mode [ 294.856901][ T8602] veth0_macvtap: entered promiscuous mode [ 294.869597][ T8602] veth1_macvtap: entered promiscuous mode [ 294.903684][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.923166][ T8602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.941352][ T1094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.952556][ T1094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.976156][ T1094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.994541][ T1094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.097025][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.122320][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.161227][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.181727][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.195286][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.649161][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.715016][ T5821] usb 4-1: USB disconnect, device number 60 [ 295.966209][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.333166][ T8759] loop2: detected capacity change from 0 to 7 [ 296.350052][ T5910] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 296.361139][ T5919] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 296.381180][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.386081][ T8759] loop2: [POWERTEC] p1 p2 [ 296.406051][ T8759] loop2: p1 start 1764718181 is beyond EOD, truncated [ 296.426980][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.443213][ T8759] loop2: p2 size 786432 extends beyond EOD, truncated [ 296.531395][ T5919] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 296.535918][ T5910] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 296.568497][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.610594][ T5910] usb 2-1: config 0 has no interface number 0 [ 296.650244][ T5910] usb 2-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 296.664243][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 296.679146][ T5910] usb 2-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.710800][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.762441][ T5910] usb 2-1: config 0 interface 41 has no altsetting 0 [ 296.781724][ T5910] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 296.825970][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.880187][ T5905] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 296.999362][ T8775] validate_nla: 44 callbacks suppressed [ 296.999392][ T8775] netlink: 'syz.4.746': attribute type 13 has an invalid length. [ 297.026273][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.063795][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.085514][ T5910] usb 2-1: Product: syz [ 297.089759][ T5910] usb 2-1: Manufacturer: syz [ 297.164896][ T5910] usb 2-1: SerialNumber: syz [ 297.181007][ T918] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 297.187989][ T5905] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.208988][ T5910] usb 2-1: config 0 descriptor?? [ 297.232877][ T5905] usb 4-1: config 0 has no interface number 0 [ 297.239168][ T5905] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.264703][ T5910] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 297.311832][ T5905] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.328838][ T5905] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 297.357720][ T5905] usb 4-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 297.381959][ T5919] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 297.433928][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.450195][ T918] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 297.576991][ T5905] usb 4-1: config 0 descriptor?? [ 297.730211][ T918] usb 1-1: Using ep0 maxpacket: 32 [ 297.750589][ T918] usb 1-1: unable to get BOS descriptor or descriptor too short [ 297.771149][ T918] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2031, setting to 1024 [ 297.800875][ T918] usb 1-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 297.818715][ T918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.834710][ T918] usb 1-1: Product: syz [ 297.857034][ T918] usb 1-1: Manufacturer: syz [ 297.865055][ T918] usb 1-1: SerialNumber: syz [ 298.017278][ T8767] netlink: 104 bytes leftover after parsing attributes in process `syz.3.744'. [ 298.036681][ T5905] holtek_mouse 0003:04D9:A0C2.000A: unknown main item tag 0x0 [ 298.074893][ T5905] holtek_mouse 0003:04D9:A0C2.000A: unknown main item tag 0x0 [ 298.094275][ T5905] holtek_mouse 0003:04D9:A0C2.000A: unknown main item tag 0x0 [ 298.111865][ T5905] holtek_mouse 0003:04D9:A0C2.000A: unknown main item tag 0x0 [ 298.140120][ T5905] holtek_mouse 0003:04D9:A0C2.000A: unknown main item tag 0x0 [ 298.153015][ T5905] holtek_mouse 0003:04D9:A0C2.000A: unknown main item tag 0x0 [ 298.169722][ T5905] holtek_mouse 0003:04D9:A0C2.000A: unknown main item tag 0x0 [ 298.198078][ T5905] holtek_mouse 0003:04D9:A0C2.000A: unknown main item tag 0x0 [ 298.221322][ T5905] holtek_mouse 0003:04D9:A0C2.000A: unknown main item tag 0x0 [ 298.237368][ T5905] holtek_mouse 0003:04D9:A0C2.000A: unknown main item tag 0x0 [ 298.269506][ T5905] holtek_mouse 0003:04D9:A0C2.000A: hidraw0: USB HID v0.03 Device [HID 04d9:a0c2] on usb-dummy_hcd.3-1/input1 [ 298.355041][ T5905] usb 4-1: USB disconnect, device number 61 [ 298.677121][ T8803] netlink: 104 bytes leftover after parsing attributes in process `syz.2.751'. [ 298.760651][ T5919] net_ratelimit: 2 callbacks suppressed [ 298.760670][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.121963][ T796] usb 2-1: USB disconnect, device number 75 [ 299.800637][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.040900][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.167865][ T918] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 300.175545][ T918] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 300.219051][ T918] usb 1-1: USB disconnect, device number 56 [ 300.263334][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.840905][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.921618][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.880330][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.840704][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.920712][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.080575][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.300619][ T5196] udevd[5196]: worker [5945] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 303.960334][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.000821][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.051652][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.120620][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.682523][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.696307][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.081044][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.325348][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.120742][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.601991][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.161014][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.201049][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.360857][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.242424][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.280558][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.442951][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.320810][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.400632][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.360882][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.369151][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.400349][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.440343][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.448615][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.480652][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.489237][ T1094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.564672][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.571176][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.577651][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.520998][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.560680][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.120492][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.600347][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.613483][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.640993][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.684146][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.321138][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.640324][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.720559][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.761381][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.160675][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.801055][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.691755][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.840798][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.880432][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.920273][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.080713][ T1094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.889479][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.958110][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 330.013472][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.168555][ T796] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 330.343968][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 330.363577][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.382931][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.412728][ T5919] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 330.420394][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.420495][ T796] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 330.420523][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.819489][ T796] usb 5-1: config 0 descriptor?? [ 330.840436][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 330.846208][ T796] hub 5-1:0.0: USB hub found [ 330.856377][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.869865][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.915235][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 330.954016][ T5919] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 330.976090][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.009698][ T5919] usb 4-1: config 0 descriptor?? [ 331.053991][ T796] hub 5-1:0.0: 1 port detected [ 331.090480][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.047672][ T5905] hub 5-1:0.0: activate --> -90 [ 332.120403][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.940788][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.063611][ T8852] netlink: 'syz.2.760': attribute type 13 has an invalid length. [ 333.247773][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.498487][ T5905] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 333.742392][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 333.842766][ T5905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.906010][ T5905] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 333.927487][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 333.940018][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.984369][ T5905] usb 1-1: Product: syz [ 333.988880][ T5905] usb 1-1: Manufacturer: syz [ 334.133486][ T5919] usb 4-1: USB disconnect, device number 62 [ 334.176653][ T5905] usb 1-1: SerialNumber: syz [ 334.210014][ T5905] usb 1-1: config 0 descriptor?? [ 334.232352][ T5905] usb 1-1: bad CDC descriptors [ 334.248687][ T5905] usb 1-1: unsupported MDLM descriptors [ 334.280564][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.662971][ T5910] usb 5-1: USB disconnect, device number 76 [ 334.731702][ T5919] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 334.841318][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.950367][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 335.081096][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.130095][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.179977][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 335.250920][ T5919] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 335.310441][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.328872][ T8872] loop2: detected capacity change from 0 to 7 [ 335.335847][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.364347][ T5850] loop2: [POWERTEC] p1 p2 [ 335.386522][ T5850] loop2: p1 start 1764718181 is beyond EOD, truncated [ 335.392365][ T5919] usb 4-1: config 0 descriptor?? [ 335.423553][ T5850] loop2: p2 size 786432 extends beyond EOD, truncated [ 335.455287][ T8872] loop2: [POWERTEC] p1 p2 [ 335.462328][ T8872] loop2: p1 start 1764718181 is beyond EOD, truncated [ 335.472559][ T8872] loop2: p2 size 786432 extends beyond EOD, truncated [ 335.482487][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.841645][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 335.885242][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.894862][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.955461][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 335.967172][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.406595][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.544406][ T5905] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 336.670888][ T5910] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 336.684862][ T5905] usb 5-1: device descriptor read/64, error -71 [ 336.860138][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 336.868655][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.880810][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.906289][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 336.943875][ T5910] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 336.953362][ T5905] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 336.983438][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.022047][ T5910] usb 2-1: config 0 descriptor?? [ 337.090088][ T5905] usb 5-1: device descriptor read/64, error -71 [ 337.202215][ T5905] usb usb5-port1: attempt power cycle [ 337.263511][ T918] usb 1-1: USB disconnect, device number 57 [ 337.490728][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.540069][ T5905] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 337.561249][ T5905] usb 5-1: device descriptor read/8, error -71 [ 337.749146][ T918] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 337.810041][ T5905] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 337.840857][ T5905] usb 5-1: device descriptor read/8, error -71 [ 337.912226][ T918] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 337.924743][ T918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.943372][ T918] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 337.952248][ T5905] usb usb5-port1: unable to enumerate USB device [ 337.986364][ T918] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 338.005877][ T918] usb 1-1: Manufacturer: syz [ 338.028330][ T918] usb 1-1: config 0 descriptor?? [ 338.190144][ T918] rc_core: IR keymap rc-hauppauge not found [ 338.196320][ T918] Registered IR keymap rc-empty [ 338.216889][ T918] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 338.253346][ T8886] netlink: 'syz.0.771': attribute type 41 has an invalid length. [ 338.261872][ T918] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 338.294971][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 338.302786][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 338.313035][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 338.341787][ T918] usb 1-1: USB disconnect, device number 58 [ 338.426607][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 338.438105][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 338.472573][ T5919] usb 4-1: USB disconnect, device number 63 [ 338.520232][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.642850][ T8890] input: syz0 as /devices/virtual/input/input20 [ 338.963263][ T8892] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 338.987556][ T8892] bond1 (unregistering): Released all slaves [ 339.000321][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.512389][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 339.562510][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.925051][ T8911] loop2: detected capacity change from 0 to 7 [ 339.955400][ T8911] loop2: [POWERTEC] p1 p2 [ 339.961167][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.993602][ T8911] loop2: p1 start 1764718181 is beyond EOD, truncated [ 340.070245][ T8911] loop2: p2 size 786432 extends beyond EOD, truncated [ 340.144785][ T5910] usbhid 2-1:0.0: can't add hid device: -71 [ 340.151196][ T5910] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 340.214728][ T5919] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 340.244566][ T5910] usb 2-1: USB disconnect, device number 76 [ 340.273129][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 340.410284][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 340.452014][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.527656][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.612063][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.622579][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 340.657762][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.688729][ T5919] usb 4-1: config 0 descriptor?? [ 340.801556][ T5919] hub 4-1:0.0: USB hub found [ 340.980902][ T5919] hub 4-1:0.0: 1 port detected [ 341.185703][ T5905] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 341.240597][ T1094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.264040][ T8932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.276436][ T8932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.358678][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.381728][ T5905] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 341.433164][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.491322][ T5905] usb 2-1: config 0 descriptor?? [ 341.526371][ T5905] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 341.654527][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.752152][ T8926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.871584][ T8926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.075481][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.168957][ T5919] hub 4-1:0.0: activate --> -90 [ 342.292554][ T8945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.359341][ T8945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.685895][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.710125][ T5919] usb 2-1: USB disconnect, device number 77 [ 342.964448][ T8954] IPv6: NLM_F_REPLACE set, but no existing node found! [ 343.111120][ T8956] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 343.140200][ T5919] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 343.161583][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 343.550102][ T5821] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 343.690142][ T5821] usb 2-1: device descriptor read/64, error -71 [ 343.721518][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.749112][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'. [ 343.843174][ T5931] usb 4-1: USB disconnect, device number 64 [ 343.870031][ T5910] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 343.886596][ T5931] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 343.940122][ T5821] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 344.030078][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 344.039127][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.053800][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.071314][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 344.090028][ T5821] usb 2-1: device descriptor read/64, error -71 [ 344.096637][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.127357][ T5910] usb 5-1: config 0 descriptor?? [ 344.148240][ T5910] hub 5-1:0.0: USB hub found [ 344.210941][ T5821] usb usb2-port1: attempt power cycle [ 344.348736][ T5910] hub 5-1:0.0: 1 port detected [ 344.575009][ T5821] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 344.615073][ T5821] usb 2-1: device descriptor read/8, error -71 [ 344.762521][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.870122][ T5821] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 344.966584][ T796] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 344.983956][ T8978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.005131][ T5821] usb 2-1: device descriptor read/8, error -71 [ 345.011767][ T5910] hub 5-1:0.0: activate --> -90 [ 345.025724][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.038363][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.120646][ T5821] usb usb2-port1: unable to enumerate USB device [ 345.350880][ T5821] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 345.520088][ T5821] usb 4-1: Using ep0 maxpacket: 8 [ 345.580261][ T5910] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 345.633516][ T5821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.675725][ T5821] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 345.699258][ T5821] usb 4-1: config 0 has no interface number 0 [ 345.729079][ T5821] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 345.772647][ T5821] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 345.801978][ T5910] net_ratelimit: 1 callbacks suppressed [ 345.802000][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.818183][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.828037][ T5821] usb 4-1: config 0 interface 88 has no altsetting 0 [ 345.892231][ T5821] usb 4-1: string descriptor 0 read error: -22 [ 345.901755][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.917064][ T5821] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 345.949833][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 345.998946][ T5821] usb 4-1: config 0 descriptor?? [ 346.039196][ T5821] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input21 [ 346.281830][ T796] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 346.289630][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.315990][ T5847] udevd[5847]: Error opening device "/dev/input/event4": Input/output error [ 346.353210][ T5847] udevd[5847]: Unable to EVIOCGABS device "/dev/input/event4" [ 346.361321][ T5847] udevd[5847]: Unable to EVIOCGABS device "/dev/input/event4" [ 346.533539][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.543726][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.574290][ T5847] udevd[5847]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 346.637868][ T5196] udevd[5196]: worker [5847] terminated by signal 6 (Aborted) [ 346.687741][ T5196] udevd[5196]: worker [5847] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input21/event4' [ 346.712552][ T8990] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.742029][ T5919] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.790280][ T5919] usb 5-1: USB disconnect, device number 81 [ 346.840885][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.253360][ T9008] xfrm0: entered allmulticast mode [ 347.490298][ T918] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.880741][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.280464][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 348.280821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.663878][ T918] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 349.001768][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.102863][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.208869][ T5919] usb 4-1: USB disconnect, device number 65 [ 349.241035][ T918] usb 5-1: Using ep0 maxpacket: 32 [ 349.274270][ T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.354567][ T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.465235][ T918] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 349.493758][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.529882][ T918] usb 5-1: config 0 descriptor?? [ 349.553684][ T918] hub 5-1:0.0: USB hub found [ 349.756189][ T918] hub 5-1:0.0: 1 port detected [ 349.840463][ T5919] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 350.040354][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.060149][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 350.114628][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.125139][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 350.171614][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 350.203592][ T5919] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 350.230384][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.287558][ T5919] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 350.297166][ T5919] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 350.340701][ T5919] usb 4-1: Manufacturer: syz [ 350.398207][ T5919] usb 4-1: config 0 descriptor?? [ 350.536745][ T5892] hub 5-1:0.0: activate --> -90 [ 350.860831][ T5821] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 350.872461][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.948226][ T9035] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 350.970328][ T796] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 351.034565][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 351.046063][ T5821] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 351.055672][ T5821] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 351.081843][ T5821] usb 2-1: Product: syz [ 351.086266][ T5821] usb 2-1: Manufacturer: syz [ 351.091935][ T5821] usb 2-1: SerialNumber: syz [ 351.092400][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.185251][ T5821] usb 2-1: config 0 descriptor?? [ 351.218084][ T5821] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 351.255019][ T796] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 351.796793][ T5821] gspca_zc3xx: reg_r err -71 [ 351.801991][ T5821] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 351.846840][ T5821] usb 2-1: USB disconnect, device number 82 [ 352.060449][ T796] usb 5-1: USB disconnect, device number 82 [ 352.124702][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.133878][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.159819][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.231063][ T9055] netlink: 'syz.2.821': attribute type 13 has an invalid length. [ 352.621070][ T5821] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 352.780626][ T5821] usb 5-1: device descriptor read/64, error -71 [ 353.040044][ T5821] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 353.040133][ T5919] rc_core: IR keymap rc-hauppauge not found [ 353.054120][ T5919] Registered IR keymap rc-empty [ 353.059104][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.090086][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.141326][ T5919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 353.166790][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.200065][ T5821] usb 5-1: device descriptor read/64, error -71 [ 353.278087][ T5919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input22 [ 353.318544][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.329726][ T5821] usb usb5-port1: attempt power cycle [ 353.383495][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.492828][ T5910] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 353.511315][ T9078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.520507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.539835][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.650209][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.659258][ T9078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.667974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.700109][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.730335][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.742697][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 353.752979][ T5910] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.764324][ T5821] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 353.780267][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.783585][ T5910] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.804839][ T5821] usb 5-1: device descriptor read/8, error -71 [ 353.810549][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.830197][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.850118][ T5919] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 353.881585][ T5919] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 353.908595][ T5919] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 353.930082][ T5919] usb 4-1: USB disconnect, device number 66 [ 353.958804][ T5910] usb 1-1: config 0 interface 0 has no altsetting 0 [ 353.979466][ T5910] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 354.024708][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.050173][ T5910] usb 1-1: config 0 descriptor?? [ 354.080452][ T5821] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 354.100847][ T5821] usb 5-1: device descriptor read/8, error -71 [ 354.220056][ T5821] usb usb5-port1: unable to enumerate USB device [ 354.365069][ T9086] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 354.390253][ T5821] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 354.510447][ T5821] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 354.518993][ T5910] hid_parser_main: 28 callbacks suppressed [ 354.519011][ T5910] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 354.545821][ T5910] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 354.577326][ T5910] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 354.606040][ T5910] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 354.620043][ T5910] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 354.643128][ T5910] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 354.856272][ T9092] loop7: detected capacity change from 0 to 7 [ 354.945008][ T9094] loop2: detected capacity change from 0 to 7 [ 355.015013][ T9094] Dev loop2: unable to read RDB block 7 [ 355.051407][ T9092] Dev loop7: unable to read RDB block 7 [ 355.060116][ T9092] loop7: unable to read partition table [ 355.073068][ T9092] loop7: partition table beyond EOD, truncated [ 355.087267][ T9092] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 355.174747][ T9094] loop2: AHDI p1 p2 p3 p4 [ 355.208028][ T9094] loop2: partition table partially beyond EOD, truncated [ 355.224793][ T9094] loop2: p1 start 1601398130 is beyond EOD, truncated [ 355.232633][ T9094] loop2: p2 start 1702059890 is beyond EOD, truncated [ 355.247044][ T9094] loop2: p3 start 16777215 is beyond EOD, truncated [ 355.287896][ T9100] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 355.432828][ T9104] syzkaller0: entered promiscuous mode [ 355.439359][ T9104] syzkaller0: entered allmulticast mode [ 355.800962][ T5910] usb 1-1: reset high-speed USB device number 59 using dummy_hcd [ 356.275191][ T9111] loop2: detected capacity change from 0 to 7 [ 356.293265][ T5931] net_ratelimit: 4 callbacks suppressed [ 356.293288][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.363624][ T5196] loop2: [ 356.380454][ T5196] loop2: partition table partially beyond EOD, truncated [ 356.396918][ T9111] loop2: [ 356.400216][ T9111] loop2: partition table partially beyond EOD, truncated [ 356.433165][ T5196] loop2: [ 356.436223][ T5196] loop2: partition table partially beyond EOD, truncated [ 356.464457][ T9119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.473356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.602050][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.818082][ T9121] nvme_fabrics: missing parameter 'transport=%s' [ 356.891653][ T9121] nvme_fabrics: missing parameter 'nqn=%s' [ 356.970764][ T9134] x_tables: ip_tables: osf match: only valid for protocol 6 [ 357.012158][ T5905] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 357.083973][ T9129] netlink: 'syz.2.842': attribute type 13 has an invalid length. [ 357.252240][ T5821] usb 1-1: USB disconnect, device number 59 [ 357.301618][ T10] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 357.309873][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.336751][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.346399][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 357.361777][ T5905] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.387450][ T5905] usb 2-1: config 0 has no interface number 0 [ 357.415558][ T5905] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.560342][ T5905] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.584212][ T5905] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 357.614470][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.670214][ T5905] usb 2-1: config 0 descriptor?? [ 357.676088][ T10] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 357.708427][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.756747][ T10] usb 5-1: Product: syz [ 357.769815][ T10] usb 5-1: Manufacturer: syz [ 357.825587][ T10] usb 5-1: SerialNumber: syz [ 357.851475][ T10] usb 5-1: config 0 descriptor?? [ 357.880523][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 357.931061][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 358.319314][ T5905] uclogic 0003:28BD:0071.000C: pen parameters not found [ 358.349773][ T5905] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring [ 358.360385][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.368642][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.533081][ T5919] usb 2-1: USB disconnect, device number 83 [ 358.587959][ T5931] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 358.745722][ T5931] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 358.759305][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.778689][ T5931] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 358.789829][ T5931] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 358.806762][ T5931] usb 1-1: Manufacturer: syz [ 358.824636][ T5931] usb 1-1: config 0 descriptor?? [ 358.991824][ T5931] rc_core: IR keymap rc-hauppauge not found [ 359.004011][ T5931] Registered IR keymap rc-empty [ 359.018377][ T5931] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 359.046341][ T5931] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 359.240917][ T10] gspca_stk1135: reg_w 0x7 err -110 [ 359.250541][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 359.270861][ T10] gspca_stk1135: Sensor write failed [ 359.297831][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 359.324050][ T10] gspca_stk1135: Sensor write failed [ 359.344785][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 359.371990][ T10] gspca_stk1135: Sensor read failed [ 359.401908][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 359.410244][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.415895][ T10] gspca_stk1135: Sensor read failed [ 359.441332][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 359.455982][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 359.479294][ T10] gspca_stk1135: Sensor read failed [ 359.496441][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 359.515045][ T5821] usb 1-1: USB disconnect, device number 60 [ 359.535756][ T10] gspca_stk1135: Sensor read failed [ 359.551861][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 359.566983][ T10] gspca_stk1135: Sensor write failed [ 359.604225][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 359.629446][ T10] gspca_stk1135: Sensor write failed [ 359.647023][ T10] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 359.785537][ T9170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.808278][ T9170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.838424][ T9170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.856979][ T9170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.877751][ T9170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.891388][ T9170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.022022][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.030159][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.201236][ T9170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.222871][ T9170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.231435][ T5821] usb 5-1: USB disconnect, device number 87 [ 360.441615][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.458583][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 360.458604][ T30] audit: type=1326 audit(1774906638.952:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9173 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01c79c819 code=0x7ffc0000 [ 360.507102][ T30] audit: type=1326 audit(1774906638.992:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9173 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fa01c79c819 code=0x7ffc0000 [ 360.555052][ T30] audit: type=1326 audit(1774906639.052:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9173 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01c79c819 code=0x7ffc0000 [ 360.583493][ T30] audit: type=1326 audit(1774906639.052:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9173 comm="syz.0.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01c79c819 code=0x7ffc0000 [ 360.632792][ T43] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.644738][ T43] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.666071][ T43] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.675301][ T43] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.900201][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 361.070271][ T10] usb 5-1: config 0 has no interfaces? [ 361.085007][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 361.111632][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.119797][ T10] usb 5-1: Product: syz [ 361.134218][ T10] usb 5-1: Manufacturer: syz [ 361.138985][ T10] usb 5-1: SerialNumber: syz [ 361.169693][ T10] usb 5-1: config 0 descriptor?? [ 361.360751][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 361.384708][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'. [ 361.401912][ T5931] usb 5-1: USB disconnect, device number 88 [ 361.474208][ T9212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 361.483392][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.491886][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.379884][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.520214][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.001082][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.206898][ T10] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 363.369998][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 363.386032][ T10] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.417597][ T10] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.448155][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 363.479775][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.571331][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.950815][ T10] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 364.227098][ T9249] netlink: 'syz.0.881': attribute type 8 has an invalid length. [ 364.240224][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 364.261451][ T9249] bond0: entered promiscuous mode [ 364.266875][ T9249] bond_slave_0: entered promiscuous mode [ 364.303368][ T9249] bond_slave_1: entered promiscuous mode [ 364.320897][ T9249] gretap0: entered promiscuous mode [ 364.343463][ T9249] bond0: left promiscuous mode [ 364.348311][ T9249] bond_slave_0: left promiscuous mode [ 364.359828][ T9249] bond_slave_1: left promiscuous mode [ 364.409250][ T9249] gretap0: left promiscuous mode [ 364.430887][ T5931] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 364.522271][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.610587][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.620858][ T5931] usb 5-1: config 1 interface 0 has no altsetting 0 [ 364.634997][ T5931] usb 5-1: string descriptor 0 read error: -22 [ 364.659340][ T5931] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.40 [ 364.699168][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.808929][ T9255] syzkaller0: entered promiscuous mode [ 364.839314][ T9255] syzkaller0: entered allmulticast mode [ 364.890024][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 364.968013][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.882'. [ 365.067082][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 365.095770][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.108480][ T10] usb 4-1: Product: syz [ 365.113919][ T10] usb 4-1: Manufacturer: syz [ 365.119127][ T10] usb 4-1: SerialNumber: syz [ 365.171698][ T5919] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 365.230025][ T5821] usb 2-1: reset high-speed USB device number 84 using dummy_hcd [ 365.356966][ T5931] belkin 0003:050D:3201.000E: unknown main item tag 0x3 [ 365.371080][ T5931] belkin 0003:050D:3201.000E: unknown main item tag 0x0 [ 365.378262][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 365.504103][ T5931] belkin 0003:050D:3201.000E: unknown main item tag 0x0 [ 365.544944][ T5931] belkin 0003:050D:3201.000E: unknown main item tag 0x0 [ 365.559008][ T5931] belkin 0003:050D:3201.000E: unknown main item tag 0x0 [ 365.568366][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.579751][ T5919] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 365.599753][ T5931] belkin 0003:050D:3201.000E: unknown main item tag 0x0 [ 365.619576][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.633905][ T5931] belkin 0003:050D:3201.000E: unknown main item tag 0x0 [ 365.641514][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.659788][ T5919] usb 1-1: config 0 descriptor?? [ 365.667952][ T5931] belkin 0003:050D:3201.000E: unknown main item tag 0x0 [ 365.764117][ T5931] belkin 0003:050D:3201.000E: unknown main item tag 0x0 [ 365.792064][ T5919] hub 1-1:0.0: bad descriptor, ignoring hub [ 365.803489][ T5931] belkin 0003:050D:3201.000E: unexpected long global item [ 365.822840][ T5919] hub 1-1:0.0: probe with driver hub failed with error -5 [ 365.896768][ T5931] belkin 0003:050D:3201.000E: parse failed [ 365.924035][ T5919] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 365.942455][ T5931] belkin 0003:050D:3201.000E: probe with driver belkin failed with error -22 [ 366.280382][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.312606][ T5905] usb 2-1: USB disconnect, device number 84 [ 366.454664][ T5931] usb 1-1: reset high-speed USB device number 61 using dummy_hcd [ 366.680218][ T5919] net_ratelimit: 51 callbacks suppressed [ 366.680238][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.855758][ T9260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.884824][ T9260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.041422][ T5905] usb 1-1: USB disconnect, device number 61 [ 367.277423][ T5919] usb 5-1: USB disconnect, device number 89 [ 367.602129][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.722213][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 367.730705][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.779351][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 367.814363][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 367.842579][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 367.893847][ T10] usb 4-1: USB disconnect, device number 67 [ 368.120898][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.461303][ T9286] loop2: detected capacity change from 0 to 7 [ 368.478671][ T9286] Dev loop2: unable to read RDB block 7 [ 368.500161][ T9286] loop2: AHDI p1 p2 p3 p4 [ 368.515085][ T9286] loop2: partition table partially beyond EOD, truncated [ 368.550393][ T9286] loop2: p1 start 1601398130 is beyond EOD, truncated [ 368.595886][ T9286] loop2: p2 start 1702059890 is beyond EOD, truncated [ 368.616098][ T9286] loop2: p3 start 16777215 is beyond EOD, truncated [ 368.772461][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.780768][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.946487][ T9297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.982116][ T9297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.801001][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.452795][ T9322] loop2: detected capacity change from 0 to 7 [ 370.460295][ T9322] loop2: [POWERTEC] p1 p2 [ 370.465006][ T9322] loop2: p1 start 1764718181 is beyond EOD, truncated [ 370.495316][ T9322] loop2: p2 size 786432 extends beyond EOD, truncated [ 370.532333][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.561051][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.586957][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 370.680906][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.690988][ T9327] loop2: detected capacity change from 0 to 7 [ 370.698511][ T9327] loop2: [ 370.713553][ T9327] loop2: partition table partially beyond EOD, truncated [ 370.840347][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.892304][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.640082][ T5931] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 372.932925][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.959990][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 372.967626][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.978909][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.990323][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 373.063188][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.132257][ T5931] usb 2-1: config 0 descriptor?? [ 373.143332][ T5931] hub 2-1:0.0: USB hub found [ 373.261536][ T9347] xfrm0: left allmulticast mode [ 373.292619][ T5932] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 373.355714][ T5931] hub 2-1:0.0: 1 port detected [ 373.360623][ T5919] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 373.501466][ T9347] macvlan2: left allmulticast mode [ 373.506876][ T9347] veth0_virt_wifi: left allmulticast mode [ 373.561466][ T5932] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 373.620494][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 373.640608][ T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 373.649549][ T9349] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 373.720251][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.774954][ T5919] usb 5-1: unable to get BOS descriptor or descriptor too short [ 373.785896][ T5919] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 373.809089][ T5919] usb 5-1: config 0 has no interface number 0 [ 373.830519][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 373.862063][ T5919] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 373.888709][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.948515][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.973552][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.997237][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.017819][ T5919] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 374.028692][ T5932] hub 2-1:0.0: activate --> -90 [ 374.060214][ T5919] usb 5-1: config 0 interface 88 has no altsetting 0 [ 374.078870][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.152990][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 374.185405][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.226440][ T5919] usb 5-1: string descriptor 0 read error: -22 [ 374.240107][ T5919] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 374.288671][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 374.425871][ T5919] usb 5-1: config 0 descriptor?? [ 374.467763][ T10] usb 1-1: config 0 descriptor?? [ 374.520601][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.569152][ T5919] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input24 [ 374.941786][ T9347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.953255][ T9347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.017959][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.379171][ T6243] udevd[6243]: Error opening device "/dev/input/event4": Input/output error [ 375.388913][ T6243] udevd[6243]: Unable to EVIOCGABS device "/dev/input/event4" [ 375.416881][ T6243] udevd[6243]: Unable to EVIOCGABS device "/dev/input/event4" [ 376.046055][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.121854][ T5932] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 376.129428][ T5932] usb 2-1-port1: cannot reset (err = -32) [ 376.135871][ T5932] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 376.165227][ T5932] usb 2-1-port1: cannot disable (err = -32) [ 376.172401][ T5932] usb 2-1-port1: cannot reset (err = -32) [ 376.196352][ T5932] usb 2-1-port1: cannot reset (err = -32) [ 376.227783][ T5932] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 376.285475][ T5932] usb 2-1-port1: cannot disable (err = -32) [ 376.336048][ T5932] usb 2-1-port1: attempt power cycle [ 376.677019][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.690680][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.693218][ T5932] usb 2-1-port1: cannot reset (err = -32) [ 376.750445][ T5932] usb 2-1-port1: cannot reset (err = -32) [ 376.756328][ T5932] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 376.770218][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.799111][ T918] usb 5-1: USB disconnect, device number 90 [ 376.832645][ T5932] usb 2-1-port1: cannot disable (err = -32) [ 376.929869][ T5932] usb 2-1-port1: cannot reset (err = -32) [ 376.952502][ T5932] usb 2-1-port1: cannot reset (err = -32) [ 376.964878][ T5932] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 376.974129][ T5932] usb 2-1-port1: cannot disable (err = -32) [ 376.993173][ T5932] usb 2-1-port1: unable to enumerate USB device [ 377.002359][ T5932] usb 2-1-port1: cannot disable (err = -32) [ 377.082712][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.144185][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.153916][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.806285][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 377.812741][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 377.844531][ T30] audit: type=1326 audit(1774906656.322:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.2.918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f189e19c819 code=0x0 [ 377.869063][ T10] usb 1-1: USB disconnect, device number 62 [ 378.120288][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.265565][ T5932] usb 2-1: USB disconnect, device number 85 [ 378.325924][ T9388] netlink: 'syz.0.920': attribute type 13 has an invalid length. [ 378.380593][ T9392] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 378.387438][ T9392] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 378.399284][ T9392] vhci_hcd vhci_hcd.0: Device attached [ 378.549217][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.634977][ T5932] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 378.810845][ T5932] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 378.841862][ T9393] vhci_hcd: connection closed [ 378.854018][ T43] vhci_hcd vhci_hcd.1: stop threads [ 378.900931][ T43] vhci_hcd vhci_hcd.1: release socket [ 378.921296][ T43] vhci_hcd vhci_hcd.1: disconnect device [ 379.005413][ T796] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 379.078195][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.087864][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.160307][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.204458][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.312513][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.642662][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.651319][ T3037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.801098][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.200293][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.432889][ T9431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.461631][ T9434] FAULT_INJECTION: forcing a failure. [ 380.461631][ T9434] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 380.530490][ T9434] CPU: 1 UID: 0 PID: 9434 Comm: syz.0.934 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.530526][ T9434] Tainted: [L]=SOFTLOCKUP [ 380.530534][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.530552][ T9434] Call Trace: [ 380.530560][ T9434] [ 380.530569][ T9434] dump_stack_lvl+0xe8/0x150 [ 380.530607][ T9434] should_fail_ex+0x412/0x560 [ 380.530646][ T9434] _copy_from_user+0x2d/0xb0 [ 380.530673][ T9434] sctp_setsockopt+0x1c4/0x12c0 [ 380.530699][ T9434] ? sock_common_setsockopt+0x36/0xc0 [ 380.530720][ T9434] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 380.530742][ T9434] do_sock_setsockopt+0x17c/0x1b0 [ 380.530774][ T9434] __x64_sys_setsockopt+0x13d/0x1b0 [ 380.530806][ T9434] do_syscall_64+0x14d/0xf80 [ 380.530837][ T9434] ? trace_irq_disable+0x3b/0x150 [ 380.530850][ T9434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.530866][ T9434] ? clear_bhb_loop+0x40/0x90 [ 380.530884][ T9434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.530902][ T9434] RIP: 0033:0x7fa01c79c819 [ 380.530923][ T9434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.530937][ T9434] RSP: 002b:00007fa01d5d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 380.530953][ T9434] RAX: ffffffffffffffda RBX: 00007fa01ca15fa0 RCX: 00007fa01c79c819 [ 380.530964][ T9434] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 380.530973][ T9434] RBP: 00007fa01d5d5090 R08: 0000000000000020 R09: 0000000000000000 [ 380.530982][ T9434] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.530992][ T9434] R13: 00007fa01ca16038 R14: 00007fa01ca15fa0 R15: 00007fa01cb3fa48 [ 380.531014][ T9434] [ 380.736379][ T9435] netlink: 'syz.1.931': attribute type 13 has an invalid length. [ 380.992798][ T796] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 381.120998][ T796] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 381.284948][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.435394][ T9443] wg0: Caught tx_queue_len zero misconfig [ 381.450491][ T9450] macvlan0: entered promiscuous mode [ 381.457991][ T9450] ipvlan1: entered promiscuous mode [ 381.468635][ T9450] ipvlan1: left promiscuous mode [ 381.497643][ T9450] macvlan0: left promiscuous mode [ 381.760060][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 381.933605][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.976755][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.001383][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 382.020431][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 382.041783][ T10] usb 4-1: SerialNumber: syz [ 382.221448][ T9475] xt_hashlimit: size too large, truncated to 1048576 [ 382.339721][ T10] usb 4-1: 0:2 : does not exist [ 382.362812][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.451472][ T9488] fuse: Unknown parameter '017777777777777777777770x0000000000000004' [ 382.490298][ T796] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 382.537123][ T10] usb 4-1: USB disconnect, device number 68 [ 382.615694][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.740017][ T5892] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 382.840312][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.925929][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 382.936361][ T5892] usb 2-1: config 21 has an invalid interface number: 187 but max is 0 [ 382.959516][ T5892] usb 2-1: config 21 has no interface number 0 [ 382.994897][ T5892] usb 2-1: config 21 interface 187 has no altsetting 0 [ 383.019295][ T5892] usb 2-1: New USB device found, idVendor=c942, idProduct=2c0f, bcdDevice=47.09 [ 383.039005][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.400348][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.958794][ T5932] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 384.121265][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.442305][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.748355][ T9524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.959'. [ 384.762335][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.771963][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.452454][ T9525] IPv6: sit1: Disabled Multicast RS [ 385.480553][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.719625][ T5892] usb 2-1: string descriptor 0 read error: -71 [ 385.738550][ T5892] usb-storage 2-1:21.187: USB Mass Storage device detected [ 385.853873][ T9539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.965'. [ 385.890230][ T5892] usb 2-1: USB disconnect, device number 90 [ 385.890860][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.089994][ T10] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 386.250117][ T5892] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 386.278934][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 386.292119][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 386.308043][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 386.322027][ T10] usb 5-1: config 220 has no interface number 2 [ 386.332025][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 386.355167][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 386.368567][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 386.380210][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 386.400638][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 386.412183][ T5892] usb 2-1: config 1 interface 0 altsetting 181 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.427817][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.442530][ T10] usb 5-1: Product: syz [ 386.450388][ T10] usb 5-1: Manufacturer: syz [ 386.460438][ T10] usb 5-1: SerialNumber: syz [ 386.469389][ T5892] usb 2-1: config 1 interface 0 has no altsetting 0 [ 386.495966][ T5892] usb 2-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.40 [ 386.508866][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.518017][ T5892] usb 2-1: Product: С [ 386.522716][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.540923][ T5892] usb 2-1: Manufacturer: ᰁ [ 386.548337][ T5892] usb 2-1: SerialNumber: 㐉 [ 386.560475][ T9536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 386.718305][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 386.732070][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 386.753116][ T10] usb 5-1: selecting invalid altsetting 0 [ 386.799199][ T10] usb 5-1: selecting invalid altsetting 0 [ 386.968373][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 386.990638][ T9551] loop8: detected capacity change from 0 to 7 [ 387.004463][ T9551] Dev loop8: unable to read RDB block 7 [ 387.010252][ T9551] loop8: unable to read partition table [ 387.018215][ T9551] loop8: partition table beyond EOD, truncated [ 387.025114][ T9551] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 387.046764][ T5892] usbhid 2-1:1.0: can't add hid device: -71 [ 387.064933][ T5892] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 387.090374][ T10] usb 5-1: USB disconnect, device number 91 [ 387.111491][ T5892] usb 2-1: USB disconnect, device number 91 [ 387.310135][ T5905] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 387.542568][ T5905] usb 1-1: unable to get BOS descriptor or descriptor too short [ 387.552299][ T5905] usb 1-1: not running at top speed; connect to a high speed hub [ 387.582338][ T5905] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 387.596816][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.625667][ T5905] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 387.662497][ T9562] netlink: 'syz.2.974': attribute type 13 has an invalid length. [ 387.696360][ T5905] usb 1-1: config 1 interface 0 has no altsetting 0 [ 387.726023][ T5905] usb 1-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40 [ 387.735512][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.816758][ T5905] usb 1-1: Product: syz [ 387.947611][ T5905] usb 1-1: Manufacturer: syz [ 387.960337][ T5905] usb 1-1: SerialNumber: syz [ 388.191856][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.977'. [ 388.222639][ T30] audit: type=1326 audit(1774906666.662:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd20b9c819 code=0x7ffc0000 [ 388.570126][ T30] audit: type=1326 audit(1774906666.662:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd20b9c819 code=0x7ffc0000 [ 388.600295][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.658666][ T30] audit: type=1326 audit(1774906666.662:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd20b9c819 code=0x7ffc0000 [ 388.747339][ T30] audit: type=1326 audit(1774906666.662:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd20b9c819 code=0x7ffc0000 [ 388.805790][ T5905] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input25 [ 388.834427][ T30] audit: type=1326 audit(1774906666.662:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd20b9c819 code=0x7ffc0000 [ 388.839238][ T5181] bcm5974 1-1:1.0: could not read from device [ 388.882333][ T30] audit: type=1326 audit(1774906666.662:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdd20b9c819 code=0x7ffc0000 [ 388.915178][ T30] audit: type=1326 audit(1774906666.672:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd20b9c819 code=0x7ffc0000 [ 388.939407][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.971726][ T5181] bcm5974 1-1:1.0: could not read from device [ 389.007736][ T5181] bcm5974 1-1:1.0: could not read from device [ 389.021998][ T5905] usb 1-1: USB disconnect, device number 64 [ 389.031021][ T30] audit: type=1326 audit(1774906666.672:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd20b9c819 code=0x7ffc0000 [ 389.053585][ T30] audit: type=1326 audit(1774906666.672:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd20b9c819 code=0x7ffc0000 [ 389.084079][ T30] audit: type=1326 audit(1774906666.672:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9556 comm="syz.4.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd20b9c819 code=0x7ffc0000 [ 389.250273][ T9580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 389.500121][ T5931] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 389.640153][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.660028][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 389.671698][ T5931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.682145][ T5931] usb 4-1: config 0 has no interfaces? [ 389.695623][ T5931] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 389.705120][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.716709][ T5931] usb 4-1: Product: syz [ 389.727770][ T5931] usb 4-1: Manufacturer: syz [ 389.736835][ T9582] FAULT_INJECTION: forcing a failure. [ 389.736835][ T9582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.760061][ T9582] CPU: 1 UID: 0 PID: 9582 Comm: syz.1.980 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.760093][ T9582] Tainted: [L]=SOFTLOCKUP [ 389.760098][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.760108][ T9582] Call Trace: [ 389.760114][ T9582] [ 389.760121][ T9582] dump_stack_lvl+0xe8/0x150 [ 389.760153][ T9582] should_fail_ex+0x412/0x560 [ 389.760181][ T9582] _copy_to_user+0x31/0xb0 [ 389.760202][ T9582] simple_read_from_buffer+0xe1/0x170 [ 389.760228][ T9582] proc_fail_nth_read+0x1bb/0x230 [ 389.760254][ T9582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.760301][ T9582] ? rw_verify_area+0x2a6/0x4d0 [ 389.760325][ T9582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.760358][ T9582] vfs_read+0x20c/0xa70 [ 389.760379][ T9582] ? fdget_pos+0x246/0x320 [ 389.760396][ T9582] ? ksys_write+0x1e6/0x270 [ 389.760431][ T9582] ? __pfx___mutex_lock+0x10/0x10 [ 389.760461][ T9582] ? __pfx_vfs_read+0x10/0x10 [ 389.760479][ T9582] ? __fget_files+0x2a/0x420 [ 389.760495][ T9582] ? __fget_files+0x3a0/0x420 [ 389.760507][ T9582] ? __fget_files+0x2a/0x420 [ 389.760527][ T9582] ksys_read+0x150/0x270 [ 389.760545][ T9582] ? __pfx_ksys_read+0x10/0x10 [ 389.760570][ T9582] do_syscall_64+0x14d/0xf80 [ 389.760588][ T9582] ? trace_irq_disable+0x3b/0x150 [ 389.760602][ T9582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.760617][ T9582] ? clear_bhb_loop+0x40/0x90 [ 389.760636][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.760651][ T9582] RIP: 0033:0x7f079995d04e [ 389.760666][ T9582] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 389.760679][ T9582] RSP: 002b:00007f079a893fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.760696][ T9582] RAX: ffffffffffffffda RBX: 00007f079a8946c0 RCX: 00007f079995d04e [ 389.760707][ T9582] RDX: 000000000000000f RSI: 00007f079a8940a0 RDI: 0000000000000004 [ 389.760717][ T9582] RBP: 00007f079a894090 R08: 0000000000000000 R09: 0000000000000000 [ 389.760726][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.760735][ T9582] R13: 00007f0799c16038 R14: 00007f0799c15fa0 R15: 00007f0799d3fa48 [ 389.760758][ T9582] [ 389.990740][ T5931] usb 4-1: SerialNumber: syz [ 390.025051][ T5931] usb 4-1: config 0 descriptor?? [ 390.332635][ T9597] loop2: detected capacity change from 0 to 7 [ 390.340372][ T9597] loop2: [POWERTEC] p1 p2 [ 390.347213][ T9597] loop2: p1 start 1764718181 is beyond EOD, truncated [ 390.355179][ T9597] loop2: p2 size 786432 extends beyond EOD, truncated [ 390.421785][ T5850] udevd[5850]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 390.470032][ T796] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 390.520525][ T995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.529458][ T1105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.550639][ T5905] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 390.653699][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.665693][ T796] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 390.680020][ T5905] usb 2-1: device descriptor read/64, error -71 [ 390.686430][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 390.698910][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 390.698931][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.719742][ T796] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.742096][ T796] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 390.751797][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.762543][ T796] usb 5-1: Product: syz [ 390.766823][ T796] usb 5-1: Manufacturer: syz [ 390.772436][ T796] usb 5-1: SerialNumber: syz [ 390.822621][ T796] usb 5-1: config 0 descriptor?? [ 390.831477][ T9603] netlink: 'syz.2.988': attribute type 13 has an invalid length. [ 390.840907][ T9593] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 390.860017][ T5919] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 390.950024][ T5905] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 390.969973][ T796] rc_core: IR keymap rc-xbox-dvd not found [ 390.976141][ T796] Registered IR keymap rc-empty [ 390.984647][ T796] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 390.998127][ T796] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 391.014755][ T5919] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 391.024301][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.037066][ T5919] usb 1-1: Product: syz [ 391.044525][ T5919] usb 1-1: Manufacturer: syz [ 391.083128][ T9593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.093075][ T9593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.101266][ T5905] usb 2-1: device descriptor read/64, error -71 [ 391.123238][ T5919] usb 1-1: SerialNumber: syz [ 391.158153][ T796] usb 5-1: USB disconnect, device number 92 [ 391.164279][ C0] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 391.173644][ T31] INFO: task kworker/0:7:5922 blocked for more than 143 seconds. [ 391.184457][ T31] Tainted: G L syzkaller #0 [ 391.197312][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.210410][ T5905] usb usb2-port1: attempt power cycle [ 391.218128][ T31] task:kworker/0:7 state:D stack:21416 pid:5922 tgid:5922 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 391.236241][ T31] Workqueue: usb_hub_wq hub_event [ 391.246422][ T31] Call Trace: [ 391.252646][ T31] [ 391.257163][ T31] __schedule+0x15dd/0x52d0 [ 391.268588][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 391.288008][ T31] ? device_initial_probe+0xa1/0xd0 [ 391.298192][ T31] ? __driver_probe_device+0x18c/0x320 [ 391.310487][ T31] ? bus_for_each_drv+0x258/0x2f0 [ 391.325497][ T31] ? hub_event+0x2a1c/0x4f30 [ 391.337240][ T31] ? process_scheduled_works+0xb6e/0x18c0 [ 391.513474][ T31] ? worker_thread+0xa53/0xfc0 [ 391.518413][ T31] ? kthread+0x388/0x470 [ 391.523171][ T31] ? ret_from_fork+0x51e/0xb90 [ 391.541279][ T31] ? __pfx___schedule+0x10/0x10 [ 391.550762][ T31] ? schedule+0x90/0x360 [ 391.560058][ T31] schedule+0x164/0x360 [ 391.568829][ T31] schedule_timeout+0xc3/0x2c0 [ 391.575370][ T5905] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 391.590369][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.605702][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 391.614030][ T5905] usb 2-1: device descriptor read/8, error -71 [ 391.647329][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 391.657514][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.683846][ T31] ? wait_for_completion+0x274/0x5e0 [ 391.700089][ T31] wait_for_completion+0x2cc/0x5e0 [ 391.722271][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 391.730222][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.748768][ T31] i2c_del_adapter+0x5c0/0x790 [ 391.756752][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 391.769367][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 391.781645][ T31] ? dvb_usbv2_exit+0x935/0xb60 [ 391.793066][ T31] dvb_usbv2_probe+0x4c3/0x3d40 [ 391.812877][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 391.818913][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 391.834034][ T31] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 391.850076][ T31] usb_probe_interface+0x668/0xc90 [ 391.855507][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 391.865063][ T31] really_probe+0x267/0xaf0 [ 391.875940][ T31] __driver_probe_device+0x18c/0x320 [ 391.890060][ T5905] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 391.897901][ T31] driver_probe_device+0x4f/0x240 [ 391.906332][ T31] __device_attach_driver+0x279/0x430 [ 391.918219][ T31] bus_for_each_drv+0x258/0x2f0 [ 391.924953][ T5905] usb 2-1: device descriptor read/8, error -71 [ 391.939159][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 391.945855][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 391.952433][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 391.958437][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 391.964666][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.000051][ T31] __device_attach+0x2c5/0x450 [ 392.005247][ T31] ? __pfx___device_attach+0x10/0x10 [ 392.011222][ T31] ? _raw_spin_unlock+0x28/0x50 [ 392.021704][ T5821] usb 4-1: USB disconnect, device number 69 [ 392.052633][ T5905] usb usb2-port1: unable to enumerate USB device [ 392.072590][ T31] device_initial_probe+0xa1/0xd0 [ 392.089559][ T31] bus_probe_device+0x12a/0x220 [ 392.095007][ T31] ? device_add+0x726/0xb70 [ 392.099593][ T31] device_add+0x7b6/0xb70 [ 392.104536][ T31] usb_set_configuration+0x1a87/0x2110 [ 392.110414][ T31] usb_generic_driver_probe+0x8d/0x150 [ 392.116083][ T31] usb_probe_device+0x1c4/0x3b0 [ 392.121705][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 392.128187][ T31] really_probe+0x267/0xaf0 [ 392.134150][ T31] __driver_probe_device+0x18c/0x320 [ 392.141243][ T31] driver_probe_device+0x4f/0x240 [ 392.148384][ T31] __device_attach_driver+0x279/0x430 [ 392.157941][ T31] bus_for_each_drv+0x258/0x2f0 [ 392.163435][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 392.171871][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 392.177912][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 392.184999][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 392.195879][ T31] __device_attach+0x2c5/0x450 [ 392.203485][ T31] ? __pfx___device_attach+0x10/0x10 [ 392.210271][ T31] ? _raw_spin_unlock+0x28/0x50 [ 392.215204][ T31] device_initial_probe+0xa1/0xd0 [ 392.221581][ T31] bus_probe_device+0x12a/0x220 [ 392.228144][ T31] ? device_add+0x726/0xb70 [ 392.237040][ T31] device_add+0x7b6/0xb70 [ 392.243033][ T31] usb_new_device+0xa08/0x16f0 [ 392.250246][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 392.255890][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.262642][ T31] hub_event+0x2a1c/0x4f30 [ 392.267269][ T31] ? __pfx_hub_event+0x10/0x10 [ 392.273591][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 392.279386][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 392.285515][ T31] process_scheduled_works+0xb6e/0x18c0 [ 392.293258][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 392.299423][ T31] ? assign_work+0x3d5/0x5e0 [ 392.304675][ T31] worker_thread+0xa53/0xfc0 [ 392.309357][ T31] kthread+0x388/0x470 [ 392.313690][ T31] ? __pfx_worker_thread+0x10/0x10 [ 392.318864][ T31] ? __pfx_kthread+0x10/0x10 [ 392.323687][ T31] ret_from_fork+0x51e/0xb90 [ 392.328346][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.333632][ T31] ? __switch_to+0xc7d/0x1450 [ 392.338385][ T31] ? __pfx_kthread+0x10/0x10 [ 392.343432][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.348358][ T31] [ 392.377705][ T31] [ 392.377705][ T31] Showing all locks held in the system: [ 392.378389][ T5919] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 392.407546][ T5919] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 392.425369][ T31] 3 locks held by kworker/0:1/10: [ 392.428432][ T5919] usb 1-1: 0:3 : does not exist [ 392.436855][ T5919] usb 1-1: 0:4 : does not exist [ 392.445018][ T5919] usb 1-1: 0:5 : does not exist [ 392.450627][ T5919] usb 1-1: 0:6 : does not exist [ 392.456795][ T5919] usb 1-1: 0:7 : does not exist [ 392.463170][ T5919] usb 1-1: 0:8 : does not exist [ 392.468307][ T5919] usb 1-1: 0:9 : does not exist [ 392.471199][ T31] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 392.474190][ T5919] usb 1-1: 0:10 : does not exist [ 392.490986][ T31] #1: ffffc900000f7c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 392.503380][ T31] #2: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 [ 392.513026][ T31] 3 locks held by kworker/u8:0/12: [ 392.518188][ T31] #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 392.522276][ T5919] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 392.537536][ T31] #1: ffffc90000117c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 392.557097][ T31] #2: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 392.566035][ T5919] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 392.567872][ T31] 1 lock held by khungtaskd/31: [ 392.579879][ T31] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 392.591373][ T31] 3 locks held by kworker/0:2/796: [ 392.596534][ T31] #0: ffff88802169e548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 392.612897][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 392.622165][ T31] #2: ffff8880b8628f50 (lock#6){..-.}-{3:3}, at: kcov_remote_stop+0x69/0x6b0 [ 392.631480][ T31] 2 locks held by getty/5582: [ 392.636275][ T31] #0: ffff88803687d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 392.648448][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 392.659034][ T31] 6 locks held by kworker/1:4/5919: [ 392.664490][ T31] 5 locks held by kworker/0:7/5922: [ 392.669799][ T31] #0: ffff88802169e548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 392.681780][ T31] #1: ffffc90004297c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 392.694092][ T31] #2: ffff888029eed1e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 392.704941][ T31] #3: ffff88805b85d1e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 392.714697][ T31] #4: ffff88802e4b41a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 392.725071][ T5919] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 392.725957][ T31] 4 locks held by udevd/5945: [ 392.739378][ T31] #0: ffff88804994ce80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 392.748697][ T31] #1: ffff88801e7fd888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 392.760496][ T31] #2: ffff888079ad4878 (kn->active#25){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 392.766440][ T5919] usb 1-1: USB disconnect, device number 65 [ 392.771313][ T31] #3: ffff88805b85d1e0 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 392.776782][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.787873][ T31] 2 locks held by udevd/6243: [ 392.799372][ T31] 2 locks held by syz.2.988/9603: [ 392.809488][ T31] #0: ffffffff8fbd0048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 392.821456][ T31] #1: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 392.841423][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.859710][ T31] [ 392.863337][ T31] ============================================= [ 392.863337][ T31] [ 392.873546][ T31] NMI backtrace for cpu 0 [ 392.873567][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 392.873596][ T31] Tainted: [L]=SOFTLOCKUP [ 392.873604][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.873617][ T31] Call Trace: [ 392.873625][ T31] [ 392.873633][ T31] dump_stack_lvl+0xe8/0x150 [ 392.873669][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 392.873695][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.873725][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 392.873750][ T31] sys_info+0x135/0x170 [ 392.873780][ T31] watchdog+0xfd9/0x1030 [ 392.873805][ T31] ? watchdog+0x21a/0x1030 [ 392.873832][ T31] kthread+0x388/0x470 [ 392.873854][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.873871][ T31] ? __pfx_kthread+0x10/0x10 [ 392.873893][ T31] ret_from_fork+0x51e/0xb90 [ 392.873924][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.873951][ T31] ? __switch_to+0xc7d/0x1450 [ 392.873979][ T31] ? __pfx_kthread+0x10/0x10 [ 392.874001][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.874048][ T31] [ 392.874078][ T31] Sending NMI from CPU 0 to CPUs 1: [ 392.995539][ C1] NMI backtrace for cpu 1 [ 392.995559][ C1] CPU: 1 UID: 0 PID: 5850 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 392.995583][ C1] Tainted: [L]=SOFTLOCKUP [ 392.995590][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.995601][ C1] RIP: 0010:psi_write_begin+0xc1/0x160 [ 392.995633][ C1] Code: 31 c9 41 b8 01 00 00 00 45 31 c9 ff 74 24 18 e8 25 f8 01 00 48 83 c4 08 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 7f ff 03 <5b> 41 5e 5d e9 46 85 12 0a cc 90 0f 0b 90 83 ff 08 72 8d 89 fb 89 [ 392.995649][ C1] RSP: 0018:ffffc90003b87520 EFLAGS: 00000006 [ 392.995666][ C1] RAX: 0000000000000000 RBX: ffff8880b8724580 RCX: 0000000080000002 [ 392.995678][ C1] RDX: 0000000077a11000 RSI: ffffffff8e16b1b3 RDI: ffffffff8c27d100 [ 392.995692][ C1] RBP: ffff888034e78000 R08: ffffffff819fa663 R09: ffff8880b8724588 [ 392.995705][ C1] R10: dffffc0000000000 R11: ffffed1006bd77a1 R12: 0000000000000000 [ 392.995718][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff888035ebbdd9 [ 392.995732][ C1] FS: 00007f7e5841e880(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 392.995747][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.995759][ C1] CR2: 00007f7e57b1c672 CR3: 0000000064db0000 CR4: 00000000003526f0 [ 392.995775][ C1] Call Trace: [ 392.995781][ C1] [ 392.995789][ C1] psi_task_switch+0x53/0x880 [ 392.995816][ C1] ? psi_account_irqtime+0x137/0x6f0 [ 392.995847][ C1] __schedule+0x26bd/0x52d0 [ 392.995882][ C1] ? __pfx___schedule+0x10/0x10 [ 392.995911][ C1] preempt_schedule_irq+0x4d/0xa0 [ 392.995932][ C1] irqentry_exit+0x599/0x620 [ 392.995954][ C1] ? trace_irq_disable+0x3b/0x150 [ 392.995974][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.995993][ C1] RIP: 0010:__up_read+0x2f/0x6b0 [ 392.996010][ C1] Code: 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec a0 00 00 00 49 89 ff 65 48 8b 05 f9 74 7b 11 48 89 84 24 80 00 00 00 <48> b9 00 00 00 00 00 fc ff df 48 c7 44 24 40 b3 8a b5 41 48 c7 44 [ 392.996024][ C1] RSP: 0018:ffffc90003b878e0 EFLAGS: 00000282 [ 392.996038][ C1] RAX: 5770248843103000 RBX: 0000000000000000 RCX: 0000000000000046 [ 392.996050][ C1] RDX: 0000000000000000 RSI: ffffffff8e16b1b3 RDI: ffff88801badd9b0 [ 392.996062][ C1] RBP: ffffc90003b879b0 R08: ffff88801badd9bf R09: 1ffff1100375bb37 [ 392.996075][ C1] R10: dffffc0000000000 R11: ffffed100375bb38 R12: 0000000000000001 [ 392.996087][ C1] R13: 0000000000000000 R14: ffff888023ac31b0 R15: ffff88801badd9b0 [ 392.996119][ C1] kernfs_iop_permission+0x308/0x430 [ 392.996146][ C1] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 392.996173][ C1] inode_permission+0x46f/0x5f0 [ 392.996202][ C1] link_path_walk+0x1149/0x18d0 [ 392.996234][ C1] path_lookupat+0xe4/0x8c0 [ 392.996270][ C1] filename_lookup+0x256/0x5d0 [ 392.996299][ C1] ? __pfx_filename_lookup+0x10/0x10 [ 392.996338][ C1] ? strncpy_from_user+0x150/0x2b0 [ 392.996366][ C1] ? do_getname+0x151/0x250 [ 392.996391][ C1] do_readlinkat+0xe3/0x510 [ 392.996409][ C1] ? __pfx_do_readlinkat+0x10/0x10 [ 392.996430][ C1] __x64_sys_readlink+0x7f/0x90 [ 392.996457][ C1] do_syscall_64+0x14d/0xf80 [ 392.996480][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.996505][ C1] ? clear_bhb_loop+0x40/0x90 [ 392.996526][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.996543][ C1] RIP: 0033:0x7f7e57d153a7 [ 392.996559][ C1] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 392.996592][ C1] RSP: 002b:00007ffd317c4338 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 392.996609][ C1] RAX: ffffffffffffffda RBX: 00007ffd317c4810 RCX: 00007f7e57d153a7 [ 392.996623][ C1] RDX: 0000000000000400 RSI: 00007ffd317c4340 RDI: 00007ffd317c4810 [ 392.996635][ C1] RBP: 00007ffd317c4340 R08: 00007ffd317c5045 R09: 0000000000000020 [ 392.996647][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 392.996657][ C1] R13: 00007ffd317c5045 R14: 000055a4f4439ca4 R15: 000055a4f4439bcc [ 392.996679][ C1] [ 393.410151][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 393.417100][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 393.428352][ T31] Tainted: [L]=SOFTLOCKUP [ 393.432712][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 393.442806][ T31] Call Trace: [ 393.446145][ T31] [ 393.449139][ T31] vpanic+0x56c/0xa60 [ 393.453275][ T31] ? __pfx___schedule+0x10/0x10 [ 393.458252][ T31] ? __pfx_vpanic+0x10/0x10 [ 393.462823][ T31] ? __pfx_console_unlock+0x10/0x10 [ 393.468089][ T31] panic+0xc5/0xd0 [ 393.471874][ T31] ? __pfx_panic+0x10/0x10 [ 393.476358][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 393.481801][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 393.488019][ T31] watchdog+0x1023/0x1030 [ 393.492419][ T31] ? watchdog+0x21a/0x1030 [ 393.496891][ T31] kthread+0x388/0x470 [ 393.501083][ T31] ? __pfx_watchdog+0x10/0x10 [ 393.505888][ T31] ? __pfx_kthread+0x10/0x10 [ 393.510508][ T31] ret_from_fork+0x51e/0xb90 [ 393.515147][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 393.520299][ T31] ? __switch_to+0xc7d/0x1450 [ 393.525029][ T31] ? __pfx_kthread+0x10/0x10 [ 393.529732][ T31] ret_from_fork_asm+0x1a/0x30 [ 393.534546][ T31] [ 393.538196][ T31] Kernel Offset: disabled [ 393.542622][ T31] Rebooting in 86400 seconds..