last executing test programs: 7m8.908608292s ago: executing program 4 (id=793): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 7m7.694867345s ago: executing program 4 (id=797): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000540)={{0x8, 0x2}, 0x100, './file0\x00'}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000000000c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000000000b49, 0x9, 0x5, 0xd26, 0x3}, 0x0) (async, rerun: 32) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000000)=0x1) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) (async) sendfile(r6, r6, 0x0, 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES64=r3, @ANYBLOB="a8dbd037c3deb727ac42ea82441da92f9a86254d5b45f0fcc1feee75e24e1877f78ee4d5b9af5a", @ANYRESHEX=r1, @ANYBLOB="5cadd6d74bc5255be8e4b257f79301b8bcc4e931e09f09714b090aec6a9d"], 0x30}, 0x1, 0x0, 0x0, 0x20008040}, 0x40815) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000100)=0x40049, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x200000) (async, rerun: 64) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x1}]) (rerun: 64) 7m5.829843291s ago: executing program 4 (id=805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001940)=""/4096, 0x1000}, {0x0}], 0x2, 0x5, 0x8000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000300)) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800010000000009000000b7080000000000007baa00fe000000"], 0x0, 0x9}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r7, 0x0, 0x0, &(0x7f0000000640)="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", 0x1000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000180)=0x3ff, 0xc, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m5.250193082s ago: executing program 4 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0xc362e63b3f31ba5f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90, 0x5}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504"], 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) (async, rerun: 64) syncfs(r1) (rerun: 64) socket$packet(0x11, 0x3, 0x300) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000140)="49739f74f2b286549ceccb1ab19c745a39c9b554c7375e35199954e0ffb82c37901232fef7317c22e732b33f8cf8fa1f32b8b780644196fb72161ad8192a2f616e2db20611eacc3135dbcae40f", 0x4d) (async, rerun: 64) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/185, 0xb9}], 0x4) (rerun: 64) 7m3.542085969s ago: executing program 4 (id=815): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="0fd79bac3787f7c682602de52f4d33ff80d41e5ecc09583ce2704ddbefdf9a3cd9a4692354ec4e7dc4d78c5e39adb01c304f81b018771cbea82952de1e2313af138a3dee548f873e382f74c3e2659e3151a3c613125c98a106776b48d1ff494a71971a87cd2e0fa72667da687cc20b7a66684908f9250c57a26ae356df0b650f8c4e3c7c413ca904ddaa496eb88ce25d0a46241621c1bb8f10c20a9d342840caa4c3593ef21ea2e6b4ff9778d8a95306e040bac9f0d76572b8e24c5172c63d6974734bc6046e47d972a63662aae999d007f33a41af6c2f7f52e7f9ad947bd07c8d675dcf8f5fcd", @ANYRES64, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x28008010}, 0x4004044) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x10, 0x0, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000200)) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x1000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x31, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000e98000/0x2000)=nil, 0x2000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 7m2.111954211s ago: executing program 4 (id=819): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x14, 0x0, 0x2a, 0x0, 0xfffffffe, 0x0}) write$dsp(r0, &(0x7f0000000080)="00cf11", 0x3) r2 = syz_usb_connect$uac1(0x2, 0xe2, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x4, 0xf0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x5, 0x6, 0xd6df, 0x40, 0x75}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x6}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0xb, '\b'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0xf, 0x5}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x2, 0x9, 0x2, "d4d3939448b6"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x9, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x1, 0x4, 0x8, "a45a6f", "8a7c"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x2, 0x4, "17db", "e8ab92"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfffc, 0x8, 0xfb, ':$2'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x2, 0x99, {0x7, 0x25, 0x1, 0x2, 0x46}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0x7, 0x4, "758eb942"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5c, 0x1, 0x3, 0x3, "a4af29"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xfa, 0x6, 0x8, {0x7, 0x25, 0x1, 0x80, 0x5, 0xd}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xa, 0x80, 0x3, 0x10, 0x2}, 0x36, &(0x7f00000000c0)={0x5, 0xf, 0x36, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x81, 0xff}, @ssp_cap={0x10, 0x10, 0xa, 0x32, 0x1, 0x0, 0x1e00, 0x0, [0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "9db043a01293d86b012388259a83870a"}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x827}}, {0x24, &(0x7f0000000300)=@string={0x24, 0x3, "10f700d4f7ae26f0d306fac530d9980889e9e4a18e3e20993e60eae9bc4b424b64b2"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41c}}, {0xcf, &(0x7f0000000380)=@string={0xcf, 0x3, "1539030bb1caf9b84566160d1ddd8f666e548fea0217b884d903476da7fa10995d58fb8bcdf8927d60a0911bfe09a8085691ea154d2ef2d6442bb25707ca841fab67ec5d81bad2c209f964bcc0d1e7f63b19f47362e02953f91aded2e0f1dd510eff2f5af96e7b6a44a56bdebfb16873fcc2797429ab450ef67b7a1610b4faa7e01053f31fbd731890119bd192f156fe6c10fb62a9e05c68929e3f8fc3d2c3968da1d9412b8f373b1c8761a4b59ec27d8b6a22976f46518d789db770261e9faf9b2c8ba32c3200a2c175076bfb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x812}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000700)={0x14, &(0x7f0000000580)={0x40, 0xe, 0xd5, {0xd5, 0xe, "bb8aa299673099d4ecfc7c979585a448ba6c6b7bb11add9209a5f6d50b7b2394d653944683cb8d4490785177d04e34dd785b9d3d2a986d7b067414a3e3ac17a22e56543c38d03690d6aa16a08d578781644ea1510569dc008ec39ee56047da69913cf16d5c3d9fc2c3442aca7fda4751c33b02b242b2d8bc15e2cda1a3a753e8ae1d327b27caa282897fc3969e1da58bc11be328553ce6e0c675efe5ca7a748b5e9b88ad6a827e94748c41ac37009efb7d33cb87c0cdca0449ce7fac0d0249ea4f5da878384cc86a039f66cb7084c33d923ae9"}}, &(0x7f0000000680)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "19b8f545218f87a08e43ea6328c5886c7868a1d32815f10ae206178d43e2901beb23b93607c450b1b989e2175ad8d26bb51afd5eb20a5ef65b70f37b726ac6e798c7ad856dc53c96dae9965abc2fb78ed6a9b78aad777c461dfb"}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000740)={0x20, 0x6, 0xbc, "f5b17abd78bba8ec7b62c30b249be4800e5155472743339666696eb3a08971f916c085e7e0b2ef52984bd10f0298e7bf09f153cd97a0be53d9c5cff6f5c43820ae67d059e042a9202d4cffe4e55a2881562f1bc52d8bc027fb7d144dbc291b7e451cdc19edd15e9277cbdbc21dd8a1bea03db6a35331892ee581d20efc7ffa09985f3af49d6fb609e3f9bd3160d561fb63c9213e9a56895ac8995e98d547dac869a970fa9af2f5d84da98ee2a18b3086031ba5539f5ed0a699bf6c87"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000008c0)={0x20, 0x81, 0x3, "99926f"}, &(0x7f0000000900)={0x20, 0x82, 0x3, "4cb4db"}, &(0x7f0000000940)={0x20, 0x83, 0x2, "f645"}, &(0x7f0000000980)={0x20, 0x84, 0x3, "e658ff"}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "f53109"}}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) 6m46.968455783s ago: executing program 32 (id=819): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0xa1, 0x14, 0x0, 0x2a, 0x0, 0xfffffffe, 0x0}) write$dsp(r0, &(0x7f0000000080)="00cf11", 0x3) r2 = syz_usb_connect$uac1(0x2, 0xe2, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0x4, 0xf0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x5, 0x6, 0xd6df, 0x40, 0x75}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x6}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0xb, '\b'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0xf, 0x5}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x2, 0x9, 0x2, "d4d3939448b6"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x9, 0x4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x1, 0x4, 0x8, "a45a6f", "8a7c"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x2, 0x4, "17db", "e8ab92"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfffc, 0x8, 0xfb, ':$2'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x2, 0x99, {0x7, 0x25, 0x1, 0x2, 0x46}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0x7, 0x4, "758eb942"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5c, 0x1, 0x3, 0x3, "a4af29"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xfa, 0x6, 0x8, {0x7, 0x25, 0x1, 0x80, 0x5, 0xd}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xa, 0x80, 0x3, 0x10, 0x2}, 0x36, &(0x7f00000000c0)={0x5, 0xf, 0x36, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x81, 0xff}, @ssp_cap={0x10, 0x10, 0xa, 0x32, 0x1, 0x0, 0x1e00, 0x0, [0xf]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "9db043a01293d86b012388259a83870a"}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x827}}, {0x24, &(0x7f0000000300)=@string={0x24, 0x3, "10f700d4f7ae26f0d306fac530d9980889e9e4a18e3e20993e60eae9bc4b424b64b2"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41c}}, {0xcf, &(0x7f0000000380)=@string={0xcf, 0x3, "1539030bb1caf9b84566160d1ddd8f666e548fea0217b884d903476da7fa10995d58fb8bcdf8927d60a0911bfe09a8085691ea154d2ef2d6442bb25707ca841fab67ec5d81bad2c209f964bcc0d1e7f63b19f47362e02953f91aded2e0f1dd510eff2f5af96e7b6a44a56bdebfb16873fcc2797429ab450ef67b7a1610b4faa7e01053f31fbd731890119bd192f156fe6c10fb62a9e05c68929e3f8fc3d2c3968da1d9412b8f373b1c8761a4b59ec27d8b6a22976f46518d789db770261e9faf9b2c8ba32c3200a2c175076bfb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x812}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000700)={0x14, &(0x7f0000000580)={0x40, 0xe, 0xd5, {0xd5, 0xe, "bb8aa299673099d4ecfc7c979585a448ba6c6b7bb11add9209a5f6d50b7b2394d653944683cb8d4490785177d04e34dd785b9d3d2a986d7b067414a3e3ac17a22e56543c38d03690d6aa16a08d578781644ea1510569dc008ec39ee56047da69913cf16d5c3d9fc2c3442aca7fda4751c33b02b242b2d8bc15e2cda1a3a753e8ae1d327b27caa282897fc3969e1da58bc11be328553ce6e0c675efe5ca7a748b5e9b88ad6a827e94748c41ac37009efb7d33cb87c0cdca0449ce7fac0d0249ea4f5da878384cc86a039f66cb7084c33d923ae9"}}, &(0x7f0000000680)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "19b8f545218f87a08e43ea6328c5886c7868a1d32815f10ae206178d43e2901beb23b93607c450b1b989e2175ad8d26bb51afd5eb20a5ef65b70f37b726ac6e798c7ad856dc53c96dae9965abc2fb78ed6a9b78aad777c461dfb"}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000740)={0x20, 0x6, 0xbc, "f5b17abd78bba8ec7b62c30b249be4800e5155472743339666696eb3a08971f916c085e7e0b2ef52984bd10f0298e7bf09f153cd97a0be53d9c5cff6f5c43820ae67d059e042a9202d4cffe4e55a2881562f1bc52d8bc027fb7d144dbc291b7e451cdc19edd15e9277cbdbc21dd8a1bea03db6a35331892ee581d20efc7ffa09985f3af49d6fb609e3f9bd3160d561fb63c9213e9a56895ac8995e98d547dac869a970fa9af2f5d84da98ee2a18b3086031ba5539f5ed0a699bf6c87"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000008c0)={0x20, 0x81, 0x3, "99926f"}, &(0x7f0000000900)={0x20, 0x82, 0x3, "4cb4db"}, &(0x7f0000000940)={0x20, 0x83, 0x2, "f645"}, &(0x7f0000000980)={0x20, 0x84, 0x3, "e658ff"}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "f53109"}}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) 2m13.967990434s ago: executing program 0 (id=1962): r0 = socket(0x1d, 0x4, 0x1) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x40801) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="78f6b2cb2d1abbf9e1d708f86081ab7dc6498d61f6431c902327fa7b4f6a25cbf6fbfa043b58dd09cd64e9cbaa11f89f944d99fcc13e7d37fa899ab3470c31a83fa33c9430c6ce55f807ba63c8ba5cb66a5c6576d02f08bb9e0e5d42dad6fd261ea2dac8fd3268695187284aa5ec721a1147cd4605c7ce58973a7d87b95819b083d930736e0440b1d2a39fac498bbc641213e8d048372d7682d8ce1d3dc7f33f7451d281098feceb50df60e0811bbdbf", 0xb0}, {&(0x7f0000000340)="9671d76af378d869a764d14af2ecc438ac0bf4fce226630a793a7252023227fcaaa288f6f814c721d78986152460ac361f3cd488d1b779b9f3bc63f36637cb435a9d3e94e081b40cefc3c259c007bb5eddf37ef0a6634838f96adb24a4de3590c7883e788c4e370b3ecc850e8c34236f9aeaa81b880099c84497bfd2a82bc2c0d42373fb5fe5e002c6fd0bad5ca6971a16bafc750568f773304d185364389537cec383bcd9270da4ec4cbf7321000000000000008f32ddec7de2b81e1bfa103cf9f8d1b984bae39bcaa855937b747f8faa42c1b8eaf03eb1ce11ca6e6594eeb38d14910b4af562c19e39917bca1b5028fc43c389fb00c6c3bfe21aedaf4ebe6c52b95d9ea45fa25ed500"/276, 0x114}, {&(0x7f0000000180)="b5ef0a41e728fdb08a2607b74c3dc67c834f2bdab1073811bf47efc20fb4fbc91ce68f57de37172be4b74d5f32ea968340e411723d248a5d526791a25e5a65b18f4c5d053c28a31c80ade58c9cea1aea821d58a82d74a8d00d806ce831b42eb5875b17401fd8ae1f381cb758169ecc8fb553ea2bdae8a5ce016788b69f9ee7c7e4537db90a0377f3e0f9a5fdc49a98ca4cfec97c9385eb9a7d6c0fd30c77", 0x9e}], 0x3}, 0x4e4bd944b10f7c72) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200000000000000000000000000140001"], 0xa8}}, 0x0) (async) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2m13.555670654s ago: executing program 0 (id=1965): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/stat\x00') r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x25, 0x5, 0x0, 0x0, 'syz0\x00', 0x9}, 0x106, 0x40, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) getdents64(r3, &(0x7f0000000580)=""/33, 0x21) getdents(r3, 0xffffffffffffffff, 0x5a) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeff9, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="c02b70a2eb196b0bc7", 0x9}, {&(0x7f0000000200)="2bb531259c365d824ac16ea962e32747e008820fb3189eb9c00cb784afb98fe260eb8c1b94995b1d2c80221d3398735440bbc875465f1073673fd4f8cfba881ea0101d5c0df3635df2b0c275d04804ff823f92212109393bb2b6f90db18d384bd4b5212b61911610ab2f504cf31c88276588fe854e1d816ca4cb01000b3625e7402351ee7acf02311beb4f987f9e298e967eb375ca1e660709f86ba1e3", 0x9d}], 0x2, 0xffff, 0x2, 0x9) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, r8, 0x3c9be000) 2m12.125637783s ago: executing program 0 (id=1968): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000040)) write$apparmor_exec(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='exec :'], 0x149) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) 2m12.049728824s ago: executing program 0 (id=1969): unshare(0x20000000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) getsockopt$netlink(r2, 0x10e, 0x5, 0x0, 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100) 2m11.403880414s ago: executing program 0 (id=1971): unshare(0x20000) (async, rerun: 64) syz_usb_connect(0x0, 0x2d2, &(0x7f0000000340)=ANY=[@ANYBLOB="120100008b216740420709204661010203010902c002010000000009047500efd08de70009050201"], 0x0) (async, rerun: 64) r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf00e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x66, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0xa, 0x2, 0x1, {0x22, 0xae}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0x7, 0xb}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x5, 0x3, 0x2, 0xff, 0x7}, 0x4e, &(0x7f00000001c0)={0x5, 0xf, 0x4e, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x4, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x8, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "1403bdb2b92df5076c816f93315b4993"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x3d, 0xb, 0xa906}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "cafcc875752d3ab0d010987f2eae89c1"}]}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x34, &(0x7f0000000140)=@string={0x34, 0x3, "f0f7dd04ee836f647f2c0748a1074d7df711eecccae41ee0582ccc1b57d8ba9f74b90ef25578ac04ccb07a25b4dcdc3d0d6c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x458}}, {0x9a, &(0x7f0000000380)=@string={0x9a, 0x3, "0115fe6e8141a5a1985c41c6ff20632a3fbc816f0a26512d5fa1fe10906f0ff0a8eea500c53dd04a4f2f272d4242dabb3ce41f94396f7be06b58302a3fc857cd1acdf5bc7c04e65d1a8a9dce621e427220f2c477e8f32140835cda827d33a494176941c386a2f2679cc275110fff16b2a98f4b5352dbb6125541d52c39248d5db451c903e4adc9f15e3bb8ea9ab5d5bb551b74ec8f777411"}}]}) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f0000000900)=ANY=[@ANYBLOB="400a94000000940ba509a6a8344ba222904d78f02dc43a8b3ce106b45c42f844b51d131f744036677ab92e770173cd56869fddb406387b79fb35907d630da218d055945f32ac32cca0df15839b9e7e7f4e5f5be7c569b51a359243a69db9c33bd356fee571afebc76ba0145e10325386076634b7fc02934dc760010acb05607213db33be1c0f96646e36198cbdc1f9a371a741625675084a1ce26b"], &(0x7f00000005c0)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "fd08b12b74aea2da034fbccd84a743f169571681856062e16b82f24c352e0bc1949d65b10695451517e601600876f6a4e1f7db5cf94e89f46959608d36470e3e44e181128cfc4b858f658bde2d27816e646dda34bc111052951179f3fce38d6277ef7206b1595d9005475a1c701362ab2db2dca1b7b7b9c53b8c3cccfd7d78ce67d924617bade07e6781444d8724ef74538e48b22bd99b31b5bd"}}, &(0x7f0000000300)={0x0, 0x22, 0x18, {[@main=@item_012={0x2, 0x0, 0xa, "adf4"}, @main=@item_012={0x1, 0x0, 0xb, "ef"}, @local=@item_4={0x3, 0x2, 0x5, "01984e4e"}, @main=@item_4={0x3, 0x0, 0x9, "013548e4"}, @local=@item_012={0x0, 0x2, 0x4}, @main=@item_4={0x3, 0x0, 0x8, "cd75b27f"}, @main=@item_012={0x2, 0x0, 0x0, "942b"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x81, 0x1, {0x22, 0x5ce}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0x30, 0x62, "b1e261ad7ee45bcc0ac629e330e37fa5e7190e4ba664559497d303f56a883298e1944a45be7bd085455456075a83e56135308835b9387e9d33c07c8e88f8704ac4b9be6187d69611fc4e084979506bec7f157cfb8a9fb1d78ecdf934f90474d695d6"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x1, 0x6d, "e31d91812261c2e05b6bed0b0a957c4de27da129b79c5bc58d752b7f928d4758df800572bea54a0fe46427186912a5c7c901b7cad8d62256d468b1240ae9defd939108e7bc184f3aca619aa36cedd17ecaa9cc99f0b9f7416d6cc8cff1623e164f9877477ec89b41f6c59c84e4"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x1}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x10, 0x1, 0x2, "1a5da21bcb2b23d0730dd64604a1de9b25fdc05883770c994e386f00cfd32f5c", 0xb5315258}) (async, rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) (rerun: 32) r3 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r3], 0x0, 0x0, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 2m11.183972488s ago: executing program 0 (id=1974): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5310, &(0x7f0000000040)={0x187, @time={0xbc, 0x3142b719}, 0x0, {0x71, 0x6}, 0x6, 0x1, 0x1}) r1 = socket(0x1d, 0x2, 0x6) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x57342d7a, 0x0, 0x3}) accept$alg(r1, 0x0, 0x0) 2m10.883454423s ago: executing program 33 (id=1974): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5310, &(0x7f0000000040)={0x187, @time={0xbc, 0x3142b719}, 0x0, {0x71, 0x6}, 0x6, 0x1, 0x1}) r1 = socket(0x1d, 0x2, 0x6) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x57342d7a, 0x0, 0x3}) accept$alg(r1, 0x0, 0x0) 12.33071608s ago: executing program 1 (id=2429): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) bind$qrtr(r2, &(0x7f0000000200), 0xc) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) close(r5) mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) getresuid(&(0x7f00000002c0), &(0x7f00000004c0), &(0x7f0000000500)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0xee00, r6, 0xee01, 0xd4, 0x6}, 0x0, 0x0, 0x783, 0x3, 0x971, 0x5, 0x26, 0x6, 0x3, 0x0, r4, r4}) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r7, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x3, 0xd}, {0x8, 0x1}}}, 0x24}}, 0x4040004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103480, 0x0) 12.130164825s ago: executing program 6 (id=2430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.647184206s ago: executing program 3 (id=2432): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_io_uring_setup(0x2cd1, &(0x7f0000000080)={0x0, 0x4f6, 0x10100, 0x1, 0x4}, &(0x7f0000000100), &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f00000b7000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0xffffe000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="b9262bbd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11.41680744s ago: executing program 2 (id=2434): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) r1 = fsopen(&(0x7f0000000980)='iso9660\x00', 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac0562420000000000010902"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x4, 0x1000, 0x48, &(0x7f0000000180)="4c84513ff50268263fb4156c02f2faf62df1d28e3436920fabc46aa7413e1e96ba876533f6d0f39faaaabed782d08e4018c03790c295cb0ea3ab079fe6b61eec6f42f3c0c61269bb", 0xb3, 0x0, &(0x7f00000003c0)="e4519e7ebaacd808407ca2ffee29d7bc68b3e161542ba45ee657d8033978989d76e6b6db008eed5c514a816341a2de8a1ccf8c1ea2f1719f9f6817d7628d84a68065154d8faab34ee1ca6707f4fe13a0264eec12865330baa2875b1627ac7fc5f280e9cfb5e3dc0aa2298679abcf521d5aeec5f2cab806cbf4fcb5c9356e5b61d0d4cbe2746397f3ea57b5001ea23e9a5d08e7d4b0799684035489780b109cb2d0df8775c90782ca65793c19c27d2ac0cb76c1"}) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r4], 0x2b) sendfile(r6, r4, 0x0, 0x4000000053d2) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) (async) fsopen(&(0x7f0000000980)='iso9660\x00', 0x1) (async) fcntl$dupfd(r1, 0x0, r1) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="c65a697dc193404fa0e2f58f60b4a27b59b6ba2ced2a80952f4742cd184015cfff3ea1491931aa", 0x27}], 0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac0562420000000000010902"], 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) (async) creat(&(0x7f0000000200)='./bus\x00', 0x84) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000280)={0x1, 0x4, 0x1000, 0x48, &(0x7f0000000180)="4c84513ff50268263fb4156c02f2faf62df1d28e3436920fabc46aa7413e1e96ba876533f6d0f39faaaabed782d08e4018c03790c295cb0ea3ab079fe6b61eec6f42f3c0c61269bb", 0xb3, 0x0, &(0x7f00000003c0)="e4519e7ebaacd808407ca2ffee29d7bc68b3e161542ba45ee657d8033978989d76e6b6db008eed5c514a816341a2de8a1ccf8c1ea2f1719f9f6817d7628d84a68065154d8faab34ee1ca6707f4fe13a0264eec12865330baa2875b1627ac7fc5f280e9cfb5e3dc0aa2298679abcf521d5aeec5f2cab806cbf4fcb5c9356e5b61d0d4cbe2746397f3ea57b5001ea23e9a5d08e7d4b0799684035489780b109cb2d0df8775c90782ca65793c19c27d2ac0cb76c1"}) (async) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r4], 0x2b) (async) sendfile(r6, r4, 0x0, 0x4000000053d2) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff000905"], 0x0) (async) 10.798963068s ago: executing program 6 (id=2437): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0xc}) r4 = dup(r2) fsopen(&(0x7f0000000200)='vfat\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'xfrm0\x00', 0x200}) syz_io_uring_setup(0x235, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x8000000d, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000040)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10.553475923s ago: executing program 1 (id=2438): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000001180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xfe, 0x30, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x59, {0x9, 0x21, 0x2, 0x80, 0x1, {0x22, 0xafc}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x0, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7, 0x0, 0x2}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) set_robust_list(&(0x7f0000000100)={&(0x7f0000000000), 0x7}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b4") r6 = syz_open_dev$dri(0x0, 0x200, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000140)=0x6) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000014c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000", @ANYRES8=r2, @ANYRES16=r0, @ANYRESOCT=r6], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x20, 0x46e2ce1dfc86f44b, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x5, 0xda, &(0x7f00000018c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x8, 0x60, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4565, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5, 0x1, 0x32, "41f7"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0x3, 0x3e, "39303572b2f6f329"}, @as_header={0x7, 0x24, 0x1, 0xfd, 0x6, 0x1002}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x5, 0x10, 0xf, "de1b50"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xf8, 0x5, 0xd, {0x7, 0x25, 0x1, 0x81, 0xc, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x4, 0x2, "", "debe11"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x55, 0x8000, 0xd6, "288bd8"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x70, 0x1, 0x1, 0x8, "59f635a98cbc"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x9, 0x1003}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xda, 0x4, 0x3, 0x84, "09ceb5659be718"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x10, 0x9, {0x7, 0x25, 0x1, 0x1, 0x3, 0x8000}}}}}}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0x0, 0x9, 0x40, 0x80}, 0xf, &(0x7f00000012c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0xb, 0x9}]}, 0x7, [{0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x809}}, {0xe4, &(0x7f00000019c0)=@string={0xe4, 0x3, "985633b1e05c923805f30a5799d03695ab6572cdff0028db7265ae7aad534a52782341fdeed432275ae67af6fe683f4d621fd2ac0aa60cfbce8eb01cd4053787c103da82db4a530c547d72b41e25b340d1106b7efd32a9d967664b7e770a9d44b40caa8f795f58607cabe2c5b679ba6de1fc621fac5183159c0fd55423be8c6793e5f53ad7768580dd26670e165c56f081c04748dcce6e8f96b3cf14986e4e0d898963ef9fd2afcdbeddc24b731df0efad66986da6d0767a4566bb37ee114cf62f4d32737cf05f7fd46cd888c40676baa13ece1646c0edcf8719a1dc5a9198cc663b"}}, {0x1d, &(0x7f0000001600)=@string={0x1d, 0x3, "77c12c32250c78714007dd0ae3208fe639afe29ac631d108d4b0e2"}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x861}}, {0x29, &(0x7f0000001b00)=@string={0x29, 0x3, "422971155baf4423263dac4d2eacec6b085d80358a7481ab1a668c99892532b56c28ef2432ec64"}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x401}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000001640)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "294bdb4a2f8510b1a5a8fb770c4cda573c41c2d084b0d2ecff9c99c0cd72bedc4b5d6cd46157d75e15e995d1bfaaf9ad0152382a9615152f14513dd132ca6eb38aad680730d964fa96fb0267f5ee447b521ddc956b40cf68eca3556f163bb0d840acb8f7b96c1d52e259c97e886c273de3bc1cc53a372ee0"}}}, &(0x7f0000001400)={0x44, &(0x7f00000011c0)={0x40, 0x30, 0x78, "7c4c1dde251dfd6732579f821a10cf8db5159711bbc16ce8348f8126990d3438a95728089b242ce1df9739d4b613bf5fb432ddb1a2933ba7341c37fa38dfcdb307c63fd4c9ac5e5016eebc5627368ad543306c19519b39111e1e4eceb7fd487975eb1caae04033de425bcbb2f3c23bbd20b02194c274c541"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000016c0)=ANY=[], &(0x7f0000001300)={0x20, 0x82, 0x2, "b1a0"}, 0x0, &(0x7f0000001380)={0x20, 0x84, 0x3, "1f3b35"}, &(0x7f00000013c0)={0x20, 0x85, 0x3, "a8dfb7"}}) syz_usb_connect(0x1, 0xa8f, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x90, 0x71, 0xd4, 0xff, 0x15c2, 0x46, 0x8b62, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7d, 0x3, 0x0, 0xe, 0x0, 0x2, [{{0x9, 0x4, 0xc0, 0x7, 0x4, 0x2, 0x42, 0x43, 0x1, [@generic={0x44, 0x8, "ed79ded113b9838b6e02179edd270d7834b84adc0da3c15689d61610b64399d5e8e63acba19367a52d1014b3840ee0b54712b8005a2cc85e048fefa3b1d1151a1650"}], [{{0x9, 0x5, 0xa, 0x3, 0x0, 0x2, 0x4, 0x1}}, {{0x9, 0x5, 0xf, 0xe072c4bb00e3f765, 0x10, 0x3f, 0x8f, 0x9, [@generic={0x58, 0x31, "b965d15b8583b10861d2d8f55aa147c3eded8e79963248e17844e4b772313b836d8401077df53e303773ffa6d5ec33e019df7619b2a167c63ffd01b7275454fc6cab748bd658c2fe87dd06f879d71627ba1cc417f0ba"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7}]}}, {{0x9, 0x5, 0x2, 0x4, 0x8, 0x0, 0x4, 0xc0}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x40, 0x10, 0x7f}}]}}, {{0x9, 0x4, 0x4c, 0x68, 0xb, 0xe1, 0xc8, 0x74, 0x1, [@generic={0x100, 0x4, "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"}], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0xf1, 0x1, 0x0, [@generic={0x4a, 0xf, "917b75862ffcd8eaf7602c106b233c0f01085653ad99ab87fe0714f79ba17b838030fcebd4f25825909af78fc1e7d10cbcf5841aa75fdc7f57cc344c5d05e4662bd9cb9f3dd07c59"}, @generic={0x76, 0x24, "f2e15b0ca5f5881e7a6cae38908aca9373188a545bb03151706693099707baaad506fd7763f68d8d2c2ddc5891fadea49be4333f5952ba9337b8c8ddf14533a5a02aad78343bfd34dab89c092b23ea24786a47d79b8b339ecd8a3a5d8e4f55b8f944a93e0cee74e8e0409ca42f84d382bcaec43b"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0xc, 0x54, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0x38, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x11}, @generic={0xd3, 0x0, "f3a080a34221e75f383e97a9e6fce0f50ff59b58da6d7445ae14dc120082698051f6d56ab91c61510c1a3e221455924ae945db13bb344ca26cfaed7b9e76ee52308a8449cad1d5d81026dd10682de541282edecd8473177d4b4ab8b42ab120999ced4f9fc6a6b5d302be9dea47cc300efe5a4a2b89e5901c7a8ac3efb8b1cf3472a9cc28d8349787c5b1e86651e5a18293448e6167ee7a15dd221f214e0db4901cef337264c993a77a918640700721e6cc108415ded53dbd99bd72e4b817a0029fc5d766f87f8c9ceb6d6ade1140aa518b"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x0, 0xf2, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x8, 0x6, 0x1, [@generic={0xaf, 0x7, "a2502a3b627166240cce864f3b9985b1d151ec1409d8bd2deaa15d68c03158ecae95c2a245517e1edc9e00a3552cdb6354cbfa3793fb08f98f6704a096052236150b433c42f9847ef8ab37d03c25fcc292fb2fa60b0c2d3f92766e1a3255ed638c89305e5f57846aaf8b9c9cef7999b381456dc4beae4697693759550511ef18c08f8c023519e0dce5ff219820b657062356c5c279bb2cc458ec684c1d659dd39d7cabb8da4ff881584422e269"}, @generic={0x3e, 0x31, "c1df0e8d3ac047381b30cc7040ed9ac005e6551754deb3fa300e330d03fdffaf0b9456c8bb7b65113a34db93ad7971c520e5e07bd3b990d2e4708ffe"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x40, 0x1, 0x62}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x6, 0xb9, 0xc, [@generic={0xcb, 0xb, "1c3709791a5186a54582d4119fa4fbb10f8c5e2414fc2f8b7b836108a1ae9e86f1aa40ca45c347d1e992e693a1fde3e4b311ded11cb2012b2bde2116f6d0f7bae776410fbbb38494b09d02a1bfd78076e312571a14f7b30e02f1675c7088c478e9e94d53cc83cd0873858a250fd9ccdbad303489dbb612f5debfe1e1b4d692d23b42982ae379bbcc2d0f0d31522e520bb43f28848a3a2045f8b8b5c662d41e8093acedf56590b28fcd8f7d2e01e3465893cdc454fcb986c7066b7f2db34dbddc7148081cfab7c12466"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xd65}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x9, 0x3, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x4, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd, 0x8f}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0xc2, 0x42, 0x5b, [@generic={0x7e, 0xd, "8c831151ea908211e564f054f4e6a0e724cf6d53fdde6820bd810c390b6a7d9e8b8af3c89dc0350b1806cdd8a17140d8c7eb1c1f7e290511db838416308718f0cbc6e1038071f2873daa968b52420d8df8cf8c2d453987731b9f68db67412bc2421a72dc528ebc00bfe33637ef6ea0e77de1579e1f70d86abb5575d0"}, @generic={0xd9, 0x8, "449a277157e7a617087e88804ebf7b7f42f0f6eabed633ec56f6c86ff25c14ad501a64f2c1eba0493bf964faba310560a6a13bf94a658094b46ba95abc18c6c4443941bfe5d7ed22233119568dce9beb09660960ce4ee9ff771501136b548b2867d6ea560388aee45c2bee1f3b04ce6485a1e146db8e6eaee2f6137a2971bde60e8c4198c9428ebfff3998a08d18e23566e7bf0d8d69c6f8f6a28526d8cf0f3899c0263a094f679fda094d61519c69c4e44fc26036f628e4ce7169fbc03e2d2bda31ad9ac2798526d508078ed4de1efb18782401892e11"}]}}]}}, {{0x9, 0x4, 0xcd, 0x0, 0xd, 0xff, 0xff, 0xff, 0x7, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x5, 0x6, 0x5, "ebc5007222c07a"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0xb9, 0x7f, "faad71"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x2}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8, 0x3, 0x7a, ']c'}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0xf3, 0xf5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf6, 0xb}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x7f, 0xff, 0xb, [@generic={0xe2, 0x5, "fe47982ca1df28c337ce45a2fe763ec4410ca7d7fd05a25a91840b5f05087ea3af2c3368e6ceb56e556fd91ac3c4859412e530088b9a890a667a8306d99cc22b54e4361abe62eac411f3da35f868de9992633becbced14b9b9ac5765882c9ec85e3fe0f8ac88ab08281ce2942d3b2dbc86e73ba3460b06f817019befaf876995d89f28f2ab6c47bd24212abba41afc7e3c749c74f7660a600f2f655a3c9c703522c3a1599133c71fb6d5b874b9ff58ab936881d94198c3d7d6d739543dbab3087968acd8a81e4e11d15718fc474f633095ada1a131a8d28b2fd74e91f61389a8"}, @generic={0xf, 0x23, "4b9e5af0ba0736ad7ff470110c"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0xd, 0x7, 0x80, [@generic={0x7d, 0x10, "c910712d78df4b7ee80032ee561983a7146c1242f427667eb1e32fd9535b6512acf41a97ef4ba817732c727aa85ec39bfa641ccfdbe49df4147993b53e45c92f36fb281f3c7e4e4bb0e19126d7f2275e078b6abb295a226d81ae42b79c35ca019ba4e3531b6b0d902628f497cbb60de078f67e22bcb2fd2e5f4daf"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x2, 0x40, 0x98}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0xdc, 0x3}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x2, 0x9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x1}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x3c, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x8, 0x7, 0x3}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x3, 0x6, 0x2, [@generic={0x21, 0x23, "348ee162c4ae113c85a6770e213a82a77ed94bb3cf2d782d419252d296363a"}, @generic={0x11, 0x11, "f2ac9ec5017accaeaa16de6646461e"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x81, 0xf3, 0x7}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x1, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0xff}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x81, 0x10, 0xff}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x2, 0x5, 0x8, [@generic={0x3a, 0x21, "b28f9c83167467d51f9c971a079e9d2bc2e6176f4c4e93ed067161195361959cd72da50d34f1b256912b0ac9d9a3e52e9374df3062508a83"}, @generic={0xcb, 0x14, "9e2df1c8f65ce6a3461c3ef853455f821c7194856fadbff5be8b67577ca948ee8d1b9d1545e8a179c2016daabdc6cd98995f1c6426fbc574f04fbd8bab3f96a422d27bae0943a2987e1eb55cf67021b07a213afa9d3448f211ecd42466eeb0a8f11ef91548ba068c4822b784abf41a457862a5cc9b83d00baf5e450a03ad54ad95e9797bf6bde0d7cd880dd453ecd546dbf110d713772e8ecbb3d6693f695fdbe48592846578f6e935ea5b8f6d03b8011a207b3e4578d6a44b5510c3f24dce42fcab2b8debbcff3e79"}]}}]}}]}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0x4, 0x7, 0x20, 0x7}, 0x20, &(0x7f00000017c0)=ANY=[@ANYBLOB="050f200002141004072e10d790263d6f78065f01ece81321bc07100210c20500deef4456623d2b03799588ff2b79c72cc8543f98ce9de1e12f30c81eb66049fab97a73c5b480c4e7a28565ff23b708f659d4b66aa7af987578c035009032924387b9620dd6cab624ffc4c2a8d056252cb19145ad7410261f1fbab4e3e7f3edf9c6fec939434b8af902fc68f662c0257b07e459dda6972146fc276773f77a213e959ad52a2b8ef8fb06a660cccda995a75b09369b358ea95c8385c4543f3185702ab069974a21a34423fb5213ff4e"], 0x7, [{0xdd, &(0x7f0000000cc0)=@string={0xdd, 0x3, "cc6ef26bce21e2f2464faf698c6e3d6500bf46c5d6060cfb8fa1f5d69724e3a2208ec7303453f6d94dc678ea4c1c47e7677220149143f5153a91f891596b66bfdea5676f6426b117fd505ba504d491f131602b42663dec055cf8778bd728039786961e8cbc681596e7e0a6ec3a59a7c0f29793a182cce49be30c9481b3ddcbaec88b38b5ee82bcaee8cbb99da4e9abf2425268d13734ccd2bd431601c2534f098b58f77448f29fcf8bed35f84fe7bc57ed875eb9c86edac1e3e12b66174aa0a1baefcf829e6592a0cab283ac14fa15991ce4d7e4ff91c38d1f9ca4"}}, {0x20, &(0x7f0000000dc0)=@string={0x20, 0x3, "6a4446bbd2aa9ecfa6d2c0ecf48c6ff7a0289c73ef3a4b84ce4e59d3bda8"}}, {0x1a, &(0x7f0000000e00)=@string={0x1a, 0x3, "65734d016783514dab0f33d113267fc48396d8eabc952c7e"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x240a}}, {0x1a, &(0x7f0000000e80)=@string={0x1a, 0x3, "aa3c6b3214536ffb7f54441680de030d0afe0f8468fee4c0"}}, {0xc9, &(0x7f0000000ec0)=@string={0xc9, 0x3, "be42820ceb7220353eae9764b9043e2784e1f9ab20c5bc461a316c2b0d9a794eb95e045332eefe723a8d44d2c15e542eb7ecd8cc3c91ad54963cf8e55300883bb574fd7aedde85a413a06939c11eea3bb2d7297d59e331becb8a780e11e1f3fa5aef314a148cc4d05e2379d7fbfea59e70d6edbe3a535cf9e55795f2c0054135f3a341e9d17fc4b8f8ee251ef48d9036aa74af3ca617f9414e5fea6354027bc0bc69921629061686da72603ed3c6234660db4ee9e3487d770c42045061456f6a991f1bc83640ce"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x40b}}]}) epoll_create1(0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') readv(r10, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/170, 0xaa}, {0x0}], 0x2) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000200)={0xc, r9}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r8, 0x3b70, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}}) 10.054272789s ago: executing program 2 (id=2439): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0x7, 0xb, 0x1, 0x6, 0x0}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000440)={r4, @in={{0x2, 0x4e23, @loopback}}}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x1d, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000100000000a58000000060a0b040000000000000000020000002c0404802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r9, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r6, r7, 0x0, 0x20000023896) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x30002, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r11, 0x4018aee2, &(0x7f00000000c0)) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) recvmmsg(r12, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}, 0x52f4}], 0x1, 0x122, 0x0) shutdown(r12, 0x2) 9.818024926s ago: executing program 6 (id=2440): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) pipe(&(0x7f00000000c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r1 = socket(0x10, 0x3, 0x0) unshare(0x28000600) write(r1, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/21, 0x15}, 0x3}], 0x1, 0x45833af92e4bbbfe, 0x0) 8.994385172s ago: executing program 5 (id=2441): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18380000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000480)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (rerun: 32) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) 8.609893251s ago: executing program 5 (id=2442): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x3, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7fff}, 0x0, 0x0]) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 8.5661593s ago: executing program 6 (id=2443): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(0xffffffffffffffff, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(0x0, 0x1, 0x2) syz_emit_ethernet(0x46, &(0x7f0000001600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008000000019078640101b8ac1414aa0b009078032c000045000000000000009e890000ac141428ac1414aaa815a23da43974ff"], 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x600100a2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x80010, r1, 0x41995000) io_setup(0x8, &(0x7f00000001c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r4, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r5, &(0x7f0000000000)={0x0, 0x8, 0x2}, 0x8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000380)=ANY=[@ANYBLOB="01", @ANYRES16=r1, @ANYRESDEC=r4]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) lseek(r8, 0x14d, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1) 8.407260138s ago: executing program 5 (id=2444): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000013f000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="12011003fd3dc30899040250055501026b0109023800010805801009044f01010202ff0005240600010524000a000d240f0104000000050001000806241a08000809050900ff0307016d"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 8.042498785s ago: executing program 3 (id=2445): pipe(&(0x7f0000000080)) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = userfaultfd(0x80801) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000515000/0x4000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x4000, 0x3}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="00000000000067857e310000000632732d99b04bffb2000000020000002c000480280001800e000100696d6d65646961746500f9ff13000280080002800400028008000140170000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000f7aea2ae42"], 0x80}}, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r4, 0x821, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES16=r0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_newrule={0x4c, 0x1a, 0x30d, 0x0, 0x25dfdbfe, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd}, [@FRA_DST={0x14, 0x1, @private1}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x4e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000400)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000100)={@local}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00 ']) read$FUSE(r8, &(0x7f0000006280)={0x2020, 0x0, 0x0}, 0x2020) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x400, 0x103) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x1000005, 0xfffe, 0x2, 0x10}}, 0x50) 7.775914038s ago: executing program 2 (id=2446): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0xc}) r4 = dup(r2) fsopen(&(0x7f0000000200)='vfat\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2, 0x1000000}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'xfrm0\x00', 0x200}) syz_io_uring_setup(0x235, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 7.706070812s ago: executing program 3 (id=2447): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = io_uring_setup(0x63b7, &(0x7f0000000300)={0x0, 0xf999, 0x400, 0x9, 0x2ce}) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f00000002c0)={&(0x7f0000000080)={&(0x7f00000001c0)="e2", 0x1, 0x1, 0x6, 0x7f}}, 0x1) (async) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f00000002c0)={&(0x7f0000000080)={&(0x7f00000001c0)="e2", 0x1, 0x1, 0x6, 0x7f}}, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x2000775) write$binfmt_elf64(r2, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x2, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0xc, 0x4, 0x2}]}, 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfd}, 0x10}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc) recvmmsg(r5, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) gettid() (async) r7 = gettid() syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x44000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) open(&(0x7f0000000080)='./file0\x00', 0x321100, 0xe4) (async) open(&(0x7f0000000080)='./file0\x00', 0x321100, 0xe4) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000003300)={0x0, "719ab6301c82081300020000000000003b0b000000000000ff6ab2407a9ac9154e5fc0a625b6b539736b7b37ce4dcd32c93b4168dfcbccc800", 0x30}, 0x48, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000003300)={0x0, "719ab6301c82081300020000000000003b0b000000000000ff6ab2407a9ac9154e5fc0a625b6b539736b7b37ce4dcd32c93b4168dfcbccc800", 0x30}, 0x48, 0x0) tkill(r7, 0x1b) (async) tkill(r7, 0x1b) 7.342245603s ago: executing program 1 (id=2448): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000240)={0x7, 0x1ff, 0xc8d, 0x10, 0xad}) unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 6.752935736s ago: executing program 3 (id=2449): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r3, 0x1) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000040)=0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x48, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f00000002c0)={{0xffff, 0x7e22}, {0x10001, 0x6}, 0x5, 0x1}) 6.614226072s ago: executing program 2 (id=2450): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/57, 0x0, 0x32d55b790c73fadc}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/75, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af04, &(0x7f0000000400)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) syz_usb_connect$hid(0x1, 0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200378976765c6402000000000001090224000100008000090400000303000200092105000001220520090581030000000000"], 0x0) 5.518786321s ago: executing program 5 (id=2451): unshare(0x22020600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) (async) close(r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100760082642214b517e44f45", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) 4.610418475s ago: executing program 6 (id=2452): socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r2, 0x0, 0x0) r3 = getpgid(0x0) kcmp(r3, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sched_setattr(r3, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x350, 0x8, 0x40, 0x3}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x8}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xd, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000040)=ANY=[]) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.105204082s ago: executing program 5 (id=2453): r0 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) syz_usb_ep_read(r0, 0x20, 0x1008, &(0x7f0000001800)=""/4104) 3.792677391s ago: executing program 3 (id=2454): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$I2C(&(0x7f0000000080), 0x8000, 0x80003) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) syz_usb_connect$uac1(0x0, 0x97, &(0x7f00000009c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x6, 0x0, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x8}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x5, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7f, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x6, 0x0, {0x7, 0x25, 0x1, 0x41, 0x6, 0xa6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0xf4b5, 0x1, "060000"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x8, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7f, 0x2, 0x81, {0x7, 0x25, 0x1, 0x0, 0x9, 0xa}}}}}}}]}}, 0x0) 3.560958811s ago: executing program 1 (id=2455): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20181, 0x0) unshare(0x68040200) mmap(&(0x7f000046d000/0x1000)=nil, 0x1000, 0x2000007, 0x8010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x12, r5, 0x0, r4}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) read$FUSE(r6, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x1bb) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x2, 0x5001) 3.350141403s ago: executing program 2 (id=2456): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c61a0200231a0500140012800b00010062726964676500000400028008000a00", @ANYRES32=r2, @ANYBLOB="35e34e5a66d9dd3ef596c7a586f9e069ecfc97e8366e37e2639d8ee8e2e53bb55cced87e93e6f0a24ed45c9dfa65ef8d966b0e28352f1a5554ee91951fe0e9be1dd1c0f2b22636b376d29861b1f42c22632bf8c4846344404d0d9d666b55caaa5099d37855434e0e1b48179e92f1389d28b43fd6b99eb47ca7c82b18b6e3936ba8bfb4262b972ac2bd773ce6647f95abf0e2a341f482242bf646ec49079523bdcf28cf96007906481a100afb8d19"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000012"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c61a0200231a0500140012800b00010062726964676500000400028008000a00", @ANYRES32=r2, @ANYBLOB="35e34e5a66d9dd3ef596c7a586f9e069ecfc97e8366e37e2639d8ee8e2e53bb55cced87e93e6f0a24ed45c9dfa65ef8d966b0e28352f1a5554ee91951fe0e9be1dd1c0f2b22636b376d29861b1f42c22632bf8c4846344404d0d9d666b55caaa5099d37855434e0e1b48179e92f1389d28b43fd6b99eb47ca7c82b18b6e3936ba8bfb4262b972ac2bd773ce6647f95abf0e2a341f482242bf646ec49079523bdcf28cf96007906481a100afb8d19"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'}) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) (async) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000012"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) 2.007534874s ago: executing program 2 (id=2457): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @random="4ce28505e8f7", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0xff}, 0x1, 0x36, 0x5, {0xf7, 0x8}, 0xfd, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a00f8f707"], 0x38}}, 0x0) 1.565899527s ago: executing program 34 (id=2457): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @random="4ce28505e8f7", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0xff}, 0x1, 0x36, 0x5, {0xf7, 0x8}, 0xfd, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a00f8f707"], 0x38}}, 0x0) 1.529918894s ago: executing program 5 (id=2459): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="58c8fcf1d8521d7f126785"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.475671141s ago: executing program 1 (id=2460): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x2, 0x4, 0x31, @mcast2, @mcast1, 0x7, 0x10, 0xe03, 0x1}}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r4 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) timer_settime(r5, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r2, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r7}) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r8, &(0x7f00000000c0)=[{'LINE1', @val={' \'', 'Master Capture Switch'}}], 0x33) socket$inet_sctp(0x2, 0x5, 0x84) close(r8) r9 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r9, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000142c00fe800000000000000000000000000008000000000000000000000000000000002c000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000c1e94a0be7"], 0x0) 618.207521ms ago: executing program 3 (id=2461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r3, 0x2}, 0x8) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6c", 0x0, 0x41}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1, 0x11, r7, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000688000/0x4000)=nil, &(0x7f0000659000/0x2000)=nil, 0x4000, 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 212.31033ms ago: executing program 1 (id=2462): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x44) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f00000014c0)=[{0x4, 0x4a01, 0x0, 0x0}, {0x4, 0x1201, 0x0, 0x0}], 0x2}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000900)="580000001400192360834b80043f679a10ff3d420000000001000000f61bcdf1194ad353e9cc853a804824cabece4b381effffffff0057e792945f80000000050028925aaa000000c600000004002e499391db0926f27805", 0x58}], 0x1) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x7cf0, &(0x7f0000000440)={0x0, 0x15d2, 0x30101, 0x0, 0x185}, &(0x7f0000000100), &(0x7f00000001c0)) 0s ago: executing program 6 (id=2463): write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x9, 0x4) r1 = gettid() ptrace$getsig(0x4202, r1, 0x1, &(0x7f0000000080)) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0xd, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x80) (async) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0x8000, 0x0, 0xb]}, &(0x7f0000000280)=0x44) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000002c0)=0x1000000, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002380)={0x50, 0x0, r3, {0x7, 0x2b, 0x4, 0x122a022, 0x2, 0x8, 0x1, 0x6, 0x0, 0x0, 0x10, 0x3ac}}, 0x50) (async) r4 = syz_open_dev$sndpcmc(&(0x7f0000002400), 0x9, 0x80802) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x0, 0x30, r4, 0x82000000) (async) r5 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000002440)={0x8, 0xfff, 0xb}) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000002480)={0x8f, 0x0, 0x1}) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002500), 0x341281) (async) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000002540)={'batadv_slave_1\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) (async) syz_emit_ethernet(0x64, &(0x7f0000002580)={@random="e9a6eb134bd2", @remote, @val={@void, {0x8100, 0x6}}, {@llc={0x4, {@snap={0xab, 0x1, 'V', "089def", 0x1a, "9ae9e9862cfa72036a0125461db4b3c7447b1c2448f1a0bd2fab8f777f088198115dc011eeb491a7069a3b5ecc9bbefa4143381cfebfdf1ecd83354d5a40c14099ae917ea361537f8c27"}}}}}, &(0x7f0000002600)={0x1, 0x4, [0x4ca, 0xf85, 0x9b3, 0xc48]}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000002640), 0x4) r7 = syz_open_dev$sndpcmp(&(0x7f0000002680), 0xfffffffffffffc00, 0x400) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r7, 0x40044103, &(0x7f00000026c0)=0xcb) (async) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0xb1e) (async) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f0000002700)={0xed, 0x0, 0x1}) (async) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000002780)={0x3}) (async) setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000027c0), 0x3) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002840), r5) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x7c, r8, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040000}, 0x400c000) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000003180)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003140)={&(0x7f0000003080)={0xbc, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40015}, 0x94) kernel console output (not intermixed with test programs): rent from the interface descriptor's value: 65 [ 615.679858][ T5832] usb 6-1: config 0 interface 0 has no altsetting 0 [ 615.689202][ T5832] usb 6-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 615.698792][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.711111][T15482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 615.722263][T15482] fuse: Unknown parameter 'grou00000000000000000000' [ 615.729860][T15482] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2134'. [ 615.738993][T15482] openvswitch: netlink: Flow key attr not present in new flow. [ 615.788262][ T5832] usb 6-1: config 0 descriptor?? [ 615.827954][T15480] fuse: Unknown parameter '0x00000000000000080x000000000000000c0000000000000000000600000000000000000000' [ 615.839350][T12114] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 616.065221][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.081637][T12114] usb 7-1: config 8 has an invalid interface number: 134 but max is 1 [ 616.094620][T12114] usb 7-1: config 8 has an invalid interface number: 56 but max is 1 [ 616.119513][T12114] usb 7-1: config 8 has no interface number 0 [ 616.140471][T12114] usb 7-1: config 8 has no interface number 1 [ 616.157787][T12114] usb 7-1: config 8 interface 134 altsetting 9 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 616.184672][T12114] usb 7-1: config 8 interface 134 altsetting 9 bulk endpoint 0xA has invalid maxpacket 1024 [ 616.212535][T12114] usb 7-1: config 8 interface 56 altsetting 15 endpoint 0xE has invalid maxpacket 60296, setting to 64 [ 616.252969][T12114] usb 7-1: config 8 interface 56 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 616.350000][T15490] FAULT_INJECTION: forcing a failure. [ 616.350000][T15490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.370750][T12114] usb 7-1: config 8 interface 56 altsetting 15 has an endpoint descriptor with address 0xCC, changing to 0x8C [ 616.383690][T15490] CPU: 0 UID: 0 PID: 15490 Comm: syz.1.2137 Not tainted syzkaller #0 PREEMPT(full) [ 616.383727][T15490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 616.383734][T15490] Call Trace: [ 616.383738][T15490] [ 616.383743][T15490] dump_stack_lvl+0x189/0x250 [ 616.383760][T15490] ? __pfx____ratelimit+0x10/0x10 [ 616.383775][T15490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.383793][T15490] ? __pfx__printk+0x10/0x10 [ 616.383812][T15490] ? __might_fault+0xb0/0x130 [ 616.383871][T15490] should_fail_ex+0x414/0x560 [ 616.383891][T15490] _copy_from_user+0x2d/0xb0 [ 616.383905][T15490] core_sys_select+0x609/0xa20 [ 616.383923][T15490] ? __pfx_core_sys_select+0x10/0x10 [ 616.383963][T15490] ? __pfx_set_user_sigmask+0x10/0x10 [ 616.383997][T15490] __se_sys_pselect6+0x27a/0x300 [ 616.384022][T15490] ? __pfx___se_sys_pselect6+0x10/0x10 [ 616.384033][T15490] ? __pfx_ksys_write+0x10/0x10 [ 616.384046][T15490] ? __x64_sys_pselect6+0x21/0xf0 [ 616.384059][T15490] do_syscall_64+0xfa/0xfa0 [ 616.384069][T15490] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.384081][T15490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.384099][T15490] ? clear_bhb_loop+0x60/0xb0 [ 616.384121][T15490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.384139][T15490] RIP: 0033:0x7f597998eec9 [ 616.384156][T15490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.384171][T15490] RSP: 002b:00007f597a7fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 616.384184][T15490] RAX: ffffffffffffffda RBX: 00007f5979be5fa0 RCX: 00007f597998eec9 [ 616.384191][T15490] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 616.384198][T15490] RBP: 00007f597a7fb090 R08: 0000000000000000 R09: 0000000000000000 [ 616.384204][T15490] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 616.384211][T15490] R13: 00007f5979be6038 R14: 00007f5979be5fa0 R15: 00007f5979d0fa28 [ 616.384227][T15490] [ 616.613124][ T5832] usbhid 6-1:0.0: can't add hid device: -71 [ 616.626443][ T5832] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 616.660206][ T5832] usb 6-1: USB disconnect, device number 70 [ 616.860755][T12114] usb 7-1: config 8 interface 56 altsetting 15 endpoint 0x8C has an invalid bInterval 147, changing to 11 [ 616.872236][T12114] usb 7-1: config 8 interface 56 altsetting 15 endpoint 0x8C has invalid maxpacket 51159, setting to 1024 [ 616.884137][T12114] usb 7-1: config 8 interface 56 altsetting 15 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 616.895229][T12114] usb 7-1: config 8 interface 56 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 616.906623][T12114] usb 7-1: config 8 interface 56 altsetting 15 has a duplicate endpoint with address 0x1, skipping [ 616.917554][T12114] usb 7-1: config 8 interface 56 altsetting 15 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 616.931095][T12114] usb 7-1: config 8 interface 134 has no altsetting 0 [ 616.938003][T12114] usb 7-1: config 8 interface 56 has no altsetting 0 [ 617.020742][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.100775][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.154443][T12114] usb 7-1: New USB device found, idVendor=13d3, idProduct=3321, bcdDevice=db.5d [ 617.210659][T12114] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.264555][T12114] usb 7-1: Product: syz [ 617.268749][T12114] usb 7-1: Manufacturer: syz [ 617.315631][T12114] usb 7-1: SerialNumber: syz [ 617.345022][T15478] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 617.472252][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2140'. [ 617.490032][T15502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2140'. [ 617.560883][T15478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.582617][T15502] ip6gretap1: entered allmulticast mode [ 617.601026][T15478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.218455][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.360529][ T5832] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 618.546790][T15525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2146'. [ 618.593107][ T5832] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 618.602672][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.630751][ T4395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.639783][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.648975][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.724145][ T5832] usb 4-1: config 0 descriptor?? [ 618.969452][T12114] usb 7-1: USB disconnect, device number 11 [ 619.275665][T15517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.284899][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.293411][T15517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.366455][ T30] kauditd_printk_skb: 106 callbacks suppressed [ 619.366475][ T30] audit: type=1326 audit(1760423566.521:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15526 comm="syz.6.2147" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfb818eec9 code=0x0 [ 619.394530][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.072825][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.221234][ T5832] corsair 0003:1B1C:1B09.0021: hidraw0: USB HID v10.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.3-1/input0 [ 620.292446][T15542] FAULT_INJECTION: forcing a failure. [ 620.292446][T15542] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 620.306201][T15542] CPU: 1 UID: 0 PID: 15542 Comm: syz.5.2150 Not tainted syzkaller #0 PREEMPT(full) [ 620.306216][T15542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 620.306223][T15542] Call Trace: [ 620.306227][T15542] [ 620.306232][T15542] dump_stack_lvl+0x189/0x250 [ 620.306249][T15542] ? __pfx____ratelimit+0x10/0x10 [ 620.306265][T15542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.306275][T15542] ? __pfx__printk+0x10/0x10 [ 620.306286][T15542] ? fs_reclaim_acquire+0x7d/0x100 [ 620.306306][T15542] should_fail_ex+0x414/0x560 [ 620.306324][T15542] prepare_alloc_pages+0x213/0x610 [ 620.306341][T15542] __alloc_frozen_pages_noprof+0x123/0x370 [ 620.306355][T15542] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 620.306367][T15542] ? do_raw_spin_lock+0x121/0x290 [ 620.306379][T15542] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 620.306391][T15542] ? policy_nodemask+0x27c/0x720 [ 620.306407][T15542] alloc_pages_mpol+0x232/0x4a0 [ 620.306421][T15542] alloc_pages_noprof+0xa9/0x190 [ 620.306435][T15542] get_free_pages_noprof+0xf/0x80 [ 620.306447][T15542] __pollwait+0x27b/0x460 [ 620.306460][T15542] ? __pfx___pollwait+0x10/0x10 [ 620.306470][T15542] n_tty_poll+0x9d/0x740 [ 620.306483][T15542] ? __pfx_n_tty_poll+0x10/0x10 [ 620.306493][T15542] tty_poll+0xbe/0x160 [ 620.306502][T15542] ? __pfx_tty_poll+0x10/0x10 [ 620.306513][T15542] do_select+0x105e/0x17d0 [ 620.306529][T15542] ? do_select+0x7f1/0x17d0 [ 620.306550][T15542] ? __pfx_do_select+0x10/0x10 [ 620.306564][T15542] ? __pfx___pollwait+0x10/0x10 [ 620.306577][T15542] ? __pfx_pollwake+0x10/0x10 [ 620.306589][T15542] ? __pfx_pollwake+0x10/0x10 [ 620.306603][T15542] ? __pfx_pollwake+0x10/0x10 [ 620.306615][T15542] ? __pfx_pollwake+0x10/0x10 [ 620.306627][T15542] ? __pfx_pollwake+0x10/0x10 [ 620.306640][T15542] ? __pfx_pollwake+0x10/0x10 [ 620.306652][T15542] ? __pfx_pollwake+0x10/0x10 [ 620.306665][T15542] ? __pfx_pollwake+0x10/0x10 [ 620.306677][T15542] ? __pfx_pollwake+0x10/0x10 [ 620.306700][T15542] core_sys_select+0x6e2/0xa20 [ 620.306717][T15542] ? __pfx_core_sys_select+0x10/0x10 [ 620.306746][T15542] ? __pfx_set_user_sigmask+0x10/0x10 [ 620.306765][T15542] __se_sys_pselect6+0x27a/0x300 [ 620.306780][T15542] ? __pfx___se_sys_pselect6+0x10/0x10 [ 620.306791][T15542] ? __pfx_ksys_write+0x10/0x10 [ 620.306804][T15542] ? __x64_sys_pselect6+0x21/0xf0 [ 620.306817][T15542] do_syscall_64+0xfa/0xfa0 [ 620.306828][T15542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.306838][T15542] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 620.306847][T15542] ? clear_bhb_loop+0x60/0xb0 [ 620.306859][T15542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.306869][T15542] RIP: 0033:0x7fb47618eec9 [ 620.306879][T15542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.306889][T15542] RSP: 002b:00007fb4770c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 620.306900][T15542] RAX: ffffffffffffffda RBX: 00007fb4763e5fa0 RCX: 00007fb47618eec9 [ 620.306908][T15542] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000040 [ 620.306915][T15542] RBP: 00007fb4770c8090 R08: 0000000000000000 R09: 0000000000000000 [ 620.306921][T15542] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 620.306927][T15542] R13: 00007fb4763e6038 R14: 00007fb4763e5fa0 R15: 00007fb47650fa28 [ 620.306944][T15542] [ 620.637075][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.643081][ C1] hrtimer: interrupt took 332769155 ns [ 620.650671][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.131032][ T5832] usb 4-1: USB disconnect, device number 17 [ 621.210450][T15072] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 621.384968][T15072] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.417844][T15072] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 621.438156][T15072] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 621.464226][T15072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.496543][T15072] usb 3-1: config 0 descriptor?? [ 621.509921][T15072] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 621.520682][T15072] dvb-usb: bulk message failed: -22 (3/0) [ 621.535886][T15072] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 621.546075][T15072] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 621.561365][T15072] usb 3-1: media controller created [ 621.581941][T15072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 621.628085][T15072] dvb-usb: bulk message failed: -22 (6/0) [ 621.645449][T15072] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 621.661890][T15554] xt_CT: No such helper "pptp" [ 621.668453][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.670028][T15072] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input46 [ 621.732139][T15072] dvb-usb: schedule remote query interval to 150 msecs. [ 621.745091][T15072] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 621.903209][T15072] dvb-usb: bulk message failed: -22 (1/0) [ 621.903345][T15072] dvb-usb: error while querying for an remote control event. [ 622.060461][T15072] dvb-usb: bulk message failed: -22 (1/0) [ 622.067944][T15072] dvb-usb: error while querying for an remote control event. [ 622.133870][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2157'. [ 622.157886][T15567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2157'. [ 622.241588][T15072] dvb-usb: bulk message failed: -22 (1/0) [ 622.256544][T15072] dvb-usb: error while querying for an remote control event. [ 622.450627][T15072] dvb-usb: bulk message failed: -22 (1/0) [ 622.460804][T15072] dvb-usb: error while querying for an remote control event. [ 622.660499][T15072] dvb-usb: bulk message failed: -22 (1/0) [ 622.700734][T15072] dvb-usb: error while querying for an remote control event. [ 622.710167][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.981758][T15072] dvb-usb: bulk message failed: -22 (1/0) [ 623.071426][T15072] dvb-usb: error while querying for an remote control event. [ 623.100642][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.174171][T14786] usb 3-1: USB disconnect, device number 13 [ 623.406740][T14786] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 623.692279][T15604] trusted_key: syz.2.2163 sent an empty control message without MSG_MORE. [ 623.741004][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.045606][T15611] pim6reg: entered allmulticast mode [ 624.404510][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.414129][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.640659][T14786] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 624.785329][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.805621][T15617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 624.820577][T14786] usb 4-1: Using ep0 maxpacket: 32 [ 624.837470][T14786] usb 4-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 624.849050][T14786] usb 4-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.873319][T14786] usb 4-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.900393][T14786] usb 4-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 624.934730][T14786] usb 4-1: config 64 interface 0 has no altsetting 0 [ 624.943082][T14786] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 624.954285][T14786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.060576][ T5950] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 625.232141][ T5950] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 625.242187][T14786] usbhid 4-1:64.0: can't add hid device: -71 [ 625.249716][T14786] usbhid 4-1:64.0: probe with driver usbhid failed with error -71 [ 625.270486][ T5832] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 625.292105][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.300147][ T5950] usb 6-1: Product: syz [ 625.300823][T14786] usb 4-1: USB disconnect, device number 18 [ 625.380724][ T5950] usb 6-1: Manufacturer: syz [ 625.385375][ T5950] usb 6-1: SerialNumber: syz [ 625.404239][ T5950] usb 6-1: config 0 descriptor?? [ 625.414893][ T5950] ch341 6-1:0.0: ch341-uart converter detected [ 625.440432][ T5832] usb 7-1: Using ep0 maxpacket: 16 [ 625.459546][ T5832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 625.475724][ T5832] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 625.491197][ T5832] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 625.529644][ T5832] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.550085][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 625.601916][ T5832] usb 7-1: SerialNumber: syz [ 625.635128][T15618] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 625.820869][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.970487][T12114] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 626.122324][T12114] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 626.181043][T12114] usb 4-1: config 7 has no interface number 0 [ 626.187854][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.190471][T12114] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 626.190500][T12114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.190521][T12114] usb 4-1: Product: syz [ 626.190536][T12114] usb 4-1: Manufacturer: syz [ 626.190573][T12114] usb 4-1: SerialNumber: syz [ 626.220936][T15617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.221405][T15617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.223073][T15617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.223641][T15617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.229986][T15617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.232344][T15617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.255474][ T5950] usb 6-1: failed to send control message: -71 [ 626.255552][ T5950] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 626.604004][ T5950] usb 6-1: USB disconnect, device number 71 [ 626.611392][ T5950] ch341 6-1:0.0: device disconnected [ 626.861012][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.972586][T12114] as10x_usb: device has been detected [ 626.980784][T12114] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 627.038744][T12114] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 627.340519][T14786] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 627.359428][T12114] as10x_usb: error during firmware upload part1 [ 627.370765][T12114] Registered device Elgato EyeTV DTT Deluxe [ 627.376296][T12114] usb 4-1: USB disconnect, device number 19 [ 627.400235][T15666] binder: BINDER_SET_CONTEXT_MGR already set [ 627.409004][T15666] binder: 15662:15666 ioctl 4018620d 2000000002c0 returned -16 [ 627.524157][T14786] usb 6-1: unable to get BOS descriptor or descriptor too short [ 627.533958][T14786] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 627.544215][T14786] usb 6-1: can't read configurations, error -71 [ 627.636474][T12114] Unregistered device Elgato EyeTV DTT Deluxe [ 627.640854][ T5832] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 627.656224][T12114] as10x_usb: device has been disconnected [ 627.789566][ T5832] usb 7-1: USB disconnect, device number 12 [ 627.927268][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.190609][ T5832] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 628.198307][ T5877] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 628.214861][ T30] audit: type=1326 audit(1760423575.411:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 628.239466][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.472491][ T30] audit: type=1326 audit(1760423575.411:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 628.631392][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 628.643346][ T5877] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 628.663283][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.688704][ T5832] usb 7-1: unable to get BOS descriptor or descriptor too short [ 628.701065][ T30] audit: type=1326 audit(1760423575.411:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 628.857132][ T5877] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 628.867870][ T5877] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 628.877397][ T5832] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 628.889474][ T5832] usb 7-1: can't read configurations, error -61 [ 628.890459][ T30] audit: type=1326 audit(1760423575.411:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 628.895861][ T5877] usb 3-1: Manufacturer: syz [ 628.958873][ T30] audit: type=1326 audit(1760423575.411:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 628.958881][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.958919][ T30] audit: type=1326 audit(1760423575.411:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 629.080417][ T5832] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 629.261045][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.261663][ T5877] usb 3-1: config 0 descriptor?? [ 629.275821][ T30] audit: type=1326 audit(1760423575.411:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 629.308718][ T30] audit: type=1326 audit(1760423575.411:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 629.361027][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 629.370195][ T5832] usb 7-1: unable to get BOS descriptor or descriptor too short [ 629.386948][ T5832] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 629.403490][ T30] audit: type=1326 audit(1760423575.411:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 629.430708][ T5832] usb 7-1: can't read configurations, error -61 [ 629.458738][ T5832] usb usb7-port1: attempt power cycle [ 629.469448][ T30] audit: type=1326 audit(1760423575.421:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15671 comm="syz.3.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 629.640846][ T5877] rc_core: IR keymap rc-hauppauge not found [ 629.647892][ T5877] Registered IR keymap rc-empty [ 629.654495][ T5877] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 629.672900][ T5877] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input47 [ 629.716434][ T5877] usb 3-1: USB disconnect, device number 14 [ 629.801604][ T5832] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 629.881422][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 629.888616][ T5832] usb 7-1: unable to get BOS descriptor or descriptor too short [ 629.898855][ T5832] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 629.908254][ T5832] usb 7-1: can't read configurations, error -61 [ 630.034486][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.050938][ T5832] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 630.102090][ T5832] usb 7-1: Using ep0 maxpacket: 8 [ 630.109108][ T5832] usb 7-1: unable to get BOS descriptor or descriptor too short [ 630.119815][ T5832] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 630.128097][ T5832] usb 7-1: can't read configurations, error -61 [ 630.155829][ T5832] usb usb7-port1: unable to enumerate USB device [ 630.208549][T15686] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2185'. [ 630.223242][T15686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2185'. [ 631.100654][ T5950] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 631.109463][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.260423][ T5950] usb 7-1: Using ep0 maxpacket: 16 [ 631.274084][ T5950] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 631.290436][ T5950] usb 7-1: config 0 has no interface number 0 [ 631.313212][ T5950] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 631.330403][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.354996][ T5950] usb 7-1: Product: syz [ 631.370379][ T5950] usb 7-1: Manufacturer: syz [ 631.375022][ T5950] usb 7-1: SerialNumber: syz [ 631.411213][ T5950] usb 7-1: config 0 descriptor?? [ 631.427308][ T5950] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 632.098973][ T5950] gspca_spca1528: reg_w err -71 [ 632.130544][ T5950] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 632.141109][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.152929][T15716] syzkaller0: entered promiscuous mode [ 632.158481][T15716] syzkaller0: entered allmulticast mode [ 632.161393][ T5950] usb 7-1: USB disconnect, device number 17 [ 632.309949][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.470833][T15072] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 632.667031][T15072] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.700666][T15072] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 632.730165][T15072] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 632.756624][ T5950] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 632.794276][T15072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.817526][T15072] usb 3-1: Product: syz [ 632.843504][T15072] usb 3-1: Manufacturer: syz [ 632.848182][T15072] usb 3-1: SerialNumber: syz [ 632.864570][T15072] cdc_mbim 3-1:1.0: skipping garbage [ 633.018462][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.029673][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 633.045853][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.061635][T15714] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 633.072475][ T5950] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 633.081774][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.089807][ T5950] usb 4-1: Product: syz [ 633.109659][ T5950] usb 4-1: Manufacturer: syz [ 633.119792][ T5950] usb 4-1: SerialNumber: syz [ 633.268261][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.277576][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 633.277593][ T30] audit: type=1326 audit(1760423580.321:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.5.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 633.317520][ T5950] usb 4-1: config 0 descriptor?? [ 633.323646][ T30] audit: type=1326 audit(1760423580.331:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.5.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 633.346089][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.444012][ T30] audit: type=1326 audit(1760423580.451:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.5.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 633.466496][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.474470][ T5950] usb 4-1: ucan: probing device on interface #0 [ 633.483181][ T5950] usb 4-1: ucan: invalid EP count (1) [ 633.488612][ T5950] usb 4-1: ucan: probe failed; try to update the device firmware [ 633.520603][ T30] audit: type=1326 audit(1760423580.451:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.5.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 633.545311][ T30] audit: type=1326 audit(1760423580.451:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.5.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 633.606027][ T30] audit: type=1326 audit(1760423580.451:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.5.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 633.628527][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.644596][ T5950] usb 4-1: USB disconnect, device number 20 [ 633.707477][T15714] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 633.747268][T15072] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 633.778478][T15743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.859914][T15743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.894909][ T30] audit: type=1326 audit(1760423580.451:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.5.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 633.947118][T15744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.955575][T15072] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 633.970040][T15072] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 634.037186][ T30] audit: type=1326 audit(1760423580.451:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.5.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 634.070903][ T30] audit: type=1326 audit(1760423580.451:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15723 comm="syz.5.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 634.077134][T15072] wwan wwan0: port wwan0mbim0 attached [ 634.225829][T15072] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 62:90:ae:ba:ab:01 [ 634.300713][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.348500][T15072] usb 3-1: USB disconnect, device number 15 [ 634.350690][T14786] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 634.382475][T15072] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 634.534928][ T30] audit: type=1326 audit(1760423581.691:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15749 comm="syz.3.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 634.577979][T14786] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 634.587952][T14786] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 634.598336][T14786] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.612346][T15072] wwan wwan0: port wwan0mbim0 disconnected [ 634.897425][T14786] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 634.906775][T14786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.942188][T14786] usb 7-1: Product: syz [ 634.963300][T14786] usb 7-1: Manufacturer: syz [ 634.976601][T14786] usb 7-1: SerialNumber: syz [ 635.036294][T14786] hub 7-1:1.0: bad descriptor, ignoring hub [ 635.078238][T14786] hub 7-1:1.0: probe with driver hub failed with error -5 [ 635.256160][T14786] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 635.340713][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.348890][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.402899][T14786] usb 7-1: USB disconnect, device number 18 [ 635.600929][T14786] usblp0: removed [ 635.880551][T15072] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 635.999393][T15768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.009744][T15768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.106276][T15770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.144560][T15072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 636.155861][T15072] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.167999][T15770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.176416][T15072] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 636.185616][T15072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.194646][T15770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.209093][T15072] usb 3-1: config 0 descriptor?? [ 636.243195][T15770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.258804][T15770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.270879][T15771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.361719][T15769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.380750][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.696690][T15773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.745120][T15773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.420713][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.715203][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2212'. [ 637.824341][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.230662][T14786] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 638.460931][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.520143][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 638.520163][ T30] audit: type=1326 audit(1760423585.711:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15804 comm="syz.5.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 638.584935][T14786] usb 7-1: Using ep0 maxpacket: 16 [ 638.608489][T14786] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 639.050208][ T30] audit: type=1326 audit(1760423585.711:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15804 comm="syz.5.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 639.079124][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'. [ 639.088259][T14786] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 639.098991][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'. [ 639.108499][T14786] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.144740][ T30] audit: type=1326 audit(1760423585.711:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15804 comm="syz.5.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 639.178790][T14786] usb 7-1: config 1 interface 0 has no altsetting 0 [ 639.186885][T15072] usbhid 3-1:0.0: can't add hid device: -71 [ 639.202615][T14786] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 639.212531][T14786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.221634][T15072] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 639.234147][T14786] usb 7-1: Product: syz [ 639.254353][ T30] audit: type=1326 audit(1760423585.711:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15804 comm="syz.5.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 639.260422][T15072] usb 3-1: USB disconnect, device number 16 [ 639.287571][T14786] usb 7-1: Manufacturer: syz [ 639.320808][T14786] usb 7-1: SerialNumber: syz [ 639.425728][ T30] audit: type=1326 audit(1760423585.711:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15804 comm="syz.5.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 639.489207][ T30] audit: type=1326 audit(1760423585.711:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15804 comm="syz.5.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 639.570581][ T30] audit: type=1326 audit(1760423585.711:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15804 comm="syz.5.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 639.608906][ T30] audit: type=1326 audit(1760423585.711:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15804 comm="syz.5.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 639.614565][T14786] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 639.644219][ T30] audit: type=1326 audit(1760423585.711:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15804 comm="syz.5.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 639.670870][ T30] audit: type=1326 audit(1760423585.761:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15804 comm="syz.5.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47618eec9 code=0x7ffc0000 [ 639.830485][T15072] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 639.980441][T15072] usb 3-1: Using ep0 maxpacket: 32 [ 639.987676][T15072] usb 3-1: config 1 has an invalid interface number: 137 but max is 0 [ 639.997841][T15072] usb 3-1: config 1 has no interface number 0 [ 640.013198][T15072] usb 3-1: config 1 interface 137 has no altsetting 0 [ 640.036811][T15072] usb 3-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 640.057834][T15072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.082118][T15072] usb 3-1: Product: syz [ 640.090635][T15072] usb 3-1: Manufacturer: syz [ 640.099955][T15072] usb 3-1: SerialNumber: syz [ 640.327828][T15072] pl2303 3-1:1.137: required interrupt-in endpoint missing [ 640.362250][T15072] usb 3-1: USB disconnect, device number 17 [ 641.022899][ T5877] usb 7-1: USB disconnect, device number 19 [ 641.126871][ T5877] usblp0: removed [ 641.503374][T15072] net_ratelimit: 3 callbacks suppressed [ 641.503391][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.580788][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.962742][T15863] input: syz1 as /devices/virtual/input/input48 [ 642.629800][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.236364][T15899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.245488][T15899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.661348][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.927083][T15906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2243'. [ 644.060507][T15072] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 644.110521][ T5877] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 644.223744][T15072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.251228][T15072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.262881][T15072] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 644.278649][T15072] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 644.282912][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 644.288516][T15072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.336688][ T5877] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 644.337493][T15072] usb 7-1: config 0 descriptor?? [ 644.361736][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.436270][T15923] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 644.451588][T15923] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 644.503909][ T5877] usb 3-1: config 0 descriptor?? [ 644.540705][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.701332][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.763814][T14786] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 644.847150][T15925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.870047][T15925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.889664][T15925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.903544][T15925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.948750][T15925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.966745][T14786] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 644.980623][T15925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.028725][T15072] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 645.042113][T14786] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 645.051557][T14786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.059651][T14786] usb 6-1: Product: syz [ 645.069838][T14786] usb 6-1: Manufacturer: syz [ 645.088041][T14786] usb 6-1: SerialNumber: syz [ 645.099388][T14786] usb 6-1: config 0 descriptor?? [ 645.114855][T14786] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 645.131141][T14786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 645.165212][T14786] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 645.309957][T15921] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 645.333198][T15921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.343678][T15921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.416287][T14786] usb 6-1: media controller created [ 645.450288][T14786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 645.715882][T14786] DVB: Unable to find symbol mt352_attach() [ 645.766366][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.230623][T14786] DVB: Unable to find symbol nxt6000_attach() [ 646.237142][T14786] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 646.260586][T14786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49 [ 646.343158][ T5832] usb 7-1: reset high-speed USB device number 20 using dummy_hcd [ 646.381349][T14786] dvb-usb: schedule remote query interval to 1000 msecs. [ 646.389246][T14786] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 646.400586][T14786] dvb-usb: bulk message failed: -22 (7/0) [ 646.406558][T14786] dvb-usb: bulk message failed: -22 (7/0) [ 646.417764][T14786] usb 6-1: USB disconnect, device number 74 [ 646.966783][ T3595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.020069][ T5877] usb 3-1: string descriptor 0 read error: -71 [ 647.064036][ T5877] usbhid 3-1:0.0: can't add hid device: -71 [ 647.070089][ T5877] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 647.151227][ T5877] usb 3-1: USB disconnect, device number 18 [ 647.155836][T15934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.171864][T14786] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 647.179575][T15934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.435643][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.560827][T14786] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 647.581513][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.721895][T14786] usb 6-1: Using ep0 maxpacket: 16 [ 647.766273][T14786] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 647.807883][T14786] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 647.821057][ T24] usb 7-1: USB disconnect, device number 20 [ 647.895486][T14786] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 648.080028][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.115307][T15949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.128049][T14786] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 648.137600][T14786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.144811][T15949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.145758][T14786] usb 6-1: Product: syz [ 648.157713][T14786] usb 6-1: Manufacturer: syz [ 648.163221][T14786] usb 6-1: SerialNumber: syz [ 648.327989][T15821] Set syz1 is full, maxelem 65536 reached [ 648.428305][T14786] usb 6-1: USB disconnect, device number 75 [ 648.548968][ T6137] udevd[6137]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.666744][ T30] kauditd_printk_skb: 819 callbacks suppressed [ 648.666761][ T30] audit: type=1326 audit(1760423595.861:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15960 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 648.980631][ T30] audit: type=1326 audit(1760423595.901:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15960 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 649.031260][T15949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.055297][T15949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.091110][ T30] audit: type=1326 audit(1760423595.901:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15960 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 649.102728][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.189794][ T30] audit: type=1326 audit(1760423595.901:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15960 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 649.290513][T14786] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 649.400427][T15072] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 649.458034][T14786] usb 7-1: Using ep0 maxpacket: 8 [ 649.469625][T14786] usb 7-1: config 0 has no interfaces? [ 649.475285][T14786] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 649.503745][T14786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.536229][ T30] audit: type=1326 audit(1760423595.911:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15960 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 649.549746][T14786] usb 7-1: config 0 descriptor?? [ 649.601816][T15072] usb 6-1: config 0 has an invalid interface number: 81 but max is 2 [ 649.610167][T15072] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.631732][ T30] audit: type=1326 audit(1760423595.911:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15960 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 649.647063][T15072] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 649.656643][ T30] audit: type=1326 audit(1760423595.911:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15960 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 649.698741][ T30] audit: type=1326 audit(1760423595.911:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15960 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 649.721441][T15072] usb 6-1: config 0 has no interface number 0 [ 649.721740][ T30] audit: type=1326 audit(1760423595.911:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15960 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 649.727583][T15072] usb 6-1: config 0 interface 81 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.770522][ T30] audit: type=1326 audit(1760423595.911:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15960 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14f0f8eec9 code=0x7ffc0000 [ 649.782999][T15979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.818590][T15979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.826477][ T5832] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 649.851397][T15967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.862912][T15967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.880709][T15072] usb 6-1: config 0 interface 81 has no altsetting 0 [ 649.883650][T14786] usb 7-1: USB disconnect, device number 21 [ 649.887544][T15072] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=21.7a [ 649.924654][T15072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.950449][T15072] usb 6-1: config 0 descriptor?? [ 649.960484][ T5832] usb 3-1: device descriptor read/64, error -71 [ 649.978350][T15980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.989373][T15980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.001367][T15980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.039037][T15980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.066063][T15980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.086126][T15980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.141737][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.163104][T15970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.174443][T15970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.200556][ T5832] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 650.231834][T15985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.269677][T15985] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.2261'. [ 650.282657][T15985] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 650.404740][T15983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.434382][T15983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.447655][T15072] usb 6-1: string descriptor 0 read error: -71 [ 650.459428][T15072] cdc_ether 6-1:0.81: skipping garbage [ 650.472356][T15072] cdc_ether 6-1:0.81: skipping garbage [ 650.483103][T15072] usb 6-1: bad CDC descriptors [ 650.493583][T15072] usb 6-1: unsupported MDLM descriptors [ 650.513377][T15072] usb 6-1: USB disconnect, device number 76 [ 650.560464][ T5832] usb 3-1: device descriptor read/64, error -71 [ 650.631992][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.670898][ T5832] usb usb3-port1: attempt power cycle [ 651.010524][ T5832] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 651.094638][ T5832] usb 3-1: device descriptor read/8, error -71 [ 651.181428][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.360414][T12114] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 651.391149][ T5832] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 651.433375][ T5832] usb 3-1: device descriptor read/8, error -71 [ 651.542217][ T5832] usb usb3-port1: unable to enumerate USB device [ 651.562357][T12114] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 651.572310][T12114] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 651.595363][T12114] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 651.604683][T12114] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.630610][T12114] usb 7-1: Product: syz [ 651.639880][T12114] usb 7-1: Manufacturer: syz [ 651.654286][T12114] usb 7-1: SerialNumber: syz [ 651.670134][T12114] usb 7-1: config 0 descriptor?? [ 651.686676][T15999] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 651.760837][T15999] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 651.925601][T16005] loop5: detected capacity change from 0 to 7 [ 651.939396][ T6193] Dev loop5: unable to read RDB block 7 [ 651.950027][ T6193] loop5: unable to read partition table [ 651.969241][T15999] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 651.979091][T15999] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 651.987595][ T6193] loop5: partition table beyond EOD, truncated [ 652.009683][T16005] Dev loop5: unable to read RDB block 7 [ 652.025423][T16005] loop5: unable to read partition table [ 652.067080][T16005] loop5: partition table beyond EOD, truncated [ 652.080680][T16005] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 652.221644][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.423520][T12114] Error reading MAC address [ 652.662608][ T5832] usb 7-1: USB disconnect, device number 22 [ 653.365579][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.627271][T16024] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2272'. [ 653.684483][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.695576][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 653.695595][ T30] audit: type=1326 audit(1760423600.861:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.6.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fcfb818eec9 code=0x7ffc0000 [ 653.809929][T16024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 653.916197][T16024] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2272'. [ 653.930606][T16024] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2272'. [ 654.040469][T12114] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 654.132753][T16037] bridge0: entered promiscuous mode [ 654.138631][T16037] vlan0: entered promiscuous mode [ 654.190472][T12114] usb 4-1: Using ep0 maxpacket: 16 [ 654.218648][T12114] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 654.236844][T16041] loop5: detected capacity change from 0 to 7 [ 654.240393][T12114] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.246434][ T6137] Dev loop5: unable to read RDB block 7 [ 654.257520][ T6137] loop5: unable to read partition table [ 654.265014][ T6137] loop5: partition table beyond EOD, truncated [ 654.271264][T12114] usb 4-1: Product: syz [ 654.271286][T12114] usb 4-1: Manufacturer: syz [ 654.271301][T12114] usb 4-1: SerialNumber: syz [ 654.274051][T12114] usb 4-1: config 0 descriptor?? [ 654.294372][T16041] Dev loop5: unable to read RDB block 7 [ 654.300200][T16041] loop5: unable to read partition table [ 654.309288][T12114] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 654.316268][T16041] loop5: partition table beyond EOD, truncated [ 654.327303][T16041] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 654.380473][T15072] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 654.388545][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.468660][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.482180][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.543228][T16048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2280'. [ 654.573434][T16048] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2280'. [ 654.617646][T16048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2280'. [ 654.659048][T15072] usb 7-1: device descriptor read/64, error -71 [ 654.700673][T14786] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 654.838131][T12114] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 654.848404][T12114] visor 4-1:0.0: probe with driver visor failed with error -5 [ 654.852548][T14786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 654.873264][T14786] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 654.901129][T15072] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 654.902151][T14786] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 654.966036][T14786] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 654.976227][T14786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.984714][T14786] usb 3-1: Product: syz [ 654.990848][ T5950] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 654.993471][T14786] usb 3-1: Manufacturer: syz [ 655.019134][T14786] usb 3-1: SerialNumber: syz [ 655.046816][T14786] hub 3-1:1.0: bad descriptor, ignoring hub [ 655.054252][T14786] hub 3-1:1.0: probe with driver hub failed with error -5 [ 655.170573][T15072] usb 7-1: device descriptor read/64, error -71 [ 655.190506][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 655.208582][ T5950] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 967 [ 655.222721][ T5950] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 655.250586][T14786] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 655.267246][ T5950] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 655.290819][T15072] usb usb7-port1: attempt power cycle [ 655.301418][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.309673][ T5950] usb 6-1: Product: syz [ 655.314243][ T5950] usb 6-1: Manufacturer: syz [ 655.318950][ T5950] usb 6-1: SerialNumber: syz [ 655.354365][T12114] usb 4-1: USB disconnect, device number 21 [ 655.420671][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.630549][T15072] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 655.651268][T15072] usb 7-1: device descriptor read/8, error -71 [ 655.900833][T15072] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 655.949650][T15072] usb 7-1: device descriptor read/8, error -71 [ 655.957403][T16045] usb 3-1: reset high-speed USB device number 23 using dummy_hcd [ 655.962606][ T5950] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 655.985601][ T5950] cdc_ncm 6-1:1.0: bind() failure [ 655.998640][ T5950] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 656.006201][ T5950] cdc_ncm 6-1:1.1: bind() failure [ 656.032177][ T5950] usb 6-1: USB disconnect, device number 77 [ 656.061504][T15072] usb usb7-port1: unable to enumerate USB device [ 656.132030][T16045] usb 3-1: device descriptor read/64, error -71 [ 656.380483][T16045] usb 3-1: reset high-speed USB device number 23 using dummy_hcd [ 656.461168][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.510508][T16045] usb 3-1: device descriptor read/64, error -71 [ 656.520518][T14786] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 656.687680][T14786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.709421][T14786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.719797][T14786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 656.739341][T14786] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 656.741388][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.757921][T14786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.793958][T16045] usb 3-1: reset high-speed USB device number 23 using dummy_hcd [ 656.828513][T14786] usb 4-1: config 0 descriptor?? [ 656.848883][T16045] usb 3-1: device descriptor read/8, error -71 [ 657.021350][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.090692][T16045] usb 3-1: reset high-speed USB device number 23 using dummy_hcd [ 657.112214][T16045] usb 3-1: device descriptor read/8, error -71 [ 657.222017][ T10] usb 3-1: USB disconnect, device number 23 [ 657.231267][ T10] usblp0: removed [ 657.380420][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 657.511917][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.563493][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.859933][T16081] loop5: detected capacity change from 0 to 7 [ 658.882764][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 658.893720][T16081] Dev loop5: unable to read RDB block 7 [ 658.899316][T16081] loop5: unable to read partition table [ 658.915486][T16081] loop5: partition table beyond EOD, truncated [ 658.930444][T16081] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 658.984082][T14786] usbhid 4-1:0.0: can't add hid device: -71 [ 658.990158][T14786] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 659.029210][T14786] usb 4-1: USB disconnect, device number 22 [ 659.310637][ T24] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 659.365175][T16089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.392626][T16089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.473360][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 659.510816][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 659.513002][T16094] fuse: blksize only supported for fuseblk [ 659.542159][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 659.600464][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.680586][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 659.740607][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.741224][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 659.834999][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.881091][ T24] usb 6-1: config 0 descriptor?? [ 659.970553][ T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 660.140454][ T10] usb 3-1: device descriptor read/64, error -71 [ 660.157199][T16113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2300'. [ 660.222046][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.299188][ T24] plantronics 0003:047F:FFFF.0023: ignoring exceeding usage max [ 660.313025][T16118] random: crng reseeded on system resumption [ 660.333806][ T24] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 660.390494][ T5832] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 660.430471][ T10] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 660.570526][ T10] usb 3-1: device descriptor read/64, error -71 [ 660.575668][ T5832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 660.587297][ T5832] usb 4-1: not running at top speed; connect to a high speed hub [ 660.597121][ T5832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.607837][ T5832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 660.622396][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.631088][ T5832] usb 4-1: string descriptor 0 read error: -22 [ 660.637450][ T5832] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 660.647028][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.670684][ T5832] usb 4-1: 0:2 : does not exist [ 660.690749][ T10] usb usb3-port1: attempt power cycle [ 661.040495][ T10] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 661.081138][ T10] usb 3-1: device descriptor read/8, error -71 [ 661.169345][T16132] team_slave_0: entered allmulticast mode [ 661.232433][T16134] i2c i2c-0: Invalid block read size 255 [ 661.350796][ T10] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 661.392051][ T10] usb 3-1: device descriptor read/8, error -71 [ 661.484573][ T5832] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 661.493139][T16144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.504130][ T10] usb usb3-port1: unable to enumerate USB device [ 661.504402][ T5832] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 661.511050][T16144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.531054][T12114] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 661.532117][ T5832] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 661.585341][ T5832] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 661.603648][ T5832] usb 4-1: USB disconnect, device number 23 [ 661.665416][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.680518][T12114] usb 7-1: Using ep0 maxpacket: 8 [ 661.687464][T12114] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 661.696562][T12114] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 661.707859][T12114] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 661.719625][T12114] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 661.730709][T12114] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 661.745018][T12114] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 661.752837][T12114] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 661.764157][T12114] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 661.775927][T12114] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 661.787060][T12114] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 661.799471][T12114] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 661.807143][T12114] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 661.818819][T12114] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 661.830903][T12114] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 661.842134][T12114] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 661.856370][T12114] usb 7-1: string descriptor 0 read error: -22 [ 661.863078][T12114] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 661.872189][T12114] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.892880][T12114] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 662.154800][T12114] usb 7-1: USB disconnect, device number 27 [ 662.311682][ T5832] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 662.319245][T16159] vlan2: entered allmulticast mode [ 662.326302][T16159] erspan0: entered allmulticast mode [ 662.381859][T15072] usb 6-1: USB disconnect, device number 78 [ 662.470501][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 662.482730][ T5832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 662.495464][ T5832] usb 4-1: config 255 has an invalid interface number: 190 but max is 1 [ 662.504006][ T5832] usb 4-1: config 255 has an invalid interface number: 137 but max is 1 [ 662.532958][ T5832] usb 4-1: config 255 has no interface number 0 [ 662.539258][ T5832] usb 4-1: config 255 has no interface number 1 [ 662.566678][ T5832] usb 4-1: config 255 interface 190 has no altsetting 0 [ 662.591023][ T5832] usb 4-1: config 255 interface 137 has no altsetting 0 [ 662.615379][ T5832] usb 4-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04 [ 662.629622][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.650527][ T5832] usb 4-1: Product: syz [ 662.662698][ T5832] usb 4-1: Manufacturer: syz [ 662.689945][ T5832] usb 4-1: SerialNumber: syz [ 662.709025][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.786673][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.841942][T16165] syzkaller0: entered promiscuous mode [ 662.848673][T16165] syzkaller0: entered allmulticast mode [ 662.888484][T16165] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 662.980379][ T5832] usb 4-1: USB disconnect, device number 24 [ 663.745540][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.781318][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.879067][T16212] netlink: 'syz.1.2327': attribute type 4 has an invalid length. [ 665.034516][T16216] FAULT_INJECTION: forcing a failure. [ 665.034516][T16216] name failslab, interval 1, probability 0, space 0, times 0 [ 665.047670][T16216] CPU: 1 UID: 0 PID: 16216 Comm: syz.2.2328 Not tainted syzkaller #0 PREEMPT(full) [ 665.047686][T16216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 665.047693][T16216] Call Trace: [ 665.047699][T16216] [ 665.047703][T16216] dump_stack_lvl+0x189/0x250 [ 665.047720][T16216] ? __pfx____ratelimit+0x10/0x10 [ 665.047735][T16216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.047751][T16216] ? __pfx__printk+0x10/0x10 [ 665.047769][T16216] should_fail_ex+0x414/0x560 [ 665.047787][T16216] should_failslab+0xa8/0x100 [ 665.047801][T16216] kmem_cache_alloc_noprof+0x74/0x6e0 [ 665.047812][T16216] ? __send_signal_locked+0x22a/0xeb0 [ 665.047822][T16216] ? sig_get_ucounts+0x26/0x450 [ 665.047833][T16216] ? sig_get_ucounts+0x3e4/0x450 [ 665.047846][T16216] __send_signal_locked+0x22a/0xeb0 [ 665.047861][T16216] send_sig+0x88/0xf0 [ 665.047873][T16216] sk_stream_error+0xa9/0x120 [ 665.047886][T16216] tcp_sendmsg_locked+0x4ea5/0x5540 [ 665.047910][T16216] ? look_up_lock_class+0x74/0x170 [ 665.047922][T16216] ? register_lock_class+0x51/0x320 [ 665.047938][T16216] ? __lock_acquire+0xab9/0xd20 [ 665.047956][T16216] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 665.047967][T16216] ? __local_bh_enable_ip+0x12d/0x1c0 [ 665.047983][T16216] ? __local_bh_enable_ip+0x12d/0x1c0 [ 665.048002][T16216] tcp_sendmsg+0x2f/0x50 [ 665.048014][T16216] __sock_sendmsg+0xe5/0x270 [ 665.048029][T16216] __sys_sendto+0x3bd/0x520 [ 665.048043][T16216] ? __pfx___sys_sendto+0x10/0x10 [ 665.048055][T16216] ? count_memcg_event_mm+0x21/0x260 [ 665.048076][T16216] ? exc_page_fault+0x82/0x100 [ 665.048087][T16216] ? do_user_addr_fault+0xc85/0x1380 [ 665.048100][T16216] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 665.048114][T16216] __x64_sys_sendto+0xde/0x100 [ 665.048129][T16216] do_syscall_64+0xfa/0xfa0 [ 665.048139][T16216] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.048149][T16216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.048159][T16216] ? clear_bhb_loop+0x60/0xb0 [ 665.048171][T16216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.048181][T16216] RIP: 0033:0x7ff7f9d90d5c [ 665.048192][T16216] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 665.048201][T16216] RSP: 002b:00007ff7faca0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 665.048213][T16216] RAX: ffffffffffffffda RBX: 00007ff7faca0fc0 RCX: 00007ff7f9d90d5c [ 665.048220][T16216] RDX: 0000000000000020 RSI: 00007ff7faca1010 RDI: 0000000000000003 [ 665.048227][T16216] RBP: 0000000000000000 R08: 00007ff7faca0f14 R09: 000000000000000c [ 665.048233][T16216] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 665.048240][T16216] R13: 00007ff7faca0f68 R14: 00007ff7faca1010 R15: 0000000000000000 [ 665.048255][T16216] [ 665.449095][T16219] netlink: 'syz.1.2327': attribute type 4 has an invalid length. [ 665.806562][T16223] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2331'. [ 665.831019][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.839193][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.078225][T16230] netlink: 'syz.2.2334': attribute type 1 has an invalid length. [ 666.221107][T16230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2334'. [ 666.246782][T16230] 8021q: adding VLAN 0 to HW filter on device bond4 [ 666.470487][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 666.750753][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 666.763414][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.780631][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.796586][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 666.827828][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 666.837250][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.850709][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 666.860992][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.861469][ T10] usb 7-1: config 0 descriptor?? [ 667.000537][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 667.007610][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 667.024268][T16247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.033757][T16247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.080463][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 667.101338][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 667.112727][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 667.130654][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 667.186304][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 667.213685][T16250] input: syz0 as /devices/virtual/input/input50 [ 667.366263][ T10] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 667.382303][ T24] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 667.393228][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.396427][ T10] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 667.450508][ T10] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 667.472567][ T10] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 667.489235][ T10] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 667.507321][ T24] usb 3-1: Product: syz [ 667.516954][T16252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.525779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.538703][ T10] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 667.548940][T16252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.559732][ T10] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 667.568047][ T10] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 667.571259][ T24] usb 3-1: Manufacturer: syz [ 667.587956][ T10] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 667.596905][ T10] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 667.608886][ T24] usb 3-1: SerialNumber: syz [ 667.612054][ T10] microsoft 0003:045E:07DA.0024: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 667.625778][ T10] microsoft 0003:045E:07DA.0024: no inputs found [ 667.633435][ T10] microsoft 0003:045E:07DA.0024: could not initialize ff, continuing anyway [ 667.645304][ T24] usb 3-1: config 0 descriptor?? [ 667.692905][ T10] usb 7-1: USB disconnect, device number 28 [ 667.715330][T16254] fido_id[16254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 667.826871][T15072] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 667.911334][ T24] net_ratelimit: 2 callbacks suppressed [ 667.911347][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.988515][T16242] sctp: [Deprecated]: syz.2.2336 (pid 16242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 667.988515][T16242] Use struct sctp_sack_info instead [ 668.005287][T15072] usb 4-1: Using ep0 maxpacket: 16 [ 668.018424][T15072] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 668.062654][T15072] usb 4-1: config 0 has no interface number 0 [ 668.104500][T15072] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 668.132375][ T10] usb 3-1: USB disconnect, device number 29 [ 668.192309][T15072] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 668.222098][T15072] usb 4-1: config 0 interface 41 has no altsetting 0 [ 668.231101][T15072] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 668.241973][T15072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.250065][T15072] usb 4-1: Product: syz [ 668.269210][T15072] usb 4-1: Manufacturer: syz [ 668.277136][T15072] usb 4-1: SerialNumber: syz [ 668.293641][T15072] usb 4-1: config 0 descriptor?? [ 668.304941][T16253] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 668.317678][T16253] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 668.534920][T16252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 668.543283][T16252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 668.615366][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2341'. [ 668.861235][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.940985][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.954421][T15072] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 669.060447][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 669.234651][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.245667][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.257983][ T10] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 669.268635][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 669.275831][T14154] Bluetooth: hci0: command 0x0c1a tx timeout [ 669.282648][ T5832] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 669.332160][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.390937][ T10] usb 3-1: config 0 descriptor?? [ 669.510754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.519595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.528037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.537128][T15072] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 669.598462][T16273] fuse: Bad value for 'fd' [ 669.603928][T16273] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2345'. [ 669.627044][T16261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.650687][T16262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.662984][T16261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.669913][T16262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.740883][T15072] usb 7-1: Using ep0 maxpacket: 32 [ 669.808741][T15072] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 669.835641][T15072] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.858507][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.909487][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2342'. [ 669.909505][T15072] usb 7-1: Product: syz [ 669.949234][T15072] usb 7-1: Manufacturer: syz [ 669.971249][T15072] usb 7-1: SerialNumber: syz [ 669.981421][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.982956][T16261] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2342'. [ 670.014586][T15072] usb 7-1: config 0 descriptor?? [ 670.029093][ T10] hid-led 0003:0FC5:B080.0025: probe with driver hid-led failed with error -71 [ 670.053006][T15072] ftdi_sio 7-1:0.0: Ignoring interface reserved for JTAG [ 670.079545][ T10] usb 3-1: USB disconnect, device number 30 [ 670.280489][ T5950] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 670.328320][ T5877] usb 4-1: USB disconnect, device number 25 [ 670.335590][T16252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.344438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.370750][ T3595] usb 7-1: USB disconnect, device number 29 [ 670.447055][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 670.525593][T16290] macsec1: entered promiscuous mode [ 670.534704][ T5950] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 670.535453][T16290] team0: Device macsec1 is already an upper device of the team interface [ 670.569604][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.618263][ T5950] usb 6-1: Product: syz [ 670.638090][ T5950] usb 6-1: Manufacturer: syz [ 670.670713][ T5950] usb 6-1: SerialNumber: syz [ 670.712774][ T5950] r8152-cfgselector 6-1: Unknown version 0x0000 [ 670.719067][ T5950] r8152-cfgselector 6-1: config 0 descriptor?? [ 671.163196][T16280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.230765][T16280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.342912][T14154] Bluetooth: hci1: command 0x0c1a tx timeout [ 671.350155][ T5832] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 671.381847][ T5832] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 671.571108][ T5950] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 671.643848][T16309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.654139][T16309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.686753][T16309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.709827][T16309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.751062][ T5950] usb 7-1: Using ep0 maxpacket: 32 [ 671.759840][ T5950] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 671.771782][ T5950] usb 7-1: config 0 has no interface number 0 [ 671.784869][ T5950] usb 7-1: config 0 interface 184 has no altsetting 0 [ 671.813242][ T5950] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 671.830569][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.848162][ T5950] usb 7-1: Product: syz [ 671.857505][ T5950] usb 7-1: Manufacturer: syz [ 671.866641][ T5950] usb 7-1: SerialNumber: syz [ 671.881665][ T5950] usb 7-1: config 0 descriptor?? [ 671.897310][ T5950] smsc75xx v1.0.0 [ 672.539351][ T5950] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 672.550488][ T5950] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 673.102376][ T5877] net_ratelimit: 4 callbacks suppressed [ 673.102394][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.128833][ T5877] r8152-cfgselector 6-1: USB disconnect, device number 79 [ 673.290444][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 673.416661][T16324] syzkaller1: entered promiscuous mode [ 673.420499][T14154] Bluetooth: hci3: command 0x0c1a tx timeout [ 673.422377][T16324] syzkaller1: entered allmulticast mode [ 673.435531][ T5832] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 673.453028][ T5832] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 673.486304][ T10] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 673.518035][ T10] usb 3-1: config 1 has no interface number 0 [ 673.552451][ T10] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 673.569213][ T5950] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 673.584955][ T5950] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 673.595500][ T10] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 16 [ 673.605302][ T5950] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 673.616960][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 673.626744][ T5950] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 673.635071][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.645861][ T10] usb 3-1: Product: syz [ 673.652815][ T5950] usb 7-1: USB disconnect, device number 30 [ 673.665460][ T10] usb 3-1: Manufacturer: syz [ 673.680721][ T10] usb 3-1: SerialNumber: syz [ 673.706919][T16317] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 673.721535][T16317] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 673.747256][ T10] usb 3-1: Expected 3 endpoints, found: 2 [ 673.997587][T16345] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2363'. [ 674.141319][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.357799][T16350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2365'. [ 674.451042][ T5950] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 674.772182][T16356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.783170][T16356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.812102][ T5950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.832532][ T5950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.843031][ T5950] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 674.856091][ T5950] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 674.865182][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.876735][ T5950] usb 7-1: config 0 descriptor?? [ 674.941394][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.015467][T16366] netlink: 'syz.5.2370': attribute type 5 has an invalid length. [ 675.027634][T16366] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2370'. [ 675.186771][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.333859][ T5950] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 675.502627][T14154] Bluetooth: hci5: command 0x0c1a tx timeout [ 675.552335][T16347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.600220][T16347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.675509][ T5832] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 675.749012][T15072] usb 7-1: USB disconnect, device number 31 [ 675.809126][ T5832] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 675.850478][ T5950] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 676.000196][T16374] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 676.037916][T16369] fido_id[16369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 676.086694][T12114] usb 3-1: USB disconnect, device number 31 [ 676.111019][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 676.118683][ T5950] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 676.142226][ T5950] usb 6-1: config 0 has no interface number 0 [ 676.167258][ T5950] usb 6-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 676.176962][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.187585][ T5950] usb 6-1: Product: syz [ 676.193336][ T5950] usb 6-1: Manufacturer: syz [ 676.198267][ T5950] usb 6-1: SerialNumber: syz [ 676.211107][ T5950] usb 6-1: config 0 descriptor?? [ 676.221513][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.444610][T16371] bond3: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 676.459300][T16371] bond3 (unregistering): Released all slaves [ 676.631175][ T5950] go7007 6-1:0.41: probe with driver go7007 failed with error -12 [ 676.709665][ T5950] usb 6-1: USB disconnect, device number 80 [ 677.030695][T16398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.057178][T16398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.431037][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.980710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.989382][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.060589][ T5832] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 678.067772][ T5822] Bluetooth: hci2: command 0x0c1a tx timeout [ 678.147105][ T5832] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 678.297292][T16411] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2379'. [ 678.460699][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.110501][ T5877] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 679.305536][ T5877] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 679.342840][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.504083][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.663064][T16418] netlink: 'syz.2.2382': attribute type 1 has an invalid length. [ 679.673310][ T5877] usb 4-1: Product: syz [ 679.681361][ T5877] usb 4-1: Manufacturer: syz [ 679.711576][ T5877] usb 4-1: SerialNumber: syz [ 679.720576][ T5950] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 680.042936][ T5950] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 680.062742][ T5950] usb 6-1: config 8 has no interface number 0 [ 680.077531][ T5950] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 680.100347][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.109418][ T5950] usb 6-1: config 8 interface 177 has no altsetting 0 [ 680.116636][ T5950] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 680.126971][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.157872][T16416] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 680.228909][T12114] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 680.326149][ T30] audit: type=1326 audit(1760423627.521:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb818eec9 code=0x7ffc0000 [ 680.540973][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.598295][ T30] audit: type=1326 audit(1760423627.561:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcfb818eec9 code=0x7ffc0000 [ 680.600203][ T4395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.649353][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.659089][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.677951][ T30] audit: type=1326 audit(1760423627.561:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb818eec9 code=0x7ffc0000 [ 680.704791][T12114] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 680.722558][T12114] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 680.726101][T16437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.741352][T12114] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 680.801036][T12114] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.811456][T16437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.814870][T16422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 680.845904][T12114] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.881359][ T30] audit: type=1326 audit(1760423627.561:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcfb818eec9 code=0x7ffc0000 [ 680.968760][T16437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.979568][T16437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.995269][T16437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.012727][T16437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.023062][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.119997][ T4395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.128964][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.141356][T16422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.151742][ T30] audit: type=1326 audit(1760423627.561:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb818eec9 code=0x7ffc0000 [ 681.198739][ T30] audit: type=1326 audit(1760423627.561:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcfb818eec9 code=0x7ffc0000 [ 681.251206][ T30] audit: type=1326 audit(1760423627.561:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb818eec9 code=0x7ffc0000 [ 681.281281][T16422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.303845][ T30] audit: type=1326 audit(1760423627.561:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfb818eec9 code=0x7ffc0000 [ 681.333825][ T30] audit: type=1326 audit(1760423627.571:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb818eec9 code=0x7ffc0000 [ 681.357191][ T30] audit: type=1326 audit(1760423627.581:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16429 comm="syz.6.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcfb818eec9 code=0x7ffc0000 [ 681.866805][T16445] ip6t_rpfilter: unknown options [ 681.970511][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 682.007206][T16447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2391'. [ 682.017456][T16447] 8021q: VLANs not supported on nlmon0 [ 682.120680][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 682.128050][ T24] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 682.140214][ T24] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 682.150026][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.158979][ T24] usb 7-1: Product: syz [ 682.163838][ T24] usb 7-1: Manufacturer: syz [ 682.168674][ T24] usb 7-1: SerialNumber: syz [ 682.210641][ T24] usb 7-1: config 0 descriptor?? [ 682.243284][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 682.331173][ T24] usb 7-1: setting power ON [ 682.335885][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 682.365793][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 682.384320][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 682.401535][ T24] usb 7-1: media controller created [ 682.431715][T16443] dvb-usb: bulk message failed: -22 (3/0) [ 682.462165][T16443] cxusb: i2c wr: len=86 is too big! [ 682.462165][T16443] [ 682.584214][ T5950] usb 6-1: string descriptor 0 read error: -71 [ 682.588454][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 682.615871][ C0] ir_toy 6-1:8.177: out urb status: -71 [ 682.722459][T15072] usb 3-1: USB disconnect, device number 32 [ 682.743561][ T24] usb 7-1: selecting invalid altsetting 6 [ 682.749406][ T24] usb 7-1: digital interface selection failed (-22) [ 682.761191][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 682.771133][ T24] usb 7-1: setting power OFF [ 682.775789][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 682.782182][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 682.802374][ T24] (NULL device *): no alternate interface [ 682.889513][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 682.913323][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 682.935272][ T5877] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 682.946795][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 682.960161][ T5877] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 682.984429][ T24] usb 7-1: USB disconnect, device number 32 [ 683.043400][ T5877] usb 4-1: USB disconnect, device number 26 [ 683.140474][ T5950] ir_toy 6-1:8.177: could not write reset command: -110 [ 683.153080][ T5950] ir_toy 6-1:8.177: probe with driver ir_toy failed with error -110 [ 683.201830][ T5950] usb 6-1: USB disconnect, device number 81 [ 683.344817][T16473] syzkaller1: entered promiscuous mode [ 683.363105][T16473] syzkaller1: entered allmulticast mode [ 683.753535][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 683.774307][ T5877] net_ratelimit: 4 callbacks suppressed [ 683.774326][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.962466][ T24] usb 3-1: config 3 has an invalid interface number: 168 but max is 0 [ 683.970752][ T24] usb 3-1: config 3 has no interface number 0 [ 683.990858][ T24] usb 3-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 684.004025][ T24] usb 3-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 684.016775][ T24] usb 3-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 684.028710][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 684.037855][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.084584][T16478] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 684.232141][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.306974][ T24] usb 3-1: string descriptor 0 read error: -71 [ 684.318939][ T24] keyspan 3-1:3.168: Keyspan 2 port adapter converter detected [ 684.330264][ T24] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 1 [ 684.341798][ T24] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 84 [ 684.350099][ T24] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 2 [ 684.380789][ T24] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 684.591779][ T24] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 88 [ 684.648721][ T24] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 6 [ 684.659504][ T24] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 684.684196][ T24] usb 3-1: USB disconnect, device number 33 [ 684.694560][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 684.723150][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 684.739548][ T24] keyspan 3-1:3.168: device disconnected [ 684.780761][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.993989][T16498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.012329][T16498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.054735][T16498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.073939][T16500] netlink: 400 bytes leftover after parsing attributes in process `syz.2.2406'. [ 685.084587][T16498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.161437][T15072] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 685.320580][T15072] usb 7-1: Using ep0 maxpacket: 32 [ 685.344593][T15072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.355968][T15072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.380520][T15072] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 685.396621][T15072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.446779][T15072] usb 7-1: config 0 descriptor?? [ 685.746203][ T1146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.755168][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.766464][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.835795][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.843783][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.936324][T15072] ft260 0003:0403:6030.0027: unknown main item tag 0x7 [ 686.127471][T15072] ft260 0003:0403:6030.0027: chip code: 6424 8183 [ 686.461150][ T4395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.470151][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.485098][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.558143][T16496] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 686.570424][T16496] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 686.674999][T15072] usb 7-1: USB disconnect, device number 33 [ 686.811263][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.957704][T16531] random: crng reseeded on system resumption [ 687.680665][T15072] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 687.830565][T15072] usb 7-1: device descriptor read/64, error -71 [ 688.040537][T14786] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 688.070483][T15072] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 688.202624][T14786] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.210461][T15072] usb 7-1: device descriptor read/64, error -71 [ 688.230737][T14786] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 688.239954][T14786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.265844][T14786] usb 6-1: config 0 descriptor?? [ 688.343725][T15072] usb usb7-port1: attempt power cycle [ 688.374384][T16566] loop5: detected capacity change from 0 to 7 [ 688.390967][ T6137] Dev loop5: unable to read RDB block 7 [ 688.396866][ T6137] loop5: unable to read partition table [ 688.403488][ T6137] loop5: partition table beyond EOD, truncated [ 688.411514][T16566] Dev loop5: unable to read RDB block 7 [ 688.420288][T16566] loop5: unable to read partition table [ 688.426333][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 688.435047][T16566] loop5: partition table beyond EOD, truncated [ 688.444312][T16566] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 688.555534][T16568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.564260][T16568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.576270][T16568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.587149][T16568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.598739][T16569] netlink: 'syz.1.2422': attribute type 10 has an invalid length. [ 688.607542][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 688.614593][T16568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.630042][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 688.642309][T16569] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 688.649483][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.658024][T16568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.673671][ T24] usb 3-1: config 0 descriptor?? [ 688.680778][T15072] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 688.684261][ T24] gspca_main: sq930x-2.14.0 probing 041e:403c [ 688.711188][T15072] usb 7-1: device descriptor read/8, error -71 [ 688.819831][T16571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.831208][T16571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.851156][T16571] netlink: 'syz.1.2422': attribute type 2 has an invalid length. [ 688.886017][T16571] : entered promiscuous mode [ 688.937471][ T5877] net_ratelimit: 2 callbacks suppressed [ 688.937487][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.961160][T16557] kAFS: unable to lookup cell '' [ 688.990838][T15072] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 689.011043][T15072] usb 7-1: device descriptor read/8, error -71 [ 689.121266][T15072] usb usb7-port1: unable to enumerate USB device [ 689.421454][ T24] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 689.427604][ T24] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 689.449474][ T24] usb 3-1: USB disconnect, device number 34 [ 689.501654][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.511057][T15072] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 689.670856][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.682608][T15072] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 689.694883][T15072] usb 4-1: can't read configurations, error -61 [ 689.850479][T15072] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 689.940479][T16576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.952140][T16576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.963194][T16576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.972861][T16576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.983813][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.003784][T15072] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 690.011696][T15072] usb 4-1: can't read configurations, error -61 [ 690.018584][T15072] usb usb4-port1: attempt power cycle [ 690.360541][T15072] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 690.417581][T15072] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 690.427780][T15072] usb 4-1: can't read configurations, error -61 [ 690.600539][T15072] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 691.071587][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.114216][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.221254][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.250487][T14786] usb 6-1: string descriptor 0 read error: -71 [ 691.260922][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.263351][T15072] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 691.287754][T15072] usb 4-1: can't read configurations, error -61 [ 691.312094][T15072] usb usb4-port1: unable to enumerate USB device [ 691.346115][T14786] usbhid 6-1:0.0: can't add hid device: -71 [ 691.374190][T14786] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 691.415832][T14786] usb 6-1: USB disconnect, device number 82 [ 691.525579][T16600] input: syz1 as /devices/virtual/input/input53 [ 691.641565][T16600] loop4: detected capacity change from 0 to 7 [ 691.659358][T16600] Dev loop4: unable to read RDB block 7 [ 691.671487][T16600] loop4: unable to read partition table [ 691.889335][T16600] loop4: partition table beyond EOD, truncated [ 691.909176][T16600] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 692.220973][ T1146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.229787][T15072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.050489][T14786] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 693.217748][T14786] usb 3-1: config 0 has no interfaces? [ 693.226167][T14786] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 693.240541][T14786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.264838][T14786] usb 3-1: config 0 descriptor?? [ 693.483232][T16616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.514363][T16616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.601481][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.692893][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.794866][T15072] usb 3-1: USB disconnect, device number 35 [ 693.974080][T16639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.997102][T16639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.072506][T16639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.085853][T16639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.217714][T16639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.249329][T16639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.380590][T14786] net_ratelimit: 3 callbacks suppressed [ 694.380610][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.435698][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2440'. [ 694.471286][T16647] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2439'. [ 695.276073][T12114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.398151][T16655] loop5: detected capacity change from 0 to 7 [ 695.420904][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.434871][T16655] Dev loop5: unable to read RDB block 7 [ 695.447404][T16655] loop5: unable to read partition table [ 695.463421][T16655] loop5: partition table beyond EOD, truncated [ 695.486250][T16655] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 696.060595][T15072] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 696.223504][T15072] usb 6-1: Using ep0 maxpacket: 8 [ 696.236651][T15072] usb 6-1: unable to get BOS descriptor or descriptor too short [ 696.259167][T15072] usb 6-1: config 8 has an invalid interface number: 79 but max is 0 [ 696.269384][T15072] usb 6-1: config 8 has no interface number 0 [ 696.276215][T15072] usb 6-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 696.287764][T15072] usb 6-1: config 8 interface 79 has no altsetting 0 [ 696.365020][T15072] usb 6-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 696.374868][T15072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=107 [ 696.391335][T15072] usb 6-1: Product: syz [ 696.395717][T15072] usb 6-1: Manufacturer: syz [ 696.400846][T15072] usb 6-1: SerialNumber: syz [ 696.460686][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.660300][T15072] usb 6-1: bad CDC descriptors [ 696.746739][T15072] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 697.078108][T15072] snd-usb-audio 6-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 697.235661][ T6137] udevd[6137]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.258798][T15072] usb 6-1: USB disconnect, device number 83 [ 697.403713][T16681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.414382][T16681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.503470][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.928239][T16690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.936790][T14786] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 697.979284][T16690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.029685][T16690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.070586][T14786] usb 3-1: device descriptor read/64, error -71 [ 698.204114][T16692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.221058][T16692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.311328][T16691] IPv6: NLM_F_CREATE should be specified when creating new route [ 698.890470][T14786] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 699.300559][T14786] usb 3-1: device descriptor read/64, error -71 [ 699.411174][T14786] usb usb3-port1: attempt power cycle [ 699.471937][ T5950] net_ratelimit: 2 callbacks suppressed [ 699.471957][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.486962][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2451'. [ 699.495914][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2451'. [ 699.581007][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.962539][T14786] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 700.031208][T14786] usb 3-1: device descriptor read/8, error -71 [ 700.281281][T14786] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 700.289257][ T5877] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 700.331123][T14786] usb 3-1: device descriptor read/8, error -71 [ 700.390860][ T5832] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 700.449839][T14786] usb usb3-port1: unable to enumerate USB device [ 700.471124][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 700.516344][ T5877] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 700.550572][ T5832] usb 7-1: Using ep0 maxpacket: 32 [ 700.557203][ T5877] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 700.582846][ T5877] usb 6-1: config 166 has no interface number 0 [ 700.601787][ T5832] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 700.609528][T16707] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2454'. [ 700.617457][ T5877] usb 6-1: config 166 has no interface number 1 [ 700.632444][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.641091][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.716433][ T5877] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 700.933043][T16710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.973732][ T5877] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 700.986342][ T5832] usb 7-1: config 0 descriptor?? [ 700.992334][ T5877] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 701.020571][ T5877] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 701.034743][ T5877] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 701.046515][ T5877] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 701.070571][ T5877] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 701.082031][ T5877] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 701.092709][ T5877] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 701.106436][ T5877] usb 6-1: config 166 interface 177 has no altsetting 0 [ 701.113705][T15072] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 701.130449][ T5877] usb 6-1: config 166 interface 34 has no altsetting 0 [ 701.152067][ T5877] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 701.161808][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.169854][ T5877] usb 6-1: Product: syz [ 701.174299][ T5877] usb 6-1: Manufacturer: syz [ 701.178954][ T5877] usb 6-1: SerialNumber: syz [ 701.243564][ T5832] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 701.266049][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 701.528574][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.581098][T16702] dib0700: tx buffer length is larger than 4. Not supported. [ 701.626556][T15072] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 701.783349][T15072] usb 4-1: config 1 has no interface number 1 [ 701.799912][T15072] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 701.823660][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.839084][ T5832] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 701.842346][T15072] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 701.847015][ T5832] usb 7-1: media controller created [ 701.878778][ T5877] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 701.919921][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 702.019012][T15072] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 702.032864][T15072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.045957][T15072] usb 4-1: Product: syz [ 702.060515][T15072] usb 4-1: Manufacturer: syz [ 702.076788][T15072] usb 4-1: SerialNumber: syz [ 702.095299][ T5877] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 702.173189][ T5832] DVB: Unable to find symbol dib7000p_attach() [ 702.187389][ T5832] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 702.437028][ T5877] ums-realtek 6-1:166.34: probe with driver ums-realtek failed with error -5 [ 702.497984][ T5877] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 702.512285][ T5877] uvcvideo 6-1:166.34: No valid video chain found. [ 702.552322][ T5832] rc_core: IR keymap rc-dib0700-rc5 not found [ 702.558471][ T5832] Registered IR keymap rc-empty [ 702.661569][ T5832] dvb-usb: could not initialize remote control. [ 702.668800][ T5877] usb 6-1: USB disconnect, device number 84 [ 702.678514][ T5832] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 702.725580][T15072] usb 4-1: found format II with max.bitrate = 2, frame size=62645 [ 702.735091][T15072] usb 4-1: found format II with max.bitrate = 2, frame size=62645 [ 702.860741][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.879470][T15072] usb 4-1: USB disconnect, device number 31 [ 703.011362][ T5877] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 703.174626][ T5877] usb 6-1: device descriptor read/64, error -71 [ 703.381136][ T65] team0: Port device netdevsim0 removed [ 703.396528][T14154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 703.408426][T14154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 703.422016][ T5877] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 703.436947][T14154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 703.455799][T14154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 703.474824][T14154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 703.500634][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 703.512437][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 703.521803][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 703.530526][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 703.540240][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 703.560885][ T5877] usb 6-1: device descriptor read/64, error -71 [ 703.670879][ T5877] usb usb6-port1: attempt power cycle [ 703.880942][T16738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.890483][T16738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.901847][T14786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.945390][ T65] macsec0: left allmulticast mode [ 703.951011][T16738] ------------[ cut here ]------------ [ 703.956518][T16738] usb 7-1: BOGUS control dir, pipe 80002680 doesn't match bRequestType c0 [ 703.971224][ T5832] usb 7-1: USB disconnect, device number 38 [ 703.978732][ T65] macsec0: left promiscuous mode [ 704.005427][ T65] bridge0: port 3(macsec0) entered disabled state [ 704.039045][T16738] WARNING: CPU: 1 PID: 16738 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 704.049386][T16738] Modules linked in: [ 704.054008][T16738] CPU: 1 UID: 0 PID: 16738 Comm: syz.1.2462 Not tainted syzkaller #0 PREEMPT(full) [ 704.063524][T16738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 704.073971][T16738] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 704.079652][T16738] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 704.099442][T16738] RSP: 0018:ffffc9000d377820 EFLAGS: 00010246 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 704.105597][T16738] RAX: 865f02acb614d400 RBX: ffff88805a80ac00 RCX: 0000000000080000 [ 704.113710][T16738] RDX: ffffc9000e73c000 RSI: 0000000000005804 RDI: 0000000000005805 [ 704.121929][T16738] RBP: 1ffff11003e63718 R08: 0000000000000003 R09: 0000000000000004 [ 704.130030][T16738] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff888032103100 [ 704.138083][T16738] R13: ffff88801f31b8c0 R14: 0000000080002680 R15: ffff888033454f00 [ 704.146107][T16738] FS: 00007f597a7b96c0(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 704.155095][T16738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 704.161709][T16738] CR2: 0000001b30a19ff8 CR3: 000000007590a000 CR4: 00000000003526f0 [ 704.169690][T16738] DR0: fffffffffffffff1 DR1: 64cd6b2aec9cee78 DR2: 0000000000000000 [ 704.177744][T16738] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 704.185771][T16738] Call Trace: [ 704.189058][T16738] [ 704.192043][T16738] usb_start_wait_urb+0x114/0x4c0 [ 704.197084][T16738] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 704.202678][T16738] usb_control_msg+0x232/0x3e0 [ 704.207455][T16738] dib0700_i2c_xfer+0xba7/0xf70 [ 704.212383][T16738] __i2c_transfer+0x874/0x2170 [ 704.217155][T16738] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.222416][T16738] ? __pfx___i2c_transfer+0x10/0x10 [ 704.227624][T16738] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 704.233037][T16738] ? i2c_transfer+0x120/0x3a0 [ 704.237721][T16738] i2c_transfer+0x25b/0x3a0 [ 704.242278][T16738] ? __pfx_i2c_transfer+0x10/0x10 [ 704.247308][T16738] ? _copy_from_user+0x94/0xb0 [ 704.252113][T16738] i2cdev_ioctl_rdwr+0x460/0x740 [ 704.257065][T16738] i2cdev_ioctl+0x64b/0x7f0 [ 704.261596][T16738] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 704.266625][T16738] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 704.271731][T16738] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 704.276762][T16738] ? __se_sys_ioctl+0xea/0x170 [ 704.281559][T16738] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 704.286614][T16738] __se_sys_ioctl+0xfc/0x170 [ 704.291253][T16738] do_syscall_64+0xfa/0xfa0 [ 704.295759][T16738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.301875][T16738] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 704.308038][T16738] ? clear_bhb_loop+0x60/0xb0 [ 704.312782][T16738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.318681][T16738] RIP: 0033:0x7f597998eec9 [ 704.323144][T16738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.342854][T16738] RSP: 002b:00007f597a7b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.351430][T16738] RAX: ffffffffffffffda RBX: 00007f5979be6180 RCX: 00007f597998eec9 [ 704.359462][T16738] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000006 [ 704.367527][T16738] RBP: 00007f5979a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 704.375551][T16738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.383642][T16738] R13: 00007f5979be6218 R14: 00007f5979be6180 R15: 00007f5979d0fa28 [ 704.391654][T16738] [ 704.394685][T16738] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 704.401951][T16738] CPU: 1 UID: 0 PID: 16738 Comm: syz.1.2462 Not tainted syzkaller #0 PREEMPT(full) [ 704.411315][T16738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 704.421390][T16738] Call Trace: [ 704.424669][T16738] [ 704.427595][T16738] dump_stack_lvl+0x99/0x250 [ 704.432174][T16738] ? __asan_memcpy+0x40/0x70 [ 704.436774][T16738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.441963][T16738] ? __pfx__printk+0x10/0x10 [ 704.446556][T16738] vpanic+0x237/0x6d0 [ 704.450532][T16738] ? __pfx_vpanic+0x10/0x10 [ 704.455047][T16738] panic+0xb9/0xc0 [ 704.458757][T16738] ? __pfx_panic+0x10/0x10 [ 704.463165][T16738] __warn+0x31b/0x4b0 [ 704.467136][T16738] ? usb_submit_urb+0x114d/0x18b0 [ 704.472152][T16738] ? usb_submit_urb+0x114d/0x18b0 [ 704.477250][T16738] report_bug+0x2be/0x4f0 [ 704.481567][T16738] ? usb_submit_urb+0x114d/0x18b0 [ 704.486578][T16738] ? usb_submit_urb+0x114d/0x18b0 [ 704.491586][T16738] ? usb_submit_urb+0x114f/0x18b0 [ 704.496595][T16738] handle_bug+0x84/0x160 [ 704.500826][T16738] exc_invalid_op+0x1a/0x50 [ 704.505320][T16738] asm_exc_invalid_op+0x1a/0x20 [ 704.510157][T16738] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 704.515780][T16738] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 704.535372][T16738] RSP: 0018:ffffc9000d377820 EFLAGS: 00010246 [ 704.541430][T16738] RAX: 865f02acb614d400 RBX: ffff88805a80ac00 RCX: 0000000000080000 [ 704.549386][T16738] RDX: ffffc9000e73c000 RSI: 0000000000005804 RDI: 0000000000005805 [ 704.557432][T16738] RBP: 1ffff11003e63718 R08: 0000000000000003 R09: 0000000000000004 [ 704.565394][T16738] R10: dffffc0000000000 R11: fffffbfff1bfa650 R12: ffff888032103100 [ 704.573365][T16738] R13: ffff88801f31b8c0 R14: 0000000080002680 R15: ffff888033454f00 [ 704.581342][T16738] usb_start_wait_urb+0x114/0x4c0 [ 704.586364][T16738] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 704.591908][T16738] usb_control_msg+0x232/0x3e0 [ 704.596666][T16738] dib0700_i2c_xfer+0xba7/0xf70 [ 704.601707][T16738] __i2c_transfer+0x874/0x2170 [ 704.606464][T16738] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.611652][T16738] ? __pfx___i2c_transfer+0x10/0x10 [ 704.616837][T16738] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 704.622196][T16738] ? i2c_transfer+0x120/0x3a0 [ 704.626859][T16738] i2c_transfer+0x25b/0x3a0 [ 704.631622][T16738] ? __pfx_i2c_transfer+0x10/0x10 [ 704.636633][T16738] ? _copy_from_user+0x94/0xb0 [ 704.641391][T16738] i2cdev_ioctl_rdwr+0x460/0x740 [ 704.646317][T16738] i2cdev_ioctl+0x64b/0x7f0 [ 704.650802][T16738] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 704.655811][T16738] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 704.660834][T16738] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 704.665840][T16738] ? __se_sys_ioctl+0xea/0x170 [ 704.670584][T16738] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 704.675594][T16738] __se_sys_ioctl+0xfc/0x170 [ 704.680166][T16738] do_syscall_64+0xfa/0xfa0 [ 704.684651][T16738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.690700][T16738] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 704.696832][T16738] ? clear_bhb_loop+0x60/0xb0 [ 704.701501][T16738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.707812][T16738] RIP: 0033:0x7f597998eec9 [ 704.712219][T16738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.731807][T16738] RSP: 002b:00007f597a7b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.740206][T16738] RAX: ffffffffffffffda RBX: 00007f5979be6180 RCX: 00007f597998eec9 [ 704.748165][T16738] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 0000000000000006 [ 704.756126][T16738] RBP: 00007f5979a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 704.764088][T16738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.772042][T16738] R13: 00007f5979be6218 R14: 00007f5979be6180 R15: 00007f5979d0fa28 [ 704.780010][T16738] [ 704.783367][T16738] Kernel Offset: disabled [ 704.787706][T16738] Rebooting in 86400 seconds..