last executing test programs: 7.311575106s ago: executing program 2 (id=2206): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) sendmsg$rds(0xffffffffffffffff, 0x0, 0x20004080) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) time(&(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/rcu_normal', 0x1, 0x0) write$cgroup_int(r2, &(0x7f0000000780)=0x80000000, 0x12) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x28, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 7.163157017s ago: executing program 2 (id=2207): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x0, 0x5, 0x0, 0x2, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x80086601, 0x0) syz_emit_ethernet(0x3a2, &(0x7f00000008c0)={@empty, @multicast, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "268424", 0x368, 0x2f, 0xff, @empty, @private1, {[@hopopts={0x32, 0x21, '\x00', [@hao={0xc9, 0x10, @empty}, @jumbo, @generic={0x40, 0xed, "ff43e015fd960adf792667fce437eb06bdb98c3b5eb579551c340eceb61474422868e8b8253fa78eba3127af8db89ba8adeee90ac022fcb738599911ac7ea648dc7d5c35ab35848acb5dbb7a0361be31a564c37ffc993bf1dc5a03fb4d84778a22b97ed04f6e1dcdab2b8ca69038d7c5c27007e8fc2487511449d9fc4c778bf552755a29b5bdd31367cd9e787504dfa762f05fa98e74986d31b2e865e1a9e84474c0522e7416f71f47081e5d2b64f89f519ac4056ab5c2db2d2f2c7dad8589c1c5d3effdfcdfc3029c78fd82bfb4f68923abf1a205047b794f4528603318b3445103b288caf7f9a13a2ae77b2e"}, @ra={0x5, 0x2, 0x7}]}, @fragment={0x2c, 0x0, 0xf, 0x0, 0x0, 0x0, 0x80064}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xf6, 0x2, [], "bde2c5e765001e386c0bbd7f4d41c6cd2a071372a02380da1e63e843c3fae27c48a6234dcef1ae8bc9dcb4d919ff52bc6d5222a4cd6b3881dc897fce216cb7df1768eadba81cae5eaea0dc31a32574096025df588db1bb7c47a88c1f4d8eff97a6041cbab647bfc7f59524922496b1173edca86af2ef7a6b3ae15c3e0403ddc89e40de40970e8801f0354d8116685ccbc4d18b4cc7d13f1ae340b82aa9c4a6d376d5c21c9a01c648e515f13e358b65f33a96b1bd16bb30ab11e6dd4827e737e3c8634cedf17d22d1554de697e2af652e3cc988f1a0e82df83b9cfc0f04179101883b7fd5f43f245e0b5e9f3474556b47bdb5b6222cf5"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x40, 0x7], "9272"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0xff81], "953b229d6365bd627aca1d65d5e47e2244bafb86751a0c1fd9842457e0ea1fffd4e5ee8abcf196bcb2a815bce85d65efbca7009950125361375b66c89a3702d2aa16642637b367ba607488a600eebc3db26f082a660ecd763aaa59ffaa7eb2393d8e95df1233afd5529ab4a64582db73a1c3881e74af0ad5db65278f6b33bf93e172e33f9053f97a6d36aa4badd67fcf7e20e87a1ccf45f097b718ed0a7c2183e27137638c1a5b3ed11a8dfe6b7ceccd5918811c6628c092f7ebb66fbda28b5307de854b1ac0b94b"}, {0x8, 0x88be, 0x1, {{0xb, 0x1, 0x4f, 0x3, 0x1, 0x1, 0x5, 0x20}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x4, {{0x4, 0x2, 0x8, 0x2, 0x0, 0x0, 0x4, 0x3}, 0x2, {0x5, 0x4, 0x3, 0x11, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "645bd907bc8f6fdc5b4d0adb38afbb86e37f78a01ff01ca5fec9eddccb83b1495483762501e7aa23aefecc3cbb9057add01c8b814d937819e75c4a0a4139"}}}}}}}, &(0x7f0000000240)={0x1, 0x3, [0x893, 0xf83, 0x18f, 0xaba]}) r5 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsmount(r5, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x3, 0x481c1) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$cgroup_pressure(r7, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', r9, 0x40, 0x80, 0xdd7, 0x2, {{0xa, 0x4, 0x1, 0x9, 0x28, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @rr={0x7, 0x7, 0xe0, [@rand_addr=0x64010101]}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) 5.931266315s ago: executing program 1 (id=2211): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000002c0)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2}, 0x10}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x160}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffbfffff}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0xa, 0x0, 0xf8, 0x3, 0x5, 0x52, 0xaf, 0xfb, 0x6, 0x1, 0xda, 0xc, 0x1, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) recvmmsg(r6, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a00)=""/238, 0xee}], 0x1}}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x160, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 5.589272257s ago: executing program 2 (id=2212): shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) sync() r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x420000, 0x82, 0x8}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) syz_open_dev$I2C(0x0, 0x7ff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0xc}, &(0x7f0000000480)=0x8) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x40086602, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000002c0)={0x9c0000, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9a0918, 0x1, '\x00', @p_u16=&(0x7f0000000240)=0x3fe}}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x201, &(0x7f0000000000)={&(0x7f00000001c0)=""/189, 0xbd}) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010200000000000000000000000005000100070000000900020073797a30000000001400078005001500000000000800124000000000050004000000000015000300686173683a69702c706f72742c6e657400000000050005000a000000"], 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002100010324bd7002fddbdf2501000000405b602c5eb940ebf02ce7cd84af7338b33955098333a1e8fd4c094826bac9971f9b3b0c41f394b591989d051e9efce0654891f520c2afa585a5b86f02878e1d52e7b183042d3e3d053930e10728936e9d12"], 0x14}}, 0x0) 4.810044625s ago: executing program 1 (id=2217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x5c}}, 0x24000800) 4.530530697s ago: executing program 1 (id=2219): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b"], 0x94}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x0) rt_sigaction(0x2f, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x0, 0x0, {[0x20000000002]}}, 0x0, 0x4, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000080)=ANY=[@ANYRESOCT=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a2, 0xc}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x8, 0x7ffc0002}]}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES16=r0], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) 4.071386628s ago: executing program 3 (id=2221): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00030118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.847110014s ago: executing program 3 (id=2222): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcfcde9"], 0x0) syz_usb_disconnect(r0) 3.407304255s ago: executing program 2 (id=2224): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000300)=[{0x0}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r7 = accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0xc57cbba63601781e, &(0x7f0000000100)=0x33a0, 0x4) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r8, &(0x7f0000000000)=0x2b00, 0x12) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 3.218013078s ago: executing program 0 (id=2226): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x3, 0xa9, 0x5, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe8000000000000000000000000000116401010200000000000000ffffffff00ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a01"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.062024784s ago: executing program 0 (id=2227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac000000000000004000", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.945422975s ago: executing program 4 (id=2228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1ff7625c4a67c2ce177313091a4b00b3e712e", 0x13}], 0x3f) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) close(r1) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@allocspi={0x100, 0x16, 0x37569b3bd8402c97, 0x70bd26, 0x25dfdbfc, {{{@in6=@private1, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e23, 0x4, 0x2, 0x120, 0x80, 0x2b}, {@in=@multicast2, 0x4d2, 0x6c}, @in6=@local, {0x2, 0x4, 0xaf, 0x5, 0x6, 0x7ff00000000000, 0x9, 0x6}, {0x3ff, 0x348, 0x4, 0x2}, {0xffff, 0xfff, 0x4}, 0x70bd26, 0x3507, 0x2, 0x0, 0x1, 0x35}, 0x4, 0x450}, [@replay_thresh={0x8, 0xb, 0x1000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800) 2.810624949s ago: executing program 1 (id=2229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) writev(r0, &(0x7f0000002300)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="97931c6ff788d9ca51e52241d7b5197ab27d0baeb95bdab860f533be254d6b3eb5d2950415bda69db3c4867bcac5203bf5e42c39764276ad375f295b6b25aba31b8503b26c54abc6cbf4f0f9c351d8746b29c4669ac957093977f7431992c736bc8547a11b6da9ca0e60f0cf6e546aa1a93598409bcf17733b3814653e6811694d354e0225c1cbe1da73", 0x8a}, {&(0x7f0000002100)="b2c6653289edff56db397fd4a1314b349adf7bf10efb1342db0006818b91e2075f3d3f9b", 0x24}, {&(0x7f0000002140)="eeab80414e23d108e2a021266284630dfb048500f2a9de4bbb03f7e6eeb7e5bcc50dfbfb2a7f3932d88b2aa0506cce559037b097d2a7170193c9e7735b9aa1c05e16dad94edf2c279196dccfc118ac02a5c947c6ee6f65c5f2e7907c3a927d36ebefd92cb0cd068b01d065c6a0891e46e6f3893a626f0a5bf97db9aa0236ee7eda6171b5b21bbfd3ce9a675aca7cbffac8f10532b77c634067a72e4ea9405f4c357cf8e6d95a4530a2139bc1513a920087feb790ddab81e68761cbf55dcdffc91fd5448c5a558c44583d87782062d68f74c3ee3cd91f5bbffab6c325f44933f4786479e01d9b995ef92ad7733d798bea31", 0xf1}, {&(0x7f0000002240)="3a275ee6014b0251696d18cd2825f0e0df1d55464b9baca2d3", 0x19}, {&(0x7f0000002280)="26a7098487d9f981ab0958a05d1d93f0c06bcbe40b1de722dc8fad29", 0x1c}, {&(0x7f00000022c0)="8e2dca15018613e3426388a7a619223e6f7dd36f62cb0bc124ed", 0x1a}], 0x8) r1 = syz_open_dev$sndmidi(&(0x7f0000002380), 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f00000023c0)) r2 = socket$igmp6(0xa, 0x3, 0x2) recvfrom(r2, &(0x7f0000002500)=""/126, 0x7e, 0x20, &(0x7f0000002580)=@rc={0x1f, @none, 0x5a}, 0x80) bind$inet6(r2, &(0x7f0000002600)={0xa, 0x4e22, 0x8000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8e06}, 0x1c) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r3, 0x7b3, &(0x7f0000002640)) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f00000026c0)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, &(0x7f0000002680)="945cafd29e439c01df25b488b1cb"}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000002700)={0x10, 0x1, r4}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002740), 0xa200, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000002780)={0x5, 0x4}) r6 = syz_clone(0x80000, &(0x7f00000027c0)="cef7d710cd854369715cb6e07312a288fdafbbc862ace5786a8a485978b301d6bee2b36427b3ce2cc5ed38", 0x2b, &(0x7f0000002800), &(0x7f0000002840), &(0x7f0000002880)="9d16e4c2d3551a884f8d30bb6929b012d7bc326e45ebfc9711c27e46355fd8b7cc4c9adb0fd7f2ee626e8d04884cf8f8483607876c585efc9b46ae3cf717d2879eed4c812ed65da2d03fe59b19") fcntl$lock(r5, 0x26, &(0x7f0000002900)={0x1, 0x3, 0x1, 0x1b, r6}) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r3, 0x4068aea3, &(0x7f0000002940)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000029c0)={0x0, @in6={{0xa, 0x4e21, 0x6e81, @empty, 0x4}}, 0x5, 0xe8, 0x9, 0x5, 0x8, 0x3, 0x3}, &(0x7f0000002a80)=0x9c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000002ac0)={r7, 0x48, 0x400}, &(0x7f0000002b00)=0x8) sendto$inet(r3, &(0x7f0000002b40)="e15fa63a5eba0e44a3396430cda2c8092cf42c4deef835af611f1cfa295bcc4eb92218b05c75a82f7b5443ae00f427cef2557de42e4c011bbbb026be8adbf694890522fc938775ebd400671856092082948040d01154a08eda1ea299d2406388d3e2cc062c80b444f6d7202a0306d746202c650a667b11dd5d41bf7035cc6195b323f3d767352acc82b75e0d3ef7796a6216185d7827b44ec672ab3f2f1a2fb6c28ea3d8b5b15bf84eb8eea0dad6c8cf611a41638bd6013c3625f2fd99d14c677a5dc8da839d9fe1ba4de478c6", 0xcd, 0x840, &(0x7f0000002c40)={0x2, 0x4e22, @local}, 0x10) r9 = syz_open_dev$sg(&(0x7f0000002c80), 0x6, 0x2401860929ce92c) ioctl$SG_IO(r9, 0x2285, &(0x7f0000003e40)={0x53, 0xfffffffffffffffd, 0xc7, 0x7, @buffer={0x0, 0x1000, &(0x7f0000002cc0)=""/4096}, &(0x7f0000003cc0)="12b77c78182ae4a06b1e15011c3095399f8afb083defa187a50ed8d718314792ab9474e74bdc90a0ff07ed076bae6557b439db3b4ff7398eb3186b3f5cbbc7ced104603398f32a583ff02d15d383fced82e463b5592c36102e19ee07d7eab12cc73414a17ca6a0498d08c534b85a369174d92cf8f8aede0cb76afff9ef592bf89ff35f7a742581448be7e9e44053ae4090e63da43eeacc5229f3117c25945e92d8006b1a130d864e070d1d19311ba86002a9534084c0750d3235c46ba8c87d5aa3a989da247174", &(0x7f0000003dc0)=""/47, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000003e00)}) r10 = syz_open_dev$sndpcmc(&(0x7f0000003ec0), 0x6, 0x440080) ioctl$IOCTL_VMCI_VERSION(r3, 0x79f, &(0x7f0000003f00)=0x80000) keyctl$restrict_keyring(0x1d, 0xfffffffffffffff8, &(0x7f0000003f40)='cifs.spnego\x00', &(0x7f0000003f80)='/dev/snd/midiC#D#\x00') getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003fc0), &(0x7f0000004000)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000004040)={r8, 0x1, 0x6, [0xa37, 0x40, 0xc86, 0xb034, 0x8, 0x7]}, &(0x7f0000004080)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000040c0)=0x90d0, 0x4) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800000, 0x7e}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r10, 0xf503, 0x0) 2.804679075s ago: executing program 0 (id=2230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0xf}]}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r2, 0x2000) r3 = dup(r2) syz_emit_ethernet(0xc6, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @end, @noop]}}, {0x0, 0xe21, 0x9c, 0x0, @wg}}}}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) 2.714372563s ago: executing program 4 (id=2231): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000031fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.627906269s ago: executing program 3 (id=2232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0xf}]}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r2, 0x2000) r3 = dup(r2) syz_emit_ethernet(0xc6, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @end, @noop]}}, {0x0, 0xe21, 0x9c, 0x0, @wg}}}}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) 2.415220746s ago: executing program 4 (id=2233): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000024002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x0) rt_sigaction(0x19, &(0x7f0000000080)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x48000000, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000140)={0x16, 0x4, 0x2}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a2, 0xc}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x10, 0x803, 0x0) io_uring_enter(r4, 0x7277, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.950596674s ago: executing program 1 (id=2234): r0 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async) shutdown(r1, 0x1) unshare(0x22020600) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x80606, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendfile(r1, r2, 0x0, 0xffffffff004) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0x7fffffff, 0xa}) (async) r5 = getpgid(0x0) syz_pidfd_open(r5, 0x0) (async) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000001c0)={0x2, 0x0, [{0xb29, 0x1, 0x1, 0x0, @msi={0x7, 0xffffffff, 0x61}}, {0x76, 0x3, 0x1, 0x0, @msi={0x4, 0x7f, 0xfffffffc, 0x8}}]}) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000003c0)=@migrate={0xe8, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@multicast1, @in6=@private2, 0x4e21, 0xfff, 0x4e21, 0x8, 0xa, 0x20, 0x0, 0xff, 0x0, 0xffffffffffffffff}, 0x6e6bb6, 0x2}, [@sec_ctx={0x96, 0x8, {0x92, 0x8, 0x1, 0x7, 0x8a, "e8d45f44d4766ccdffc32ea8a30884190264f4890591555af865b2c94466d2c79d9311ccc059d7c17d42aa7c5b65b887a0b4cde499188a26aad9ff67bec990b4ad67ceba9aeaa0e0405c4d2cc5b54971ecd4a8759adee63f01d53e4dee668ceafe7695d7ae106a771f58b3b62ec9d962a82241805bf4e8d0bd7125642a8079d23c17337f7ee76ef15454"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c0c4) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00'}) (rerun: 64) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x4}, 0x1, 0x2, 0xff}) 1.594965956s ago: executing program 0 (id=2235): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x42) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socketpair(0x18, 0x4, 0x7f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000180)=0x80) 1.50037621s ago: executing program 1 (id=2236): r0 = syz_io_uring_setup(0x7ed, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240), &(0x7f0000000340)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x1016) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000a80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0xf4, r5, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x6, 0x2}, {0x24, 0x1}, {0x2, 0x1}, {0xff, 0x4}], "f4ec0f39ff3cfeba"}}, @NL80211_ATTR_QOS_MAP={0xffffffd2, 0xc7, {[{0x2, 0x6}, {0x4, 0x6}, {0xbd}, {0xf, 0x1}, {0x8, 0x7}, {0x5, 0x2}, {0x5, 0x4}, {0x7, 0x5}, {0x2d}, {0x6, 0x3}, {0xff, 0xa}, {0x4, 0x4}, {0x5, 0x7}, {0x6, 0x5}, {0x5, 0x4}, {0x4, 0x3}, {0x0, 0x7}, {0x3, 0x1}, {0x9, 0x2}, {0x19, 0x1}], "44e51119eecbbb80"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "499c6a03f9c652dd"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0xda, 0x5}, {0x1, 0x2}, {0x6, 0x2}, {0x3, 0x2}, {0x2, 0x3}, {0x7, 0x1}, {0xd, 0x1}, {0x5, 0x5}, {0x8, 0x4}, {0x1, 0x7}], "3b5f7b6b71a4e076"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x6, 0x1}, {0x37, 0x5}, {0x1, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xff, 0x3}, {0x1, 0x1}, {0xfa, 0x5}, {0xc, 0x7}, {0xa, 0x3}, {}, {0x2, 0x7}], "fbb3ab5727289be1"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0xb6, 0x2}], "bb8287977d03c1fa"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xd1}, {0x3, 0x5}, {0x4, 0x3}, {0xfe, 0x4}, {0x7, 0x5}, {0xb}, {0x4, 0x3}, {0x3, 0x6}, {0x9, 0x1}, {0x8, 0x2}, {0xcd, 0x1}, {0x4, 0x4}], "923e6eb78830a5b2"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {0x6, 0x2}, {0xad, 0x1}, {0x6, 0x6}], "2ebf844fb0708eaa"}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x40800) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r7 = syz_usb_connect(0x2, 0x24, &(0x7f00000043c0)={{0x12, 0x1, 0x0, 0x74, 0x4b, 0x9a, 0x40, 0x2013, 0x259, 0xe96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xc4, 0xa8, 0xa7}}]}}]}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) syz_usb_ep_read(r7, 0x3, 0x91, &(0x7f00000007c0)=""/145) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xc3, 0x9e, 0xc0, 0xff, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xff, 0x7, 0x40, 0x9, [{{0x9, 0x4, 0x67, 0xa, 0x1, 0xec, 0x45, 0x4b, 0x16, [], [{{0x9, 0x5, 0xd, 0x1a, 0x400, 0x80, 0x6, 0xe}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x8, 0x1, 0x2, 0x10}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xa, &(0x7f0000000140)=@string={0xa, 0x3, "0f85e05fb30c5b5d"}}, {0xcb, &(0x7f0000000440)=@string={0xcb, 0x3, "f1c416ce75331d55720499b61539e85cbd1eba901c3197c783b3da074d2fa3253f6758f0dddf1a56412500a5af76f98bc3b16ad12ddfc7daaed615dba61e51896fb720b00516e4454aa655187b40b0bbaf1f2095602f5f9148bc860de7833befb0d282f60b2407d5328514f861b55361ee4a883ade62cd6729feaf06edac1ab167d74a3eead1ed87d95e101b1067bdde05643c63f9d1ab96faaa50176bb5eb07f06e8f577b286f42f7dd0ccdf20f7c0834b117b7f426c160791243ec0e82a5fb27ad33d1f4105c937e"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40f}}, {0xed, &(0x7f0000000540)=@string={0xed, 0x3, "12f2908ce8c125f461ce6013d499047498786fd651bbe666621bc7783c7f625f25ce9aff8a975e91c459cd8c38dbc402fb3933fce0a667326b9e8880c8c69d404b1691b1d01c56b27a0c9e6be19740860bb832f02af6beb5ad22a26c3399a6a126a6aaf388a746a914cdcfc5cfe21f9a780895898b1499010f4ba2ab394e5fbb6d153980f19f72ddad8a204c00b49c394942570db6b172d8fcf5aaa88f33a890087a8ee3f0600d475ca12b4c67716b3d29498191cd73b2d55d4f9bbc9bf7d77a76cdd40f052950a866701897f5f316bceb6ff3e758123d1e6fe2956a80d770cfe9705ea118f8a9580661be"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x447}}, {0x73, &(0x7f0000000380)=@string={0x73, 0x3, "629e35eb545337aac13eb01d5fdc6dfe3d6e217e3ff17773ef305e20086b7679bd98df11c623b79879379a903e5d8b6c51839b72d5013bc16cc6ff86fbc95b1708ea6a1ab83621e186824366868a86967d100382f6fdefe01775348ba4864b41b41513bd67f777b5558061a817ebcd5d95"}}]}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x280000, 0x0) ioctl$VIDIOC_G_TUNER(r8, 0xc054561d, &(0x7f0000000740)={0xd, "e7dd6bba45b96ae009dac191b8c008a01be910e823857023d0cf08f005bdbd56", 0x4, 0x10, 0xfffffffb, 0x0, 0x10, 0x2, 0x1d9, 0xd9}) syz_open_dev$audion(&(0x7f0000000a00), 0x1, 0x80000) 1.496315483s ago: executing program 4 (id=2237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async, rerun: 32) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x3, 0x1, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) (async, rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) (async) ppoll(&(0x7f00000002c0)=[{r3, 0x1046}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async, rerun: 32) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000005c0)={0xab, {{0xa, 0x0, 0x75, @mcast1}}, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x108) (rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) (async) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x3}}], 0x1, 0x0) (async, rerun: 32) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x900000, 0x0) (rerun: 32) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async, rerun: 32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x3b0}}], 0x1, 0x810) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 64) r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) 1.39870585s ago: executing program 2 (id=2238): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socket(0x400000000010, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r7, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, &(0x7f00000000c0)) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2f, 0x0, r3}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x67, 0x3, {{'deflate\x00'}, 0xf8, "6f85bf85a2fc88fd5132a7226878830e7135efbf027ac5cab808d6a4b3ab2c"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.329703235s ago: executing program 0 (id=2239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000850) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={r2, @dev={0xac, 0x14, 0x14, 0x11}, @remote}, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES32=r0], 0x0) 812.131746ms ago: executing program 4 (id=2240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00000000000000002000", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 736.835678ms ago: executing program 3 (id=2241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00010218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 485.77853ms ago: executing program 0 (id=2242): syz_usb_connect(0x2, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a1459a10ac054a027829010203010902ff00"/36], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYRES32, @ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000001185b0000010000000000000000000000186900000b000000000000000000000000000000000000000018440000030000000000000000000000850000003b00000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000300)='syzkaller\x00', 0x10000, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x5, 0xa, 0xb}, {0x2, 0x5, 0x6, 0x7}, {0x5, 0x4, 0xc}], 0x10, 0x3}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "000000bcdf56cf00", "f92dafad9e4d473a1eaac151fe41ea97", "ee367a98", "5baff2072572aca8"}, 0x28) writev(r0, &(0x7f0000001780)=[{&(0x7f00000006c0)="ba", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "000037d7009400", "c0b6c1b29ca2b838d41ac2fc78df972d", "e99e1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x6) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)=')', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010076000014000280180001004241544d414e5f56"], 0xfd12}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x1000}, &(0x7f00000006c0)=0x8) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000940)="e8700e444d50a969ff67347cff00c44ad73cb7195361545545944b383e6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10479ae6b03a1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xde}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x20004050) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x65}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 411.356516ms ago: executing program 3 (id=2243): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000051fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 410.136327ms ago: executing program 4 (id=2244): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c464a030403ff0700000000000002000300040000003e03000038000000d6000000977000007e03200000000700080007000000000040818ebcc5ade41d234f7c7f093ec8c6ea0de6bf2f70abe3dc48f66225ec107a15c269e24eb7fe1407850a8ccd1b912785d8a031c5f954e717ca11ea4a1888a8e90571163794eb987417e35f75b931670a6935104cd6ddf4f59e913c90b57898fdb1dcd3d28114bdaee44ab320c4156c5a"], 0x38) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESOCT=0x0, @ANYRESOCT=r1], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYRES8, @ANYRES64=r2], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x40840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a00000000001010400000000000000000a000000440001802c00018014000300fc01000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001000000000006020000000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fc0100000000000000000000000000010c000280050001000000000008000c400000000304000680"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c410180140003000000000000000000000000000000000014000400ffefff000000000000000000000000010c0002800500010000000000440002800c000280050001000000000006000340000000002c0001801400030000000000000000000000000000000000141a463ec026553b76fb48000400fe8000000000000000000000000000aa08000740000000001800068014000400200100000000"], 0xb4}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x1e3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x84001) io_uring_setup(0x422a, &(0x7f0000000400)={0x0, 0x9668, 0x1, 0x2, 0x2e9, 0x0, r6}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 262.738954ms ago: executing program 3 (id=2245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0xf}]}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r2, 0x2000) r3 = dup(r2) syz_emit_ethernet(0xc6, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @end, @noop]}}, {0x0, 0xe21, 0x9c, 0x0, @wg}}}}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) 0s ago: executing program 2 (id=2246): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x2, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) move_pages(r1, 0x0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200087f9, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0x7f8, 0x4004085, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000f40)=0xde, 0x4) kernel console output (not intermixed with test programs): able to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.645900][T12864] QAT: failed to copy from user. [ 519.845485][T12865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.847025][T12865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.852519][T12865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.852918][T12865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.875867][T12847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.876081][T12847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.883154][T12564] usb 4-1: USB disconnect, device number 78 [ 519.911107][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.403407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.564151][ T9620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.643531][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.659465][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.215917][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.320569][T12878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1807'. [ 521.354266][T12879] xt_TCPMSS: Only works on TCP SYN packets [ 521.443161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.548946][T12883] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1809'. [ 521.615658][T12886] kvm: user requested TSC rate below hardware speed [ 522.296018][T12564] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 522.370243][T12900] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1813'. [ 522.464954][T12564] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 522.496956][T12564] usb 5-1: config 0 has no interface number 0 [ 522.522077][T12564] usb 5-1: New USB device found, idVendor=1410, idProduct=2420, bcdDevice=56.ff [ 522.539696][T12564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.548648][T12564] usb 5-1: Product: syz [ 522.552862][T12564] usb 5-1: Manufacturer: syz [ 522.563759][T12564] usb 5-1: SerialNumber: syz [ 522.602792][T12904] netlink: 'syz.1.1815': attribute type 12 has an invalid length. [ 522.624814][T12904] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1815'. [ 522.636518][T12564] usb 5-1: config 0 descriptor?? [ 522.663827][T12564] option 5-1:0.119: GSM modem (1-port) converter detected [ 522.777255][T12907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.787128][T12907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.803530][T12907] random: crng reseeded on system resumption [ 522.930268][T12910] loop2: detected capacity change from 0 to 7 [ 522.937798][ T9414] Dev loop2: unable to read RDB block 7 [ 522.944731][ T9414] loop2: unable to read partition table [ 522.954011][ T9414] loop2: partition table beyond EOD, truncated [ 522.961255][T12910] Dev loop2: unable to read RDB block 7 [ 522.974719][T12910] loop2: unable to read partition table [ 522.980612][T12910] loop2: partition table beyond EOD, truncated [ 523.133267][T12910] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 523.473277][T12927] QAT: failed to copy from user. [ 523.593647][ T5949] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 523.784414][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 523.800354][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 523.800373][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 523.800387][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 523.800411][ T5949] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 523.800423][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.802270][ T5949] usb 4-1: config 0 descriptor?? [ 523.802908][T12925] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 523.805631][ T5949] hub 4-1:0.0: USB hub found [ 524.007064][ T5949] hub 4-1:0.0: 10 ports detected [ 524.012433][ T5949] hub 4-1:0.0: insufficient power available to use all downstream ports [ 524.214368][T12925] team0: Device gtp0 is of different type [ 524.448330][ T9619] net_ratelimit: 13 callbacks suppressed [ 524.448346][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.563139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.723838][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.804306][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.813182][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.961022][T12564] usb 5-1: USB disconnect, device number 89 [ 524.969556][T12564] option 5-1:0.119: device disconnected [ 525.047708][ T5949] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 525.079311][ T5949] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 525.107317][ T5949] usbhid 4-1:0.0: can't add hid device: -32 [ 525.136765][ T5949] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 525.443267][T12564] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 525.593167][T12564] usb 5-1: Using ep0 maxpacket: 16 [ 525.599923][T12564] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.603163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.617926][T12564] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 525.629494][T12564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.644931][T12564] usb 5-1: config 0 descriptor?? [ 525.843566][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.903639][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.003751][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.171251][T12564] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 526.208868][T12564] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 526.210464][T12959] loop2: detected capacity change from 0 to 7 [ 526.236143][T12564] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 526.244996][ T9414] Dev loop2: unable to read RDB block 7 [ 526.250796][ T9414] loop2: unable to read partition table [ 526.257870][ T9414] loop2: partition table beyond EOD, truncated [ 526.276134][T12959] Dev loop2: unable to read RDB block 7 [ 526.281910][T12959] loop2: unable to read partition table [ 526.307159][T12564] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 526.307257][T12959] loop2: partition table beyond EOD, [ 526.324818][T12564] mcp2221 0003:04D8:00DD.0030: unknown main item tag 0x0 [ 526.329792][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.333821][T12564] mcp2221 0003:04D8:00DD.0030: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 526.390511][T12959] truncated [ 526.395650][T12959] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 526.405210][ T918] usb 4-1: USB disconnect, device number 79 [ 526.463179][T12564] usb 5-1: USB disconnect, device number 90 [ 527.364465][T12973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1835'. [ 527.676557][T12987] loop9: detected capacity change from 0 to 7 [ 527.689234][T12987] Dev loop9: unable to read RDB block 7 [ 527.717297][T12987] loop9: unable to read partition table [ 527.736048][T12987] loop9: partition table beyond EOD, truncated [ 527.759274][T12987] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 527.827156][T12998] loop2: detected capacity change from 0 to 7 [ 527.836379][T12998] Dev loop2: unable to read RDB block 7 [ 527.842462][T12998] loop2: unable to read partition table [ 527.849396][T12998] loop2: partition table beyond EOD, truncated [ 527.849432][T12998] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 528.353514][T13013] binder: 13012:13013 ioctl 80045301 200000000300 returned -22 [ 528.398605][T13015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1850'. [ 528.434523][T13013] binder: 13012:13013 ioctl 89f2 200000000740 returned -22 [ 528.445698][T13013] binder: 13012:13013 ioctl 894c 200000000180 returned -22 [ 528.566836][T13022] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 528.586236][T13022] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 528.601740][T13022] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 528.842772][T13032] loop9: detected capacity change from 0 to 7 [ 528.850487][T13032] Dev loop9: unable to read RDB block 7 [ 528.856540][T13032] loop9: unable to read partition table [ 528.862764][T13032] loop9: partition table beyond EOD, truncated [ 528.870238][T13032] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 528.997303][T13034] loop2: detected capacity change from 0 to 7 [ 529.004973][T13034] Dev loop2: unable to read RDB block 7 [ 529.010668][T13034] loop2: unable to read partition table [ 529.013672][ T5949] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 529.016924][T13034] loop2: partition table beyond EOD, truncated [ 529.030602][T13034] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 529.195666][ T5949] usb 3-1: unable to get BOS descriptor or descriptor too short [ 529.204724][ T5949] usb 3-1: not running at top speed; connect to a high speed hub [ 529.215183][ T5949] usb 3-1: config 1 has an invalid interface descriptor of length 5, skipping [ 529.225601][ T5949] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.240763][ T5949] usb 3-1: config 1 has 3 interfaces, different from the descriptor's value: 19 [ 529.261943][ T5949] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 529.274937][ T5949] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 529.295327][ T5949] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.317633][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.331206][ T5949] usb 3-1: Product: syz [ 529.340274][ T5949] usb 3-1: Manufacturer: syz [ 529.345299][ T5949] usb 3-1: SerialNumber: syz [ 529.523967][ T50] net_ratelimit: 22 callbacks suppressed [ 529.523990][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.560757][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.579375][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.763341][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.877121][T13047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1861'. [ 530.163745][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.172564][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.243875][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.252027][T12647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.295192][ T5949] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 530.382470][ T5949] usb 3-1: USB disconnect, device number 85 [ 530.803147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.827175][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.837381][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.213696][T12647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.153562][T13055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1863'. [ 532.190568][T13055] IPv6: NLM_F_CREATE should be specified when creating new route [ 532.282473][T13064] loop9: detected capacity change from 0 to 7 [ 532.308444][ T9414] Dev loop9: unable to read RDB block 7 [ 532.315130][ T9414] loop9: unable to read partition table [ 532.321065][ T9414] loop9: partition table beyond EOD, truncated [ 532.324430][T13069] loop2: detected capacity change from 0 to 7 [ 532.335510][T13069] Dev loop2: unable to read RDB block 7 [ 532.341251][T13069] loop2: unable to read partition table [ 532.341273][T13064] Dev loop9: unable to read RDB block 7 [ 532.347724][T13069] loop2: partition table beyond EOD, truncated [ 532.364366][T13064] loop9: unable to read partition table [ 532.373500][T13064] loop9: partition table beyond EOD, truncated [ 532.383822][T13064] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 532.404070][T13069] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 532.423337][ T24] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 532.613139][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 532.629979][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 532.643110][ T24] usb 4-1: config 0 has no interface number 0 [ 532.678724][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 532.703103][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 532.728295][ T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 532.742007][ T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 532.761314][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 532.804605][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.834760][ T24] usb 4-1: config 0 descriptor?? [ 532.857643][ T24] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 533.124255][ T5949] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 533.252792][T13103] loop2: detected capacity change from 0 to 7 [ 533.260994][ T9414] Dev loop2: unable to read RDB block 7 [ 533.268073][ T9414] loop2: unable to read partition table [ 533.274450][ T9414] loop2: partition table beyond EOD, truncated [ 533.287457][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.287908][T12564] usb 4-1: USB disconnect, device number 80 [ 533.306041][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.314770][T13103] Dev loop2: unable to read RDB block 7 [ 533.317582][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 533.321540][T13103] loop2: unable to read partition table [ 533.334551][ T5949] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.349160][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.355905][T12564] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 533.364896][ T24] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 533.378756][ T5949] usb 2-1: config 0 descriptor?? [ 533.384113][T13103] loop2: partition table beyond EOD, truncated [ 533.384150][T13103] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 533.525666][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 533.534322][ T24] usb 3-1: config 0 has no interface number 0 [ 533.540450][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 533.552668][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 533.564815][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 533.574043][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.585376][ T24] usb 3-1: config 0 descriptor?? [ 533.591228][T13093] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 533.604927][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 534.128985][T13093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.168974][T13112] futex_wake_op: syz.4.1882 tries to shift op by 32; fix this program [ 534.186861][T13093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.200017][T13114] loop2: detected capacity change from 0 to 7 [ 534.209946][ T9414] Dev loop2: unable to read RDB block 7 [ 534.216540][ T9414] loop2: unable to read partition table [ 534.223930][ T9414] loop2: partition table beyond EOD, truncated [ 534.241310][T13093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.255429][T13114] Dev loop2: unable to read RDB block 7 [ 534.262518][T13114] loop2: unable to read partition table [ 534.269386][T13093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.277646][T13114] loop2: partition table beyond EOD, truncated [ 534.284735][T13114] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 534.299208][T12564] usb 3-1: USB disconnect, device number 86 [ 534.305631][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 534.417406][T13117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.427961][T13117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.449754][T13117] random: crng reseeded on system resumption [ 534.486467][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 534.493831][ T24] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 534.504867][ T24] usb 4-1: config 0 has no interface number 0 [ 534.548709][ T24] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 534.592658][ T24] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 534.612191][ T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 534.622864][ T24] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 534.631095][ T24] usb 4-1: Product: syz [ 534.635634][ T24] usb 4-1: SerialNumber: syz [ 534.644134][ T50] net_ratelimit: 17 callbacks suppressed [ 534.644147][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.718501][ T24] usb 4-1: config 0 descriptor?? [ 534.743786][ T24] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 534.767101][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input44 [ 534.963122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.154772][T13126] netlink: 'syz.4.1885': attribute type 10 has an invalid length. [ 535.161821][T13126] veth1_vlan: entered allmulticast mode [ 535.211307][T13126] team0: Device veth1_vlan failed to register rx_handler [ 535.253860][ T5835] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 535.369274][T12647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.425655][ T5835] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 535.434247][ T5835] usb 3-1: config 0 has no interface number 0 [ 535.442848][ T5835] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=fe.ea [ 535.456470][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.465360][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.465665][ T5835] usb 3-1: Product: syz [ 535.491430][ T5835] usb 3-1: Manufacturer: syz [ 535.764053][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.831430][ T5835] usb 3-1: SerialNumber: syz [ 535.907683][ T5835] usb 3-1: config 0 descriptor?? [ 535.939422][ T5835] usb 3-1: unknown interface protocol 0xf6, assuming v1 [ 535.965799][ T5835] usb 3-1: cannot find UAC_HEADER [ 536.003351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.067424][ T5835] snd-usb-audio 3-1:0.143: probe with driver snd-usb-audio failed with error -22 [ 536.200846][ T5835] usb 3-1: USB disconnect, device number 87 [ 536.335976][ T9414] udevd[9414]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.143/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.354958][ T5949] usbhid 2-1:0.0: can't add hid device: -71 [ 536.361472][ T5949] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 536.398363][ T5949] usb 2-1: USB disconnect, device number 60 [ 536.419568][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.442139][T13137] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1888'. [ 536.510935][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.568301][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'. [ 536.597138][T13140] netlink: 'syz.1.1889': attribute type 3 has an invalid length. [ 536.933672][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.990829][T13147] tipc: Enabled bearer , priority 0 [ 537.043136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.065262][T13147] syzkaller0: entered promiscuous mode [ 537.098672][T13147] syzkaller0: entered allmulticast mode [ 537.119059][T13151] loop2: detected capacity change from 0 to 7 [ 537.152240][T13151] Dev loop2: unable to read RDB block 7 [ 537.169168][T13151] loop2: unable to read partition table [ 537.192711][T13151] loop2: partition table beyond EOD, truncated [ 537.238346][T13151] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 537.279050][T13147] tipc: Resetting bearer [ 537.471546][T13146] tipc: Resetting bearer [ 537.528629][T13146] tipc: Disabling bearer [ 537.539149][T13159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.559470][T13159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.880779][T13171] fuse: Bad value for 'fd' [ 537.888378][T13171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1898'. [ 538.033518][T13179] netlink: 'syz.1.1902': attribute type 3 has an invalid length. [ 538.420714][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1903'. [ 538.467243][T13182] netlink: 'syz.0.1903': attribute type 2 has an invalid length. [ 538.483642][T13186] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1903'. [ 538.485015][T13182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1903'. [ 538.716865][T13186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.721125][T13190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.752381][T13186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.333696][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 539.453246][T13205] QAT: failed to copy from user. [ 539.512027][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 539.516223][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.516253][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.516297][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 539.516342][ T24] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 539.516364][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.519495][ T24] usb 2-1: config 0 descriptor?? [ 539.891254][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 539.936289][T13197] random: crng reseeded on system resumption [ 540.016228][T12564] net_ratelimit: 8 callbacks suppressed [ 540.016248][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.131169][T13223] fuse: Bad value for 'user_id' [ 540.131189][T13223] fuse: Bad value for 'user_id' [ 540.163118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.306145][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input45 [ 540.413690][ T9620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.507325][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.563459][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.584805][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 540.584823][ T30] audit: type=1326 audit(1762924503.492:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.4.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 540.656236][ T24] shield 0003:0955:7214.0031: Registered Thunderstrike controller [ 540.714066][ T24] shield 0003:0955:7214.0031: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 540.727717][ T30] audit: type=1326 audit(1762924503.532:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.4.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 540.782690][ T30] audit: type=1326 audit(1762924503.532:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.4.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 540.788146][ T918] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 540.834198][ T24] usb 2-1: USB disconnect, device number 61 [ 540.886736][ T918] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 540.917967][ T918] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 540.930575][ T918] shield 0003:0955:7214.0031: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 540.942272][ T30] audit: type=1326 audit(1762924503.532:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.4.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 541.068248][ T30] audit: type=1326 audit(1762924503.532:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.4.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 541.203166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.257602][ T30] audit: type=1326 audit(1762924503.532:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.4.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 541.293938][ T30] audit: type=1326 audit(1762924503.542:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.4.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 541.316400][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.415672][ T30] audit: type=1326 audit(1762924503.542:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.4.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 541.438035][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.473923][ T30] audit: type=1326 audit(1762924503.542:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.4.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 541.511676][T13245] fuse: Bad value for 'fd' [ 541.520617][T13245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1919'. [ 541.640286][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.650000][T13247] fuse: Bad value for 'fd' [ 541.661372][T13247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1920'. [ 541.815468][ T30] audit: type=1326 audit(1762924503.542:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13227 comm="syz.4.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 541.837847][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.243453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.325783][ T2997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.678699][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.770450][T13258] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 543.023592][ T5949] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 543.099159][T13268] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1926'. [ 543.173725][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 543.196906][ T5949] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 543.226838][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.271244][ T5949] usb 5-1: Product: syz [ 543.284257][ T5949] usb 5-1: Manufacturer: syz [ 543.311688][ T5949] usb 5-1: SerialNumber: syz [ 543.354390][ T5949] usb 5-1: config 0 descriptor?? [ 543.618862][T13275] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1929'. [ 543.703727][T13280] netlink: 'syz.3.1927': attribute type 12 has an invalid length. [ 543.711747][T13280] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1927'. [ 543.820407][T13258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1924'. [ 543.833886][T13284] QAT: failed to copy from user. [ 543.881289][ T5949] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 543.886020][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 543.895530][ T5949] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 543.932702][ T5949] usb 5-1: media controller created [ 544.365516][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.567040][ T5949] zl10353_read_register: readreg error (reg=127, ret==0) [ 544.603230][ T5949] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 544.641677][ T5949] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 544.679572][ T5949] usb 5-1: USB disconnect, device number 91 [ 545.040564][T13289] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1931'. [ 545.110944][ T9611] net_ratelimit: 5 callbacks suppressed [ 545.110964][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.286712][ T5949] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 545.363294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.539045][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.689730][T13306] tipc: Enabled bearer , priority 0 [ 545.772516][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.083575][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.120611][T13309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.152134][T13309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.200511][T13309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.251641][T13301] tipc: Disabling bearer [ 546.314193][T13309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.403180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.482812][T13313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.495106][T13313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.804307][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.121639][T13325] fuse: Bad value for 'fd' [ 547.181581][T13325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1938'. [ 547.443776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.454579][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.846891][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.159602][T13331] netlink: 352 bytes leftover after parsing attributes in process `syz.4.1940'. [ 549.214421][T13347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.235378][T13347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.597472][T13350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1944'. [ 549.948798][T13353] bond0: option min_links: invalid value (18446744073709551610) [ 549.981234][T13353] bond0: option min_links: allowed values 0 - 2147483647 [ 549.996423][T13353] bond0 (unregistering): Released all slaves [ 550.563167][ C0] net_ratelimit: 6 callbacks suppressed [ 550.563189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.645588][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.732396][T13371] loop2: detected capacity change from 0 to 7 [ 550.741956][T13371] Dev loop2: unable to read RDB block 7 [ 550.779288][T13371] loop2: unable to read partition table [ 550.801408][T13371] loop2: partition table beyond EOD, truncated [ 550.810035][T13369] binder: 13362:13369 ioctl 4018620d 0 returned -22 [ 550.968830][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.978259][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.992878][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.004171][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.072211][T13371] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 551.204638][ T5201] Dev loop2: unable to read RDB block 7 [ 551.214949][ T5201] loop2: unable to read partition table [ 551.246815][ T5201] loop2: partition table beyond EOD, truncated [ 551.283847][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.292723][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.603422][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.931575][T13385] FAULT_INJECTION: forcing a failure. [ 551.931575][T13385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.973198][T13385] CPU: 1 UID: 0 PID: 13385 Comm: syz.1.1954 Not tainted syzkaller #0 PREEMPT(full) [ 551.973222][T13385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.973234][T13385] Call Trace: [ 551.973242][T13385] [ 551.973250][T13385] dump_stack_lvl+0x189/0x250 [ 551.973279][T13385] ? __pfx____ratelimit+0x10/0x10 [ 551.973306][T13385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.973328][T13385] ? __pfx__printk+0x10/0x10 [ 551.973347][T13385] ? __might_fault+0xb0/0x130 [ 551.973388][T13385] should_fail_ex+0x414/0x560 [ 551.973419][T13385] _copy_from_user+0x2d/0xb0 [ 551.973442][T13385] sctp_getsockopt_maxseg+0x178/0x6c0 [ 551.973470][T13385] ? __pfx_sctp_getsockopt_maxseg+0x10/0x10 [ 551.973505][T13385] sctp_getsockopt+0x933/0xb60 [ 551.973521][T13385] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 551.973547][T13385] do_sock_getsockopt+0x372/0x450 [ 551.973569][T13385] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 551.973584][T13385] ? do_syscall_64+0xa0/0xfa0 [ 551.973605][T13385] ? __fget_files+0x2a/0x420 [ 551.973620][T13385] ? __fget_files+0x3a0/0x420 [ 551.973634][T13385] ? __fget_files+0x2a/0x420 [ 551.973656][T13385] __x64_sys_getsockopt+0x1a5/0x250 [ 551.973673][T13385] ? do_syscall_64+0xa0/0xfa0 [ 551.973693][T13385] ? do_syscall_64+0xa0/0xfa0 [ 551.973716][T13385] do_syscall_64+0xfa/0xfa0 [ 551.973735][T13385] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.973757][T13385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.973772][T13385] ? clear_bhb_loop+0x60/0xb0 [ 551.973792][T13385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.973808][T13385] RIP: 0033:0x7f9a06d8f6c9 [ 551.973824][T13385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.973839][T13385] RSP: 002b:00007f9a07cbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 551.973857][T13385] RAX: ffffffffffffffda RBX: 00007f9a06fe6090 RCX: 00007f9a06d8f6c9 [ 551.973870][T13385] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 551.973880][T13385] RBP: 00007f9a07cbe090 R08: 00002000000000c0 R09: 0000000000000000 [ 551.973892][T13385] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.973904][T13385] R13: 00007f9a06fe6128 R14: 00007f9a06fe6090 R15: 00007f9a0710fa28 [ 551.973934][T13385] [ 552.211907][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.995293][T13395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1957'. [ 553.060619][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 553.060633][ T30] audit: type=1326 audit(1762924515.972:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13397 comm="syz.3.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 553.201630][ T30] audit: type=1326 audit(1762924516.012:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13397 comm="syz.3.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 553.408404][ T30] audit: type=1326 audit(1762924516.012:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13397 comm="syz.3.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 553.718614][T13407] input: syz1 as /devices/virtual/input/input46 [ 554.032664][ T30] audit: type=1326 audit(1762924516.012:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13397 comm="syz.3.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 554.134912][T13412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.163737][ T30] audit: type=1326 audit(1762924516.022:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13397 comm="syz.3.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 554.191115][T13412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.264592][ T30] audit: type=1326 audit(1762924516.022:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13397 comm="syz.3.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 554.553365][ T30] audit: type=1326 audit(1762924516.022:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13397 comm="syz.3.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 554.592409][ T30] audit: type=1326 audit(1762924516.022:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13397 comm="syz.3.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 554.615552][ T30] audit: type=1326 audit(1762924516.022:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13397 comm="syz.3.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 554.644090][ T30] audit: type=1326 audit(1762924516.022:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13397 comm="syz.3.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 555.322271][T13427] fuse: Bad value for 'fd' [ 555.345157][T13428] loop2: detected capacity change from 0 to 7 [ 555.353661][ T9414] Dev loop2: unable to read RDB block 7 [ 555.359267][ T9414] loop2: unable to read partition table [ 555.425190][ T9414] loop2: partition table beyond EOD, truncated [ 555.454477][T13428] Dev loop2: unable to read RDB block 7 [ 555.460413][T13428] loop2: unable to read partition table [ 555.545710][T13428] loop2: partition table beyond EOD, truncated [ 555.604593][T13434] net_ratelimit: 18 callbacks suppressed [ 555.604609][T13434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.619646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.676523][T13428] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 555.763148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.103350][T12564] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 556.193676][ T5949] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 556.270218][T12564] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.316203][T12564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 556.343591][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 556.345397][T12564] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 556.374352][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.393706][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.410607][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.410876][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.430621][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.439340][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.450425][ T5949] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 556.464382][T12564] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 556.485311][T12564] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.495355][T12564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.509437][ T5949] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 556.525215][T12564] usb 3-1: config 0 descriptor?? [ 556.540745][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.565633][ T5949] usb 2-1: config 0 descriptor?? [ 556.803123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.988915][T13443] random: crng reseeded on system resumption [ 557.044824][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.054555][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.195338][T12564] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 557.340050][ T5949] input: HID 0955:7214 Haptics as /devices/virtual/input/input47 [ 557.387298][ T5949] shield 0003:0955:7214.0033: Registered Thunderstrike controller [ 557.403834][ T5949] shield 0003:0955:7214.0033: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 557.807572][ T5926] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 557.821772][ T5949] usb 2-1: USB disconnect, device number 62 [ 557.835427][ T5926] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 557.870184][ T5926] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 558.125954][ T5926] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 558.160668][T12564] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 558.211795][T12564] usb 3-1: USB disconnect, device number 88 [ 558.573435][T12564] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 558.598353][T13469] fido_id[13469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 558.723177][T12564] usb 3-1: Using ep0 maxpacket: 8 [ 558.732099][T12564] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.909359][T12564] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 559.016091][T12564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.089710][T12564] usb 3-1: config 0 descriptor?? [ 559.135505][T12564] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 559.533244][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 559.703426][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 559.712351][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 559.741099][ T24] usb 5-1: config 40 has an invalid interface number: 160 but max is 0 [ 559.749977][ T24] usb 5-1: config 40 has no interface number 0 [ 559.760638][ T24] usb 5-1: config 40 interface 160 altsetting 47 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 559.788542][ T24] usb 5-1: config 40 interface 160 altsetting 47 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 559.800505][ T24] usb 5-1: config 40 interface 160 altsetting 47 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 559.812236][ T24] usb 5-1: config 40 interface 160 altsetting 47 has a duplicate endpoint with address 0xE, skipping [ 559.824555][ T24] usb 5-1: config 40 interface 160 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 559.835773][ T24] usb 5-1: config 40 interface 160 has no altsetting 0 [ 559.844990][ T24] usb 5-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=74.b7 [ 559.854636][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.866085][ T24] usb 5-1: Product: syz [ 559.870301][ T24] usb 5-1: Manufacturer: syz [ 559.875040][ T918] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 559.885528][ T24] usb 5-1: SerialNumber: syz [ 559.925097][T13491] netlink: 'syz.3.1986': attribute type 12 has an invalid length. [ 559.934138][T13491] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1986'. [ 560.043128][ T918] usb 2-1: Using ep0 maxpacket: 16 [ 560.052559][ T918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.065736][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 560.086088][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 560.097861][ T918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 560.118954][ T918] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.141825][ T918] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 560.159713][ T918] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 560.172183][ T918] usb 2-1: Manufacturer: syz [ 560.184904][ T918] usb 2-1: config 0 descriptor?? [ 560.463343][ T918] rc_core: IR keymap rc-hauppauge not found [ 560.469425][ T918] Registered IR keymap rc-empty [ 560.475273][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 560.504978][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 560.524835][ T918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 560.564015][ T918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input48 [ 560.588788][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 560.624235][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 560.676092][ T5949] net_ratelimit: 10 callbacks suppressed [ 560.676111][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.694249][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 560.713599][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 560.756393][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 560.795792][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 560.843359][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 560.856731][T12564] gspca_vc032x: reg_w err -110 [ 560.862173][T12564] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 560.870934][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 560.914372][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 560.963321][ T918] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 560.963384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.998426][ T918] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 561.023130][ T918] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 561.083406][ T918] usb 2-1: USB disconnect, device number 63 [ 561.084241][ T5949] usb 3-1: USB disconnect, device number 89 [ 561.297122][T13506] audit_log_lost: 38 callbacks suppressed [ 561.297134][T13506] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 561.312443][ T30] audit: type=1326 audit(1762924524.212:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1af8f6c9 code=0x7ffc0000 [ 561.389092][T13510] loop2: detected capacity change from 0 to 7 [ 561.398407][T13506] audit: out of memory in audit_log_start [ 561.404427][ T30] audit: type=1326 audit(1762924524.212:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1af8f6c9 code=0x7ffc0000 [ 561.471852][ T30] audit: type=1326 audit(1762924524.212:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b1af8df10 code=0x7ffc0000 [ 561.511429][T13510] Dev loop2: unable to read RDB block 7 [ 561.543661][T13510] loop2: unable to read partition table [ 561.562824][T13510] loop2: partition table beyond EOD, truncated [ 561.572345][ T30] audit: type=1326 audit(1762924524.212:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4b1af8e17f code=0x7ffc0000 [ 561.592454][T13510] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 561.616920][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.687579][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.777294][T13514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.824451][T13514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.869144][T13516] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1991'. [ 561.976585][ T30] audit: type=1326 audit(1762924524.892:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4b1af8e0dc code=0x7ffc0000 [ 562.000524][T13516] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.003102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.008026][T13516] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.031516][ T30] audit: type=1326 audit(1762924524.942:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4b1af8e17f code=0x7ffc0000 [ 562.113147][ T30] audit: type=1326 audit(1762924524.942:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4b1af8e32a code=0x7ffc0000 [ 562.136434][ T30] audit: type=1326 audit(1762924524.942:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.0.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1af8f6c9 code=0x7ffc0000 [ 562.176887][ T9611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.201165][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.210423][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.219266][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.233215][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.466810][T13516] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1991'. [ 562.624007][T13524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1995'. [ 562.761281][T13529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.775654][T13529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.811592][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.818072][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.834163][T13529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.863941][T13529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.174416][T13541] loop2: detected capacity change from 0 to 7 [ 563.182700][T13541] Dev loop2: unable to read RDB block 7 [ 563.213642][T13541] loop2: unable to read partition table [ 563.219687][T13541] loop2: partition table beyond EOD, truncated [ 563.270558][T13541] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 563.491867][T13550] loop2: detected capacity change from 0 to 7 [ 563.510231][T13550] Dev loop2: unable to read RDB block 7 [ 563.527032][T13548] netlink: 'syz.3.2002': attribute type 12 has an invalid length. [ 563.543695][T13548] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2002'. [ 563.556322][T13553] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2001'. [ 563.573712][T13550] loop2: unable to read partition table [ 563.589811][T13550] loop2: partition table beyond EOD, truncated [ 563.609842][T13550] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 564.452017][T13560] FAULT_INJECTION: forcing a failure. [ 564.452017][T13560] name failslab, interval 1, probability 0, space 0, times 0 [ 564.493807][T13560] CPU: 0 UID: 0 PID: 13560 Comm: syz.2.2006 Not tainted syzkaller #0 PREEMPT(full) [ 564.493833][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.493844][T13560] Call Trace: [ 564.493852][T13560] [ 564.493860][T13560] dump_stack_lvl+0x189/0x250 [ 564.493886][T13560] ? __pfx____ratelimit+0x10/0x10 [ 564.493908][T13560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.493930][T13560] ? __pfx__printk+0x10/0x10 [ 564.493945][T13560] ? vsnprintf+0x386/0xf00 [ 564.493966][T13560] ? __pfx_snprintf+0x10/0x10 [ 564.493990][T13560] should_fail_ex+0x414/0x560 [ 564.494020][T13560] should_failslab+0xa8/0x100 [ 564.494040][T13560] __kmalloc_noprof+0xcb/0x7f0 [ 564.494063][T13560] ? aa_label_asxprint+0x70/0x130 [ 564.494089][T13560] aa_label_asxprint+0x70/0x130 [ 564.494113][T13560] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 564.494149][T13560] audit_log_subj_ctx+0xfa/0x510 [ 564.494175][T13560] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 564.494206][T13560] ? apparmor_current_getlsmprop_subj+0xdd/0x190 [ 564.494232][T13560] audit_log_task_context+0x8c/0xd0 [ 564.494255][T13560] ? __pfx_audit_log_task_context+0x10/0x10 [ 564.494279][T13560] ? audit_log_start+0x7f4/0xa20 [ 564.494307][T13560] audit_log_task+0x190/0x3c0 [ 564.494326][T13560] ? get_pid_task+0x20/0x1f0 [ 564.494350][T13560] ? __pfx_audit_log_task+0x10/0x10 [ 564.494374][T13560] ? __pfx___cant_migrate+0x10/0x10 [ 564.494398][T13560] audit_seccomp+0x86/0x190 [ 564.494424][T13560] __seccomp_filter+0xce4/0x1e10 [ 564.494455][T13560] ? ksys_write+0x1cb/0x250 [ 564.494478][T13560] ? __pfx___seccomp_filter+0x10/0x10 [ 564.494499][T13560] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 564.494523][T13560] ? __pfx_vfs_write+0x10/0x10 [ 564.494548][T13560] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 564.494574][T13560] ? __fget_files+0x3a0/0x420 [ 564.494602][T13560] ? ksys_write+0x22a/0x250 [ 564.494628][T13560] ? __secure_computing+0xe2/0x2a0 [ 564.494651][T13560] syscall_trace_enter+0xaa/0x160 [ 564.494672][T13560] do_syscall_64+0xd3/0xfa0 [ 564.494696][T13560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.494712][T13560] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.494730][T13560] ? clear_bhb_loop+0x60/0xb0 [ 564.494750][T13560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.494768][T13560] RIP: 0033:0x7f1bd738f6c9 [ 564.494783][T13560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.494801][T13560] RSP: 002b:00007f1bd816d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 564.494821][T13560] RAX: ffffffffffffffda RBX: 00007f1bd75e5fa0 RCX: 00007f1bd738f6c9 [ 564.494834][T13560] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000007 [ 564.494846][T13560] RBP: 00007f1bd816d090 R08: 0000000000000000 R09: 0000000000000000 [ 564.494857][T13560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.494868][T13560] R13: 00007f1bd75e6038 R14: 00007f1bd75e5fa0 R15: 00007f1bd770fa28 [ 564.494898][T13560] [ 564.976436][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 565.225804][ T24] snd-usb-audio 5-1:40.160: probe with driver snd-usb-audio failed with error -2 [ 565.303684][ T5949] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 565.341162][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:40.160/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.506614][ T5949] usb 2-1: config index 0 descriptor too short (expected 65339, got 59) [ 565.518151][ T5949] usb 2-1: config 1 has too many interfaces: 245, using maximum allowed: 32 [ 565.538545][T13565] netlink: 'syz.2.2008': attribute type 1 has an invalid length. [ 565.560376][ T24] usb 5-1: USB disconnect, device number 92 [ 565.573100][ T5949] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 245 [ 565.577454][T13566] netlink: 'syz.2.2008': attribute type 1 has an invalid length. [ 565.611803][ T5949] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 565.670870][ T5949] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 565.681731][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 565.693556][ T5949] usb 2-1: SerialNumber: syz [ 565.781502][T13573] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2010'. [ 565.956159][T13577] QAT: failed to copy from user. [ 566.163115][ C0] net_ratelimit: 10 callbacks suppressed [ 566.163134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.196628][T13579] loop2: detected capacity change from 0 to 7 [ 566.222027][T13579] Dev loop2: unable to read RDB block 7 [ 566.229475][T13579] loop2: unable to read partition table [ 566.236557][T13579] loop2: partition table beyond EOD, truncated [ 566.264738][T13579] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 566.357567][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 566.357605][ T30] audit: type=1326 audit(1762924529.272:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a06d8f6c9 code=0x7ffc0000 [ 566.446964][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 566.469786][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.530499][ T30] audit: type=1326 audit(1762924529.272:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a06d8f6c9 code=0x7ffc0000 [ 566.603537][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 566.614338][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 566.623922][ T10] usb 3-1: config 0 interface 0 has no altsetting 1 [ 566.634031][ T30] audit: type=1326 audit(1762924529.282:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f9a06d8f6c9 code=0x7ffc0000 [ 566.672443][ T5949] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 566.702488][ T30] audit: type=1326 audit(1762924529.302:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a06d8f6c9 code=0x7ffc0000 [ 566.715294][ T10] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 566.759011][ T5949] usb 2-1: USB disconnect, device number 64 [ 566.785683][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 566.813677][ T30] audit: type=1326 audit(1762924529.302:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a06d8f6c9 code=0x7ffc0000 [ 566.846338][ T10] usb 3-1: SerialNumber: syz [ 566.895815][ T10] usb 3-1: config 0 descriptor?? [ 566.904628][ T30] audit: type=1326 audit(1762924529.302:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a06d8f6c9 code=0x7ffc0000 [ 566.945711][ T10] usb-storage 3-1:0.0: USB Mass Storage device detected [ 566.952919][T13592] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2016'. [ 566.964693][ T30] audit: type=1326 audit(1762924529.302:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a06d8f6c9 code=0x7ffc0000 [ 566.989210][ T30] audit: type=1326 audit(1762924529.302:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a06d8f6c9 code=0x7ffc0000 [ 567.011586][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.075509][ T10] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 567.098108][ T30] audit: type=1326 audit(1762924529.302:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a06d8f6c9 code=0x7ffc0000 [ 567.123722][ T30] audit: type=1326 audit(1762924529.302:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13562 comm="syz.1.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a06d8f6c9 code=0x7ffc0000 [ 567.145965][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.173450][T13596] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 567.173981][T13582] netlink: 'syz.2.2012': attribute type 5 has an invalid length. [ 567.204099][T13596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.209698][T13598] FAULT_INJECTION: forcing a failure. [ 567.209698][T13598] name failslab, interval 1, probability 0, space 0, times 0 [ 567.212832][T13596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.237346][T13598] CPU: 0 UID: 0 PID: 13598 Comm: syz.0.2018 Not tainted syzkaller #0 PREEMPT(full) [ 567.237368][T13598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 567.237378][T13598] Call Trace: [ 567.237386][T13598] [ 567.237393][T13598] dump_stack_lvl+0x189/0x250 [ 567.237420][T13598] ? __pfx____ratelimit+0x10/0x10 [ 567.237443][T13598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.237464][T13598] ? __pfx__printk+0x10/0x10 [ 567.237487][T13598] ? __pfx___might_resched+0x10/0x10 [ 567.237506][T13598] ? fs_reclaim_acquire+0x7d/0x100 [ 567.237527][T13598] should_fail_ex+0x414/0x560 [ 567.237556][T13598] should_failslab+0xa8/0x100 [ 567.237575][T13598] __kmalloc_cache_noprof+0x6f/0x6f0 [ 567.237599][T13598] ? audit_log_d_path+0xb8/0x1a0 [ 567.237626][T13598] audit_log_d_path+0xb8/0x1a0 [ 567.237649][T13598] audit_log_d_path_exe+0x42/0x70 [ 567.237671][T13598] audit_log_task+0x2b3/0x3c0 [ 567.237691][T13598] ? get_pid_task+0x20/0x1f0 [ 567.237714][T13598] ? __pfx_audit_log_task+0x10/0x10 [ 567.237738][T13598] ? __pfx___cant_migrate+0x10/0x10 [ 567.237760][T13598] audit_seccomp+0x86/0x190 [ 567.237784][T13598] __seccomp_filter+0xce4/0x1e10 [ 567.237812][T13598] ? ksys_write+0x1cb/0x250 [ 567.237834][T13598] ? __pfx___seccomp_filter+0x10/0x10 [ 567.237854][T13598] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 567.237887][T13598] ? __pfx_vfs_write+0x10/0x10 [ 567.237913][T13598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 567.237940][T13598] ? __fget_files+0x3a0/0x420 [ 567.237965][T13598] ? ksys_write+0x22a/0x250 [ 567.237991][T13598] ? __secure_computing+0xe2/0x2a0 [ 567.238013][T13598] syscall_trace_enter+0xaa/0x160 [ 567.238034][T13598] do_syscall_64+0xd3/0xfa0 [ 567.238057][T13598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.238072][T13598] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.238087][T13598] ? clear_bhb_loop+0x60/0xb0 [ 567.238106][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.238121][T13598] RIP: 0033:0x7f4b1af8f6c9 [ 567.238136][T13598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.238149][T13598] RSP: 002b:00007f4b1beda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 567.238167][T13598] RAX: ffffffffffffffda RBX: 00007f4b1b1e5fa0 RCX: 00007f4b1af8f6c9 [ 567.238180][T13598] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000007 [ 567.238189][T13598] RBP: 00007f4b1beda090 R08: 0000000000000000 R09: 0000000000000000 [ 567.238197][T13598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.238205][T13598] R13: 00007f4b1b1e6038 R14: 00007f4b1b1e5fa0 R15: 00007f4b1b30fa28 [ 567.238229][T13598] [ 567.248140][T13582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.465266][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.524759][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.560025][T13582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.631023][T13602] fuse: Bad value for 'fd' [ 567.844312][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.853317][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.926465][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.936059][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.211215][ T10] usb 3-1: USB disconnect, device number 90 [ 568.563684][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.563998][ T9620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.785365][T13623] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2025'. [ 568.929983][T13623] team0: Port device dummy0 removed [ 568.946646][T13626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.988130][T13626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.096929][T13626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.133670][T13626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.196510][T13631] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2027'. [ 569.525960][T13646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.536771][T13646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.633906][T13644] vlan3: entered allmulticast mode [ 569.655647][T13647] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2030'. [ 569.659336][T13644] hsr_slave_1: entered allmulticast mode [ 569.709436][T13647] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2030'. [ 571.683842][ T10] net_ratelimit: 7 callbacks suppressed [ 571.683861][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.003113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.643480][ T9620] batman_adv: batadv0: IGMP Querier appeared [ 572.649572][ T9620] batman_adv: batadv0: MLD Querier appeared [ 572.723915][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.738072][T13688] fuse: Bad value for 'fd' [ 572.853566][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 572.913692][ T5949] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 573.045836][ T2997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.053992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.062641][ T9620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.064060][ T5949] usb 3-1: device descriptor read/64, error -71 [ 573.121689][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 573.147545][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 573.176031][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 573.223802][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 573.361346][ T5949] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 573.375730][T13691] loop2: detected capacity change from 0 to 7 [ 573.382012][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.405363][T13691] loop2: p1 [ 573.415653][T13691] loop2: partition table partially beyond EOD, truncated [ 573.442819][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 573.454066][T13691] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 573.474515][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.533229][ T5949] usb 3-1: device descriptor read/64, error -71 [ 573.599027][ T9414] udevd[9414]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 573.644646][ T5949] usb usb3-port1: attempt power cycle [ 573.684158][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.770186][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.782687][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 573.789028][ T10] usbtmc 2-1:16.0: can't read capabilities [ 573.923402][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.975073][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.997492][ T10] usb 2-1: USB disconnect, device number 65 [ 574.004003][ T5949] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 574.044025][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.065687][ T5949] usb 3-1: device descriptor read/8, error -71 [ 574.083346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.185787][T13705] bridge2: entered promiscuous mode [ 574.191200][T13705] bridge2: entered allmulticast mode [ 574.200232][T13705] team0: Port device bridge2 added [ 574.337284][ T5949] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 574.377068][T13706] bridge0: port 4(team0) entered blocking state [ 574.378963][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2042'. [ 574.393544][T13706] bridge0: port 4(team0) entered disabled state [ 574.393924][ T5949] usb 3-1: device descriptor read/8, error -71 [ 574.400579][T13706] team0: entered allmulticast mode [ 574.413734][T13706] team_slave_1: entered allmulticast mode [ 574.423516][T13706] batadv1: entered allmulticast mode [ 574.595969][ T5949] usb usb3-port1: unable to enumerate USB device [ 574.607749][T13706] team0: entered promiscuous mode [ 574.612831][T13706] team_slave_1: entered promiscuous mode [ 574.619260][T13706] batadv1: entered promiscuous mode [ 574.733959][ T9620] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 574.743956][ T9620] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 574.980483][T13716] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2050'. [ 575.097785][T13716] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2050'. [ 576.078305][T13737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2056'. [ 576.884069][ T5835] net_ratelimit: 5 callbacks suppressed [ 576.884088][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.970383][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.200200][T13752] fuse: Bad value for 'fd' [ 577.569242][T13748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.625064][T13748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.765511][T13757] netlink: 'syz.4.2061': attribute type 12 has an invalid length. [ 577.773470][T13757] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2061'. [ 577.940880][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.032244][T13759] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 578.038785][T13759] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 578.095567][T13759] vhci_hcd vhci_hcd.0: Device attached [ 578.124829][T13760] vhci_hcd: connection closed [ 578.153467][ T9606] vhci_hcd: stop threads [ 578.162710][ T9606] vhci_hcd: release socket [ 578.168518][ T9606] vhci_hcd: disconnect device [ 578.174601][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.724367][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.803672][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.804326][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.875733][T13769] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 578.925613][T13769] bond0 (unregistering): Released all slaves [ 578.963873][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.274285][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2066'. [ 579.455362][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.461284][T13782] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2067'. [ 579.497277][T13782] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2067'. [ 579.763130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.460345][T13796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.469906][T13796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.485331][T13796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.494855][T13796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.507197][T13796] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2070'. [ 580.673562][ T10] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 580.847886][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 580.921996][ T10] usb 5-1: config 0 has no interfaces? [ 581.010439][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 581.106225][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 581.121822][ T10] usb 5-1: Manufacturer: syz [ 581.161534][ T10] usb 5-1: config 0 descriptor?? [ 581.688732][T13806] netlink: 'syz.2.2073': attribute type 10 has an invalid length. [ 581.726108][T13806] macvlan0: entered promiscuous mode [ 581.731770][T13806] macvlan0: entered allmulticast mode [ 581.740250][T13806] veth1_vlan: entered allmulticast mode [ 581.749047][T13806] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 582.173841][ T10] net_ratelimit: 7 callbacks suppressed [ 582.173859][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.512248][T13821] loop2: detected capacity change from 0 to 7 [ 582.536281][ T9414] Dev loop2: unable to read RDB block 7 [ 582.548046][ T9414] loop2: unable to read partition table [ 582.647835][ T9414] loop2: partition table beyond EOD, truncated [ 582.685759][T13821] Dev loop2: unable to read RDB block 7 [ 582.691484][T13821] loop2: unable to read partition table [ 582.698060][T13821] loop2: partition table beyond EOD, truncated [ 582.705462][T13821] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 582.785398][T13811] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2075'. [ 582.805848][T13811] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2075'. [ 582.883115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.056495][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.205484][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.588302][ T5949] usb 5-1: USB disconnect, device number 93 [ 583.759707][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 583.759724][ T30] audit: type=1326 audit(1762924546.672:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13827 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 583.759792][ T30] audit: type=1326 audit(1762924546.672:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13827 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 583.760810][ T30] audit: type=1326 audit(1762924546.672:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13827 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 583.760856][ T30] audit: type=1326 audit(1762924546.672:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13827 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 583.760920][ T30] audit: type=1326 audit(1762924546.672:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13827 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 583.760953][ T30] audit: type=1326 audit(1762924546.672:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13827 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 583.761776][ T30] audit: type=1326 audit(1762924546.672:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13827 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 583.762245][ T30] audit: type=1326 audit(1762924546.672:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13827 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 583.763843][ T30] audit: type=1326 audit(1762924546.672:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13827 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 583.764213][ T30] audit: type=1326 audit(1762924546.682:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13827 comm="syz.4.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 583.923180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.934455][ T2997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.253813][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.563484][ T2997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.963359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.091352][T13843] tty tty1: ldisc open failed (-12), clearing slot 0 [ 585.205427][ T9619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.344585][T13849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2087'. [ 585.441954][T13853] loop2: detected capacity change from 0 to 7 [ 585.464613][T13853] Dev loop2: unable to read RDB block 7 [ 585.470264][T13853] loop2: unable to read partition table [ 585.480708][T13853] loop2: partition table beyond EOD, truncated [ 585.493240][T13853] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 585.703578][T13863] loop9: detected capacity change from 0 to 7 [ 585.722134][T13863] Dev loop9: unable to read RDB block 7 [ 585.740715][T13863] loop9: unable to read partition table [ 585.764964][T13863] loop9: partition table beyond EOD, truncated [ 585.781449][T13863] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 585.964785][T13875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.965211][T13875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.982723][T13875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.983313][T13875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.317981][T13885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2101'. [ 587.353774][ T10] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 587.373919][ T5835] net_ratelimit: 6 callbacks suppressed [ 587.373936][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.433881][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 587.514367][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 587.529158][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.540836][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.578283][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 587.593196][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 587.600666][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.611898][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 587.621764][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.631871][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.643550][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 587.661449][ T10] usb 5-1: config 0 descriptor?? [ 587.711533][ T24] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 587.741654][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.754189][ T24] usb 2-1: config 0 descriptor?? [ 588.083297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.423109][T13905] random: crng reseeded on system resumption [ 588.443201][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.473136][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.621397][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input49 [ 588.675938][ T24] shield 0003:0955:7214.0034: Registered Thunderstrike controller [ 588.706615][ T24] shield 0003:0955:7214.0034: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 588.811289][ T5915] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 588.827527][ T24] usb 2-1: USB disconnect, device number 66 [ 588.839100][ T5915] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 588.886091][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input50 [ 588.886183][ T5915] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 589.026800][ T10] shield 0003:0955:7214.0035: Registered Thunderstrike controller [ 589.051993][ T9620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.067298][ T10] shield 0003:0955:7214.0035: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 589.094175][ T5915] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 589.123104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.138457][ T5835] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 589.150290][ T10] usb 5-1: USB disconnect, device number 94 [ 589.156294][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.186831][ T5835] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 589.248748][ T5835] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 589.311352][ T5835] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 589.530211][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.605437][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.658081][T13943] loop2: detected capacity change from 0 to 7 [ 589.665288][T13943] Dev loop2: unable to read RDB block 7 [ 589.670892][T13943] loop2: unable to read partition table [ 589.679743][T13943] loop2: partition table beyond EOD, truncated [ 589.689722][T13943] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 589.755517][ T5201] Dev loop2: unable to read RDB block 7 [ 589.761185][ T5201] loop2: unable to read partition table [ 589.821447][ T5201] loop2: partition table beyond EOD, truncated [ 590.163100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.283887][ T10] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 590.325734][T13958] loop9: detected capacity change from 0 to 7 [ 590.332621][T13958] Dev loop9: unable to read RDB block 7 [ 590.339693][T13958] loop9: unable to read partition table [ 590.509072][T13958] loop9: partition table beyond EOD, truncated [ 590.537345][T13958] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 590.560839][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 590.560855][ T30] audit: type=1326 audit(1762924553.472:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 590.565253][T13963] x_tables: duplicate underflow at hook 4 [ 590.573923][ T30] audit: type=1326 audit(1762924553.472:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 590.679005][ T10] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 590.702023][ T10] usb 2-1: config 0 has no interface number 0 [ 590.757025][ T30] audit: type=1326 audit(1762924553.472:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 590.869651][ T30] audit: type=1326 audit(1762924553.472:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 590.892368][ T30] audit: type=1326 audit(1762924553.472:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 590.915190][ T30] audit: type=1326 audit(1762924553.472:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 591.171744][ T30] audit: type=1326 audit(1762924553.472:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 591.199807][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 591.210114][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.224605][ T10] usb 2-1: Product: syz [ 591.229948][ T10] usb 2-1: Manufacturer: syz [ 591.235597][ T10] usb 2-1: SerialNumber: syz [ 591.300086][ T10] usb 2-1: config 0 descriptor?? [ 591.320058][ T30] audit: type=1326 audit(1762924553.472:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 591.376173][ T10] hub 2-1:0.30: bad descriptor, ignoring hub [ 591.392603][ T10] hub 2-1:0.30: probe with driver hub failed with error -5 [ 591.411989][ T10] keyspan 2-1:0.30: Keyspan - (without firmware) converter detected [ 591.577886][T13946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2116'. [ 591.591129][ T30] audit: type=1326 audit(1762924553.472:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 591.738148][ T30] audit: type=1326 audit(1762924553.482:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13960 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 591.859843][T13980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.877976][T13980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.043432][ T10] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 592.203590][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 592.215451][ T10] usb 5-1: descriptor type invalid, skip [ 592.222342][ T10] usb 5-1: config 0 has no interfaces? [ 592.298538][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 592.308524][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.317302][ T10] usb 5-1: Product: syz [ 592.352447][ T10] usb 5-1: Manufacturer: syz [ 592.364918][ T10] usb 5-1: SerialNumber: syz [ 592.391888][ T10] usb 5-1: config 0 descriptor?? [ 592.648993][T13978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.658297][ T10] net_ratelimit: 8 callbacks suppressed [ 592.658314][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.674442][T13978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.888846][T13978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.900273][T13978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.931458][ T10] usb 5-1: USB disconnect, device number 95 [ 593.283771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.452647][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2131'. [ 593.574511][T14007] loop9: detected capacity change from 0 to 7 [ 593.584232][ T9414] Dev loop9: unable to read RDB block 7 [ 593.591079][ T9414] loop9: unable to read partition table [ 593.597285][ T9414] loop9: partition table beyond EOD, truncated [ 593.605635][T14007] Dev loop9: unable to read RDB block 7 [ 593.611316][T14007] loop9: unable to read partition table [ 593.632078][T14007] loop9: partition table beyond EOD, truncated [ 593.639720][T14007] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 593.683759][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.748670][T14010] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2134'. [ 594.323906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.333752][T14019] netlink: 'syz.4.2136': attribute type 1 has an invalid length. [ 594.732870][T14019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.763754][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.770905][ T9620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.804614][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.855367][T14027] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 594.915741][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.926326][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.087206][T14021] bond0: (slave veth3): Enslaving as an active interface with a down link [ 595.146954][T14019] bond0: (slave dummy0): making interface the new active one [ 595.180676][T14019] dummy0: entered promiscuous mode [ 595.209557][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.209917][T14019] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 595.295709][T14036] loop2: detected capacity change from 0 to 7 [ 595.327398][T14036] Dev loop2: unable to read RDB block 7 [ 595.345625][T14036] loop2: unable to read partition table [ 595.351423][T14036] loop2: partition table beyond EOD, truncated [ 595.403710][T14036] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 595.629716][T14046] loop2: detected capacity change from 0 to 7 [ 595.654268][T14047] loop9: detected capacity change from 0 to 7 [ 595.670740][T14046] Dev loop2: unable to read RDB block 7 [ 595.678856][T14046] loop2: unable to read partition table [ 595.685910][ T6002] Dev loop9: unable to read RDB block 7 [ 595.698524][ T6002] loop9: unable to read partition table [ 595.710924][T14046] loop2: partition table beyond EOD, truncated [ 595.732069][ T6002] loop9: partition table beyond EOD, truncated [ 595.750698][T14046] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 595.767779][T14047] Dev loop9: unable to read RDB block 7 [ 595.823683][T14047] loop9: unable to read partition table [ 595.830065][T14047] loop9: partition table beyond EOD, truncated [ 595.839187][T14047] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 595.849019][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.376769][T14056] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 596.452646][T14056] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 596.883928][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.584993][T14076] loop2: detected capacity change from 0 to 7 [ 597.605261][ T9414] Dev loop2: unable to read RDB block 7 [ 597.616252][ T9414] loop2: unable to read partition table [ 597.625391][ T9414] loop2: partition table beyond EOD, truncated [ 597.635226][T14076] Dev loop2: unable to read RDB block 7 [ 597.641083][T14076] loop2: unable to read partition table [ 597.650401][T14076] loop2: partition table beyond EOD, truncated [ 597.657213][T14076] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 597.923773][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.003376][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.176597][ T24] usb 2-1: reset full-speed USB device number 67 using dummy_hcd [ 598.199937][T14082] loop2: detected capacity change from 0 to 7 [ 598.211715][T14082] Dev loop2: unable to read RDB block 7 [ 598.220187][T14082] loop2: unable to read partition table [ 598.231611][T14082] loop2: partition table beyond EOD, truncated [ 598.240393][T14082] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 598.254220][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.353495][ T24] usb 2-1: device descriptor read/64, error -71 [ 598.475639][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2156'. [ 598.483407][T14087] loop9: detected capacity change from 0 to 7 [ 598.485882][T14084] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2156'. [ 598.493329][T14087] Dev loop9: unable to read RDB block 7 [ 598.534995][T14087] loop9: unable to read partition table [ 598.556015][T14087] loop9: partition table beyond EOD, truncated [ 598.569558][T14087] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 598.589092][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 598.589130][ T30] audit: type=1326 audit(1762924561.502:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.4.2158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x0 [ 598.633143][ T24] usb 2-1: reset full-speed USB device number 67 using dummy_hcd [ 598.793243][ T24] usb 2-1: device descriptor read/64, error -71 [ 598.799617][ T5915] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 598.817328][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2160'. [ 598.829901][T14101] netlink: 'syz.3.2160': attribute type 3 has an invalid length. [ 598.838384][T14101] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2160'. [ 598.850042][T14101] netlink: 'syz.3.2160': attribute type 3 has an invalid length. [ 598.859098][T14101] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2160'. [ 598.909230][T14103] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2161'. [ 598.963793][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.972855][T14103] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2161'. [ 598.988639][ T5915] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 598.998782][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.060607][ T5915] usb 3-1: config 0 descriptor?? [ 599.065861][ T24] usb 2-1: reset full-speed USB device number 67 using dummy_hcd [ 599.096975][ T24] usb 2-1: device descriptor read/8, error -71 [ 599.353096][ T24] usb 2-1: reset full-speed USB device number 67 using dummy_hcd [ 599.456404][ T24] usb 2-1: device descriptor read/8, error -71 [ 599.509285][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2162'. [ 599.551812][T14092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.561670][T14092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.576452][ T24] usb 2-1: USB disconnect, device number 67 [ 599.592844][ T24] keyspan 2-1:0.30: device disconnected [ 599.599389][ T5915] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 599.618423][ T5915] [drm:udl_init] *ERROR* Selecting channel failed [ 599.669595][ T5915] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 599.696689][ T5915] [drm] Initialized udl on minor 2 [ 599.708192][ T5915] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 599.724082][ T5915] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 599.746073][T12564] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 599.754441][T12564] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 599.765777][ T5915] usb 3-1: USB disconnect, device number 95 [ 599.803084][ T918] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 599.943132][ T24] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 599.985934][ T918] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 600.002567][ T918] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 600.003807][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.017045][ T918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.040146][ T918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 600.049222][ T918] usb 5-1: config 0 has no interface number 0 [ 600.055613][ T918] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 600.065891][ T918] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 600.077212][ T918] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 600.088958][ T24] usb 2-1: device descriptor read/64, error -71 [ 600.095499][ T918] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.112180][ T918] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 600.174074][ T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.241649][ T918] usb 5-1: config 0 descriptor?? [ 600.260857][ T918] gspca_main: spca561-2.14.0 probing abcd:cdee [ 600.333117][ T24] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 600.486824][ T24] usb 2-1: device descriptor read/64, error -71 [ 600.505452][ T918] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 600.522350][ T918] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.542795][T14115] netlink: 'syz.2.2165': attribute type 12 has an invalid length. [ 600.551472][T14115] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2165'. [ 600.602937][ T918] usb 5-1: MIDIStreaming interface descriptor not found [ 600.623679][ T24] usb usb2-port1: attempt power cycle [ 600.925592][ T918] usb 5-1: USB disconnect, device number 96 [ 600.983082][ T24] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 601.049873][ T24] usb 2-1: device descriptor read/8, error -71 [ 601.130713][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.287216][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.536812][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2168'. [ 601.734914][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.745134][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.957781][ T5835] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 602.163408][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.230155][ T5835] usb 5-1: unable to get BOS descriptor or descriptor too short [ 602.363197][ T5835] usb 5-1: not running at top speed; connect to a high speed hub [ 602.384884][ T5835] usb 5-1: config 8 has an invalid interface number: 127 but max is 0 [ 602.393742][ T5835] usb 5-1: config 8 has no interface number 0 [ 602.405298][ T5835] usb 5-1: config 8 interface 127 has no altsetting 0 [ 602.459517][ T5835] usb 5-1: New USB device found, idVendor=15c2, idProduct=003d, bcdDevice=5d.86 [ 602.485704][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.518156][ T5835] usb 5-1: Product: syz [ 602.535927][ T5835] usb 5-1: Manufacturer: syz [ 602.547818][ T5835] usb 5-1: SerialNumber: syz [ 602.606066][ T30] audit: type=1326 audit(1762924565.502:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 602.770437][T14132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.781357][T14132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.058314][ T30] audit: type=1326 audit(1762924565.502:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 603.100168][ T30] audit: type=1326 audit(1762924565.502:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 603.176906][ T30] audit: type=1326 audit(1762924565.502:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 603.201564][ T30] audit: type=1326 audit(1762924565.502:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 603.224231][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.463846][ T30] audit: type=1326 audit(1762924565.502:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 603.490654][ T30] audit: type=1326 audit(1762924565.502:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 603.523912][ T24] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 603.561156][ T30] audit: type=1326 audit(1762924565.502:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 603.587654][ T30] audit: type=1326 audit(1762924565.502:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 603.611471][ T30] audit: type=1326 audit(1762924565.502:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 603.666991][ T30] audit: type=1326 audit(1762924565.502:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 603.702299][ T30] audit: type=1326 audit(1762924565.502:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 603.729066][ T30] audit: type=1326 audit(1762924565.512:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 603.857905][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 603.888357][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.900230][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.921272][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 603.940336][ T30] audit: type=1326 audit(1762924565.512:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 604.039604][ T30] audit: type=1326 audit(1762924565.512:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 604.071948][ T30] audit: type=1326 audit(1762924565.512:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 604.095390][ T24] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 604.119683][ T30] audit: type=1326 audit(1762924565.512:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 604.144083][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.244209][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.257769][ T24] usb 3-1: config 0 descriptor?? [ 604.328565][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.464921][ T30] audit: type=1326 audit(1762924565.512:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 604.500355][ T30] audit: type=1326 audit(1762924565.512:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb536f8f6c9 code=0x7ffc0000 [ 604.872179][ T5835] hub 5-1:8.127: bad descriptor, ignoring hub [ 604.892589][ T5835] hub 5-1:8.127: probe with driver hub failed with error -5 [ 604.910329][ T5835] imon 5-1:8.127: unable to register, err -19 [ 604.934687][ T5835] usb 5-1: USB disconnect, device number 97 [ 605.024010][T14148] random: crng reseeded on system resumption [ 605.225610][T14161] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2176'. [ 605.283743][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.386913][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input51 [ 605.423396][T14165] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2176'. [ 605.460741][ T24] shield 0003:0955:7214.0036: Registered Thunderstrike controller [ 605.505009][ T24] shield 0003:0955:7214.0036: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 605.680501][T12564] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 605.703870][ T24] usb 3-1: USB disconnect, device number 96 [ 605.720357][T12564] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 605.734555][T12564] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 605.753273][T12564] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 606.212374][T14184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.247770][T14184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.324339][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.534555][T14185] fuse: root generation should be zero [ 606.590109][T14188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.600017][T14188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.754678][ T12] dummy0: left promiscuous mode [ 606.823733][T14188] netlink: 'syz.0.2182': attribute type 1 has an invalid length. [ 606.834531][T14189] netlink: 'syz.0.2182': attribute type 1 has an invalid length. [ 607.286190][T14206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.324309][T14206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.352322][T14206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.364834][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.375840][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.394141][T14206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.415905][T14206] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 607.603933][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.937541][T14223] FAULT_INJECTION: forcing a failure. [ 607.937541][T14223] name failslab, interval 1, probability 0, space 0, times 0 [ 607.937574][T14223] CPU: 0 UID: 0 PID: 14223 Comm: syz.2.2194 Not tainted syzkaller #0 PREEMPT(full) [ 607.937594][T14223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.937605][T14223] Call Trace: [ 607.937613][T14223] [ 607.937621][T14223] dump_stack_lvl+0x189/0x250 [ 607.937649][T14223] ? __pfx____ratelimit+0x10/0x10 [ 607.937680][T14223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.937702][T14223] ? __pfx__printk+0x10/0x10 [ 607.937726][T14223] ? __pfx___might_resched+0x10/0x10 [ 607.937750][T14223] should_fail_ex+0x414/0x560 [ 607.937780][T14223] should_failslab+0xa8/0x100 [ 607.937800][T14223] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 607.937825][T14223] ? kasprintf+0xd4/0x120 [ 607.937852][T14223] kvasprintf+0xdc/0x190 [ 607.937876][T14223] ? __pfx_kvasprintf+0x10/0x10 [ 607.937909][T14223] kasprintf+0xd4/0x120 [ 607.937936][T14223] ? __pfx_kasprintf+0x10/0x10 [ 607.937961][T14223] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 607.937984][T14223] ? alloc_bprm+0x7d/0x5c0 [ 607.938012][T14223] alloc_bprm+0x1cb/0x5c0 [ 607.938037][T14223] do_execveat_common+0x1b3/0x6a0 [ 607.938070][T14223] __x64_sys_execveat+0xc4/0xe0 [ 607.938097][T14223] do_syscall_64+0xfa/0xfa0 [ 607.938118][T14223] ? lockdep_hardirqs_on+0x9c/0x150 [ 607.938141][T14223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.938158][T14223] ? clear_bhb_loop+0x60/0xb0 [ 607.938180][T14223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.938197][T14223] RIP: 0033:0x7f1bd738f6c9 [ 607.938214][T14223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.938229][T14223] RSP: 002b:00007f1bd816d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 607.938249][T14223] RAX: ffffffffffffffda RBX: 00007f1bd75e5fa0 RCX: 00007f1bd738f6c9 [ 607.938262][T14223] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 607.938274][T14223] RBP: 00007f1bd816d090 R08: 0000000000001000 R09: 0000000000000000 [ 607.938285][T14223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.938301][T14223] R13: 00007f1bd75e6038 R14: 00007f1bd75e5fa0 R15: 00007f1bd770fa28 [ 607.938331][T14223] [ 608.081888][T14226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.082137][T14226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.153275][T14226] random: crng reseeded on system resumption [ 608.404108][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.606460][T14239] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 608.884266][T12564] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 608.946129][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'. [ 609.222652][T12564] usb 5-1: device descriptor read/64, error -71 [ 609.240971][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.253641][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.405841][T14245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.446015][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.463135][T12564] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 609.593128][T12564] usb 5-1: device descriptor read/64, error -71 [ 609.714043][T12564] usb usb5-port1: attempt power cycle [ 609.729712][T14250] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 609.773798][T14247] sit0: entered promiscuous mode [ 609.807431][T14247] netlink: 'syz.2.2201': attribute type 1 has an invalid length. [ 609.824880][T14247] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2201'. [ 610.048567][T14255] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2204'. [ 610.063164][T12564] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 610.090976][T12564] usb 5-1: device descriptor read/8, error -71 [ 610.181263][T14257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.193265][T14258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.194035][T14257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.205435][T14258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.219600][T14257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.228994][T14257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.239415][T14257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.251577][T14257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.353129][T12564] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 610.373539][T12564] usb 5-1: device descriptor read/8, error -71 [ 610.413277][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.484419][T12564] usb usb5-port1: unable to enumerate USB device [ 610.486208][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.525050][T14260] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 610.933730][T14269] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2208'. [ 610.949323][T14269] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2208'. [ 611.528045][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.010403][T14280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.010952][T14280] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.106588][T14276] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2210'. [ 612.887434][T14302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.966634][T14302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.376202][T14314] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2219'. [ 613.603352][ T5835] net_ratelimit: 5 callbacks suppressed [ 613.603371][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.637289][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.645455][T14316] fuse: Bad value for 'fd' [ 613.720197][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 613.720214][ T30] audit: type=1326 audit(1762924576.632:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14313 comm="syz.1.2219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a06d8f6c9 code=0x0 [ 614.004342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.081912][T14322] loop6: detected capacity change from 0 to 7 [ 614.120950][T14322] Dev loop6: unable to read RDB block 7 [ 614.137033][T14322] loop6: unable to read partition table [ 614.169958][T14322] loop6: partition table beyond EOD, truncated [ 614.176297][T14322] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 614.314823][T14325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.356509][T14325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.560484][T14332] netlink: 'syz.2.2224': attribute type 4 has an invalid length. [ 614.644210][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.734785][T14337] loop2: detected capacity change from 0 to 7 [ 614.742872][T14337] Dev loop2: unable to read RDB block 7 [ 614.748715][T14337] loop2: unable to read partition table [ 614.761319][T14337] loop2: partition table beyond EOD, truncated [ 614.777991][T14337] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 615.102869][T14349] netlink: 'syz.4.2231': attribute type 10 has an invalid length. [ 615.173158][T14349] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2231'. [ 615.254568][T14353] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2230'. [ 615.325932][T14355] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2232'. [ 615.383282][T14356] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2232'. [ 615.568296][ T30] audit: type=1326 audit(1762924578.482:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14357 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 615.668051][ T30] audit: type=1326 audit(1762924578.502:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14357 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 615.683415][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.776260][ T30] audit: type=1326 audit(1762924578.502:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14357 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 615.870045][ T30] audit: type=1326 audit(1762924578.502:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14357 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 615.892524][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.901222][ T30] audit: type=1326 audit(1762924578.502:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14357 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 615.923591][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.032840][ T30] audit: type=1326 audit(1762924578.512:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14357 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 616.055557][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.072261][ T30] audit: type=1326 audit(1762924578.512:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14357 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2738f6c9 code=0x7ffc0000 [ 616.310920][T14367] netlink: 79 bytes leftover after parsing attributes in process `syz.0.2235'. [ 616.395822][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'. [ 616.477016][T14379] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2236'. [ 616.496555][T14381] fuse: Bad value for 'fd' [ 616.548869][T14379] 0: renamed from hsr_slave_1 (while UP) [ 616.556193][T14380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.615299][T14380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.678304][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.731443][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.756970][T14379] 0: entered allmulticast mode [ 616.763923][T14379] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 616.886233][ T24] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 616.987180][T14384] loop2: detected capacity change from 0 to 7 [ 617.000229][T14384] Dev loop2: unable to read RDB block 7 [ 617.009855][T14384] loop2: unable to read partition table [ 617.018944][T14384] loop2: partition table beyond EOD, truncated [ 617.061285][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 617.065456][T14384] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 617.131593][ T24] usb 2-1: config 0 has no interface number 0 [ 617.151729][ T24] usb 2-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 617.163136][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.174580][ T24] usb 2-1: Product: syz [ 617.178912][ T24] usb 2-1: Manufacturer: syz [ 617.187876][ T24] usb 2-1: SerialNumber: syz [ 617.202163][ T24] usb 2-1: config 0 descriptor?? [ 617.207873][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.273892][ T24] cx231xx 2-1:0.1: New device syz syz @ 12 Mbps (2013:0259) with 1 interfaces [ 617.294339][ T24] cx231xx 2-1:0.1: Not found matching IAD interface [ 617.387746][T14388] netlink: 'syz.3.2243': attribute type 10 has an invalid length. [ 617.400776][T14390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.403634][T14388] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2243'. [ 617.431211][T14390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.478297][T14369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.505869][T14369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.570146][ T918] usb 2-1: USB disconnect, device number 72 [ 617.713220][ T24] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 617.764603][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.833597][T14398] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2245'. [ 617.843294][ T31] INFO: task kworker/1:4:5895 blocked for more than 143 seconds. [ 617.851181][ T31] Not tainted syzkaller #0 [ 617.857353][ T24] usb 5-1: device descriptor read/64, error -71 [ 617.864201][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.873171][ T31] task:kworker/1:4 state:D stack:21192 pid:5895 tgid:5895 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 617.885925][ T31] Workqueue: usb_hub_wq hub_event [ 617.891507][ T31] Call Trace: [ 617.895705][ T31] [ 617.899078][ T31] __schedule+0x1798/0x4cc0 [ 617.903815][ T31] ? __pfx___schedule+0x10/0x10 [ 617.909495][ T31] ? schedule+0x91/0x360 [ 617.913938][ T31] schedule+0x165/0x360 [ 617.918234][ T31] schedule_timeout+0x9a/0x270 [ 617.929771][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 617.935783][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.941518][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.947005][ T31] ? wait_for_completion+0x267/0x5d0 [ 617.952508][ T31] wait_for_completion+0x2bf/0x5d0 [ 617.957969][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 617.964511][ T31] i2c_del_adapter+0x581/0x6e0 [ 617.969737][ T31] ? __pfx__dev_err+0x10/0x10 [ 617.975752][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 617.981395][ T31] ? dvb_module_release+0x79/0x90 [ 617.986829][ T31] ? friio_frontend_detach+0x83/0xa0 [ 617.992774][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 617.998310][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 618.003446][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 618.008891][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 618.014858][ T31] usb_probe_interface+0x668/0xc30 [ 618.020206][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 618.026150][ T31] really_probe+0x26d/0x9e0 [ 618.031035][ T31] __driver_probe_device+0x18c/0x2f0 [ 618.036688][ T31] driver_probe_device+0x4f/0x430 [ 618.041909][ T31] __device_attach_driver+0x2ce/0x530 [ 618.048280][ T31] bus_for_each_drv+0x251/0x2e0 [ 618.053621][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 618.059870][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 618.065491][ T31] __device_attach+0x2b8/0x400 [ 618.070806][ T31] ? __pfx___device_attach+0x10/0x10 [ 618.076855][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 618.082329][ T31] bus_probe_device+0x185/0x260 [ 618.087868][ T31] device_add+0x7b6/0xb50 [ 618.092245][ T31] usb_set_configuration+0x1a87/0x20e0 [ 618.098371][ T31] usb_generic_driver_probe+0x8d/0x150 [ 618.104023][ T24] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 618.107959][ T31] usb_probe_device+0x1c4/0x390 [ 618.117133][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 618.122580][ T31] really_probe+0x26d/0x9e0 [ 618.127852][ T31] __driver_probe_device+0x18c/0x2f0 [ 618.133937][ T31] driver_probe_device+0x4f/0x430 [ 618.139090][ T31] __device_attach_driver+0x2ce/0x530 [ 618.148791][ T31] bus_for_each_drv+0x251/0x2e0 [ 618.154393][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 618.160329][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 618.166502][ T31] __device_attach+0x2b8/0x400 [ 618.171318][ T31] ? __pfx___device_attach+0x10/0x10 [ 618.177206][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 618.182436][ T31] bus_probe_device+0x185/0x260 [ 618.187937][ T31] device_add+0x7b6/0xb50 [ 618.192287][ T31] usb_new_device+0xa39/0x16f0 [ 618.197260][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 618.202510][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.207846][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.213160][ T31] hub_event+0x2958/0x4a20 [ 618.217632][ T31] ? __pfx_hub_event+0x10/0x10 [ 618.222407][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 618.228738][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 618.235069][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 618.241011][ T31] process_scheduled_works+0xae1/0x17b0 [ 618.243733][ T24] usb 5-1: device descriptor read/64, error -71 [ 618.247451][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 618.262928][ T31] worker_thread+0x8a0/0xda0 [ 618.268175][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 618.275081][ T31] ? __kthread_parkme+0x7b/0x200 [ 618.280043][ T31] kthread+0x711/0x8a0 [ 618.284815][ T31] ? __pfx_worker_thread+0x10/0x10 [ 618.290006][ T31] ? __pfx_kthread+0x10/0x10 [ 618.295308][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.300643][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.306248][ T31] ? __pfx_kthread+0x10/0x10 [ 618.310870][ T31] ret_from_fork+0x4bc/0x870 [ 618.315608][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 618.320956][ T31] ? __switch_to_asm+0x39/0x70 [ 618.327169][ T31] ? __switch_to_asm+0x33/0x70 [ 618.332103][ T31] ? __pfx_kthread+0x10/0x10 [ 618.336803][ T31] ret_from_fork_asm+0x1a/0x30 [ 618.341609][ T31] [ 618.344960][ T31] [ 618.344960][ T31] Showing all locks held in the system: [ 618.352727][ T31] 5 locks held by kworker/1:0/24: [ 618.358213][ T31] #0: ffff88814049c948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 618.370247][ T31] #1: ffffc900001e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 618.382693][ T31] #2: ffff888144f8c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 618.383371][ T24] usb usb5-port1: attempt power cycle [ 618.391775][ T31] #3: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 618.407565][ T31] #4: ffff888144f32d68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 618.417594][ T31] 1 lock held by khungtaskd/31: [ 618.422601][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 618.432573][ T31] 2 locks held by getty/5591: [ 618.437395][ T31] #0: ffff88814ded20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 618.447276][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 618.457538][ T31] 5 locks held by kworker/1:4/5895: [ 618.463428][ T31] #0: ffff88814049c948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 618.476175][ T31] #1: ffffc9000485fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 618.488309][ T31] #2: ffff888027b44198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 618.497322][ T31] #3: ffff88806b1a1198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 618.507070][ T31] #4: ffff888058b96160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 618.517127][ T31] 4 locks held by udevd/5945: [ 618.521828][ T31] #0: ffff888078ed3c30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 618.531234][ T31] #1: ffff888058ab3088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 618.540833][ T31] #2: ffff88806ccc85a8 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 618.550462][ T31] #3: ffff88806b1a1198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 618.559928][ T31] 3 locks held by kworker/1:7/12564: [ 618.565367][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 618.576486][ T31] #1: ffffc9000beb7ba0 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 618.587690][ T31] #2: ffffffff8df43138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 618.598694][ T31] 2 locks held by syz.3.2245/14393: [ 618.603983][ T31] #0: ffffffff8f2cb808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 618.613004][ T31] #1: ffffffff8df43138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 618.624182][ T31] [ 618.626619][ T31] ============================================= [ 618.626619][ T31] [ 618.635356][ T31] NMI backtrace for cpu 1 [ 618.635375][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 618.635399][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.635410][ T31] Call Trace: [ 618.635418][ T31] [ 618.635426][ T31] dump_stack_lvl+0x189/0x250 [ 618.635456][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.635478][ T31] ? __pfx__printk+0x10/0x10 [ 618.635508][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 618.635531][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 618.635553][ T31] ? __pfx__printk+0x10/0x10 [ 618.635573][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 618.635601][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 618.635622][ T31] watchdog+0xf60/0xfa0 [ 618.635643][ T31] ? watchdog+0x1e2/0xfa0 [ 618.635665][ T31] kthread+0x711/0x8a0 [ 618.635690][ T31] ? __pfx_watchdog+0x10/0x10 [ 618.635705][ T31] ? __pfx_kthread+0x10/0x10 [ 618.635728][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.635749][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.635769][ T31] ? __pfx_kthread+0x10/0x10 [ 618.635791][ T31] ret_from_fork+0x4bc/0x870 [ 618.635812][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 618.635837][ T31] ? __switch_to_asm+0x39/0x70 [ 618.635851][ T31] ? __switch_to_asm+0x33/0x70 [ 618.635864][ T31] ? __pfx_kthread+0x10/0x10 [ 618.635885][ T31] ret_from_fork_asm+0x1a/0x30 [ 618.635916][ T31] [ 618.635942][ T31] Sending NMI from CPU 1 to CPUs 0: [ 618.782831][ C0] NMI backtrace for cpu 0 [ 618.782863][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 618.782881][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.782890][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 618.782916][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 618.782930][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 618.782944][ C0] RAX: 675f1d622c63d500 RBX: ffffffff81967b47 RCX: 675f1d622c63d500 [ 618.782959][ C0] RDX: 0000000000000001 RSI: ffffffff8d70ded4 RDI: ffffffff8bbf0760 [ 618.782969][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 618.782979][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce770 [ 618.782989][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 618.782999][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 618.783012][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.783023][ C0] CR2: 00002000000000c0 CR3: 000000002deda000 CR4: 00000000003526f0 [ 618.783037][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 618.783047][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 618.783058][ C0] Call Trace: [ 618.783067][ C0] [ 618.783074][ C0] default_idle+0x13/0x20 [ 618.783103][ C0] default_idle_call+0x73/0xb0 [ 618.783118][ C0] do_idle+0x1e7/0x510 [ 618.783138][ C0] ? __pfx_do_idle+0x10/0x10 [ 618.783160][ C0] cpu_startup_entry+0x44/0x60 [ 618.783175][ C0] rest_init+0x2de/0x300 [ 618.783191][ C0] start_kernel+0x3ae/0x410 [ 618.783209][ C0] x86_64_start_reservations+0x24/0x30 [ 618.783230][ C0] x86_64_start_kernel+0x143/0x1c0 [ 618.783248][ C0] common_startup_64+0x13e/0x147 [ 618.783274][ C0] [ 618.843249][ T24] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 618.849246][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.896543][ T24] usb 5-1: device descriptor read/8, error -71 [ 619.125330][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.273200][ T24] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 619.304163][ T24] usb 5-1: device descriptor read/8, error -71 [ 619.424051][ T24] usb usb5-port1: unable to enumerate USB device [ 619.925758][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.963628][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.003755][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.167888][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.043714][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.446534][ T5201] udevd[5201]: worker [5945] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 624.083764][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.250256][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.257225][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.123809][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.213412][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.164033][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.806172][T12564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.203676][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog