last executing test programs: 5m12.140045196s ago: executing program 1 (id=666): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="100008"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x40, 0x67c6417c5b4b1da8, 0x25, {0x25, 0xf, "fd4a34be4b26fe2b84cccbde6774e7836cc6ae1c2c0cb9afe46b70ea61f6d33df29a28"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003d5000000f5035fc7a9b98a084cbbf693b68b8a7a8f202f28e2f05e594cfbd089cd0ec49c97f65e7a4f12aea70d560b3766ac78e963741a0148e500d08dd1b06319133309b00350907d9e2189526e575635f16eb48ef0af61aeff5f0130aecd28cb164bbd3bfb1191e0f80f29b8a3481751030da098ac7f41c9da74923a72659c28f32a707c238ec8ebdb0cf557c26b4e84c2c5bddbf33df9e5f95087adb6c0c6218b890b7bb55fb9b0b1a88b96c75c6d68ad32f0c3064e792cd4010133b4a16e069da3f1fbf88d4095764f56549bfe749825554550f7da22a6"], &(0x7f0000000040)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x783}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x20, 0xf, 0x23, "d65d57a28241e1967abb89c44f2230a97a8f817304c43d5198208fd1d241b73943f2a3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4e}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f00000005c0)={0x20, 0x1, 0x7d, "b1d532cd482c0863bed478c9f79499059c3ad6520d96629ffdbe89019ec0a8e594d92edf5c352e6521b96e90712e70a0f81522f6d3769dcdda5a30a6a1ea525cebfa7b43f43034334c0080a780a5d336bf17cb73b969dc2dc602e7858daf3aec275e20d57a8ada6d65a967b24ee5efb20c73e27bd5c8f3dfed0de5cfce"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001114010000000000000000000800017100000000080003000100000008004b0013"], 0x30}}, 0x0) 5m9.576526364s ago: executing program 1 (id=675): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001736e7202d15390500000000030109021b00020000000009040005004c55de000904"], 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0x7) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="4cff43884207e4708c9f304f647a4e0887baa966ab", 0x15, 0x4040010, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0xf, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5m8.044328746s ago: executing program 1 (id=682): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x0, 0x0, 0x2, 0x3}, 0x5a76224c41b455c1) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000180)=0x2, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) unshare(0x8000400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async, rerun: 32) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0x7006, 0x0) (async, rerun: 32) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (rerun: 32) pwrite64(r6, 0x0, 0x0, 0x5) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r3, 0x2d, 0xf6, 0x7, 0x9, 0x18, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x0, 0x9}}) (async) r8 = epoll_create1(0x0) (async) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000080)=0x80000003) (async) r10 = dup2(r9, 0xffffffffffffffff) read$FUSE(r10, &(0x7f0000004380)={0x2020}, 0x2020) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbff02000000000000000000000000000100004e22006490"], 0x0) read$FUSE(r10, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)={0x10000000}) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x18, 0x5a, 0xc6b747b6bf1c6b95, 0x70bd27, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0xf4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x18, 0x5, 0x7, 0xff, 0x2, 0x48bd8807, 0x5, 0x5}}, {0xe, 0x2, [0x8, 0x820d, 0x9, 0x40, 0x7]}}, {{0x1c, 0x1, {0x11, 0x7, 0x2, 0x3, 0x2, 0x9, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x7f, 0xa, 0xc, 0x2, 0x6c1, 0x4, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x0, 0x2, 0x3, 0x1, 0x2, 0x3, 0xffffffff, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xa, 0xf, 0xe, 0xfff, 0x0, 0x0, 0xffffff77, 0x4}}, {0xc, 0x2, [0x1, 0xc, 0x0, 0x8]}}]}]}, 0xf4}}, 0x2000) (rerun: 64) 5m7.759895913s ago: executing program 1 (id=684): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x147f6, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1001020, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r3, 0x8000000) syz_io_uring_setup(0x4973, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000005c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x1000000, &(0x7f0000000640)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1}) r7 = io_uring_setup(0x7bda, &(0x7f0000000080)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x16, 0x20000002, r8) syz_io_uring_submit(r4, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 5m6.21655754s ago: executing program 1 (id=692): r0 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r1, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c94305", 0x1e}, {&(0x7f0000000000)="2303942fe0dfd8f8c04e6ae35e91612a", 0x10}], 0x2) unshare(0x20000400) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x8180, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x8180, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f00000002c0)) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) (async) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) write(r0, &(0x7f0000000040)="c20000001e005f1834fff807000000010000000000000008000700c4cb0b02c4d1d6392ba2898b81a24f78c518650c78ab705af211e04e61589bae1287a2707d18e2fa4ef90f8dc9f2758e2e34439a732f6a2664f57eda47a9bcf1f23f796b719e080ffea4d6b2223feaf5567a365463b5b558745cba3ca0c3076c347b016253c88ef103659250aa0e65cd785b574a0c663cbf740b7fda4867d420b54274d44cf1eb89d77da830930e394cbc5534077908700400b590a4aba9fc59e02407171dd706", 0xc2) 5m5.57425932s ago: executing program 1 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000380)=@req3={0x8000, 0x8, 0x400, 0x100}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280), 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x200000, &(0x7f0000001400)={0x0, 0x3938700}}) io_uring_enter(r7, 0x6b4d, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f00000001c0), &(0x7f0000001440)={0x0, 0xfb, 0x1015, 0x3, 0x0, "b5db2caa0eaf290ab9525416db56d668", "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"}, 0x1015, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='hfs\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x24, 0x0, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5m5.243563221s ago: executing program 32 (id=693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000380)=@req3={0x8000, 0x8, 0x400, 0x100}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280), 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x200000, &(0x7f0000001400)={0x0, 0x3938700}}) io_uring_enter(r7, 0x6b4d, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f00000001c0), &(0x7f0000001440)={0x0, 0xfb, 0x1015, 0x3, 0x0, "b5db2caa0eaf290ab9525416db56d668", "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"}, 0x1015, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='hfs\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x24, 0x0, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 26.989896668s ago: executing program 3 (id=1457): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe2, &(0x7f0000001e00)=""/4066, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000180)={0x4000}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000600), &(0x7f0000000780)=0x28) fchdir(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r8, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x2, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x1e, 0x49, &(0x7f0000000300)=""/73, 0x41100, 0x6b, '\x00', r5, @fallback=0x25, r6, 0x8, &(0x7f0000000380)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xd, 0x38fdc8f2, 0x9}, 0x10, r9, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000004c0)=[{0x4, 0x9, 0xe, 0x1}, {0x1, 0x5, 0x0, 0x1}, {0x0, 0x5, 0x9, 0x2}, {0x0, 0x4, 0xe, 0xc}, {0x0, 0x3, 0xd, 0x8}, {0x3, 0x4, 0x9, 0x8}, {0x4, 0x4, 0x6, 0x9}], 0x10, 0x8, @void, @value}, 0x94) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r10, &(0x7f0000000240)=""/174, 0xae) 22.847900072s ago: executing program 3 (id=1462): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x88f5, 0x1, "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", 0x3, 0x4, 0x0, 0x10, 0x8, 0xba, 0x6}, r1}}, 0x128) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = syz_io_uring_setup(0x6908, &(0x7f0000000f40)={0x0, 0xd2ac, 0x1, 0x3}, &(0x7f0000000180), &(0x7f0000000100)) r4 = syz_io_uring_setup(0x17c6, &(0x7f0000000840)={0x0, 0x400000, 0x200, 0x0, 0x0, 0x0, r3}, &(0x7f0000000800), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x7, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) mmap(&(0x7f00002ee000/0x400000)=nil, 0x400000, 0x2, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) openat$incfs(0xffffffffffffffff, &(0x7f0000000300)='.log\x00', 0x800, 0x1e2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x503, @empty, 0x1}}, 0x0, 0x0, 0xb, 0x0, "6fcd42ec0222f5b3eed9ee0600000014a6ec4d6ce4bcab371951b2bf889190aa406396de415e124db0b32226b1c1acd7c6bdbb9d4f698baed67e551523c709ac4ae79c9cab1c4d1879cd9e00"}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980517ecc377210bd44fe7e1375550831c5f6dd769f1a1d0c5f47a8b91f4f180400"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) map_shadow_stack(&(0x7f00002ef000/0x4000)=nil, 0x4000, 0x1) r7 = accept4(r5, 0x0, 0x0, 0x800) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) recvmmsg(r7, &(0x7f0000000e00)=[{{&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/215, 0xd7}, {0x0}, {&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f00000008c0)=""/183, 0xb7}, {&(0x7f0000000980)=""/205, 0xcd}, {&(0x7f0000000a80)=""/246, 0xf6}], 0x8, &(0x7f0000000b80)=""/32, 0x20}, 0x9a}, {{&(0x7f0000000bc0)=@caif=@dbg, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/51, 0x33}, {&(0x7f0000000c80)=""/180, 0xb4}], 0x2, &(0x7f0000000d80)=""/98, 0x62}, 0x100}], 0x2, 0x2060, &(0x7f0000000e80)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 18.820173074s ago: executing program 3 (id=1471): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="100008"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2001"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x40, 0x67c6417c5b4b1da8, 0x25, {0x25, 0xf, "fd4a34be4b26fe2b84cccbde6774e7836cc6ae1c2c0cb9afe46b70ea61f6d33df29a28"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003d5000000f5035fc7a9b98a084cbbf693b68b8a7a8f202f28e2f05e594cfbd089cd0ec49c97f65e7a4f12aea70d560b3766ac78e963741a0148e500d08dd1b06319133309b00350907d9e2189526e575635f16eb48ef0af61aeff5f0130aecd28cb164bbd3bfb1191e0f80f29b8a3481751030da098ac7f41c9da74923a72659c28f32a707c238ec8ebdb0cf557c26b4e84c2c5bddbf33df9e5f95087adb6c0c6218b890b7bb55fb9b0b1a88b96c75c6d68ad32f0c3064e792cd4010133b4a16e069da3f1fbf88d4095764f56549bfe749825554550f7da22a6"], &(0x7f0000000040)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x783}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x20, 0xf, 0x23, "d65d57a28241e1967abb89c44f2230a97a8f817304c43d5198208fd1d241b73943f2a3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4e}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f00000005c0)={0x20, 0x1, 0x7d, "b1d532cd482c0863bed478c9f79499059c3ad6520d96629ffdbe89019ec0a8e594d92edf5c352e6521b96e90712e70a0f81522f6d3769dcdda5a30a6a1ea525cebfa7b43f43034334c0080a780a5d336bf17cb73b969dc2dc602e7858daf3aec275e20d57a8ada6d65a967b24ee5efb20c73e27bd5c8f3dfed0de5cfce"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001114010000000000000000000800017100000000080003000100000008004b0013"], 0x30}}, 0x0) 14.396275592s ago: executing program 3 (id=1479): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) 11.638125646s ago: executing program 3 (id=1489): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="100008"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="2001"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x40, 0x67c6417c5b4b1da8, 0x25, {0x25, 0xf, "fd4a34be4b26fe2b84cccbde6774e7836cc6ae1c2c0cb9afe46b70ea61f6d33df29a28"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003d5000000f5035fc7a9b98a084cbbf693b68b8a7a8f202f28e2f05e594cfbd089cd0ec49c97f65e7a4f12aea70d560b3766ac78e963741a0148e500d08dd1b06319133309b00350907d9e2189526e575635f16eb48ef0af61aeff5f0130aecd28cb164bbd3bfb1191e0f80f29b8a3481751030da098ac7f41c9da74923a72659c28f32a707c238ec8ebdb0cf557c26b4e84c2c5bddbf33df9e5f95087adb6c0c6218b890b7bb55fb9b0b1a88b96c75c6d68ad32f0c3064e792cd4010133b4a16e069da3f1fbf88d4095764f56549bfe749825554550f7da22a6"], &(0x7f0000000040)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x783}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x20, 0xf, 0x23, "d65d57a28241e1967abb89c44f2230a97a8f817304c43d5198208fd1d241b73943f2a3"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x4e}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf9}, &(0x7f00000005c0)={0x20, 0x1, 0x7d, "b1d532cd482c0863bed478c9f79499059c3ad6520d96629ffdbe89019ec0a8e594d92edf5c352e6521b96e90712e70a0f81522f6d3769dcdda5a30a6a1ea525cebfa7b43f43034334c0080a780a5d336bf17cb73b969dc2dc602e7858daf3aec275e20d57a8ada6d65a967b24ee5efb20c73e27bd5c8f3dfed0de5cfce"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7}}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001114010000000000000000000800017100000000080003000100000008004b0013"], 0x30}}, 0x0) 11.470803964s ago: executing program 2 (id=1490): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x88f5, 0x1, "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", 0x3, 0x4, 0x0, 0x10, 0x8, 0xba, 0x6}, r1}}, 0x128) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = syz_io_uring_setup(0x6908, &(0x7f0000000f40)={0x0, 0xd2ac, 0x1, 0x3}, &(0x7f0000000180), &(0x7f0000000100)) r4 = syz_io_uring_setup(0x17c6, &(0x7f0000000840)={0x0, 0x400000, 0x200, 0x0, 0x0, 0x0, r3}, &(0x7f0000000800), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x7, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) mmap(&(0x7f00002ee000/0x400000)=nil, 0x400000, 0x2, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) openat$incfs(0xffffffffffffffff, &(0x7f0000000300)='.log\x00', 0x800, 0x1e2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x503, @empty, 0x1}}, 0x0, 0x0, 0xb, 0x0, "6fcd42ec0222f5b3eed9ee0600000014a6ec4d6ce4bcab371951b2bf889190aa406396de415e124db0b32226b1c1acd7c6bdbb9d4f698baed67e551523c709ac4ae79c9cab1c4d1879cd9e00"}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980517ecc377210bd44fe7e1375550831c5f6dd769f1a1d0c5f47a8b91f4f180400"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) map_shadow_stack(&(0x7f00002ef000/0x4000)=nil, 0x4000, 0x1) r6 = accept4(r5, 0x0, 0x0, 0x800) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) recvmmsg(r6, &(0x7f0000000e00)=[{{&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/215, 0xd7}, {0x0}, {&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f00000008c0)=""/183, 0xb7}, {&(0x7f0000000980)=""/205, 0xcd}, {&(0x7f0000000a80)=""/246, 0xf6}], 0x8, &(0x7f0000000b80)=""/32, 0x20}, 0x9a}, {{&(0x7f0000000bc0)=@caif=@dbg, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/51, 0x33}, {&(0x7f0000000c80)=""/180, 0xb4}], 0x2, &(0x7f0000000d80)=""/98, 0x62}, 0x100}], 0x2, 0x2060, &(0x7f0000000e80)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 9.891180958s ago: executing program 2 (id=1491): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x29, 0x2, 0x0) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = getegid() mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$FUSE(r0, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x9) 9.873855477s ago: executing program 5 (id=1492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x16, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='scmi_xfer_begin\x00', r4}, 0x18) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x4500, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) open_by_handle_at(r8, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3], 0x13da00) socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r10, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRESHEX=r9, @ANYBLOB="010029bd610007000000050000000800010000000000a891015d82ea26acbbef8a7309884d1ac8b47232814554d573eee80d0eaee0be0e0d08dee06689f91da0238b2127be9742e75b92dc4ef444db6598f99d9055054efc9e4383ca6a405f2056ead6249f0444a5e5803868fab10c09d0add8f80215648fb02c99496c3dc45d4abe2fc047191ed0f1ad353a4853106e68a5ac576e808e9e11a6533e3040af764911ef70be5c5a2ae48d4f410ed4705982f830355087cfb7238cf38fed7c0800b0ba"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4c004) 9.800388463s ago: executing program 3 (id=1493): openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000001080)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x0, @private1, @mcast2, {[], {0x3, 0xe22, 0x9c, 0x0, @wg=@initiation={0xfb040001, 0x2, "5954e7530155920f11060a183f0ee1759cf6b44cded4ddc9541e2c799b15fb20", "7553dcb684b3a5dbea2301197817fabeb603f953ffd92ef1033ff958d7c2c9df2a550c7d2b62b362ba100e4b26ade214", "1d134037d0e87c095411147c55639b5e453471c620e9f6e4c35cd20c", {"9e919dd2a451178118d714e98dc0a02f", "5790b50833efbbf44ffac9c0b342e0e7"}}}}}}}}, 0x0) 9.789865673s ago: executing program 0 (id=1494): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x5, 0x36fd}, {0x6}]}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000b40)=ANY=[], 0x457f) 9.417626207s ago: executing program 4 (id=1495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 9.283590917s ago: executing program 4 (id=1496): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) write$dsp(r0, 0x0, 0xfffffece) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}], 0x1, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0), 0x43c}}, 0x0) recvmmsg(r4, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/58, 0x3a}, {&(0x7f0000000480)=""/215, 0xd7}], 0x2}, 0x5}], 0x1, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$802154_dgram(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}}, 0x40) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xcc, 0x0, 0x5c) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x109181, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r9, &(0x7f00000000c0)="8d", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c) 8.644453464s ago: executing program 5 (id=1497): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2001) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x106, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000dc0)="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", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) rmdir(&(0x7f00000000c0)='./file0\x00') 8.638967971s ago: executing program 2 (id=1498): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) close(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [], [], [], [0x8000000000000000]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x5, 0x36fd}, {0x6}]}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000b40)=ANY=[], 0x457f) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x4, 0x0) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r8, 0xc01064c5, &(0x7f0000000340)={&(0x7f0000000300)=[r9], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000100)={r9}) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000240)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) 8.533193579s ago: executing program 5 (id=1499): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="100008"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0}) 8.030191005s ago: executing program 4 (id=1500): socketpair$unix(0x1, 0x1, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0xa0c80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='percpu_alloc_percpu\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file1', [{0x20, '\x00'}, {0x20, '/{.\'%'}, {0x20, '#@'}, {0x20, '[^*/~'}], 0xa, "9c46ba26d80c51e8ffb41ae526a8c6192afe8e1dff32a7d16adb05b57b175ed5c4e3bcdf2df10d0a46345213ea59ec1d20439b24924ffa10c4ce5de14a1f0a1299d235bfdb340b3a4b4686f963b7bcf7c2942c447dfb8a04"}, 0x74) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000000)={"8add00", 0x0, 0x7, 0x5, 0xfc, 0x0, "000000000100000000000000000081", "643aa6bf", "47c7c4a9", "031ee100", ["5a4845ea00f3ffffff00", "275f27336448602a55bae850", "dd67e9214703de770202fce4", "4973dce60c23eb4573635a16"]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x2}}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0xa, 0x3, 0x6) getsockopt$nfc_llcp(r4, 0x29, 0x4d, 0x0, 0x20000011) r5 = dup(0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="120000004000000008000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000500)) 6.972991691s ago: executing program 0 (id=1501): bpf$MAP_CREATE(0x0, &(0x7f0000019640)=ANY=[@ANYBLOB="1e0000000600000008000000ff0f000010400000", @ANYRES32, @ANYBLOB="010400000000002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000006000000050000000100"/28], 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r0, &(0x7f0000000540)=""/102400, 0x19000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000095}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x10, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000400)={'batadv0\x00', 0x7, 0x4}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12) setsockopt$inet6_tcp_buf(r5, 0x6, 0x21, &(0x7f0000019540)="bb986735d3edcbf047519059fe56b431e081dd22cbe1407c71c86e1803ac01b8c92b68f084a4d640a5e983ef0a25a146e4b008ff0cee50ae87cef77b3e1501fe14a37c5651595132f4aaf75392651bc06e6c8db7825a90f525207773ca153a4919f6d542fc91b0699ae9441f7f064b970253e6147c4e49f92c28f3e76cf2ca212159a25d33b55bcce8474860e873bc7add651c1500183ea5e58ad64af69540e6739507dfa90897fc94a2bc07e6d45afdda258dae43dfb9acc0fdaf82d3f018aa18", 0xc1) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x80000000000008, &(0x7f0000000180)="0f", 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 6.059906807s ago: executing program 0 (id=1502): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x3, {0x88f5, 0x1, "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", 0x3, 0x4, 0x0, 0x10, 0x8, 0xba, 0x6}, r1}}, 0x128) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = syz_io_uring_setup(0x6908, &(0x7f0000000f40)={0x0, 0xd2ac, 0x1, 0x3}, &(0x7f0000000180), &(0x7f0000000100)) r4 = syz_io_uring_setup(0x17c6, &(0x7f0000000840)={0x0, 0x400000, 0x200, 0x0, 0x0, 0x0, r3}, &(0x7f0000000800), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x7, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) mmap(&(0x7f00002ee000/0x400000)=nil, 0x400000, 0x2, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x503, @empty, 0x1}}, 0x0, 0x0, 0xb, 0x0, "6fcd42ec0222f5b3eed9ee0600000014a6ec4d6ce4bcab371951b2bf889190aa406396de415e124db0b32226b1c1acd7c6bdbb9d4f698baed67e551523c709ac4ae79c9cab1c4d1879cd9e00"}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980517ecc377210bd44fe7e1375550831c5f6dd769f1a1d0c5f47a8b91f4f180400"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) map_shadow_stack(&(0x7f00002ef000/0x4000)=nil, 0x4000, 0x1) r7 = accept4(r5, 0x0, 0x0, 0x800) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) recvmmsg(r7, &(0x7f0000000e00)=[{{&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/215, 0xd7}, {0x0}, {&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f00000008c0)=""/183, 0xb7}, {&(0x7f0000000980)=""/205, 0xcd}, {&(0x7f0000000a80)=""/246, 0xf6}], 0x8, &(0x7f0000000b80)=""/32, 0x20}, 0x9a}, {{&(0x7f0000000bc0)=@caif=@dbg, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/51, 0x33}, {&(0x7f0000000c80)=""/180, 0xb4}], 0x2, &(0x7f0000000d80)=""/98, 0x62}, 0x100}], 0x2, 0x2060, &(0x7f0000000e80)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 5.505834006s ago: executing program 5 (id=1503): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x200000, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0) r4 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000200)=0x40) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000240)="76e2288a4f15d489589713716ff0436745f957be9348fd436217fa5e917c58ee", 0x20}], 0x1) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) socket$inet6(0xa, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0xfffffffc, @empty, 0x7}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x3505, 0x1, 0x2, 0x0, 0x0, 0x14}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0) 5.397675544s ago: executing program 2 (id=1504): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000280)={0xf3f23827d1d9ff8, r3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000009060102000000008a61fa4c28ff0409"], 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r8 = open(&(0x7f0000000300)='./file0\x00', 0x7c3101, 0x11) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={[{@name={'name', 0x3d, '_'}}]}) lchown(&(0x7f0000000100)='./file0\x00', 0x0, r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="4aa157e7", @ANYRES16, @ANYRES64], 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c38e10be28b4fdab1fa9e5c231982d47c02d19f45373b4dde7a33d65f857d7f9c32230c86af389f809cd8f1dbad4a3d7557ab53c7df5f498c11f19e65d02b285dababe4ef301e27bd2ef792d668c408da36fda9e0920958c482af87efb27b3be8d2798b385a8eb2e7a8d04e7682f14fc21713865ae2c0f697047f253c874a586386a935c6c84a937ebae6e4bbfdcd7a45484b1e8c651128220be0c0354803105a947dd0c86b", @ANYBLOB="5efa0c63bb0e89a525e5628400a36724b5cad48e9e2309bee93c37ac15886f87fe", @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x3227ae523f63ccd3}, 0x801) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYRES8=r9], 0x40}}, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) sendmsg$AUDIT_USER(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r12], 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x4004046) socket$packet(0x11, 0x2, 0x300) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4.637923475s ago: executing program 0 (id=1505): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x0, [0x2, 0x0, 0x0, 0x7ff, 0x1951, 0x51d5, 0x7ff, 0x60f4, 0x100, 0x7, 0x8, 0x404, 0x1006, 0x8, 0xfffa, 0x0, 0x1, 0x9, 0x4, 0x71, 0x6, 0x1, 0x7, 0x7fff, 0xfffa, 0x5, 0x5, 0x8000, 0x40, 0xfd7d, 0x80, 0x3b, 0x401, 0xe, 0x7, 0xa, 0xfb, 0x5, 0x7, 0x0, 0x1, 0x9, 0x6, 0x7, 0x10, 0x0, 0x2, 0x5], 0x80000000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xffffffee, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x2006c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xcbc1, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x1, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x20000b, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x1ff, 0x2, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x6, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x9, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x0, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) write$binfmt_misc(r3, &(0x7f0000000340), 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/42, 0x0, 0xffff1000}) 4.349440318s ago: executing program 5 (id=1506): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) dup2(r0, r0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000100), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000400014004000000", 0x58}], 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9046c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4e0664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa7666b5ded16ee7025f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b3a2327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4f4ab9e85bf8c6d71a2214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f4f5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51700eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6cd28cf28fe2ee593e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c191355391771f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18abde34ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310d69e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74df190c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f2708e09ae8268dcc15411483b8506386aa0ece2a94c320b002c77f82cb3cc96c34f7831844cc748e662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae4c697bfc674e03231c42f7eaaf5166bbc4653c71805f9448416e379cc1c40f8f866c9b319a849dd00ff9b84857436ed362c4632bfc3fa7357c24f15bbb07bd91893e61df7eb6dc5e071a9cc2faa7a32a91c4d982f5cfb725dca80b23874877a4980dbd70cda040b1ce527e7188159df77b493efbbd7bfe2680bf44e49eb68e5e33a0a5726072b2699d6244cd5c4a82bf18c668a3d43cec78c5fe1f12283d5dde6d0ea0b1b81ee7c065c938577e4ec93f22f1e6106f337625b7f7798011a60a75c35731fe44fa4fc6add59bac24d045a5780a0737b0f09e9127e9df798a1a58434b00d64ea6121afab030d1100905b6b5ecfd2991dd523098dbfaa85c0067884f987dde054a7ba1a95c1815c40a45878dd97a2721b28db7c52230dc999c4416b2af946ee708001cac72dd4ee55eae2d598cff47e4b929f3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000017c0)={0x14, 0xd, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f00000000c0)={0x0, 'dummy0\x00', {0x1}, 0x3}) 4.288294811s ago: executing program 4 (id=1507): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000d971910d00f626f5b505148300b59d6827c9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x3, 0x0, 0x20000000) r2 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000240)="06a444da05620ef74500054faf598a25df7a8a08f19d8c7190d7ed3825202e3400b95486184df59ee308259d5ae53b6e9c030a642c5a3eb03a32a005c8ffc3875b2fe2c49f1cfd0c20f6d88133dfbdde9a69178d169b30e6bca15ddc31247710859815e051f27e2a02118482ef13977eb6ba2e22ec88559ec3e29b16aa13a375a7aa312ef4d6a32252f5fcc12b2b74952da3118383e8bdfcf5e9eef9acd1196d1ecc6a75068587794f22895edce5", 0xae, 0xfffffffffffffffd) keyctl$update(0x2, r2, &(0x7f0000000340)="39aafad7", 0x4) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r4 = dup(r3) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1c, 0x2, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d9, 0x1, 0x0, 0x8000}) 4.126654752s ago: executing program 2 (id=1508): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="faff0000007f00000000000000000000000000dfff000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0xc43, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x19, 0x79, 0x2e, 0x20, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x44, [{{0x9, 0x4, 0xbd, 0x0, 0x2, 0x34, 0x67, 0xc3, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "e37e1b82e6"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) r5 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = getpid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x100) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) r9 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, 0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0x103) sendmmsg$inet6(r10, &(0x7f0000001b40)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x20000890) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r4) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 3.302527948s ago: executing program 4 (id=1509): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0x5, 0x4, 0xadd, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="26746ef402820fddd1a5a4eef34efeb42bbf7d5f5c4f7437ea3a247b78cf9ed59d9642ac8c9960", 0x27}, {&(0x7f0000000140)="53cd9190c26b5c9d2aefac4faa7b5a78c7367da89d9c415ede3ab523b5b669b683f9ce0a872f4e87c2c8ac5159fb26a9d232c3ae70f8a3fe4eb85648d376d8d9ed9302a7c1388aa3e26dbeb3fd3d2f9c3d4f3904ddbe1baeb30441a415ca242d6151f021b533d3c5b81472f5a3226d5abb3ad0fa6f0449c44302268ab2220eb0e69ae91e908fdc3f66455f2d9ee9dce5207eab7cd298e54721a3ec", 0x9b}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}, 0x4000) 3.276783525s ago: executing program 0 (id=1510): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x360b, 0x0, &(0x7f0000000340), 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5800) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) close(r6) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 2.076420282s ago: executing program 4 (id=1511): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x5, 0x36fd}, {0x6}]}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000b40)=ANY=[], 0x457f) 2.014270428s ago: executing program 0 (id=1512): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) write$dsp(r1, 0x0, 0xfffffece) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}], 0x1, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0), 0x43c}}, 0x0) recvmmsg(r5, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/58, 0x3a}, {&(0x7f0000000480)=""/215, 0xd7}], 0x2, 0x0, 0x8d}, 0x5}], 0x1, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xcc, 0x0, 0x5c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x109181, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r9, &(0x7f00000000c0)="8d", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) 1.208106731s ago: executing program 5 (id=1513): mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000040)={0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) pipe2(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e0000008080007400000000024000e80140001"], 0x88}}, 0x0) r4 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000005940)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="73797a3000203030304030303030303030303030303034303132203014303030303030303030303030301c303030312030303030303030303030303030302030303030302000f437aa061d44314a337ad34f3b01db405177c567b0008cd2d6c4d70ed8088084f76adef3232a0a6b901672bd5fe2b9c354e573409023cf57e578150b22e62fd46f3a26c08ece594d24f58d6e68591d4b6eaa6ff6ef8c2df3a25da2ee92e7d7dc08c1fdc301e437fa92277059adab27e5ebdb8cf17bf16ac196c31b8605b3b20695c5685781cda11cbaa06c"], 0x46) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = dup3(r6, r5, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) sigaltstack(&(0x7f0000000100)={0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) io_uring_enter(r7, 0x2f70, 0xc100, 0xa, &(0x7f00000000c0), 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) 0s ago: executing program 2 (id=1514): bpf$MAP_CREATE(0x0, &(0x7f0000019640)=ANY=[@ANYBLOB="1e0000000600000008000000ff0f000010400000", @ANYRES32, @ANYBLOB="010400000000002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000006000000050000000100"/28], 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r0, &(0x7f0000000540)=""/102400, 0x19000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000095}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x10, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000400)={'batadv0\x00', 0x7, 0x4}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c8, 0x12) setsockopt$inet6_tcp_buf(r5, 0x6, 0x21, &(0x7f0000019540)="bb986735d3edcbf047519059fe56b431e081dd22cbe1407c71c86e1803ac01b8c92b68f084a4d640a5e983ef0a25a146e4b008ff0cee50ae87cef77b3e1501fe14a37c5651595132f4aaf75392651bc06e6c8db7825a90f525207773ca153a4919f6d542fc91b0699ae9441f7f064b970253e6147c4e49f92c28f3e76cf2ca212159a25d33b55bcce8474860e873bc7add651c1500183ea5e58ad64af69540e6739507dfa90897fc94a2bc07e6d45afdda258dae43dfb9acc0fdaf82d3f018aa18", 0xc1) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x80000000000008, &(0x7f0000000180)="0f", 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): :760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10116 comm="syz.4.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f9e1e980809 code=0x7ffc0000 [ 407.012806][ T29] audit: type=1326 audit(1732709539.209:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10116 comm="syz.4.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1e980809 code=0x7ffc0000 [ 407.037557][ T29] audit: type=1326 audit(1732709539.209:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10116 comm="syz.4.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e1e980809 code=0x7ffc0000 [ 407.320370][T10122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.336611][T10122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.354482][T10122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.724338][ T25] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 407.863752][T10137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1086'. [ 407.873130][T10137] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1086'. [ 407.889234][T10137] futex_wake_op: syz.2.1086 tries to shift op by 32; fix this program [ 407.908371][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.933991][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.944968][ T25] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 407.954045][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.965632][ T25] usb 4-1: config 0 descriptor?? [ 409.577665][ T25] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 409.624257][ T25] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 409.632973][ T25] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 409.658853][ T25] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 409.671235][ T25] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 409.919747][ T25] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 409.933842][ T29] audit: type=1326 audit(1732709542.239:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10147 comm="syz.0.1089" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x0 [ 409.965945][ T25] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 410.038245][T10153] overlayfs: missing 'lowerdir' [ 410.952983][ T25] cp2112 0003:10C4:EA90.0022: error requesting version [ 410.961782][ T25] cp2112 0003:10C4:EA90.0022: probe with driver cp2112 failed with error -71 [ 410.994469][ T25] usb 4-1: USB disconnect, device number 38 [ 411.049210][T10160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1091'. [ 411.584787][ T25] net_ratelimit: 12 callbacks suppressed [ 411.584806][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.605760][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.984536][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.993153][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.111080][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.148303][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.216393][T10176] netlink: 'syz.0.1096': attribute type 1 has an invalid length. [ 412.329019][T10016] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 412.793361][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.802056][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.824472][T10016] usb 1-1: device descriptor read/64, error -71 [ 412.831624][T10179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.841259][T10179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.841467][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.864524][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.164228][ T7589] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 413.164479][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 413.259009][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 414.081031][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.183692][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.192200][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.284238][ T7589] usb 3-1: Using ep0 maxpacket: 32 [ 414.312000][ T7589] usb 3-1: too many configurations: 19, using maximum allowed: 8 [ 414.313346][ T6061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.322861][ T7589] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 414.479379][ T7589] usb 3-1: can't read configurations, error -61 [ 414.604406][ T5888] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 414.647375][ T9] usb 6-1: config 206 has too many interfaces: 163, using maximum allowed: 32 [ 414.657033][ T9] usb 6-1: config 206 has an invalid descriptor of length 0, skipping remainder of the config [ 414.669386][ T9] usb 6-1: config 206 has 1 interface, different from the descriptor's value: 163 [ 414.744812][ T7589] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 414.808286][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.825780][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.836814][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.846652][ T5888] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 414.855985][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.864059][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.872246][ T9] usb 6-1: Product: syz [ 414.890494][ T5888] usb 4-1: config 0 descriptor?? [ 414.920204][ T9] usb 6-1: Manufacturer: syz [ 414.944928][ T9] usb 6-1: SerialNumber: syz [ 414.974192][ T7589] usb 3-1: Using ep0 maxpacket: 32 [ 414.980085][ T7589] usb 3-1: too many configurations: 19, using maximum allowed: 8 [ 414.992293][ T7589] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 415.008451][ T7589] usb 3-1: can't read configurations, error -61 [ 415.017329][ T7589] usb usb3-port1: attempt power cycle [ 415.121850][T10207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1105'. [ 415.325417][ T9] usb 6-1: cannot find UAC_HEADER [ 415.348227][ T9] snd-usb-audio 6-1:206.0: probe with driver snd-usb-audio failed with error -22 [ 415.374423][ T9] usb 6-1: USB disconnect, device number 9 [ 416.038532][ T7589] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 416.049300][ T5888] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 416.056379][ T5888] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 416.063363][ T5888] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 416.094219][ T7589] usb 3-1: device descriptor read/8, error -71 [ 416.221854][ T5888] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 416.258783][ T5888] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 416.284338][ T5888] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 416.299849][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:206.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.322157][ T5888] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 416.398777][ T5888] cp2112 0003:10C4:EA90.0023: error requesting version [ 416.415669][ T5888] cp2112 0003:10C4:EA90.0023: probe with driver cp2112 failed with error -71 [ 416.981363][ T5888] usb 4-1: USB disconnect, device number 39 [ 417.431033][ T25] net_ratelimit: 9 callbacks suppressed [ 417.431051][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.445301][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.216878][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.479373][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.892656][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.901216][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.384537][ T6053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.276816][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.285433][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.292706][T10263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1118'. [ 421.301105][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.608676][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1121'. [ 422.609806][ T7589] net_ratelimit: 3 callbacks suppressed [ 422.609824][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.907069][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.170853][ T29] audit: type=1326 audit(1732709555.442:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10288 comm="syz.0.1127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x0 [ 423.868032][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.002995][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.004346][ T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 424.012164][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.884532][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.893116][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.915801][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.938825][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.065441][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.106335][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.201821][ T8] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 425.326008][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.520669][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.757181][ T8] usb 5-1: config 0 descriptor?? [ 425.769092][ T8] usb 5-1: can't set config #0, error -71 [ 425.779633][ T8] usb 5-1: USB disconnect, device number 33 [ 425.788604][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1137'. [ 426.831656][ T29] audit: type=1326 audit(1732709559.132:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10351 comm="syz.2.1141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8273780809 code=0x0 [ 427.691351][ T7589] net_ratelimit: 2 callbacks suppressed [ 427.691369][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.706335][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.709490][ T6067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.723806][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.733633][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.976590][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.984999][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.016050][T10365] netlink: 'syz.2.1141': attribute type 25 has an invalid length. [ 428.768573][T10371] FAULT_INJECTION: forcing a failure. [ 428.768573][T10371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.782446][T10371] CPU: 1 UID: 0 PID: 10371 Comm: syz.0.1143 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 428.792889][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 428.802962][T10371] Call Trace: [ 428.806258][T10371] [ 428.809372][T10371] dump_stack_lvl+0x241/0x360 [ 428.814075][T10371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.819296][T10371] ? __pfx__printk+0x10/0x10 [ 428.823910][T10371] ? __pfx_lock_release+0x10/0x10 [ 428.828960][T10371] should_fail_ex+0x3b0/0x4e0 [ 428.833663][T10371] fpu__restore_sig+0x1c0/0x1270 [ 428.838613][T10371] ? __pfx_fpu__restore_sig+0x10/0x10 [ 428.843996][T10371] ? __might_fault+0xc6/0x120 [ 428.848676][T10371] restore_sigcontext+0x675/0x7d0 [ 428.853701][T10371] ? __pfx___might_resched+0x10/0x10 [ 428.858991][T10371] ? __pfx_restore_sigcontext+0x10/0x10 [ 428.864555][T10371] ? arch_do_signal_or_restart+0x51f/0x860 [ 428.870367][T10371] __do_sys_rt_sigreturn+0x1b9/0x280 [ 428.875669][T10371] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 428.881476][T10371] ? do_syscall_64+0x100/0x230 [ 428.886329][T10371] ? do_syscall_64+0xb6/0x230 [ 428.891004][T10371] do_syscall_64+0xf3/0x230 [ 428.895507][T10371] ? clear_bhb_loop+0x35/0x90 [ 428.900187][T10371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.906080][T10371] RIP: 0033:0x7f4e77b80809 [ 428.910489][T10371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.930092][T10371] RSP: 002b:00007f4e789dc058 EFLAGS: 00000246 [ 428.936163][T10371] RAX: 0000000000000000 RBX: 00007f4e77d46160 RCX: 00007f4e77b80809 [ 428.944135][T10371] RDX: 0000000020000340 RSI: 0000000000000011 RDI: 0000000000000338 [ 428.952106][T10371] RBP: 00007f4e789dc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 428.960071][T10371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.968038][T10371] R13: 0000000000000000 R14: 00007f4e77d46160 R15: 00007ffdf09f1ff8 [ 428.976017][T10371] [ 428.989265][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.997680][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.265118][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.368672][ T29] audit: type=1800 audit(1732709562.632:766): pid=10382 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1149" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 430.422949][T10387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1150'. [ 430.814370][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 431.315333][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.503282][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.515551][T10397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1153'. [ 431.534410][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 431.548717][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.585183][ T9] usb 6-1: config 0 descriptor?? [ 431.686066][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 432.594900][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 432.601874][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 432.621099][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 432.628491][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 432.810777][ T8] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 432.961639][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 433.071389][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 433.205668][ T6046] net_ratelimit: 7 callbacks suppressed [ 433.205690][ T6046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.230817][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.117804][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.127586][ T9] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 434.513272][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.515184][ T9] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 434.522878][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.541037][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.549935][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.582757][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.606695][ T9] cp2112 0003:10C4:EA90.0024: error requesting version [ 434.656787][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.705673][ T9] cp2112 0003:10C4:EA90.0024: probe with driver cp2112 failed with error -71 [ 434.714745][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.819953][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 434.827731][ T8] usb 1-1: can't read configurations, error -71 [ 434.839298][ T9] usb 6-1: USB disconnect, device number 10 [ 435.334410][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 436.502496][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.513675][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.523662][ T25] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 436.532821][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.543709][ T25] usb 5-1: config 0 descriptor?? [ 437.464556][ T25] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 437.509390][ T25] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 437.930659][T10479] syz.3.1172: attempt to access beyond end of device [ 437.930659][T10479] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 438.028342][T10479] hfsplus: unable to find HFS+ superblock [ 438.130086][T10482] ubi0: attaching mtd0 [ 438.165150][T10482] ubi0: scanning is finished [ 438.308531][ T59] net_ratelimit: 7 callbacks suppressed [ 438.308563][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.326754][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.384038][T10469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1169'. [ 438.836697][T10482] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 438.844431][T10482] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 438.851732][T10482] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 438.859361][T10482] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 438.867493][T10482] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 438.874440][T10482] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 438.877456][ T7589] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 438.882564][T10482] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 229975630 [ 438.900149][T10482] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 438.912372][T10486] ubi0: background thread "ubi_bgt0d" started, PID 10486 [ 439.237667][ T7589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.253095][ T7589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.284825][ T7589] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 439.299751][ T7589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.387558][ T7589] usb 1-1: config 0 descriptor?? [ 439.395759][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.404357][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.235518][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.624953][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.637483][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.656195][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.664590][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.674806][ T7589] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 440.681846][ T7589] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 440.688945][ T25] cp2112 0003:10C4:EA90.0025: error requesting version [ 440.696249][ T7589] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 440.703633][ T7589] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 440.711097][ T7589] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 440.718132][ T7589] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 440.725200][ T7589] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 440.733596][ T25] cp2112 0003:10C4:EA90.0025: probe with driver cp2112 failed with error -71 [ 440.764451][ T7589] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 440.877362][ T25] usb 5-1: USB disconnect, device number 34 [ 440.896282][ T7589] cp2112 0003:10C4:EA90.0026: error requesting version [ 440.911730][ T7589] cp2112 0003:10C4:EA90.0026: probe with driver cp2112 failed with error -32 [ 441.074349][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 441.215632][ T9] usb 3-1: device descriptor read/64, error -71 [ 441.886423][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.895371][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.254239][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 442.365488][ T8] usb 1-1: USB disconnect, device number 38 [ 442.544374][ T9] usb 3-1: device descriptor read/64, error -71 [ 442.682219][ T9] usb usb3-port1: attempt power cycle [ 443.828234][ T5916] net_ratelimit: 2 callbacks suppressed [ 443.828264][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.854497][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 443.881009][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.970084][ T9] usb 3-1: device descriptor read/8, error -71 [ 444.078660][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.086832][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.095156][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.712718][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.239573][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.257568][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.830805][T10542] netlink: 'syz.2.1186': attribute type 10 has an invalid length. [ 445.854644][T10543] syz_tun: entered promiscuous mode [ 445.864920][T10543] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 446.426328][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.434838][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.510334][ T59] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 448.707510][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.764577][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.786180][ T59] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 448.826694][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.952166][ T59] usb 4-1: config 0 descriptor?? [ 449.471895][ T59] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 449.502824][ T59] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 449.553926][ T59] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 449.794887][ T25] net_ratelimit: 6 callbacks suppressed [ 449.794903][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.829150][ T59] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 449.840089][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.904467][ T59] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 449.969583][ T59] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 449.997029][ T59] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 450.028244][ T59] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 450.168123][ T59] cp2112 0003:10C4:EA90.0027: error requesting version [ 450.228849][ T59] cp2112 0003:10C4:EA90.0027: probe with driver cp2112 failed with error -32 [ 450.505163][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.513374][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.963474][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 450.974407][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.982951][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.215916][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.258255][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.287932][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 451.333751][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.393405][ T9] usb 6-1: config 0 descriptor?? [ 451.817046][ T9] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 451.843307][ T9] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 451.868503][ T9] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 451.895079][ T9] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 451.913497][ T9] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 451.938532][ T9] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 451.961408][ T9] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 451.980353][ T9] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 451.994562][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.014246][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.066698][ T9] cp2112 0003:10C4:EA90.0028: error requesting version [ 452.090979][ T9] cp2112 0003:10C4:EA90.0028: probe with driver cp2112 failed with error -32 [ 452.103061][ T25] usb 4-1: USB disconnect, device number 40 [ 453.529116][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.544863][ T25] usb 6-1: USB disconnect, device number 11 [ 453.714118][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.050172][T10632] FAULT_INJECTION: forcing a failure. [ 454.050172][T10632] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 454.064346][T10632] CPU: 1 UID: 0 PID: 10632 Comm: syz.2.1209 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 454.074793][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 454.084839][T10632] Call Trace: [ 454.088105][T10632] [ 454.091025][T10632] dump_stack_lvl+0x241/0x360 [ 454.095702][T10632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.100891][T10632] ? __pfx__printk+0x10/0x10 [ 454.105472][T10632] ? __lock_acquire+0x1397/0x2100 [ 454.110485][T10632] should_fail_ex+0x3b0/0x4e0 [ 454.115155][T10632] prepare_alloc_pages+0x1da/0x5b0 [ 454.120265][T10632] __alloc_pages_noprof+0x16f/0x710 [ 454.125463][T10632] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 454.131179][T10632] ? __pfx_lock_acquire+0x10/0x10 [ 454.136192][T10632] alloc_pages_mpol_noprof+0x3e8/0x680 [ 454.141656][T10632] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 454.147630][T10632] vma_alloc_folio_noprof+0x12e/0x230 [ 454.152988][T10632] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 454.158899][T10632] folio_prealloc+0x2e/0x170 [ 454.163563][T10632] handle_pte_fault+0x2518/0x68a0 [ 454.168575][T10632] ? mark_lock+0x9a/0x360 [ 454.172895][T10632] ? __lock_acquire+0x1397/0x2100 [ 454.177910][T10632] ? mark_lock+0x9a/0x360 [ 454.182232][T10632] ? __pfx_handle_pte_fault+0x10/0x10 [ 454.187601][T10632] ? __lock_acquire+0x1397/0x2100 [ 454.192642][T10632] ? __pfx_lock_acquire+0x10/0x10 [ 454.197657][T10632] ? count_memcg_event_mm+0x3c2/0x420 [ 454.203022][T10632] ? do_raw_spin_lock+0x14f/0x370 [ 454.208052][T10632] handle_mm_fault+0x1053/0x1ad0 [ 454.212995][T10632] ? __pfx_handle_mm_fault+0x10/0x10 [ 454.218290][T10632] ? follow_page_pte+0x9ad/0x1db0 [ 454.223342][T10632] ? __pfx_find_vma+0x10/0x10 [ 454.228010][T10632] ? vma_is_secretmem+0xd/0x50 [ 454.232767][T10632] ? check_vma_flags+0x52b/0x5a0 [ 454.237695][T10632] __get_user_pages+0x1c82/0x49e0 [ 454.242730][T10632] ? __pfx___get_user_pages+0x10/0x10 [ 454.248177][T10632] ? __pfx_mt_find+0x10/0x10 [ 454.252770][T10632] populate_vma_page_range+0x264/0x330 [ 454.258222][T10632] ? __pfx_populate_vma_page_range+0x10/0x10 [ 454.264189][T10632] ? apply_mlockall_flags+0x385/0x410 [ 454.269547][T10632] __mm_populate+0x27a/0x460 [ 454.274138][T10632] ? __pfx___mm_populate+0x10/0x10 [ 454.279235][T10632] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 454.285205][T10632] __se_sys_mlockall+0x3e3/0x4d0 [ 454.290129][T10632] do_syscall_64+0xf3/0x230 [ 454.294621][T10632] ? clear_bhb_loop+0x35/0x90 [ 454.299293][T10632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.305177][T10632] RIP: 0033:0x7f8273780809 [ 454.309575][T10632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.329169][T10632] RSP: 002b:00007f82715f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 454.337569][T10632] RAX: ffffffffffffffda RBX: 00007f8273945fa0 RCX: 00007f8273780809 [ 454.345530][T10632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 454.353484][T10632] RBP: 00007f82715f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 454.361445][T10632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.369402][T10632] R13: 0000000000000000 R14: 00007f8273945fa0 R15: 00007ffe869cb938 [ 454.377369][T10632] [ 454.380416][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.905030][ T9] net_ratelimit: 3 callbacks suppressed [ 454.905052][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.911864][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.927110][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.038873][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.048130][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.715738][T10656] FAULT_INJECTION: forcing a failure. [ 456.715738][T10656] name failslab, interval 1, probability 0, space 0, times 0 [ 456.754192][T10656] CPU: 0 UID: 0 PID: 10656 Comm: syz.5.1214 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 456.764637][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 456.774690][T10656] Call Trace: [ 456.777971][T10656] [ 456.780897][T10656] dump_stack_lvl+0x241/0x360 [ 456.785584][T10656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.790783][T10656] ? __pfx__printk+0x10/0x10 [ 456.795371][T10656] ? __kmalloc_cache_noprof+0x48/0x390 [ 456.800831][T10656] ? __pfx___might_resched+0x10/0x10 [ 456.806124][T10656] should_fail_ex+0x3b0/0x4e0 [ 456.810804][T10656] should_failslab+0xac/0x100 [ 456.815479][T10656] __kmalloc_cache_noprof+0x70/0x390 [ 456.820763][T10656] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 456.826142][T10656] tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 456.831343][T10656] tcp_sendmsg_locked+0x48d2/0x4f30 [ 456.836536][T10656] ? mark_lock+0x9a/0x360 [ 456.840879][T10656] ? __lock_acquire+0x1397/0x2100 [ 456.845908][T10656] ? mark_lock+0x9a/0x360 [ 456.850232][T10656] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 456.856204][T10656] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 456.862528][T10656] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 456.868081][T10656] ? tcp_sendmsg+0x22/0x50 [ 456.872494][T10656] ? do_raw_spin_unlock+0x13c/0x8b0 [ 456.877696][T10656] tcp_sendmsg+0x30/0x50 [ 456.881937][T10656] __sock_sendmsg+0xef/0x270 [ 456.886530][T10656] __sys_sendto+0x363/0x4c0 [ 456.891061][T10656] ? __pfx___sys_sendto+0x10/0x10 [ 456.896084][T10656] ? __mutex_unlock_slowpath+0x21e/0x790 [ 456.901811][T10656] ? __fget_files+0x2a/0x410 [ 456.906409][T10656] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 456.912385][T10656] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 456.918711][T10656] __x64_sys_sendto+0xde/0x100 [ 456.923484][T10656] do_syscall_64+0xf3/0x230 [ 456.927992][T10656] ? clear_bhb_loop+0x35/0x90 [ 456.932666][T10656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.938557][T10656] RIP: 0033:0x7eff82780809 [ 456.942965][T10656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.962562][T10656] RSP: 002b:00007eff834a4058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 456.970990][T10656] RAX: ffffffffffffffda RBX: 00007eff82945fa0 RCX: 00007eff82780809 [ 456.978969][T10656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 456.986951][T10656] RBP: 00007eff834a40a0 R08: 0000000020b63fe4 R09: 000000000000001c [ 456.994932][T10656] R10: 0000000020000003 R11: 0000000000000246 R12: 0000000000000001 [ 457.002901][T10656] R13: 0000000000000000 R14: 00007eff82945fa0 R15: 00007ffd2d244578 [ 457.010885][T10656] [ 457.044510][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.052778][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.104597][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.113068][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.194448][ T7589] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 457.504289][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 457.564243][ T7589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.576398][ T7589] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.586846][ T7589] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 457.706584][ T7589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.809890][ T7589] usb 1-1: config 0 descriptor?? [ 458.011099][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.203816][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.290835][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.355935][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 458.358611][ T7589] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 458.372188][ T7589] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 458.379462][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.390308][ T9] usb 5-1: config 0 descriptor?? [ 458.417977][ T7589] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 458.427626][ T7589] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 458.435289][ T7589] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 458.442501][ T7589] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 458.452170][ T7589] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 458.468397][ T7589] cp2112 0003:10C4:EA90.0029: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 458.575086][ T7589] cp2112 0003:10C4:EA90.0029: error requesting version [ 458.669776][ T7589] cp2112 0003:10C4:EA90.0029: probe with driver cp2112 failed with error -32 [ 459.169097][ T9] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 459.180790][ T9] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 459.192320][ T9] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 459.204066][ T9] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 459.216268][ T9] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 459.232312][ T9] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 459.248619][ T9] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 459.308529][ T9] cp2112 0003:10C4:EA90.002A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 459.416224][ T9] cp2112 0003:10C4:EA90.002A: error requesting version [ 459.431737][ T9] cp2112 0003:10C4:EA90.002A: probe with driver cp2112 failed with error -32 [ 459.441885][T10681] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1224'. [ 459.462232][T10681] netlink: 'syz.3.1224': attribute type 8 has an invalid length. [ 460.114347][ T9] net_ratelimit: 3 callbacks suppressed [ 460.114368][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.128494][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.271970][ T25] usb 1-1: USB disconnect, device number 39 [ 460.813088][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.836907][T10700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.837864][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.845767][T10700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.886076][ T5888] usb 5-1: USB disconnect, device number 35 [ 461.055327][T10700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.063712][T10700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.324332][ T25] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 461.504227][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 461.548041][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 461.727493][T10699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.737857][T10699] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.745109][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.784814][ T25] usb 1-1: Product: syz [ 461.789020][ T25] usb 1-1: Manufacturer: syz [ 461.805809][ T25] usb 1-1: SerialNumber: syz [ 461.844741][ T25] usb 1-1: config 0 descriptor?? [ 462.151961][ T25] usb read operation failed. (-71) [ 462.204511][ T25] usb write operation failed. (-71) [ 462.298631][ T25] usb write operation failed. (-71) [ 462.334000][ T25] usb write operation failed. (-71) [ 462.345878][ T25] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 462.371539][ T25] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 462.400501][ T25] usb 1-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 462.644302][ T59] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 462.876864][ T59] usb 6-1: Using ep0 maxpacket: 16 [ 462.995248][ T59] usb 6-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 463.008144][ T59] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 463.034121][ T59] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 463.045707][ T59] usb 6-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 463.059045][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 463.113848][ T59] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 463.138253][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.146682][ T59] usb 6-1: Product: syz [ 463.150877][ T59] usb 6-1: Manufacturer: syz [ 463.184273][ T59] usb 6-1: SerialNumber: syz [ 463.195986][ T59] usb 6-1: config 0 descriptor?? [ 463.204829][T10720] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 463.215852][ T59] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input29 [ 463.225170][ T7589] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 463.405792][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 463.984447][ T7589] usb 3-1: Using ep0 maxpacket: 8 [ 464.004269][ T7589] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 464.012600][ T7589] usb 3-1: config 179 has no interface number 0 [ 464.033983][ T7589] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 464.152520][ T7589] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 464.164784][ T7589] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 464.176386][ T7589] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 464.186925][ T7589] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 464.200513][ T7589] usb 3-1: config 179 interface 65 has no altsetting 0 [ 464.207692][ T7589] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 464.216966][ T7589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.444434][ T5916] net_ratelimit: 10 callbacks suppressed [ 465.444451][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.452049][ T7589] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input30 [ 465.645031][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.653470][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.725101][T10747] netlink: 'syz.5.1233': attribute type 16 has an invalid length. [ 465.732956][T10747] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1233'. [ 465.906302][ T5933] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 466.083990][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 466.583634][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.585423][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.591979][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.636444][ T5933] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=d3.dd [ 466.663082][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.689938][ T5933] usb 5-1: Product: syz [ 466.718868][ T5933] usb 5-1: Manufacturer: syz [ 466.754925][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.763357][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.803888][ T5933] usb 5-1: SerialNumber: syz [ 466.882077][ T5888] usb 3-1: USB disconnect, device number 40 [ 466.888065][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 466.927131][ T5933] usb 5-1: config 0 descriptor?? [ 466.964053][ T29] audit: type=1326 audit(1732709599.260:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10759 comm="syz.0.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 466.972339][ T5933] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 467.016376][ T5888] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 467.047083][ T29] audit: type=1326 audit(1732709599.260:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10759 comm="syz.0.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 467.074024][ T29] audit: type=1326 audit(1732709599.300:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10759 comm="syz.0.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 467.104181][ T59] usb 6-1: USB disconnect, device number 12 [ 467.126276][ T5933] dvb-usb: bulk message failed: -22 (2/0) [ 467.224952][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 467.228340][ T29] audit: type=1326 audit(1732709599.310:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10759 comm="syz.0.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 467.238145][ T5933] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 467.256050][ T29] audit: type=1326 audit(1732709599.310:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10759 comm="syz.0.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 467.287862][ T29] audit: type=1326 audit(1732709599.310:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10759 comm="syz.0.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 467.310546][ T29] audit: type=1326 audit(1732709599.310:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10759 comm="syz.0.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 467.437799][ T29] audit: type=1326 audit(1732709599.310:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10759 comm="syz.0.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 467.579066][ T5933] usb 5-1: media controller created [ 468.409975][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.422759][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.628120][ T29] audit: type=1326 audit(1732709599.310:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10759 comm="syz.0.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 468.649861][ T29] audit: type=1326 audit(1732709599.310:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10759 comm="syz.0.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 468.672679][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.992813][ T5933] cxusb: set interface failed [ 468.997921][ T5933] dvb-usb: bulk message failed: -22 (1/0) [ 470.070698][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.207200][ T5933] DVB: Unable to find symbol mt352_attach() [ 470.224743][ T5933] dvb-usb: bulk message failed: -22 (5/0) [ 470.234182][ T5933] zl10353_read_register: readreg error (reg=127, ret==-121) [ 470.254108][ T5933] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 470.636246][ T5933] rc_core: IR keymap rc-dvico-mce not found [ 470.646478][ T5933] Registered IR keymap rc-empty [ 470.653132][ T5933] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 470.669653][ T5933] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input31 [ 470.749281][ T5933] dvb-usb: schedule remote query interval to 100 msecs. [ 470.756442][ T5933] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 470.777614][ T5933] usb 5-1: USB disconnect, device number 36 [ 471.682122][ T5888] net_ratelimit: 6 callbacks suppressed [ 471.682142][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.709079][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.136098][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'. [ 473.027461][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.035815][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.060675][ T5933] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 473.112743][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.121397][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.044911][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.226183][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.235048][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.608866][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.444072][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 476.444121][ T29] audit: type=1326 audit(1732709608.698:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.0.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 476.574032][ T29] audit: type=1326 audit(1732709608.708:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.0.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 476.603830][ T29] audit: type=1326 audit(1732709608.848:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.0.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 476.640586][ T29] audit: type=1326 audit(1732709608.938:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.0.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 476.662508][ T29] audit: type=1326 audit(1732709608.938:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.0.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 476.684683][ T29] audit: type=1326 audit(1732709608.938:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.0.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 476.707328][ T29] audit: type=1326 audit(1732709608.938:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.0.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 476.729100][ T29] audit: type=1326 audit(1732709608.938:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.0.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 476.750949][ T29] audit: type=1326 audit(1732709608.938:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.0.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 476.773688][ T29] audit: type=1326 audit(1732709608.938:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10845 comm="syz.0.1258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 477.369678][T10016] net_ratelimit: 3 callbacks suppressed [ 477.369696][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.376901][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.395986][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.877533][T10862] FAULT_INJECTION: forcing a failure. [ 477.877533][T10862] name failslab, interval 1, probability 0, space 0, times 0 [ 477.944923][T10862] CPU: 1 UID: 0 PID: 10862 Comm: syz.2.1265 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 477.955402][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 477.965490][T10862] Call Trace: [ 477.968800][T10862] [ 477.971745][T10862] dump_stack_lvl+0x241/0x360 [ 477.976455][T10862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.981673][T10862] ? __pfx__printk+0x10/0x10 [ 477.986269][T10862] ? __kmalloc_cache_noprof+0x48/0x390 [ 477.991734][T10862] ? __pfx___might_resched+0x10/0x10 [ 477.997026][T10862] should_fail_ex+0x3b0/0x4e0 [ 478.001705][T10862] should_failslab+0xac/0x100 [ 478.006386][T10862] __kmalloc_cache_noprof+0x70/0x390 [ 478.011666][T10862] ? __request_module+0x2b9/0x650 [ 478.016691][T10862] __request_module+0x2b9/0x650 [ 478.021540][T10862] ? __pfx_lock_acquire+0x10/0x10 [ 478.026567][T10862] ? __pfx___request_module+0x10/0x10 [ 478.031951][T10862] ? rtnl_link_ops_get+0x22/0x250 [ 478.036982][T10862] ? rtnl_link_ops_get+0x21d/0x250 [ 478.042093][T10862] rtnl_newlink+0x627/0x24f0 [ 478.046684][T10862] ? kasan_save_track+0x51/0x80 [ 478.051542][T10862] ? kasan_save_free_info+0x40/0x50 [ 478.056739][T10862] ? __kasan_slab_free+0x59/0x70 [ 478.061675][T10862] ? __pfx_rtnl_newlink+0x10/0x10 [ 478.066696][T10862] ? __netlink_deliver_tap+0x56b/0x7f0 [ 478.072155][T10862] ? __pfx_validate_chain+0x10/0x10 [ 478.077359][T10862] ? __sock_sendmsg+0x221/0x270 [ 478.082224][T10862] ? ____sys_sendmsg+0x52a/0x7e0 [ 478.087165][T10862] ? __sys_sendmsg+0x269/0x350 [ 478.091930][T10862] ? do_syscall_64+0xf3/0x230 [ 478.096606][T10862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.102687][T10862] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 478.108664][T10862] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 478.114993][T10862] ? mark_lock+0x9a/0x360 [ 478.119321][T10862] ? __lock_acquire+0x1397/0x2100 [ 478.124370][T10862] ? rcu_read_unlock+0x87/0xa0 [ 478.129135][T10862] ? __dev_queue_xmit+0x1775/0x3f50 [ 478.134334][T10862] ? __pfx_lock_release+0x10/0x10 [ 478.139356][T10862] ? cap_capable+0x1b4/0x250 [ 478.143964][T10862] ? __pfx_rtnl_newlink+0x10/0x10 [ 478.148990][T10862] rtnetlink_rcv_msg+0x791/0xcf0 [ 478.153931][T10862] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 478.159040][T10862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 478.164501][T10862] ? ref_tracker_free+0x643/0x7e0 [ 478.169527][T10862] netlink_rcv_skb+0x1e3/0x430 [ 478.174293][T10862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 478.179755][T10862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.185069][T10862] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.190307][T10862] netlink_unicast+0x7f6/0x990 [ 478.195090][T10862] ? __pfx_netlink_unicast+0x10/0x10 [ 478.200399][T10862] ? __virt_addr_valid+0x183/0x530 [ 478.205522][T10862] ? __check_object_size+0x48e/0x900 [ 478.210824][T10862] netlink_sendmsg+0x8e4/0xcb0 [ 478.215618][T10862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.220919][T10862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.226205][T10862] __sock_sendmsg+0x221/0x270 [ 478.230886][T10862] ____sys_sendmsg+0x52a/0x7e0 [ 478.235661][T10862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.241129][T10862] ? __fget_files+0x2a/0x410 [ 478.245729][T10862] ? __fget_files+0x2a/0x410 [ 478.250328][T10862] __sys_sendmsg+0x269/0x350 [ 478.254921][T10862] ? __pfx_lock_release+0x10/0x10 [ 478.259953][T10862] ? __pfx___sys_sendmsg+0x10/0x10 [ 478.265073][T10862] ? __pfx_vfs_write+0x10/0x10 [ 478.269854][T10862] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 478.276181][T10862] ? do_syscall_64+0x100/0x230 [ 478.280945][T10862] ? do_syscall_64+0xb6/0x230 [ 478.285627][T10862] do_syscall_64+0xf3/0x230 [ 478.290134][T10862] ? clear_bhb_loop+0x35/0x90 [ 478.294822][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.300715][T10862] RIP: 0033:0x7f8273780809 [ 478.305126][T10862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.324755][T10862] RSP: 002b:00007f82715f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.333164][T10862] RAX: ffffffffffffffda RBX: 00007f8273945fa0 RCX: 00007f8273780809 [ 478.341130][T10862] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 478.349093][T10862] RBP: 00007f82715f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 478.357059][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.365023][T10862] R13: 0000000000000000 R14: 00007f8273945fa0 R15: 00007ffe869cb938 [ 478.372995][T10862] [ 479.078500][T10862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1265'. [ 479.084158][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.167067][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.454917][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.110117][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 480.125873][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.172352][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.265126][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.279677][T10881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.615641][T10016] net_ratelimit: 8 callbacks suppressed [ 482.615656][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.638464][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 482.638475][ T29] audit: type=1326 audit(1732709614.946:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10907 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 482.670733][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.694269][ T29] audit: type=1326 audit(1732709614.999:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10907 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 482.721143][ T29] audit: type=1326 audit(1732709614.999:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10907 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 483.498580][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.507160][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.533995][ T29] audit: type=1326 audit(1732709614.999:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10907 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 483.700306][ T29] audit: type=1326 audit(1732709614.999:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10907 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 483.844716][ T29] audit: type=1326 audit(1732709614.999:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10907 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 483.866238][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.059093][ T29] audit: type=1326 audit(1732709614.999:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10907 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 484.113987][ T29] audit: type=1326 audit(1732709614.999:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10907 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 484.135780][ T29] audit: type=1326 audit(1732709614.999:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10907 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 484.157757][ T29] audit: type=1326 audit(1732709614.999:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10907 comm="syz.0.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 484.617151][T10936] x_tables: duplicate underflow at hook 2 [ 484.732977][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.744063][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.025145][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.874977][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.168222][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.779922][T10973] x_tables: duplicate underflow at hook 2 [ 487.294310][ T5916] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 487.560061][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 487.596988][ T5916] usb 6-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 487.646221][ T5916] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 487.677760][ T5916] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 487.692300][ T5916] usb 6-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 487.707606][ T5916] usb 6-1: config 0 interface 0 has no altsetting 0 [ 487.716807][ T5916] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 487.793992][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.802354][ T5916] usb 6-1: Product: syz [ 487.807197][ T5916] usb 6-1: Manufacturer: syz [ 487.812418][ T5916] usb 6-1: SerialNumber: syz [ 487.832013][ T5916] usb 6-1: config 0 descriptor?? [ 487.837873][T10963] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 487.856966][ T5916] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input32 [ 488.427528][ T5933] net_ratelimit: 4 callbacks suppressed [ 488.427547][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.441541][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.357112][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.424160][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 489.514567][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.544157][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.496388][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.563425][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.624107][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.788685][T11024] netlink: 'syz.0.1297': attribute type 2 has an invalid length. [ 491.448687][ T47] usb 6-1: USB disconnect, device number 13 [ 491.666477][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.674922][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.824226][ T5916] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 491.974072][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 492.023726][ T5916] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 240 [ 492.058416][ T5916] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 492.068068][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.079391][ T5916] usb 5-1: Product: syz [ 492.184066][ T5916] usb 5-1: Manufacturer: syz [ 492.349028][ T5916] usb 5-1: SerialNumber: syz [ 492.654438][T11040] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 493.460856][ T7589] net_ratelimit: 4 callbacks suppressed [ 493.460874][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.475329][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.644137][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.656979][ T5916] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 494.215141][ C1] usblp0: nonzero write bulk status received: -71 [ 494.248861][ T7589] usb 5-1: USB disconnect, device number 37 [ 494.276534][ T7589] usblp0: removed [ 494.487603][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.546082][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.624763][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.713949][T10016] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 494.834584][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 494.865725][T10016] usb 3-1: Using ep0 maxpacket: 16 [ 494.893471][T10016] usb 3-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.909405][T10016] usb 3-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 494.921318][T10016] usb 3-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 494.939596][T10016] usb 3-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 494.953327][T10016] usb 3-1: config 0 interface 0 has no altsetting 0 [ 494.972813][T10016] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 494.984770][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 494.994612][T10016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.005729][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.023919][T10016] usb 3-1: Product: syz [ 495.028211][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.038184][T10016] usb 3-1: Manufacturer: syz [ 495.043112][T10016] usb 3-1: SerialNumber: syz [ 495.050120][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.085308][T10016] usb 3-1: config 0 descriptor?? [ 495.090811][T11078] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.110941][ T9] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 495.126812][T10016] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 495.143941][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.165479][ T9] usb 4-1: config 0 descriptor?? [ 495.458961][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.868863][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.878202][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.942272][ T9] razer 0003:1532:010D.002B: unknown main item tag 0x3 [ 496.514234][ T9] razer 0003:1532:010D.002B: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.3-1/input0 [ 496.704831][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.984098][ T9] usb 3-1: USB disconnect, device number 41 [ 497.104613][ T47] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 497.603298][ T47] usb 5-1: Using ep0 maxpacket: 16 [ 497.615611][ T47] usb 5-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.638752][ T47] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 497.671004][ T47] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 497.728484][ T47] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 497.763852][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 497.784931][ T47] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 497.813895][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.862625][ T47] usb 5-1: Product: syz [ 497.868155][ T47] usb 5-1: Manufacturer: syz [ 497.874194][ T47] usb 5-1: SerialNumber: syz [ 497.905069][ T47] usb 5-1: config 0 descriptor?? [ 498.103298][T11104] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 498.169725][ T47] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 498.368364][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 498.837554][ T9] net_ratelimit: 4 callbacks suppressed [ 498.837572][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.259174][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.267814][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.310872][ T7589] usb 4-1: USB disconnect, device number 41 [ 499.805926][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 499.814397][ T29] audit: type=1326 audit(1732709632.107:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11133 comm="syz.2.1328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8273780809 code=0x0 [ 500.310879][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.322175][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.330776][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.163166][T11144] block device autoloading is deprecated and will be removed. [ 501.332304][T11142] trusted_key: encrypted_key: insufficient parameters specified [ 501.344365][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.368348][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.421416][ T9] usb 5-1: USB disconnect, device number 38 [ 501.681829][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.714888][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.904691][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.939120][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 504.103448][ T29] audit: type=1326 audit(1732709636.402:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.4.1340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e1e980809 code=0x0 [ 504.124518][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.194099][ T5933] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 504.264120][T10016] net_ratelimit: 37 callbacks suppressed [ 504.264136][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.344453][ T5933] usb 3-1: device descriptor read/64, error -71 [ 504.608069][ T5933] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 504.624145][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.756208][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.892476][T11183] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1340'. [ 504.914098][ T5933] usb 3-1: device descriptor read/64, error -71 [ 505.035403][ T5933] usb usb3-port1: attempt power cycle [ 505.049743][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.384774][ T5933] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 505.404524][ T5933] usb 3-1: device descriptor read/8, error -71 [ 505.489383][T11201] x_tables: duplicate underflow at hook 2 [ 505.513836][ T47] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 505.674057][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.682488][ T5933] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 505.704534][ T5933] usb 3-1: device descriptor read/8, error -71 [ 505.712122][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.724034][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.734677][ T47] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 505.744162][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.757493][ T47] usb 5-1: config 0 descriptor?? [ 505.814393][ T5933] usb usb3-port1: unable to enumerate USB device [ 505.834467][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.226461][ T47] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 506.233543][ T47] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 506.240884][ T47] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 506.248140][ T47] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 506.255154][ T47] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 506.262136][ T47] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 506.269486][ T47] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 506.548819][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.902082][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.910558][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.947458][ T47] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 507.034070][ T47] cp2112 0003:10C4:EA90.002C: error requesting version [ 507.064952][ T47] cp2112 0003:10C4:EA90.002C: probe with driver cp2112 failed with error -5 [ 507.662702][ T29] audit: type=1326 audit(1732709639.969:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 507.711300][ T29] audit: type=1326 audit(1732709639.999:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 507.747283][ T29] audit: type=1326 audit(1732709640.019:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 508.729338][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.738363][ T29] audit: type=1326 audit(1732709640.019:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 508.760148][ T29] audit: type=1326 audit(1732709640.019:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 509.719857][ T29] audit: type=1326 audit(1732709640.019:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 509.732033][ T9] net_ratelimit: 2 callbacks suppressed [ 509.732052][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.741396][ T29] audit: type=1326 audit(1732709640.019:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 509.987888][ T29] audit: type=1326 audit(1732709640.019:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 510.010053][ T29] audit: type=1326 audit(1732709640.019:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 510.048868][ T29] audit: type=1326 audit(1732709640.019:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 510.157729][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.166037][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.303435][ T47] usb 5-1: USB disconnect, device number 39 [ 511.750862][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.099617][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.099695][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.115906][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.783975][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.113805][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 513.268034][ T9] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 513.277139][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 513.297320][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 513.321915][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 513.347123][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 513.373257][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.409497][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.418516][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.463515][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.499841][ T9] usb 4-1: config 0 descriptor?? [ 513.521543][T11251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 514.263835][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 514.263853][ T29] audit: type=1326 audit(1732709646.552:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11267 comm="syz.5.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 514.356981][ T29] audit: type=1326 audit(1732709646.552:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11267 comm="syz.5.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 514.594338][T11272] x_tables: duplicate underflow at hook 2 [ 514.632262][ T9] plantronics 0003:047F:FFFF.002D: unknown main item tag 0xd [ 514.720404][ T9] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 514.751730][ T9] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 514.780380][ T29] audit: type=1326 audit(1732709646.562:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11267 comm="syz.5.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 514.806468][T10016] net_ratelimit: 10 callbacks suppressed [ 514.806486][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.813883][ T29] audit: type=1326 audit(1732709646.562:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11267 comm="syz.5.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 514.842676][ T29] audit: type=1326 audit(1732709646.562:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11267 comm="syz.5.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 514.864406][ T29] audit: type=1326 audit(1732709646.562:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11267 comm="syz.5.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 514.886475][ T29] audit: type=1326 audit(1732709646.562:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11267 comm="syz.5.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 514.908289][ T29] audit: type=1326 audit(1732709646.562:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11267 comm="syz.5.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 514.911067][T10016] usb 4-1: USB disconnect, device number 42 [ 514.930241][ T29] audit: type=1326 audit(1732709646.562:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11267 comm="syz.5.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 514.957966][ T29] audit: type=1326 audit(1732709646.562:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11267 comm="syz.5.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 515.823977][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.832163][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.854387][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.454037][T10016] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 516.593806][T10016] usb 3-1: device descriptor read/64, error -71 [ 516.771731][T11301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1374'. [ 516.857671][T10016] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 516.878308][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.887132][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.994673][T10016] usb 3-1: device descriptor read/64, error -71 [ 517.074056][ T47] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 517.119126][T10016] usb usb3-port1: attempt power cycle [ 517.243842][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 517.277427][ T47] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 517.347499][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.407978][ T47] usb 4-1: Product: syz [ 517.424591][ T47] usb 4-1: Manufacturer: syz [ 517.441169][ T47] usb 4-1: SerialNumber: syz [ 517.513075][T10016] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 517.514621][ T47] usb 4-1: config 0 descriptor?? [ 517.616046][ T47] gspca_main: se401-2.14.0 probing 047d:5003 [ 517.633913][T10016] usb 3-1: device descriptor read/8, error -71 [ 517.824042][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.892288][T10016] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 517.914277][T10016] usb 3-1: device descriptor read/8, error -71 [ 517.916687][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.928944][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.038430][T10016] usb usb3-port1: unable to enumerate USB device [ 518.273784][ T5933] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 518.301322][ T47] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 518.574094][ T5933] usb 6-1: Using ep0 maxpacket: 16 [ 518.637837][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 518.660906][ T5933] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 518.680368][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.708881][ T5933] usb 6-1: Product: syz [ 518.729180][ T5933] usb 6-1: Manufacturer: syz [ 518.740746][ T5933] usb 6-1: SerialNumber: syz [ 518.770422][ T5933] usb 6-1: config 0 descriptor?? [ 518.806140][ T5933] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 518.864036][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.079913][ T5916] usb 4-1: USB disconnect, device number 43 [ 519.433262][ T5933] usb 6-1: USB disconnect, device number 14 [ 519.973986][ T6046] usb 6-1: Failed to submit usb control message: -71 [ 519.981146][ T6046] usb 6-1: unable to send the bmi data to the device: -71 [ 519.991009][ T6046] usb 6-1: unable to get target info from device [ 520.004685][ T6046] usb 6-1: could not get target info (-71) [ 520.010867][ T6046] usb 6-1: could not probe fw (-71) [ 520.213706][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 520.213725][ T29] audit: type=1326 audit(1732709651.565:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11323 comm="syz.0.1379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x0 [ 520.221633][ T5888] net_ratelimit: 2 callbacks suppressed [ 520.221648][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.476745][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.303850][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.506749][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.580941][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.598548][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.905593][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.031389][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 522.167832][ T29] audit: type=1804 audit(1732709654.475:1025): pid=11346 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1383" name="/newroot/286/file0" dev="fuse" ino=1 res=1 errno=0 [ 522.296578][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.307989][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.319410][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 522.329116][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.339774][ T9] usb 4-1: config 0 descriptor?? [ 523.094681][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.107366][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.117280][T11358] x_tables: duplicate underflow at hook 2 [ 523.283067][T11364] syz.4.1388: attempt to access beyond end of device [ 523.283067][T11364] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 523.313883][T11364] hfsplus: unable to find HFS+ superblock [ 523.424067][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.523888][ T5886] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 523.616473][ T9] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 523.633975][ T9] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 523.640968][ T9] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 523.669961][ T9] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 523.697991][ T9] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 523.719937][ T9] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 523.742589][ T9] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 523.772858][ T9] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 523.893294][ T29] audit: type=1326 audit(1732709656.195:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11369 comm="syz.2.1391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8273780809 code=0x0 [ 523.969464][ T5933] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 524.056915][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.367773][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.378188][ T5886] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 524.387605][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.565141][ T5886] usb 6-1: config 0 descriptor?? [ 524.683547][ T9] cp2112 0003:10C4:EA90.002E: Part Number: 0x00 Device Version: 0x00 [ 524.695445][ T9] cp2112 0003:10C4:EA90.002E: error requesting SMBus config [ 524.710033][ T9] cp2112 0003:10C4:EA90.002E: probe with driver cp2112 failed with error -32 [ 524.755922][ T5933] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 524.769312][ T5933] usb 5-1: config 0 has no interface number 0 [ 524.792589][ T5933] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 524.803045][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.823365][ T5933] usb 5-1: Product: syz [ 524.952716][ T5916] usb 4-1: USB disconnect, device number 44 [ 525.062854][ T5933] usb 5-1: Manufacturer: syz [ 525.066273][ T29] audit: type=1326 audit(1732709657.345:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 525.092745][ T5933] usb 5-1: SerialNumber: syz [ 525.100985][ T5886] cm6533_jd 0003:0D8C:0022.002F: unknown main item tag 0x0 [ 525.103466][ T29] audit: type=1326 audit(1732709657.345:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 525.108384][ T5886] cm6533_jd 0003:0D8C:0022.002F: unknown main item tag 0x0 [ 525.110360][ T5886] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.002F/input/input37 [ 525.130199][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.131387][ T29] audit: type=1326 audit(1732709657.355:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 525.168331][ T5933] usb 5-1: config 0 descriptor?? [ 525.176918][ T29] audit: type=1326 audit(1732709657.355:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 525.193427][ T5933] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 525.980043][ T5887] net_ratelimit: 7 callbacks suppressed [ 525.980062][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.994256][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.014925][ T29] audit: type=1326 audit(1732709657.355:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 526.099535][ T29] audit: type=1326 audit(1732709657.355:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 526.122621][ T5886] cm6533_jd 0003:0D8C:0022.002F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 526.224094][ T29] audit: type=1326 audit(1732709657.355:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 526.255812][ T29] audit: type=1326 audit(1732709657.355:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 526.376732][ T29] audit: type=1326 audit(1732709657.355:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 526.536320][ T29] audit: type=1326 audit(1732709657.355:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 526.567643][ T9] usb 6-1: USB disconnect, device number 15 [ 526.643646][ T29] audit: type=1326 audit(1732709657.355:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 526.679878][ T29] audit: type=1326 audit(1732709657.355:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 526.703218][ T29] audit: type=1326 audit(1732709657.355:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 526.727851][ T29] audit: type=1326 audit(1732709657.355:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11378 comm="syz.0.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e77b80809 code=0x7ffc0000 [ 527.080733][T11401] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1396'. [ 527.323953][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.332632][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.346045][ T25] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 527.370982][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.371421][ T25] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 527.543906][ T25] usb 1-1: USB disconnect, device number 40 [ 527.573879][ T5933] gspca_topro: Sensor cx0342 [ 527.603896][T11407] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1397'. [ 528.192076][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.401195][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.409576][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.545547][T11422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1400'. [ 528.554761][T11422] bond0: option ad_select: unable to set because the bond device is up [ 529.170562][ T7589] usb 5-1: USB disconnect, device number 40 [ 529.344152][T11425] netlink: 'syz.3.1403': attribute type 6 has an invalid length. [ 529.432453][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.441110][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.523955][ T5933] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 529.753849][ T5933] usb 6-1: Using ep0 maxpacket: 32 [ 529.965929][ T5933] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice=da.88 [ 529.975291][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.991818][ T5933] usb 6-1: Product: syz [ 529.998206][ T5933] usb 6-1: Manufacturer: syz [ 530.013704][ T5933] usb 6-1: SerialNumber: syz [ 530.564605][ T5933] usb 6-1: config 0 descriptor?? [ 530.612109][ T5933] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input38 [ 530.676102][T11437] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 530.815801][ T5198] bcm5974 6-1:0.0: could not read from device [ 530.822102][ T5933] usb 6-1: USB disconnect, device number 16 [ 531.104232][ T5916] net_ratelimit: 3 callbacks suppressed [ 531.104251][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.270431][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.312182][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.419201][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.737842][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.746451][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.754854][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.852315][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.861478][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.007478][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1415'. [ 533.016698][T11466] netlink: 'syz.0.1415': attribute type 1 has an invalid length. [ 533.028081][T11469] hub 9-0:1.0: USB hub found [ 533.041596][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.052679][T11469] hub 9-0:1.0: 1 port detected [ 534.196709][T11492] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 536.113991][T11513] net_ratelimit: 14 callbacks suppressed [ 536.114019][T11513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.128991][T11513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.137772][T11513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.146881][T11513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.155569][T11513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.164354][T11513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.173056][T11513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.184744][T11513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.193605][T11513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.202689][T11513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.839189][ T5916] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 537.005410][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.024294][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.034428][T10016] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 537.052454][ T5916] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 537.073006][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.100789][ T5916] usb 3-1: config 0 descriptor?? [ 537.231032][T10016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 537.242640][T10016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 537.252740][T10016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 538.211522][T10016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 538.543197][ T5916] usbhid 3-1:0.0: can't add hid device: -71 [ 539.168854][ T5916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 539.179050][ T5916] usb 3-1: USB disconnect, device number 50 [ 539.362767][T10016] usb 1-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 539.391650][T10016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.408114][T10016] usb 1-1: Product: syz [ 539.412459][T10016] usb 1-1: Manufacturer: syz [ 539.420319][T10016] usb 1-1: SerialNumber: syz [ 539.430603][T10016] usb 1-1: config 0 descriptor?? [ 539.440023][T10016] cypress_m8 1-1:0.0: HID->COM RS232 Adapter converter detected [ 539.455913][T10016] cyphidcom ttyUSB0: required endpoint is missing [ 541.122019][T10016] usb 1-1: USB disconnect, device number 41 [ 541.135342][T10016] cypress_m8 1-1:0.0: device disconnected [ 541.164110][ T7589] net_ratelimit: 80 callbacks suppressed [ 541.164126][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.178220][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.386937][ T5886] IPVS: starting estimator thread 0... [ 541.392581][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.430681][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.083754][T11551] IPVS: using max 20 ests per chain, 48000 per kthread [ 542.865244][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.957575][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.966138][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.492496][ T25] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 544.281861][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.290180][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.463989][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.623609][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 544.648357][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 545.438356][ T25] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 545.564361][ T25] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 546.021755][ T25] usb 5-1: config 0 descriptor?? [ 546.250902][ T25] usb 5-1: can't set config #0, error -71 [ 546.319696][ T25] usb 5-1: USB disconnect, device number 41 [ 546.632406][ T5887] net_ratelimit: 3 callbacks suppressed [ 546.632425][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.646461][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.802683][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 546.823620][ T5887] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 546.829785][T11594] 8021q: adding VLAN 0 to HW filter on device team1 [ 546.954301][ T5887] usb 1-1: device descriptor read/64, error -71 [ 547.135644][ T25] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 547.213840][ T5887] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 547.506850][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.515367][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.524337][T11611] trusted_key: encrypted_key: insufficient parameters specified [ 547.731979][ T5887] usb 1-1: device descriptor read/64, error -71 [ 547.738872][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.749153][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.757457][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.777965][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.804391][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.865811][ T5887] usb usb1-port1: attempt power cycle [ 548.486969][T11619] loop2: detected capacity change from 0 to 7 [ 548.495167][T11619] Dev loop2: unable to read RDB block 7 [ 548.500776][T11619] loop2: AHDI p1 p2 [ 548.505025][T11619] loop2: partition table partially beyond EOD, truncated [ 548.513600][T11619] loop2: p1 start 693664321 is beyond EOD, truncated [ 548.532824][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 548.545088][ T25] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 548.554292][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.565789][ T25] usb 6-1: config 0 descriptor?? [ 548.731697][ T5887] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 548.764865][ T5887] usb 1-1: device descriptor read/8, error -71 [ 549.776849][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.785912][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.723131][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.731486][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.732388][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.813665][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.039824][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 552.046109][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 553.024391][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.037190][ T25] usb 6-1: USB disconnect, device number 17 [ 553.143810][ T5887] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 553.174268][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 553.181269][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.921780][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.930454][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.986434][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.094634][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.103243][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0 [ 555.143449][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.152601][ T5887] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 555.162382][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.299125][ T5887] usb 1-1: Product: syz [ 555.303340][ T5887] usb 1-1: Manufacturer: syz [ 555.479917][ T5887] usb 1-1: config 0 descriptor?? [ 555.716643][ T5887] usb 1-1: can't set config #0, error -71 [ 555.825243][ T5887] usb 1-1: USB disconnect, device number 45 [ 555.867517][T11668] trusted_key: encrypted_key: insufficient parameters specified [ 556.705480][T11676] loop2: detected capacity change from 0 to 7 [ 556.737165][T11676] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 556.749399][T11676] loop2: partition table partially beyond EOD, truncated [ 556.764160][T11676] loop2: p1 size 276741282 extends beyond EOD, truncated [ 556.779259][T11676] loop2: p2 start 579963744 is beyond EOD, truncated [ 556.870715][T11680] x_tables: duplicate underflow at hook 2 [ 556.893049][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 556.944107][ T9] net_ratelimit: 7 callbacks suppressed [ 556.944126][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.443720][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.453408][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.461628][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.631631][ T6346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.798343][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.599935][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.608256][ T7589] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 558.616097][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.643325][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.651851][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.256997][T11704] ubi: mtd0 is already attached to ubi0 [ 559.854528][ T7589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.883666][ T7589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.922072][ T7589] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 559.993631][ T7589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.425904][ T7589] usb 4-1: config 0 descriptor?? [ 561.367214][ T7589] usbhid 4-1:0.0: can't add hid device: -71 [ 561.373235][ T7589] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 561.394574][ T7589] usb 4-1: USB disconnect, device number 45 [ 562.586685][ T7589] net_ratelimit: 8 callbacks suppressed [ 562.586707][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.603855][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.629995][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.116797][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.143301][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.894018][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.903889][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.944053][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.172443][ T5852] cgroup: fork rejected by pids controller in /syz3 [ 564.419260][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.030274][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.039523][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.596801][T11789] trusted_key: syz.4.1496 sent an empty control message without MSG_MORE. [ 567.329901][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 567.340158][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 567.350674][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 567.358775][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 567.367337][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 567.375639][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 567.533608][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 567.710959][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.737359][T11795] chnl_net:caif_netlink_parms(): no params data found [ 567.763613][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.813579][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 567.822670][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.874665][ T9] usb 6-1: config 0 descriptor?? [ 568.085457][T11795] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.093860][T11795] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.101177][T11795] bridge_slave_0: entered allmulticast mode [ 568.111462][T11795] bridge_slave_0: entered promiscuous mode [ 568.121350][T11795] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.163630][T11795] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.171064][T11795] bridge_slave_1: entered allmulticast mode [ 568.181270][T11795] bridge_slave_1: entered promiscuous mode [ 568.273673][ T5916] net_ratelimit: 6 callbacks suppressed [ 568.273692][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.463925][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.485116][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.729683][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 568.736875][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 568.744290][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 568.751279][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 568.758403][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 568.765542][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 568.772529][ T9] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 568.782195][ T9] cp2112 0003:10C4:EA90.0030: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 568.794063][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.820604][T11795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.849552][T11795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.859511][ T9] cp2112 0003:10C4:EA90.0030: Part Number: 0x00 Device Version: 0x00 [ 568.923885][ T972] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 569.003531][ T9] cp2112 0003:10C4:EA90.0030: error requesting SMBus config [ 569.105998][ T9] cp2112 0003:10C4:EA90.0030: probe with driver cp2112 failed with error -5 [ 569.160118][T11795] team0: Port device team_slave_0 added [ 569.274767][T11813] trusted_key: encrypted_key: insufficient parameters specified [ 569.344299][T11795] team0: Port device team_slave_1 added [ 569.349417][ T972] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 569.426701][ T55] Bluetooth: hci4: command tx timeout [ 569.493682][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.502476][ T972] usb 5-1: Product: syz [ 569.509380][ T59] usb 6-1: USB disconnect, device number 18 [ 569.515708][ T972] usb 5-1: Manufacturer: syz [ 569.521198][ T972] usb 5-1: SerialNumber: syz [ 569.527099][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.567730][ T972] usb 5-1: config 0 descriptor?? [ 569.574760][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.585479][ T972] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 569.604232][T11795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.611230][T11795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.680113][T11795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.695728][T11795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.702923][T11795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.730840][T11795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.071030][T11795] hsr_slave_0: entered promiscuous mode [ 570.093801][ T972] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 570.115830][T11795] hsr_slave_1: entered promiscuous mode [ 570.128853][ T972] sq905c 5-1:0.0: Get version command failed [ 570.152888][ T972] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 570.161428][T11795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.186315][T11795] Cannot create hsr debugfs directory [ 570.545874][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.553085][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.876843][ T5886] usb 5-1: USB disconnect, device number 42 [ 570.908947][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.013201][T11827] cgroup: No subsys list or none specified [ 571.055507][T11827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1504'. [ 571.355569][T11795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.508398][ T55] Bluetooth: hci4: command tx timeout [ 571.515890][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 571.515903][ T29] audit: type=1326 audit(1732709703.824:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11846 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 571.595759][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.643909][ T29] audit: type=1326 audit(1732709703.824:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11846 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 571.904800][ T29] audit: type=1326 audit(1732709703.874:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11846 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 572.146680][T11795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.193508][ T29] audit: type=1326 audit(1732709703.874:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11846 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 572.241506][ T29] audit: type=1326 audit(1732709703.874:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11846 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 572.334619][ T29] audit: type=1326 audit(1732709703.874:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11846 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 572.356152][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.395856][ T29] audit: type=1326 audit(1732709703.874:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11846 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 572.499818][ T29] audit: type=1326 audit(1732709703.874:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11846 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 572.645838][ T9] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 572.666112][ T29] audit: type=1326 audit(1732709703.874:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11846 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 572.706634][ T29] audit: type=1326 audit(1732709703.934:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11846 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff82780809 code=0x7ffc0000 [ 573.208526][ T9] usb 3-1: config 0 has an invalid interface number: 189 but max is 0 [ 573.217048][ T9] usb 3-1: config 0 has no interface number 0 [ 573.223594][ T9] usb 3-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 573.235168][ T9] usb 3-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 573.247249][ T9] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 573.258759][ T9] usb 3-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 573.315657][ T9] usb 3-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 573.401266][T11795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.420399][ T9] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 573.429760][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.471565][ T9] usb 3-1: Product: syz [ 573.552831][ T9] usb 3-1: Manufacturer: syz [ 573.565021][T11795] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.583924][ T8] net_ratelimit: 4 callbacks suppressed [ 573.583942][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.598196][ T55] Bluetooth: hci4: command tx timeout [ 573.604759][ T9] usb 3-1: SerialNumber: syz [ 573.660848][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.669528][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.679220][ T9] usb 3-1: config 0 descriptor?? [ 573.701191][T11854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 573.772292][ T9] ums-alauda 3-1:0.189: USB Mass Storage device detected [ 573.826588][ T9] scsi host1: usb-storage 3-1:0.189 [ 574.096849][T11795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 574.145372][T11795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 574.227226][T11795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 574.330991][T11795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 574.625847][T11795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.681379][T11795] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.712526][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.715583][ T55] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 574.721274][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.734654][ T9] usb 3-1: USB disconnect, device number 51 [ 574.745764][ T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/u9:0 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 574.756130][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 574.759753][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.766183][ T55] Workqueue: hci1 hci_rx_work [ 574.766217][ T55] Call Trace: [ 574.766227][ T55] [ 574.766239][ T55] dump_stack_lvl+0x241/0x360 [ 574.773390][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.777897][ T55] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.801169][ T55] ? __pfx__printk+0x10/0x10 [ 574.805775][ T55] ? __kmalloc_cache_noprof+0x243/0x390 [ 574.811323][ T55] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 574.816616][ T55] sysfs_create_dir_ns+0x2ce/0x3a0 [ 574.821749][ T55] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 574.827401][ T55] kobject_add_internal+0x435/0x8d0 [ 574.832624][ T55] kobject_add+0x152/0x220 [ 574.837051][ T55] ? do_raw_spin_unlock+0x13c/0x8b0 [ 574.842255][ T55] ? device_add+0x3e7/0xbf0 [ 574.846763][ T55] ? __pfx_kobject_add+0x10/0x10 [ 574.851714][ T55] ? _raw_spin_unlock+0x28/0x50 [ 574.856578][ T55] ? get_device_parent+0x165/0x410 [ 574.861705][ T55] device_add+0x4e5/0xbf0 [ 574.866046][ T55] hci_conn_add_sysfs+0xe8/0x200 [ 574.870986][ T55] le_conn_complete_evt+0xc9f/0x12e0 [ 574.876286][ T55] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 574.882016][ T55] ? __mutex_unlock_slowpath+0x21e/0x790 [ 574.887656][ T55] ? __pfx___mutex_lock+0x10/0x10 [ 574.892691][ T55] ? skb_pull_data+0x112/0x230 [ 574.897458][ T55] hci_le_conn_complete_evt+0x18c/0x420 [ 574.903011][ T55] hci_event_packet+0xa55/0x1540 [ 574.907954][ T55] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 574.913241][ T55] ? __pfx_hci_event_packet+0x10/0x10 [ 574.918609][ T55] ? do_raw_spin_unlock+0x13c/0x8b0 [ 574.923815][ T55] ? hci_send_to_monitor+0xd8/0x7f0 [ 574.929013][ T55] ? kcov_remote_start+0x97/0x7d0 [ 574.934034][ T55] hci_rx_work+0x3f3/0xdb0 [ 574.938457][ T55] ? process_scheduled_works+0x976/0x1850 [ 574.944179][ T55] process_scheduled_works+0xa63/0x1850 [ 574.949752][ T55] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.955748][ T55] ? assign_work+0x364/0x3d0 [ 574.960343][ T55] worker_thread+0x870/0xd30 [ 574.964939][ T55] ? __kthread_parkme+0x169/0x1d0 [ 574.969961][ T55] ? __pfx_worker_thread+0x10/0x10 [ 574.975075][ T55] kthread+0x2f0/0x390 [ 574.979148][ T55] ? __pfx_worker_thread+0x10/0x10 [ 574.984255][ T55] ? __pfx_kthread+0x10/0x10 [ 574.988855][ T55] ret_from_fork+0x4b/0x80 [ 574.993267][ T55] ? __pfx_kthread+0x10/0x10 [ 574.997855][ T55] ret_from_fork_asm+0x1a/0x30 [ 575.002629][ T55] [ 575.008882][ T55] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 575.023083][ T55] Bluetooth: hci1: failed to register connection device [ 575.039738][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.109405][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.116578][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.123570][ T11] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 575.307556][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1513'. [ 575.317501][T11880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1513'. [ 575.648320][T11795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.709880][ T3506] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 575.743469][ T5152] Bluetooth: hci4: command tx timeout [ 575.795522][T11795] veth0_vlan: entered promiscuous mode [ 575.806419][ T11] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 575.880902][T11891] trusted_key: encrypted_key: insufficient parameters specified [ 575.904014][ T3506] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 576.002197][ T3506] sd 1:0:0:0: [sdb] Sense not available. [ 576.102396][T11795] veth1_vlan: entered promiscuous mode [ 576.443039][T11795] veth0_macvtap: entered promiscuous mode [ 576.450466][ T3506] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 576.458074][ T3506] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 576.482330][ T3506] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 576.493269][T11795] veth1_macvtap: entered promiscuous mode [ 576.503436][ T3506] sd 1:0:0:0: [sdb] Asking for cache data failed [ 576.509878][ T3506] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 576.537011][ T3506] [ 576.539370][ T3506] ====================================================== [ 576.546397][ T3506] WARNING: possible circular locking dependency detected [ 576.553421][ T3506] 6.12.0-syzkaller-09567-g7eef7e306d3c #0 Not tainted [ 576.560197][ T3506] ------------------------------------------------------ [ 576.567220][ T3506] kworker/u8:7/3506 is trying to acquire lock: [ 576.573385][ T3506] ffff888028cb1ca8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x3fa/0x830 [ 576.582999][ T3506] [ 576.582999][ T3506] but task is already holding lock: [ 576.590372][ T3506] ffff888028cb1470 (&q->q_usage_counter(queue)#52){++++}-{0:0}, at: add_disk_fwnode+0x10d/0xf80 [ 576.601204][ T3506] [ 576.601204][ T3506] which lock already depends on the new lock. [ 576.601204][ T3506] [ 576.611612][ T3506] [ 576.611612][ T3506] the existing dependency chain (in reverse order) is: [ 576.620612][ T3506] [ 576.620612][ T3506] -> #5 (&q->q_usage_counter(queue)#52){++++}-{0:0}: [ 576.629466][ T3506] lock_acquire+0x1ed/0x550 [ 576.634479][ T3506] blk_queue_enter+0xe1/0x600 [ 576.639686][ T3506] blk_mq_alloc_request+0x4fa/0xaa0 [ 576.645389][ T3506] scsi_execute_cmd+0x177/0x1090 [ 576.650832][ T3506] read_capacity_10+0x256/0x9c0 [ 576.656189][ T3506] sd_revalidate_disk+0x1066/0xbce0 [ 576.661888][ T3506] sd_probe+0x9fa/0x1100 [ 576.666629][ T3506] really_probe+0x2b8/0xad0 [ 576.671633][ T3506] __driver_probe_device+0x1a2/0x390 [ 576.677427][ T3506] driver_probe_device+0x50/0x430 [ 576.682957][ T3506] __device_attach_driver+0x2d6/0x530 [ 576.688836][ T3506] bus_for_each_drv+0x24e/0x2e0 [ 576.694197][ T3506] __device_attach_async_helper+0x22d/0x300 [ 576.700616][ T3506] async_run_entry_fn+0xa8/0x420 [ 576.706086][ T3506] process_scheduled_works+0xa63/0x1850 [ 576.712144][ T3506] worker_thread+0x870/0xd30 [ 576.717304][ T3506] kthread+0x2f0/0x390 [ 576.721882][ T3506] ret_from_fork+0x4b/0x80 [ 576.726799][ T3506] ret_from_fork_asm+0x1a/0x30 [ 576.732065][ T3506] [ 576.732065][ T3506] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 576.739693][ T3506] lock_acquire+0x1ed/0x550 [ 576.744700][ T3506] __mutex_lock+0x1ac/0xee0 [ 576.749707][ T3506] nbd_set_size+0x2e0/0x8f0 [ 576.754709][ T3506] nbd_ioctl+0x5dc/0xf40 [ 576.759450][ T3506] blkdev_ioctl+0x57d/0x6a0 [ 576.764472][ T3506] __se_sys_ioctl+0xf5/0x170 [ 576.769567][ T3506] do_syscall_64+0xf3/0x230 [ 576.774571][ T3506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.780969][ T3506] [ 576.780969][ T3506] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 576.789549][ T3506] lock_acquire+0x1ed/0x550 [ 576.794559][ T3506] blk_mq_submit_bio+0x1536/0x23a0 [ 576.800181][ T3506] __submit_bio+0x2c6/0x560 [ 576.805182][ T3506] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 576.811317][ T3506] block_read_full_folio+0x93b/0xcd0 [ 576.817105][ T3506] filemap_read_folio+0x14b/0x630 [ 576.822626][ T3506] filemap_get_pages+0x17af/0x2540 [ 576.828250][ T3506] filemap_read+0x45c/0xf50 [ 576.833258][ T3506] blkdev_read_iter+0x2d8/0x430 [ 576.838608][ T3506] vfs_read+0x991/0xb70 [ 576.843273][ T3506] ksys_read+0x18f/0x2b0 [ 576.848018][ T3506] do_syscall_64+0xf3/0x230 [ 576.853022][ T3506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.859419][ T3506] [ 576.859419][ T3506] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 576.867914][ T3506] lock_acquire+0x1ed/0x550 [ 576.872915][ T3506] down_read+0xb1/0xa40 [ 576.877615][ T3506] filemap_fault+0xd54/0x1950 [ 576.882792][ T3506] __do_fault+0x135/0x460 [ 576.887626][ T3506] handle_pte_fault+0x335a/0x68a0 [ 576.893167][ T3506] handle_mm_fault+0x1053/0x1ad0 [ 576.898627][ T3506] exc_page_fault+0x2b9/0x8c0 [ 576.903814][ T3506] asm_exc_page_fault+0x26/0x30 [ 576.909170][ T3506] fault_in_readable+0x173/0x2d0 [ 576.914611][ T3506] fault_in_iov_iter_readable+0x229/0x280 [ 576.920830][ T3506] generic_perform_write+0x259/0x6d0 [ 576.926813][ T3506] shmem_file_write_iter+0xf9/0x120 [ 576.932517][ T3506] vfs_write+0xaeb/0xd30 [ 576.937270][ T3506] ksys_write+0x18f/0x2b0 [ 576.942101][ T3506] do_syscall_64+0xf3/0x230 [ 576.947108][ T3506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.953507][ T3506] [ 576.953507][ T3506] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 576.961041][ T3506] lock_acquire+0x1ed/0x550 [ 576.966044][ T3506] __might_fault+0xc6/0x120 [ 576.971046][ T3506] _copy_from_user+0x2a/0xc0 [ 576.976137][ T3506] blk_trace_ioctl+0x1ad/0x9a0 [ 576.981424][ T3506] blkdev_ioctl+0x40c/0x6a0 [ 576.986434][ T3506] __se_sys_ioctl+0xf5/0x170 [ 576.991533][ T3506] do_syscall_64+0xf3/0x230 [ 576.996544][ T3506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.002942][ T3506] [ 577.002942][ T3506] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 577.010738][ T3506] validate_chain+0x18ef/0x5920 [ 577.016095][ T3506] __lock_acquire+0x1397/0x2100 [ 577.021448][ T3506] lock_acquire+0x1ed/0x550 [ 577.026451][ T3506] __mutex_lock+0x1ac/0xee0 [ 577.031469][ T3506] blk_mq_init_sched+0x3fa/0x830 [ 577.036920][ T3506] elevator_init_mq+0x20e/0x320 [ 577.042273][ T3506] add_disk_fwnode+0x10d/0xf80 [ 577.047539][ T3506] sd_probe+0xba6/0x1100 [ 577.052289][ T3506] really_probe+0x2b8/0xad0 [ 577.057294][ T3506] __driver_probe_device+0x1a2/0x390 [ 577.063093][ T3506] driver_probe_device+0x50/0x430 [ 577.068630][ T3506] __device_attach_driver+0x2d6/0x530 [ 577.074518][ T3506] bus_for_each_drv+0x24e/0x2e0 [ 577.079867][ T3506] __device_attach_async_helper+0x22d/0x300 [ 577.086265][ T3506] async_run_entry_fn+0xa8/0x420 [ 577.091717][ T3506] process_scheduled_works+0xa63/0x1850 [ 577.097774][ T3506] worker_thread+0x870/0xd30 [ 577.102880][ T3506] kthread+0x2f0/0x390 [ 577.107453][ T3506] ret_from_fork+0x4b/0x80 [ 577.112365][ T3506] ret_from_fork_asm+0x1a/0x30 [ 577.117644][ T3506] [ 577.117644][ T3506] other info that might help us debug this: [ 577.117644][ T3506] [ 577.127850][ T3506] Chain exists of: [ 577.127850][ T3506] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#52 [ 577.127850][ T3506] [ 577.142256][ T3506] Possible unsafe locking scenario: [ 577.142256][ T3506] [ 577.149684][ T3506] CPU0 CPU1 [ 577.155028][ T3506] ---- ---- [ 577.160385][ T3506] lock(&q->q_usage_counter(queue)#52); [ 577.166004][ T3506] lock(&q->limits_lock); [ 577.172928][ T3506] lock(&q->q_usage_counter(queue)#52); [ 577.181069][ T3506] lock(&q->debugfs_mutex); [ 577.185644][ T3506] [ 577.185644][ T3506] *** DEADLOCK *** [ 577.185644][ T3506] [ 577.193766][ T3506] 4 locks held by kworker/u8:7/3506: [ 577.199029][ T3506] #0: ffff88801baef148 ((wq_completion)async){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 577.209893][ T3506] #1: ffffc9000cc07d00 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 577.221732][ T3506] #2: ffff8880278c0378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0xfc/0x300 [ 577.232068][ T3506] #3: ffff888028cb1470 (&q->q_usage_counter(queue)#52){++++}-{0:0}, at: add_disk_fwnode+0x10d/0xf80 [ 577.242943][ T3506] [ 577.242943][ T3506] stack backtrace: [ 577.248820][ T3506] CPU: 1 UID: 0 PID: 3506 Comm: kworker/u8:7 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 577.259311][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 577.269354][ T3506] Workqueue: async async_run_entry_fn [ 577.274726][ T3506] Call Trace: [ 577.277991][ T3506] [ 577.280907][ T3506] dump_stack_lvl+0x241/0x360 [ 577.285574][ T3506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.290765][ T3506] ? __pfx__printk+0x10/0x10 [ 577.295342][ T3506] print_circular_bug+0x13a/0x1b0 [ 577.300353][ T3506] check_noncircular+0x36a/0x4a0 [ 577.305282][ T3506] ? __pfx_check_noncircular+0x10/0x10 [ 577.310730][ T3506] ? lockdep_lock+0x123/0x2b0 [ 577.315390][ T3506] validate_chain+0x18ef/0x5920 [ 577.320224][ T3506] ? validate_chain+0x11e/0x5920 [ 577.325146][ T3506] ? preempt_count_add+0x93/0x190 [ 577.330158][ T3506] ? __pfx_validate_chain+0x10/0x10 [ 577.335338][ T3506] ? stack_trace_save+0x118/0x1d0 [ 577.340348][ T3506] ? unwind_next_frame+0x18e6/0x22d0 [ 577.345616][ T3506] ? deref_stack_reg+0x17c/0x210 [ 577.350534][ T3506] ? preempt_count_add+0x93/0x190 [ 577.355564][ T3506] ? unwind_next_frame+0x193b/0x22d0 [ 577.360831][ T3506] ? look_up_lock_class+0x77/0x170 [ 577.365927][ T3506] ? register_lock_class+0x102/0x980 [ 577.371201][ T3506] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 577.377366][ T3506] ? __pfx_register_lock_class+0x10/0x10 [ 577.382993][ T3506] ? arch_stack_walk+0x11c/0x150 [ 577.387912][ T3506] ? mark_lock+0x9a/0x360 [ 577.392221][ T3506] __lock_acquire+0x1397/0x2100 [ 577.397057][ T3506] lock_acquire+0x1ed/0x550 [ 577.401540][ T3506] ? blk_mq_init_sched+0x3fa/0x830 [ 577.406645][ T3506] ? __pfx_lock_acquire+0x10/0x10 [ 577.411651][ T3506] ? __device_attach_driver+0x2d6/0x530 [ 577.417180][ T3506] ? bus_for_each_drv+0x24e/0x2e0 [ 577.422185][ T3506] ? __pfx___might_resched+0x10/0x10 [ 577.427458][ T3506] ? kthread+0x2f0/0x390 [ 577.431678][ T3506] ? ret_from_fork+0x4b/0x80 [ 577.436246][ T3506] ? ret_from_fork_asm+0x1a/0x30 [ 577.441169][ T3506] __mutex_lock+0x1ac/0xee0 [ 577.445654][ T3506] ? blk_mq_init_sched+0x3fa/0x830 [ 577.450754][ T3506] ? __asan_memset+0x23/0x50 [ 577.455329][ T3506] ? lockdep_init_map_type+0xa1/0x910 [ 577.460679][ T3506] ? blk_mq_init_sched+0x3fa/0x830 [ 577.465772][ T3506] ? __pfx___mutex_lock+0x10/0x10 [ 577.470782][ T3506] ? blk_queue_flag_set+0x24/0x40 [ 577.475796][ T3506] blk_mq_init_sched+0x3fa/0x830 [ 577.480716][ T3506] ? percpu_ref_is_zero+0xe9/0x100 [ 577.485814][ T3506] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 577.491256][ T3506] ? blk_mq_cancel_work_sync+0xf3/0x140 [ 577.496793][ T3506] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 577.502750][ T3506] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 577.508631][ T3506] ? add_disk_fwnode+0x10d/0xf80 [ 577.513558][ T3506] elevator_init_mq+0x20e/0x320 [ 577.518397][ T3506] add_disk_fwnode+0x10d/0xf80 [ 577.523148][ T3506] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.528334][ T3506] ? lockdep_hardirqs_on+0x99/0x150 [ 577.533519][ T3506] sd_probe+0xba6/0x1100 [ 577.537745][ T3506] ? __pfx_sd_probe+0x10/0x10 [ 577.542397][ T3506] really_probe+0x2b8/0xad0 [ 577.546887][ T3506] __driver_probe_device+0x1a2/0x390 [ 577.552158][ T3506] driver_probe_device+0x50/0x430 [ 577.557170][ T3506] __device_attach_driver+0x2d6/0x530 [ 577.562537][ T3506] bus_for_each_drv+0x24e/0x2e0 [ 577.567379][ T3506] ? __pfx___device_attach_driver+0x10/0x10 [ 577.573275][ T3506] ? __pfx_bus_for_each_drv+0x10/0x10 [ 577.578664][ T3506] ? ktime_get+0x3e/0x1f0 [ 577.582985][ T3506] ? lockdep_hardirqs_on+0x99/0x150 [ 577.588173][ T3506] __device_attach_async_helper+0x22d/0x300 [ 577.594073][ T3506] ? __pfx___device_attach_async_helper+0x10/0x10 [ 577.600563][ T3506] ? process_scheduled_works+0x976/0x1850 [ 577.606286][ T3506] ? read_tsc+0x9/0x20 [ 577.610357][ T3506] ? ktime_get+0x1c5/0x1f0 [ 577.614776][ T3506] ? __pfx___device_attach_async_helper+0x10/0x10 [ 577.621182][ T3506] async_run_entry_fn+0xa8/0x420 [ 577.626113][ T3506] ? process_scheduled_works+0x976/0x1850 [ 577.631822][ T3506] process_scheduled_works+0xa63/0x1850 [ 577.637362][ T3506] ? __pfx_process_scheduled_works+0x10/0x10 [ 577.643339][ T3506] ? assign_work+0x364/0x3d0 [ 577.647932][ T3506] worker_thread+0x870/0xd30 [ 577.652502][ T3506] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 577.658400][ T3506] ? __kthread_parkme+0x169/0x1d0 [ 577.663419][ T3506] ? __pfx_worker_thread+0x10/0x10 [ 577.668525][ T3506] kthread+0x2f0/0x390 [ 577.672582][ T3506] ? __pfx_worker_thread+0x10/0x10 [ 577.677675][ T3506] ? __pfx_kthread+0x10/0x10 [ 577.682246][ T3506] ret_from_fork+0x4b/0x80 [ 577.686643][ T3506] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 577.691213][ T3506] ret_from_fork_asm+0x1a/0x30 [ 577.695964][ T3506] [ 577.698979][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.714942][T11795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.729113][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.737328][T11795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.761154][T11795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.771634][T11795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.781473][T11795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.791939][T11795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.801798][T11795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.812283][T11795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.822450][T11795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.833097][T11795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.843021][T11795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.853475][T11795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.864246][T11795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.910773][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.913712][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.928624][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.032884][ T3506] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 578.357051][ T9525] bond0: (slave syz_tun): Releasing backup interface [ 578.431521][ T5849] udevd[5849]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 578.528097][ T5849] udevd[5849]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 578.784281][ T5886] net_ratelimit: 1 callbacks suppressed [ 578.784296][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.945966][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.826436][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.988699][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.247941][ T3506] bridge_slave_1: left allmulticast mode [ 580.254747][ T3506] bridge_slave_1: left promiscuous mode [ 580.260458][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.270458][ T3506] bridge_slave_0: left allmulticast mode [ 580.276980][ T3506] bridge_slave_0: left promiscuous mode [ 580.282686][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.369592][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.382989][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.397500][ T3506] bond0 (unregistering): Released all slaves [ 580.480880][ T3506] hsr_slave_0: left promiscuous mode [ 580.487712][ T3506] hsr_slave_1: left promiscuous mode [ 580.495419][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.502804][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.510589][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.521656][ T3506] veth1_macvtap: left promiscuous mode [ 580.527402][ T3506] veth0_macvtap: left promiscuous mode [ 580.532938][ T3506] veth1_vlan: left promiscuous mode [ 580.538509][ T3506] veth0_vlan: left promiscuous mode [ 580.643725][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 580.669951][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 580.866060][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.946248][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.023898][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.186641][T10016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.906190][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.064642][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.983766][ T972] net_ratelimit: 4 callbacks suppressed [ 583.983786][ T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.997691][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.143797][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.223854][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.026053][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.183890][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.065621][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.223742][ T7589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog