last executing test programs: 9m14.417720886s ago: executing program 1 (id=703): syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'pim6reg0\x00', 0x400}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cee200016000000", @ANYRES32=0x0, @ANYBLOB="1400010020010000000000000000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xb2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x11) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x9, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 9m11.60121401s ago: executing program 1 (id=717): syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1f, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (fail_nth: 3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) 9m10.451558562s ago: executing program 1 (id=719): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'sit0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0}, {0x6, 0x10}, {0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xe42adb80cfa7e7b7}, 0x20000014) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x9b1ae07c54cfc002}}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SET_SECUREBITS(0x8, 0x1) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m10.291124754s ago: executing program 1 (id=721): r0 = syz_usb_connect(0x3, 0x1c, 0x0, 0x0) syz_usb_ep_read(r0, 0xf, 0xe, &(0x7f0000000040)=""/14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) sendmmsg$unix(r4, &(0x7f000000b0c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}}, {{&(0x7f0000001380)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00), 0x0, 0x4000040}}], 0x3, 0x40895) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:D%', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x2, {0x3}}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r7) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000022c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000140)={&(0x7f0000002300)={0x70, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1e0000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x40010) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r8, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44881}, 0x4004080) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r9, 0x2, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x800) 9m7.176094537s ago: executing program 1 (id=730): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 9m6.808717603s ago: executing program 1 (id=733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe1e, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5, 0x6, 0xff}]}}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x98, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x51}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r4 = socket(0x2, 0x80805, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x2c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x40800400, 0x2b6a41) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}}) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab9809006ea4a7446c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) 8m51.72089828s ago: executing program 32 (id=733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe1e, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5, 0x6, 0xff}]}}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x98, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x51}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r4 = socket(0x2, 0x80805, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x2c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x40800400, 0x2b6a41) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}}) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab9809006ea4a7446c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) 7m48.247758917s ago: executing program 5 (id=950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, &(0x7f00000011c0)=""/4096, 0x0, &(0x7f0000000000), 0x40, 0xffffffffffffffff, 0x4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 7m46.859626041s ago: executing program 5 (id=954): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r0 = userfaultfd(0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x4b040) close(0x3) r3 = dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000140)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800004}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01df306d187e2a34ddfac34a6fd514df1d116194e028b7e13d0e046ef8ff18d0203c70ddd2ed206514c08d24f55b5effeac0c893fc9605557fb973f3858234a5e249f517bc2455289786f9c4b040", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4048044}, 0x44005) r12 = dup(r3) read$FUSE(r12, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xa7, 0x0) 7m44.327579946s ago: executing program 5 (id=963): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[], 0xb, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) read$FUSE(r5, &(0x7f0000000000)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 7m42.445449296s ago: executing program 5 (id=971): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000380)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e24, 0x9, @remote, 0x3}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000008c0)={r4, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x1f8, 0x8000, 0x9, 0x7, 0xff, 0x6fb, 0x400, r4}, &(0x7f0000000300)=0x20) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020400) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x40894) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x206e) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x2b) 7m37.391714976s ago: executing program 5 (id=988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x7c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x68, 0x1, [@m_simple={0x64, 0x1c, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'gact\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x51, 0x4, 0x7, 0x1, 0x7f}}, @TCA_DEF_DATA={0x7, 0x3, 'ct\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x7c}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) flock(r0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x7, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0x1, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x804, 0x300000, 0x7, 0xc, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x5, 0x1, 0x80000001, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x2, 0xfffffffe, 0x0, 0x5, 0x10, 0x1, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x9, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x5, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0xea, 0x2, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x5], [0x108e, 0x7, 0x34, 0x3, 0x88, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x9, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x2, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0xfffffffd, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x2000b, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) readv(r8, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) socket(0x1d, 0x2, 0x6) syz_io_uring_submit(0x0, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x6, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x6, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f0000000100)={0xa, 0x0, 0xd74, @mcast1, 0x1ff, 0x4}, 0x20) tee(r4, 0xffffffffffffffff, 0x4e, 0x0) 7m37.137061366s ago: executing program 5 (id=990): r0 = userfaultfd(0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b"]) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x10fe}) 7m36.365811646s ago: executing program 33 (id=990): r0 = userfaultfd(0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b"]) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x10fe}) 12.220046259s ago: executing program 0 (id=2232): syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cee200016000000", @ANYRES32=0x0, @ANYBLOB="1400010020010000000000000000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xb2) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x11) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x9, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 10.709386276s ago: executing program 2 (id=2236): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x34325852, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {0x0, 0x19c}, {0xfffffffc, 0x80001}]}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(0x0, r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r6, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) shutdown(r8, 0x1) ioctl$FBIOGETCMAP(r7, 0x4604, 0x0) 9.706812382s ago: executing program 2 (id=2238): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) fcntl$dupfd(r0, 0x0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='befs\x00', 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc0000001d00010000000000fedbdf25e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[], 0xcc}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x1f, 0x1, 0x0, 0x0, r6}) 9.57304925s ago: executing program 2 (id=2239): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000002000)=ANY=[], 0x0) 9.324255812s ago: executing program 3 (id=2243): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000140)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYRES16=r1, @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRESDEC=r0, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x2, 0x0, 0x0, &(0x7f00000001c0)=""/91, 0x0, 0x1000}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000600)=""/250, &(0x7f00000003c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 9.011328271s ago: executing program 4 (id=2244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) fcntl$dupfd(r0, 0x0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001dc00)=""/102392, 0x18ff8) mount(&(0x7f0000000180)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='befs\x00', 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc0000001d00010000000000fedbdf25e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[], 0xcc}}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x1f, 0x1, 0x0, 0x0, r7}) 9.005107561s ago: executing program 0 (id=2245): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000000)={0x2, 0x6}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/108, 0x6c}], 0x1, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/180, 0xb4}], 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = dup2(r2, r0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00', @local}) ioctl$sock_proto_private(r2, 0x89ee, &(0x7f00000001c0)="33ddf8bd7d9e93df731adeb99ff5990e3a2426ef6cf9ef9c7827caed72910029978e88271cd4bf468603f2e8c19f6449eda903416d05989ce700e6fc797c8b6fff7cbdb2f9a65e29c0fa2c76ddbb7bf22ada9216e4dfb073595091c412f2864425fcff38dc876db8f29f951f89a452a1bc6215d48d9c000f944ba2c979b5ab8ed89c4a5f2b1b8bd748085d494e8e7f0ab14c7d6474f010944ddbea87d0b5ddaf3d30003d8ac3e43863fed0d1bc109512c1da76712b30477f206ff7e8bef1fd652853a07696371f45b2c7cbb498071677a10844ab1fa1ad") writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) r5 = syz_open_dev$vbi(0x0, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) dup3(r7, r6, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) 8.603639307s ago: executing program 3 (id=2246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1}) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x0, 0x1, 0x8000000000003, 0x10000}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='fid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0xffffffffffffffff, 0xa, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\t\x00\x00\x00 \x00\x00\x00', @ANYRES32, @ANYBLOB="849333298f80e75521be5fc87d43cf6125144db06fdc43b2161779724a0a1b223a4a4d914b92903c74ceba61c3f3480cc6e190a325b263a91b781dbdc8fd45fc308a62d18919ec6c9eebd074d5ba78b39f482db6fe0150900a6bed252bfa674aa763ef6bf6247b5705151881786fa55af8f9b6be2c7016bd3ceb254b5e3088e7c5e902ac6141031e5686d66a51bfdb353ff78c346d72e3fc2936128b10617252d3c98a86867695d7b5bb820b888d7aaf0b74337a3236685e4c206803f9bd77bec01b36dab10314453beb0b8ff6", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x64, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002040)={0x0, 0x6}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 8.357917473s ago: executing program 4 (id=2248): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x3, 0xe90, 0x19}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300)='./file0\x00', 0x8, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800) syz_usb_connect(0x2, 0x36, 0x0, 0x0) io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x10, 0x0, 0x160}) socket$l2tp(0x2, 0x2, 0x73) r3 = add_key(&(0x7f0000000040)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x974}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x20, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x24, 0x2) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) 8.356694232s ago: executing program 0 (id=2249): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[], 0xb, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) read$FUSE(r5, &(0x7f0000000000)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 7.435640038s ago: executing program 3 (id=2250): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0xfffffffe, 0x0, 0x0, 0xfff, 0xa, "0062ba7d82000000160000000000f738096304"}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r2, 0xffffffffffffffff, 0x80000) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x3) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000000)="e26852d89ddd2f0b513c4dd282f68fc72f8d961b", 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 6.591264949s ago: executing program 2 (id=2253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c000780080006400000000005000100060000000500050002000000050004000000627b0900020073797a310000000015000300686173683a69702c706f7274"], 0x5c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1402, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40000840) 6.387750785s ago: executing program 6 (id=2254): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0xfffffff6) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x700}], 0x400000000000172, 0x4001c00) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)=@random={'trusted.', '/dev/fuse\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x5, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x20000000, 0xfffc, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x932, 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) listen(r6, 0xa) ioctl$TIOCGPTPEER(r6, 0x933, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r7, 0xffffffffffffffff, 0x0, 0x578410eb) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.990699792s ago: executing program 2 (id=2255): syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cee200016000000", @ANYRES32=0x0, @ANYBLOB="1400010020010000000000000000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xb2) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x11) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x9, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 5.548072975s ago: executing program 6 (id=2256): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x1c, 0x3e, 0x711, 0x80000, 0x0, {0x3}, [@nested={0x8, 0x12e, 0x0, 0x1, [@nested={0x4, 0xa}]}]}, 0x1c}, 0x1, 0xf0ffff, 0x0, 0x400c801}, 0x4008094) 5.379842245s ago: executing program 6 (id=2257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$alg(r0, 0x0, 0x8080) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8) timer_create(0x0, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) preadv(r3, 0x0, 0x0, 0x80000001, 0x3f7a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500000000000000ffffe00000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280", @ANYRES32], 0x5c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) 4.996005219s ago: executing program 6 (id=2258): openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) 4.91670751s ago: executing program 0 (id=2259): mprotect(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x200000e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) 4.881899198s ago: executing program 3 (id=2260): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x84c2, 0x6, 0x4, 0x9, 0x2, 0x7be}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000100)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r4, 0x0, 0xf}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)=0x455853c1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$video(&(0x7f0000000580), 0x18c, 0x505000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000005c0)={0x4, 0x8, 0x2}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000030000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000038000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000004000380"], 0xc0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.823854456s ago: executing program 0 (id=2261): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)}], 0x1) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000040)={0x0, 0xfff}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000004c0)}], 0x1) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) (async) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) fcntl$dupfd(r0, 0x0, r2) (async) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000040)={0x0, 0xfff}) (async) 4.814123148s ago: executing program 0 (id=2262): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) socketpair(0xf, 0x5, 0x7, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x1, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) socket$nl_crypto(0x10, 0x3, 0x15) read$FUSE(r4, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x2b, 0x3ff7400, 0x12008010}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r8, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1) syz_usb_disconnect(r0) 4.734493982s ago: executing program 6 (id=2263): syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000f50000000064ace26000442f01fe880000000000000000000000000001200100000000000000000000000000000c21880b00000002000008000c0086dd080088be000000021023080291ac2aaf6b15bece01000000000000e8b7659c62657a71032248256102000000c6c9fffbf587051a0800655800000002"], 0x74) write$tcp_congestion(0xffffffffffffffff, 0x0, 0xee00) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=0x0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="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"]) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000100)='./file0\x00') ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.490545106s ago: executing program 4 (id=2264): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000001100a200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) fcntl$dupfd(r0, 0x0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='befs\x00', 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc0000001d00010000000000fedbdf25e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[], 0xcc}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x1f, 0x1, 0x0, 0x0, r6}) 4.400220869s ago: executing program 3 (id=2265): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) modify_ldt$write2(0x11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000140)={0x8, 0x2, 0x0, "2115beba7af972a16fd06e6b5694848119e1a8bc94b6871c7f46690000000011"}) socket$can_j1939(0x1d, 0x2, 0x7) socket(0x10, 0x3, 0x0) 4.367660161s ago: executing program 4 (id=2266): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000b40)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r3, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000380)=0x80, 0x80000) r4 = accept4(r3, 0x0, 0x0, 0x0) write$binfmt_register(r4, &(0x7f0000000240)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x100, 0x3a, '\x98Y\xff\x03\x00\x00v/\xff\xefp\xf2\xb5`\xe3\xb6G\x17\xd9\x8e\xd1\x83\x1eu\\\xd4\xfd\n\xe5\t\x9e\x97N\x15\xbc\x9f\xdc\"v?>(LB\xf5+\xb7g\xde\xff\t\x00\x00\x00\x91x\xe0\x06\xe7\xce\xa9\x17\x05*\xb4\x82\x99\x83\x90bIG/\xe7\x0e)\xe0\x9d\x80J\xea\xa7)\t\xdb\x9f\x81\xe8\x18\x92\xe6\'\xf6a\x81\x9dc\x93\xf7\xd17C\xfa\xb1\x8a\xd4\x05\x1a\t\x8fS\x9c3h-A\xc0$\xcc\xf5c?$\xbe/\xcd\xfcO', 0x3a, '#/\xa5\x9fh.$)$.#-\x10h\x7f\x7f@CV\xbc', 0x3a, './file0', 0x3a, [0x50]}, 0xbc) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x100001, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2}, @TCA_FQ_PLIMIT={0x8, 0x1, 0xd5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040040) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0xf}}, './file0\x00'}) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000d00f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 3.040722206s ago: executing program 3 (id=2267): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800000008048263d1cb392ee6262d168b33aca6c4419e26a06d31c66505701b7d6df7375f4272f4ec7f1f4c718875e08cb6005f8d89f22f"], 0x0, 0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000900)=0x15) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x15) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') 2.707295606s ago: executing program 2 (id=2268): prlimit64(0x0, 0xc, &(0x7f0000000140)={0xd, 0x47b3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffff0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x1010, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1]) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) r3 = syz_io_uring_setup(0x2f6b, &(0x7f0000000640)={0x0, 0xec05, 0x8, 0x1, 0x40000333, 0x0, r2}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x46, 0x0, @fd, 0x4, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r3, 0x20af, 0x6d82, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) kexec_load(0x5, 0x0, 0x0, 0x0) mremap(&(0x7f0000023000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000022c000/0x3000)=nil) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20102) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000000300), 0x800008, &(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYRES64=r8, @ANYRES16=0x0]) 577.957908ms ago: executing program 4 (id=2269): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000600)={[{@gid}]}) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 110.572672ms ago: executing program 4 (id=2270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000301010100000000000000000200000014001980"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x24008080) 0s ago: executing program 6 (id=2271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000530000/0x3000)=nil) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0xfffffffe, 0x0, 0x0, 0xfff, 0xa, "0062ba7d82000000160000000000f738096304"}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r2, 0xffffffffffffffff, 0x80000) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x3) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000000)="e26852d89ddd2f0b513c4dd282f68fc72f8d961b", 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.479741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.479839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.479958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.479999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.480042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.480231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.480455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.480736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.613416][T13437] bond_slave_0: entered promiscuous mode [ 657.656030][T13437] bond_slave_1: entered promiscuous mode [ 657.833467][T13439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1764'. [ 657.862771][T13439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1764'. [ 658.014382][T13435] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1763'. [ 658.147455][ T5960] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 658.296676][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 658.311588][ T5960] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 658.324620][ T5960] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 658.393024][ T5960] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 658.504352][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 658.512037][T12238] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 658.526973][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 658.536730][ T5960] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 658.545180][ T5960] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 658.554508][ T5960] usb 1-1: config 0 has no interface number 0 [ 658.562015][ T5960] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 658.562124][ T9] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 658.586991][ T5960] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 658.599209][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 658.611960][ T5960] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 658.626247][ T9] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 658.642536][ T5960] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 658.646763][ T43] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 658.665514][ T9] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 658.679174][ T5960] usb 1-1: config 0 interface 125 has no altsetting 2 [ 658.687079][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 658.699116][ T5960] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 658.708264][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.716903][ T5960] usb 1-1: Product: syz [ 658.721671][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 658.730765][ T5960] usb 1-1: Manufacturer: syz [ 658.735428][ T5960] usb 1-1: SerialNumber: syz [ 658.740631][ T9] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 658.750335][ T9] usb 4-1: Product: syz [ 658.764678][ T9] usb 4-1: Manufacturer: syz [ 659.249673][ T5960] usb 1-1: config 0 descriptor?? [ 659.257058][ T9] usb 4-1: SerialNumber: syz [ 659.268315][ T43] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 659.276396][ T43] usb 3-1: config 1 has no interface number 0 [ 659.375225][T13455] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.475934][ T43] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 659.477181][ T5960] usb 1-1: selecting invalid altsetting 2 [ 659.494052][ T43] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 659.505686][ T43] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.521883][ T43] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 659.532122][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.532313][ T9] usb 4-1: config 0 descriptor?? [ 659.693615][ T9] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 659.706966][ T9] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 659.731626][ T43] usb 3-1: Product: syz [ 659.741630][ T43] usb 3-1: Manufacturer: syz [ 659.751520][ T43] usb 3-1: SerialNumber: syz [ 659.768994][T13451] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 660.068067][T13451] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 660.549695][ T43] usb 3-1: Incompatible driver and firmware versions [ 660.564610][T13462] fuse: Unknown parameter 'user_i00000000000000000000' [ 660.603224][ T30] audit: type=1400 audit(1757569760.095:638): avc: denied { mount } for pid=13440 comm="syz.0.1765" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 661.173717][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 661.173721][T11888] usb 4-1: USB disconnect, device number 57 [ 661.189978][T13468] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 661.197323][T13470] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 661.392262][T13472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.993608][T13472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.035090][ T9864] net_ratelimit: 22 callbacks suppressed [ 663.035106][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.063014][T11888] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 663.082267][ T5960] usb 1-1: USB disconnect, device number 44 [ 663.131759][ T9] usb 3-1: USB disconnect, device number 50 [ 663.322959][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.386963][ T9864] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 663.581791][ T9864] usb 5-1: Using ep0 maxpacket: 8 [ 663.588905][ T9864] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 663.605542][ T9864] usb 5-1: config 1 interface 0 has no altsetting 0 [ 663.669054][ T9864] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 663.669083][ T9864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.669121][ T9864] usb 5-1: Product: syz [ 663.669135][ T9864] usb 5-1: Manufacturer: syz [ 663.669149][ T9864] usb 5-1: SerialNumber: syz [ 663.687115][T13477] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 663.869193][T13499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.872100][T13499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.872589][T13499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.873140][T13499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.873296][T13499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.873564][T13499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.873825][T13499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.874040][T13499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.956385][ T9864] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 663.979155][ T9864] usb 5-1: USB disconnect, device number 40 [ 663.987737][ T9864] usblp0: removed [ 664.218952][T13502] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.752660][ T5960] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 667.118266][ T5960] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.136047][ T5960] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 667.175524][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 667.211309][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 667.235544][ T5960] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 667.294445][ T5960] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 667.323220][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 667.370007][ T5960] usb 4-1: Product: syz [ 667.378634][ T5960] usb 4-1: Manufacturer: syz [ 667.389858][ T5960] usb 4-1: SerialNumber: syz [ 667.412761][ T5960] usb 4-1: config 0 descriptor?? [ 667.665372][ T5960] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 667.687846][ T5960] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 667.737054][T11888] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 667.880111][ T5960] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 667.888177][ T5960] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 667.900889][T11888] usb 7-1: Using ep0 maxpacket: 32 [ 667.906274][ T5960] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 667.921113][T11888] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 667.930075][T11888] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 667.942531][T11888] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 667.954127][T11888] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 667.968051][T11888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 667.978322][T11888] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 667.989472][T11888] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 667.998469][T11888] usb 7-1: Product: syz [ 668.002871][T11888] usb 7-1: Manufacturer: syz [ 668.008682][T11888] usb 7-1: SerialNumber: syz [ 668.021581][T11888] usb 7-1: config 0 descriptor?? [ 668.030858][T11888] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 668.046145][T11888] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 668.084077][ T5960] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 668.103566][T11888] net_ratelimit: 127 callbacks suppressed [ 668.103577][T11888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.302619][T13541] fuse: Unknown parameter 'user_i00000000000000000000' [ 668.399632][T13543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.427313][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.264272][T13545] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 669.273637][T13547] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 669.377058][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.468621][ T5960] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 669.493243][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 669.573079][ T43] usb 7-1: USB disconnect, device number 19 [ 669.693560][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.723239][ T43] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 670.764432][ T5960] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 670.776910][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.838605][ T5960] usb 4-1: USB disconnect, device number 58 [ 671.924395][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.332745][T13552] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1790'. [ 672.380903][T13574] Bluetooth: hci5: Frame reassembly failed (-84) [ 672.381173][ T7054] Bluetooth: hci5: Frame reassembly failed (-84) [ 672.537372][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.849091][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 672.997044][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.036568][ T43] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 673.518057][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.548527][ T43] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 673.569339][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.183148][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.216565][ T43] usb 7-1: config 0 descriptor?? [ 674.239291][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 674.426643][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 674.436081][T12238] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 675.158058][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 675.173444][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 675.212104][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 675.222215][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.238048][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 675.245823][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 675.637687][T13599] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.787483][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.843514][T13604] fuse: Unknown parameter 'grou00000000000000000000' [ 676.329608][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.513021][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 676.537563][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 676.546662][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 676.571969][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 676.588965][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 676.597659][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 676.605368][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 676.620608][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 676.628590][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 676.637375][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 676.645072][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 676.673352][ T43] pwc: Registered as video103. [ 676.700190][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input49 [ 677.342416][ T43] usb 7-1: USB disconnect, device number 20 [ 677.423290][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.697133][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.473084][T13637] lo speed is unknown, defaulting to 1000 [ 678.479377][T13640] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.494296][T13640] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.505454][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.576803][T13643] Bluetooth: hci5: Frame reassembly failed (-84) [ 678.593344][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 678.676585][ T912] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 678.750597][T13646] fuse: Unknown parameter 'grou00000000000000000000' [ 678.827350][ T912] usb 1-1: Using ep0 maxpacket: 8 [ 678.828762][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.838285][ T912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 678.902224][ T912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.256720][ T912] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 679.814202][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.846884][ T912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 6223, setting to 1024 [ 679.947172][ T912] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 679.993372][ T912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 680.291724][ T912] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 680.312086][T13660] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 680.389487][ T912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 680.414458][ T912] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 680.475325][ T912] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 680.488178][ T912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.512450][ T912] usb 1-1: Product: syz [ 680.524455][ T912] usb 1-1: Manufacturer: syz [ 680.535685][ T912] usb 1-1: SerialNumber: syz [ 680.554564][ T912] usb 1-1: config 0 descriptor?? [ 680.576627][T13639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 680.584071][T13639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 680.613116][ T912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.656703][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 680.663214][T12238] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 680.855778][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.164030][ T912] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 681.224213][ T912] usb 1-1: USB disconnect, device number 45 [ 681.360335][T12211] udevd[12211]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.419183][ T43] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 681.581006][ T43] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 681.616481][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.655768][ T43] usb 5-1: Product: syz [ 681.691006][ T43] usb 5-1: Manufacturer: syz [ 681.707623][ T43] usb 5-1: SerialNumber: syz [ 681.857311][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.865434][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.895370][ T43] usb 5-1: config 0 descriptor?? [ 681.903918][ T43] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 681.955603][ T43] usb 5-1: setting power ON [ 681.969192][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 682.021480][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 682.068720][ T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 682.093330][ T43] dvb_usb_cxusb 5-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 683.260531][T13691] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.270275][T13691] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.426584][ T9864] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 683.676991][ T9864] usb 4-1: Using ep0 maxpacket: 8 [ 683.697525][ T9864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 683.706062][ T9864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.716827][ T9864] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 683.732094][ T9864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 6223, setting to 1024 [ 683.749525][ T9864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 683.760896][ T9864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 683.774976][ T9864] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 684.011945][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.114947][ T9864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 684.116779][ T9864] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 684.120182][ T9864] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 684.120215][ T9864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.120242][ T9864] usb 4-1: Product: syz [ 684.120256][ T9864] usb 4-1: Manufacturer: syz [ 684.120268][ T9864] usb 4-1: SerialNumber: syz [ 684.151846][ T9864] usb 4-1: config 0 descriptor?? [ 684.152260][T13689] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 684.152391][T13689] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 684.153987][ T9864] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 684.214925][ T5960] usb 5-1: USB disconnect, device number 41 [ 684.422036][ T9864] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 684.851043][T12211] udevd[12211]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.858330][ T9864] usb 4-1: USB disconnect, device number 59 [ 684.940358][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.064975][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.090370][ T5924] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 685.241887][T13712] Bluetooth: hci5: Frame reassembly failed (-84) [ 685.260711][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 685.287093][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 685.304623][ T5924] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 685.304662][ T5924] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 685.304695][ T5924] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 685.304720][ T5924] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 685.304744][ T5924] usb 1-1: config 0 interface 0 has no altsetting 0 [ 685.306423][ T5924] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 685.306449][ T5924] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 685.306469][ T5924] usb 1-1: Product: syz [ 685.306482][ T5924] usb 1-1: Manufacturer: syz [ 685.306570][ T5924] usb 1-1: SerialNumber: syz [ 685.310295][ T5924] usb 1-1: config 0 descriptor?? [ 685.312534][ T5924] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 685.313953][ T5924] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 685.378783][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.378833][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.955000][T13718] fuse: Unknown parameter 'user_id00000000000000000000' [ 686.096970][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.130096][T13717] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 687.147135][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.163778][T13718] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 687.164117][T13722] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 687.166012][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 687.166015][ T9864] usb 1-1: USB disconnect, device number 46 [ 687.195145][ T9864] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 687.300763][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.309638][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 687.309702][T12238] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 688.187095][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.534327][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.685030][T13741] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.837820][T13740] fuse: Unknown parameter 'group_i00000000000000000000' [ 689.156747][ T912] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 689.390100][ T912] usb 1-1: Using ep0 maxpacket: 32 [ 689.461332][ T912] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 689.461427][ T912] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 689.462191][ T912] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 689.462241][ T912] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 689.462263][ T912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 689.468549][ T912] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 689.468600][ T912] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 689.468619][ T912] usb 1-1: Product: syz [ 689.468633][ T912] usb 1-1: Manufacturer: syz [ 689.468645][ T912] usb 1-1: SerialNumber: syz [ 689.470881][ T912] usb 1-1: config 0 descriptor?? [ 689.483395][ T912] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 689.493449][ T912] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 689.547368][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.885950][T13753] fuse: Unknown parameter 'user_id00000000000000000000' [ 690.421262][T13755] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 690.421646][T13756] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 691.387357][ T9864] usb 1-1: USB disconnect, device number 47 [ 691.387519][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 691.405908][ T9864] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 691.454161][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.456184][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.950557][T13765] fuse: Bad value for 'fd' [ 692.530152][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.550806][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.611224][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1847'. [ 693.849149][T13784] Bluetooth: hci5: Frame reassembly failed (-84) [ 693.874803][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 693.976263][T13770] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 694.498269][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.526683][ T9864] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 694.830950][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.957180][ T5960] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 694.986832][ T9864] usb 5-1: Using ep0 maxpacket: 16 [ 694.999600][ T9864] usb 5-1: config 1 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.016552][ T9864] usb 5-1: config 1 interface 0 altsetting 32 endpoint 0x82 has invalid wMaxPacketSize 0 [ 695.048538][ T9864] usb 5-1: config 1 interface 0 altsetting 32 bulk endpoint 0x82 has invalid maxpacket 0 [ 695.116574][ T9864] usb 5-1: config 1 interface 0 altsetting 32 endpoint 0x3 has invalid wMaxPacketSize 0 [ 695.146692][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 695.186584][ T9864] usb 5-1: config 1 interface 0 altsetting 32 bulk endpoint 0x3 has invalid maxpacket 0 [ 695.198780][ T5960] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 695.207293][ T5960] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 695.218380][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout [ 695.258360][ T9864] usb 5-1: config 1 interface 0 has no altsetting 0 [ 695.267758][ T5960] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 695.267787][ T5960] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 695.267811][ T5960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 695.295219][ T5960] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 695.316760][ T5960] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 695.345671][ T5960] usb 1-1: Product: syz [ 695.355674][ T5960] usb 1-1: Manufacturer: syz [ 695.377551][ T5960] usb 1-1: SerialNumber: syz [ 695.409206][ T5960] usb 1-1: config 0 descriptor?? [ 695.454283][ T5960] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 695.505894][ T9864] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 695.536822][ T9864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 695.544853][ T9864] usb 5-1: SerialNumber: syz [ 695.545110][ T5960] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 695.772394][T13805] fuse: Unknown parameter 'user_id00000000000000000000' [ 695.862604][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.936639][T12238] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 695.943969][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 696.288058][T13808] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 696.295351][T13810] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 696.507579][ T5960] usb 1-1: USB disconnect, device number 48 [ 696.513544][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 696.897240][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.014675][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.497585][ T5960] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 697.537515][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.557778][ T9864] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 697.565800][ T9864] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 697.629641][ T9864] usb 5-1: USB disconnect, device number 42 [ 698.026725][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.190839][T13819] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1855'. [ 698.687297][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 698.886991][ T9] usb 4-1: device descriptor read/64, error -71 [ 699.062796][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.475419][T13828] lo speed is unknown, defaulting to 1000 [ 699.488055][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 699.646910][ T9] usb 4-1: device descriptor read/64, error -71 [ 699.914382][ T9] usb usb4-port1: attempt power cycle [ 700.100341][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.326951][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 700.360433][ T9] usb 4-1: device descriptor read/8, error -71 [ 700.576752][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.207626][T13853] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 701.286824][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.669586][T13857] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1866'. [ 702.348851][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.404557][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.617260][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.700342][T13868] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1868'. [ 704.253234][T13874] lo speed is unknown, defaulting to 1000 [ 704.321405][T13857] mkiss: ax0: crc mode is auto. [ 704.476918][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.127496][T13886] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.174394][T13872] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1869'. [ 705.506457][T13894] Bluetooth: hci5: Frame reassembly failed (-84) [ 705.531395][ T7054] Bluetooth: hci5: Frame reassembly failed (-84) [ 705.546599][ T43] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 705.564630][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.766663][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 706.141167][ T43] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 706.156163][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 706.180469][ T43] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 706.217638][ T43] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 706.242132][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 706.254755][ T43] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 706.264524][ T43] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 706.276791][ T43] usb 4-1: Product: syz [ 706.280964][ T43] usb 4-1: Manufacturer: syz [ 706.291416][ T43] usb 4-1: SerialNumber: syz [ 706.303321][ T43] usb 4-1: config 0 descriptor?? [ 706.308740][T13903] ieee802154 phy0 wpan0: encryption failed: -22 [ 706.319359][ T43] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 706.330289][T13903] ieee802154 phy0 wpan0: encryption failed: -22 [ 706.337898][ T43] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 706.500800][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.583421][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.594768][T13910] fuse: Bad value for 'fd' [ 706.603354][T13900] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1875'. [ 706.657398][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.228465][T13914] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 707.257147][T13916] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 707.268123][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 707.328158][ T912] usb 4-1: USB disconnect, device number 64 [ 707.552165][T12238] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 707.675192][ T912] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 708.083423][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.156696][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.170963][T13920] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 709.760408][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.413401][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.467498][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.670947][T13952] ieee802154 phy0 wpan0: encryption failed: -22 [ 711.671748][T13952] ieee802154 phy0 wpan0: encryption failed: -22 [ 712.516779][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 712.572600][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.605352][T13963] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1895'. [ 712.666912][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 712.702886][ T9] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 712.715882][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 712.728531][ T9] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 712.760843][ T9] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 712.808427][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 712.817355][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.838501][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 712.848265][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.853927][ T9] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 712.869854][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.881606][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.938878][ T9] usb 7-1: Product: syz [ 712.943468][ T9] usb 7-1: Manufacturer: syz [ 712.948626][ T9] usb 7-1: SerialNumber: syz [ 712.964026][ T9] usb 7-1: config 0 descriptor?? [ 712.983488][ T9] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 713.003092][ T9] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 713.344358][T13977] fuse: Bad value for 'fd' [ 713.619162][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.747719][T13980] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 713.755030][T13981] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 714.369035][ T9] usb 7-1: USB disconnect, device number 21 [ 714.369133][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 714.556050][ T9] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 714.986924][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.019138][T13973] lo speed is unknown, defaulting to 1000 [ 716.004598][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.017261][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.097310][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.107557][ T3447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.116011][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.218705][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.483977][T13998] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.553999][T13998] ieee802154 phy0 wpan0: encryption failed: -22 [ 717.007542][T14003] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.115084][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.736572][ T5924] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 717.917283][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 717.924555][ T5924] usb 5-1: unable to get BOS descriptor or descriptor too short [ 717.942345][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 718.010446][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 6223, setting to 1024 [ 718.021884][ T2907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.206878][ T5924] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 718.350104][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 718.350123][ T5924] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 718.350136][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 718.350148][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 718.351714][ T5924] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 718.351729][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.351739][ T5924] usb 5-1: Product: syz [ 718.351746][ T5924] usb 5-1: Manufacturer: syz [ 718.351754][ T5924] usb 5-1: SerialNumber: syz [ 718.353248][ T5924] usb 5-1: config 0 descriptor?? [ 718.353875][T14013] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 718.354070][T14013] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 718.366281][ T5924] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 719.214148][ T5924] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 719.218600][ T43] net_ratelimit: 3 callbacks suppressed [ 719.218610][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.252948][T12211] udevd[12211]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.254291][ T5924] usb 5-1: USB disconnect, device number 43 [ 719.806956][T12932] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 719.973489][T14042] ieee802154 phy0 wpan0: encryption failed: -22 [ 719.988623][T12932] usb 3-1: Using ep0 maxpacket: 32 [ 720.034218][T12932] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 720.034255][T12932] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 720.034286][T12932] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 720.034309][T12932] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 720.034329][T12932] usb 3-1: config 0 interface 0 has no altsetting 0 [ 720.036100][T12932] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 720.036124][T12932] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 720.036144][T12932] usb 3-1: Product: syz [ 720.036158][T12932] usb 3-1: Manufacturer: syz [ 720.036172][T12932] usb 3-1: SerialNumber: syz [ 720.039006][T12932] usb 3-1: config 0 descriptor?? [ 720.059817][T12932] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 720.067293][T12932] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 720.305348][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.369261][T14053] fuse: Bad value for 'fd' [ 721.056925][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.488207][T14047] lo speed is unknown, defaulting to 1000 [ 721.526513][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.527004][ T912] usb 3-1: USB disconnect, device number 51 [ 721.574989][ T912] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 721.897078][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.897627][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.899844][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.578956][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.875502][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.105656][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.900562][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.137070][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 725.318027][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 725.330277][T14094] Bluetooth: hci5: Frame reassembly failed (-84) [ 725.361458][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 725.362784][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 725.373956][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 725.382145][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 725.393801][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 6223, setting to 1024 [ 725.406043][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 725.416314][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 725.427644][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 725.437789][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 725.448631][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 725.469208][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 725.478560][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.487604][ T9] usb 4-1: Product: syz [ 725.491808][ T9] usb 4-1: Manufacturer: syz [ 725.496373][ T9] usb 4-1: SerialNumber: syz [ 725.512648][ T9] usb 4-1: config 0 descriptor?? [ 725.526127][T14089] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 725.535160][T14089] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 725.649353][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 725.787454][T14099] ieee802154 phy0 wpan0: encryption failed: -22 [ 725.787951][ T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 725.835482][T14035] udevd[14035]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 725.899430][ T9] usb 4-1: USB disconnect, device number 65 [ 725.949582][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.207314][ T5960] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 726.326755][ T912] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 726.417104][ T5960] usb 3-1: Using ep0 maxpacket: 32 [ 726.423763][ T5960] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 726.432370][ T5960] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 726.443456][ T5960] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 726.454866][ T5960] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 726.473467][ T5960] usb 3-1: config 0 interface 0 has no altsetting 0 [ 726.482746][ T5960] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 726.494342][ T5960] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 726.503672][ T5960] usb 3-1: Product: syz [ 726.508109][ T5960] usb 3-1: Manufacturer: syz [ 726.508332][ T912] usb 1-1: Using ep0 maxpacket: 32 [ 726.512692][ T5960] usb 3-1: SerialNumber: syz [ 726.514598][ T5960] usb 3-1: config 0 descriptor?? [ 726.534438][ T912] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 726.534875][ T5960] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 726.555835][ T912] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 726.568228][ T5960] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 726.576747][ T912] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 726.591266][ T912] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 726.605665][ T912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 726.616145][ T912] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 726.625255][ T912] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 726.636109][ T912] usb 1-1: Product: syz [ 726.640348][ T912] usb 1-1: Manufacturer: syz [ 726.644933][ T912] usb 1-1: SerialNumber: syz [ 726.660339][ T912] usb 1-1: config 0 descriptor?? [ 726.825148][T14112] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.053808][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.063561][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.074557][ T912] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 727.083384][T14115] fuse: Unknown parameter '0x0000000000000007' [ 727.084417][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.105357][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.115381][ T912] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 727.138150][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.378239][T12238] Bluetooth: hci5: command 0x1003 tx timeout [ 727.384552][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 728.176668][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.532940][T14120] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 728.547107][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 728.553163][ T9864] usb 3-1: USB disconnect, device number 52 [ 728.760295][ T43] usb 1-1: USB disconnect, device number 49 [ 729.714527][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.731612][ T9864] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 729.741473][T14124] ldusb: No device or device unplugged -19 [ 729.805542][ T43] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 730.176758][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.284011][T14132] tipc: Started in network mode [ 730.284029][T14132] tipc: Node identity , cluster identity 4711 [ 730.284043][T14132] tipc: Failed to obtain node identity [ 730.284071][T14132] tipc: Enabling of bearer rejected, failed to enable media [ 730.739156][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.983533][T14146] fuse: Bad value for 'fd' [ 731.190001][T14150] ieee802154 phy0 wpan0: encryption failed: -22 [ 731.456802][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.133994][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.290425][ T3497] Bluetooth: hci5: Frame reassembly failed (-84) [ 732.818940][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.828185][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.837308][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.853425][T14154] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1946'. [ 732.940121][T14170] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 733.296971][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.677302][ T30] audit: type=1400 audit(1757569833.215:639): avc: denied { read } for pid=14177 comm="syz.4.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 733.726655][ T5960] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 733.770015][T14182] syzkaller1: entered promiscuous mode [ 733.770371][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1951'. [ 733.776809][T14182] syzkaller1: entered allmulticast mode [ 733.857075][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.881522][T14184] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 8 [ 733.886615][ T43] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 733.907216][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 734.047075][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 734.048326][ T5960] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 734.065786][ T43] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 734.066079][ T5960] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 734.095850][ T5960] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 734.112534][ T5960] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 734.125932][ T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 734.136413][ T5960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 734.155754][ T5960] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 734.169663][ T5960] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 734.171962][ T43] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 734.186598][ T5960] usb 1-1: Product: syz [ 734.189790][ T43] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 734.195895][ T5960] usb 1-1: Manufacturer: syz [ 734.208198][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 734.246132][ T5960] usb 1-1: SerialNumber: syz [ 734.260781][ T5960] usb 1-1: config 0 descriptor?? [ 734.277707][ T43] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 734.290503][T14190] fuse: Bad value for 'fd' [ 734.293522][ T43] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 734.307292][ T43] usb 3-1: Product: syz [ 734.311465][ T43] usb 3-1: Manufacturer: syz [ 734.326334][ T43] usb 3-1: SerialNumber: syz [ 734.333281][ T5960] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 734.343467][T12238] Bluetooth: hci5: command 0x1003 tx timeout [ 734.351193][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 734.355565][ T43] usb 3-1: config 0 descriptor?? [ 734.391021][ T43] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 734.409353][ T5960] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 734.538234][ T43] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 735.072822][T14202] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 735.080432][T14203] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 735.104212][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.104646][ T5960] usb 1-1: USB disconnect, device number 50 [ 735.112769][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 735.363954][ T5960] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 736.287708][T14207] fuse: Unknown parameter '0x0000000000000006' [ 736.337234][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.455693][ T5960] usb 3-1: USB disconnect, device number 53 [ 738.547161][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.551668][T11888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.637362][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.227475][ T5960] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 740.353106][T14231] fuse: Bad value for 'fd' [ 740.534884][T14235] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 740.659391][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.713303][T14240] Bluetooth: hci5: Frame reassembly failed (-84) [ 740.729753][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 740.794195][T14227] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1964'. [ 740.873915][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'. [ 741.056880][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.379278][T14250] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.419266][T14250] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.586752][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 741.805669][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.357923][T14262] befs: (nullb0): No write support. Marking filesystem read-only [ 742.372409][T14262] befs: (nullb0): invalid magic header [ 743.072671][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.126984][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.129377][T14262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1973'. [ 743.135335][T12238] Bluetooth: hci5: command 0x1003 tx timeout [ 743.225058][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 743.791496][ T912] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 744.026951][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 744.046943][ T912] usb 7-1: Using ep0 maxpacket: 32 [ 744.074447][ T912] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 744.104664][ T912] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 744.141108][ T912] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 744.178260][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.218265][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 744.230985][ T912] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 744.437055][ T912] usb 7-1: config 0 interface 0 has no altsetting 0 [ 744.444865][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 744.447827][T14273] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1978'. [ 744.469245][ T912] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 744.471998][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 744.483417][ T912] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 744.527187][ T912] usb 7-1: Product: syz [ 744.551646][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 744.572936][ T912] usb 7-1: Manufacturer: syz [ 744.578861][ T912] usb 7-1: SerialNumber: syz [ 744.596395][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 744.597233][ T912] usb 7-1: config 0 descriptor?? [ 744.687747][T14290] befs: (nullb0): No write support. Marking filesystem read-only [ 744.698390][T14290] befs: (nullb0): invalid magic header [ 744.710154][T14290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'. [ 744.711790][ T912] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 744.837339][ T912] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 744.993040][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 745.035418][T14291] fuse: Unknown parameter '0x0000000000000006' [ 745.060653][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 745.077058][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 745.085626][ T9] usb 5-1: Product: syz [ 745.090457][ T9] usb 5-1: Manufacturer: syz [ 745.095051][ T9] usb 5-1: SerialNumber: syz [ 745.107628][ T9] usb 5-1: config 0 descriptor?? [ 745.157432][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 745.439998][ T9] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 745.478660][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.531818][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 745.538375][T12932] usb 7-1: USB disconnect, device number 22 [ 746.130549][T11888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.483249][T12932] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 746.830260][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.964877][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.202817][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.468100][ T5960] usb 5-1: USB disconnect, device number 44 [ 748.173567][ T5960] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 748.258184][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.325899][ T30] audit: type=1326 audit(1757569847.855:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2997b8eba9 code=0x7ffc0000 [ 748.769013][ T30] audit: type=1326 audit(1757569847.855:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2997b8eba9 code=0x7ffc0000 [ 748.839544][ T30] audit: type=1326 audit(1757569848.195:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2997b8eba9 code=0x7ffc0000 [ 748.877133][ T30] audit: type=1326 audit(1757569848.195:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2997b8eba9 code=0x7ffc0000 [ 748.924102][ T30] audit: type=1326 audit(1757569848.195:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2997b8eba9 code=0x7ffc0000 [ 748.967112][ T30] audit: type=1326 audit(1757569848.195:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2997b90ac7 code=0x7ffc0000 [ 749.008845][T14319] Bluetooth: hci5: Frame reassembly failed (-84) [ 749.148580][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.182171][ T3497] Bluetooth: hci5: Frame reassembly failed (-84) [ 749.301769][ T30] audit: type=1326 audit(1757569848.195:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2997b90a3c code=0x7ffc0000 [ 749.304011][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.327237][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.390887][T14323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.398858][T14302] pim6reg: entered allmulticast mode [ 749.399617][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.453606][ T30] audit: type=1326 audit(1757569848.195:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2997b90974 code=0x7ffc0000 [ 749.591272][ T30] audit: type=1326 audit(1757569848.195:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f2997b90974 code=0x7ffc0000 [ 749.696959][T14292] pim6reg: left allmulticast mode [ 750.073058][ T30] audit: type=1326 audit(1757569848.195:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14292 comm="syz.2.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2997b8d80a code=0x7ffc0000 [ 750.096268][ C1] vkms_vblank_simulate: vblank timer overrun [ 750.343948][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.364755][T14330] lo speed is unknown, defaulting to 1000 [ 750.659279][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.437402][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.437453][T12238] Bluetooth: hci5: command 0x1003 tx timeout [ 751.445679][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 752.550725][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.636210][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.659849][ T9864] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 752.819407][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'. [ 752.866919][ T9864] usb 4-1: Using ep0 maxpacket: 32 [ 753.059042][ T9864] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 753.086673][ T9864] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 753.129546][ T9864] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 753.173898][ T9864] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 753.209887][ T9864] usb 4-1: config 0 interface 0 has no altsetting 0 [ 753.238356][ T9864] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 753.258986][T14365] fuse: Invalid rootmode [ 753.281394][ T9864] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 753.298587][ T9864] usb 4-1: Product: syz [ 753.302775][ T9864] usb 4-1: Manufacturer: syz [ 753.328310][ T9864] usb 4-1: SerialNumber: syz [ 753.357370][ T9864] usb 4-1: config 0 descriptor?? [ 753.369234][ T9864] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 753.405197][ T9864] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 753.768617][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.498560][ T9864] usb 4-1: USB disconnect, device number 66 [ 755.507819][ T9864] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 755.513733][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.632590][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.967902][T14371] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2004'. [ 756.753937][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.048078][T14399] Bluetooth: hci5: Frame reassembly failed (-84) [ 757.208544][ T3497] Bluetooth: hci5: Frame reassembly failed (-84) [ 757.790172][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.816723][T14408] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.161686][T14413] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.170598][T14413] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.281937][T14414] lo speed is unknown, defaulting to 1000 [ 758.658338][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.833697][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.237796][T12238] Bluetooth: hci5: command 0x1003 tx timeout [ 759.266656][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 759.864142][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.144753][T14424] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 760.257089][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.747031][ T912] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 761.081034][ T912] usb 3-1: Using ep0 maxpacket: 32 [ 761.196322][T14448] befs: (nullb0): No write support. Marking filesystem read-only [ 761.205666][T14448] befs: (nullb0): invalid magic header [ 761.235139][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2023'. [ 761.469086][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.485221][ T912] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 761.511962][ T912] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 761.523793][ T912] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 761.558885][ T912] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 761.600291][ T912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 761.614137][ T912] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 761.639033][ T912] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 761.889685][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.989501][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2025'. [ 762.176732][ T912] usb 3-1: Product: syz [ 762.180994][ T912] usb 3-1: Manufacturer: syz [ 762.185588][ T912] usb 3-1: SerialNumber: syz [ 762.365064][T14458] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2021'. [ 762.522726][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.607806][ T912] usb 3-1: config 0 descriptor?? [ 762.615059][ T912] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 763.009164][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2027'. [ 763.017796][ T912] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 763.354032][ T912] usb 3-1: USB disconnect, device number 54 [ 764.885241][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'. [ 764.904131][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.932234][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.223881][ T912] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 765.613336][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2031'. [ 765.955166][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.558001][T14482] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 766.694458][ T5960] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 766.811702][ T3447] Bluetooth: hci5: Frame reassembly failed (-84) [ 766.856721][ T5960] usb 7-1: Using ep0 maxpacket: 16 [ 766.865884][ T5960] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.876173][ T5960] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.907113][ T5960] usb 7-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 766.935761][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.944066][T14501] Bluetooth: hci5: Frame reassembly failed (-84) [ 767.019798][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.044989][ T5960] usb 7-1: Product: syz [ 767.224401][ T5960] usb 7-1: Manufacturer: syz [ 767.350476][ T5960] usb 7-1: SerialNumber: syz [ 767.386018][T14506] lo speed is unknown, defaulting to 1000 [ 767.418246][ T5960] usb 7-1: config 0 descriptor?? [ 767.483053][ T5960] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 767.526920][ T5960] gspca_stv06xx: st6422 sensor detected [ 767.939490][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.166775][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.519647][T14511] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2036'. [ 768.793803][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 768.817052][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 769.220626][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.624547][T14531] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 769.748306][ T5960] STV06xx 7-1:0.0: probe with driver STV06xx failed with error -71 [ 769.751720][ T5960] usb 7-1: USB disconnect, device number 23 [ 769.856775][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.283715][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2042'. [ 770.375147][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.969121][T14544] tty tty1: ldisc open failed (-12), clearing slot 0 [ 770.980278][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.044806][T14548] ieee802154 phy0 wpan0: encryption failed: -22 [ 771.053360][T14548] ieee802154 phy0 wpan0: encryption failed: -22 [ 771.388911][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.857021][T14559] befs: (nullb0): No write support. Marking filesystem read-only [ 771.874976][T14559] befs: (nullb0): invalid magic header [ 771.984707][T14561] fuse: Unknown parameter 'user00000000000000000000' [ 772.014872][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2047'. [ 772.420656][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.478410][T14566] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2050'. [ 772.937498][T14576] ieee802154 phy0 wpan0: encryption failed: -22 [ 773.488433][T14584] befs: (nullb0): No write support. Marking filesystem read-only [ 773.493192][T14584] befs: (nullb0): invalid magic header [ 773.507155][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2054'. [ 773.721304][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.410670][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.441158][T14591] befs: (nullb0): No write support. Marking filesystem read-only [ 774.442050][T14591] befs: (nullb0): invalid magic header [ 774.466715][T14591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2056'. [ 774.726961][T14579] tty tty1: ldisc open failed (-12), clearing slot 0 [ 774.746924][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.798313][T14590] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 775.346728][T14601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.359079][T14599] fuse: Unknown parameter 'user00000000000000000000' [ 775.390171][T14601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.442785][T14601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.459679][T14601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.480519][T14601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.491173][T14601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.502581][T14601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.695317][T14601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.737449][T14601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.756081][T14601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.802629][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.399473][T14618] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2062'. [ 776.869968][T14625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2066'. [ 777.186863][ T5924] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 777.396830][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 777.396843][ T5960] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 777.549383][ T5924] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 777.567376][ T5924] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 777.593099][ T5924] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 777.604398][ T5924] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 777.636583][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 777.646855][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 777.659987][ T5924] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 777.669694][ T5960] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 777.696796][ T5924] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 777.712448][ T5960] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 777.729994][T14635] fuse: Unknown parameter 'user00000000000000000000' [ 777.742130][ T5960] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 777.746670][ T5924] usb 3-1: Product: syz [ 777.769072][ T5960] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 777.771257][ T5924] usb 3-1: Manufacturer: syz [ 777.792178][ T5924] usb 3-1: SerialNumber: syz [ 777.811477][ T5924] usb 3-1: config 0 descriptor?? [ 777.821132][ T5960] usb 1-1: config 0 interface 0 has no altsetting 0 [ 777.833695][ T5924] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 777.882172][ T5960] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 777.891950][ T5924] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 777.923653][ T5960] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 777.971000][ T5960] usb 1-1: Product: syz [ 778.004178][T14644] block nbd4: Attempted send on invalid socket [ 778.012504][T14644] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 3 [ 778.027691][ T5960] usb 1-1: Manufacturer: syz [ 778.027996][T14644] hfsplus: unable to find HFS+ superblock [ 778.041492][ T5960] usb 1-1: SerialNumber: syz [ 778.132638][ T5960] usb 1-1: config 0 descriptor?? [ 778.142826][ T5960] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 778.157848][ T5960] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 778.697340][T14652] fuse: Unknown parameter 'grou00000000000000000000' [ 779.177445][ T5897] usb 3-1: USB disconnect, device number 55 [ 779.177498][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 779.195224][T14658] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 779.309021][T14656] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 780.208557][ T5897] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 780.422861][T12932] usb 1-1: USB disconnect, device number 51 [ 780.491825][T12932] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 780.506724][ T5960] net_ratelimit: 52 callbacks suppressed [ 780.506739][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.943129][T14655] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.247559][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.263063][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.324507][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.539049][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.605503][T14680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.623085][T14680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.647406][T14680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.657175][T14680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.665480][T14680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.727859][T14669] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2077'. [ 785.070226][T14700] FAULT_INJECTION: forcing a failure. [ 785.070226][T14700] name failslab, interval 1, probability 0, space 0, times 0 [ 785.083211][T14700] CPU: 0 UID: 0 PID: 14700 Comm: syz.4.2084 Not tainted syzkaller #0 PREEMPT(full) [ 785.083235][T14700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 785.083245][T14700] Call Trace: [ 785.083252][T14700] [ 785.083260][T14700] dump_stack_lvl+0x16c/0x1f0 [ 785.083288][T14700] should_fail_ex+0x512/0x640 [ 785.083310][T14700] ? fs_reclaim_acquire+0xae/0x150 [ 785.083335][T14700] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 785.083361][T14700] should_failslab+0xc2/0x120 [ 785.083382][T14700] __kmalloc_noprof+0xd2/0x510 [ 785.083406][T14700] tomoyo_realpath_from_path+0xc2/0x6e0 [ 785.083435][T14700] ? tomoyo_profile+0x47/0x60 [ 785.083456][T14700] tomoyo_path_number_perm+0x245/0x580 [ 785.083478][T14700] ? tomoyo_path_number_perm+0x237/0x580 [ 785.083504][T14700] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 785.083528][T14700] ? find_held_lock+0x2b/0x80 [ 785.083556][T14700] ? __pfx___schedule+0x10/0x10 [ 785.083589][T14700] ? rcu_is_watching+0x12/0xc0 [ 785.083610][T14700] ? irqentry_exit+0x3b/0x90 [ 785.083632][T14700] ? lockdep_hardirqs_on+0x7c/0x110 [ 785.083653][T14700] ? hook_file_ioctl_common+0x145/0x410 [ 785.083678][T14700] ? __x64_sys_ioctl+0x94/0x210 [ 785.083709][T14700] security_file_ioctl+0x9b/0x240 [ 785.083737][T14700] __x64_sys_ioctl+0xb7/0x210 [ 785.083764][T14700] do_syscall_64+0xcd/0x4c0 [ 785.083788][T14700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.083806][T14700] RIP: 0033:0x7f8a73d8eba9 [ 785.083821][T14700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.083837][T14700] RSP: 002b:00007f8a74b63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.083855][T14700] RAX: ffffffffffffffda RBX: 00007f8a73fd6180 RCX: 00007f8a73d8eba9 [ 785.083866][T14700] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000005 [ 785.083876][T14700] RBP: 00007f8a74b63090 R08: 0000000000000000 R09: 0000000000000000 [ 785.083886][T14700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.083896][T14700] R13: 00007f8a73fd6218 R14: 00007f8a73fd6180 R15: 00007ffeac579358 [ 785.083919][T14700] [ 785.083940][T14700] ERROR: Out of memory at tomoyo_realpath_from_path. [ 785.618434][ T912] net_ratelimit: 77 callbacks suppressed [ 785.618451][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.982738][T14711] befs: (nullb0): No write support. Marking filesystem read-only [ 785.985694][T14711] befs: (nullb0): invalid magic header [ 786.047918][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2086'. [ 786.577429][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.656753][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.797125][ T912] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 786.966957][ T912] usb 3-1: Using ep0 maxpacket: 32 [ 786.975401][ T912] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 786.975535][ T912] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 786.975739][ T912] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 786.975815][ T912] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 786.975885][ T912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 786.986674][ T912] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 786.986755][ T912] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 786.986817][ T912] usb 3-1: Product: syz [ 786.986867][ T912] usb 3-1: Manufacturer: syz [ 786.986915][ T912] usb 3-1: SerialNumber: syz [ 787.137800][ T912] usb 3-1: config 0 descriptor?? [ 787.265941][T14727] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 787.629364][ T912] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 787.669019][ T912] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 787.710040][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.726269][T14728] fuse: Unknown parameter 'grou00000000000000000000' [ 788.938076][ T912] usb 3-1: USB disconnect, device number 56 [ 788.939413][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.942908][ T912] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 789.056728][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.616731][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.722666][T14730] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2093'. [ 790.016891][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.083083][T14740] sp0: Synchronizing with TNC [ 790.092252][T14740] [U] è [ 790.106411][T14743] fuse: Unknown parameter 'user_i00000000000000000000' [ 790.630097][T14745] befs: (nullb0): No write support. Marking filesystem read-only [ 790.638063][T14745] befs: (nullb0): invalid magic header [ 790.645869][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2098'. [ 791.717694][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.842998][T14765] befs: (nullb0): No write support. Marking filesystem read-only [ 791.855140][T14765] befs: (nullb0): invalid magic header [ 791.939637][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2104'. [ 792.164669][T14769] lo speed is unknown, defaulting to 1000 [ 792.336740][ T912] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 792.895336][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.916050][T14779] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 792.944201][T14779] overlayfs: overlapping lowerdir path [ 792.951648][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.017050][ T912] usb 5-1: Using ep0 maxpacket: 32 [ 793.102007][T14777] fuse: Unknown parameter 'user_id00000000000000000000' [ 793.124585][ T912] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 793.147719][ T912] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 793.177164][T14772] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2107'. [ 793.185718][ T912] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 793.235694][ T912] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 793.275159][ T912] usb 5-1: config 0 interface 0 has no altsetting 0 [ 793.286405][ T912] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 793.295736][ T912] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 793.304296][ T912] usb 5-1: Product: syz [ 793.308920][ T912] usb 5-1: Manufacturer: syz [ 793.313546][ T912] usb 5-1: SerialNumber: syz [ 793.410398][ T912] usb 5-1: config 0 descriptor?? [ 793.992104][ T912] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 794.004850][T14786] fuse: Unknown parameter 'grou00000000000000000000' [ 794.021192][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.037816][ T912] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 795.385900][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.462709][ T5924] usb 5-1: USB disconnect, device number 45 [ 795.693062][T14794] befs: (nullb0): No write support. Marking filesystem read-only [ 795.708206][T14794] befs: (nullb0): invalid magic header [ 795.927637][ T5924] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 796.052512][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.420560][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.511349][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 796.511365][ T30] audit: type=1400 audit(1757569896.035:685): avc: denied { bind } for pid=14801 comm="syz.3.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 796.573271][T14805] Invalid ELF header magic: != ELF [ 796.796173][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.805048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.817057][ T5960] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 796.868301][T14806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.877140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.046661][ T5960] usb 4-1: device descriptor read/64, error -71 [ 797.290822][ T5960] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 797.537016][ T5960] usb 4-1: device descriptor read/64, error -71 [ 797.582642][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.656947][ T5960] usb usb4-port1: attempt power cycle [ 797.996806][ T5960] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 798.067077][ T5960] usb 4-1: device descriptor read/8, error -71 [ 798.306762][ T5960] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 798.340188][ T5960] usb 4-1: device descriptor read/8, error -71 [ 798.364258][T14824] fuse: Unknown parameter 'user_id00000000000000000000' [ 798.504204][ T5960] usb usb4-port1: unable to enumerate USB device [ 798.701485][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.709642][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.501636][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.753097][T14848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.765613][T14848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.780146][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.803252][T14841] overlayfs: overlapping lowerdir path [ 800.234983][T12932] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 800.243633][T14848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.243953][T14848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.551399][T12932] usb 4-1: Using ep0 maxpacket: 8 [ 800.555822][T12932] usb 4-1: config 0 interface 0 has no altsetting 0 [ 800.557462][T12932] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 800.557478][T12932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.557489][T12932] usb 4-1: Product: syz [ 800.557498][T12932] usb 4-1: Manufacturer: syz [ 800.557507][T12932] usb 4-1: SerialNumber: syz [ 800.558754][T12932] usb 4-1: config 0 descriptor?? [ 800.559724][T12932] hub 4-1:0.0: bad descriptor, ignoring hub [ 800.559737][T12932] hub 4-1:0.0: probe with driver hub failed with error -5 [ 800.560522][T12932] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 800.788621][T12932] gspca_zc3xx: reg_w_i err -71 [ 801.047147][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.456630][T12932] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 801.456676][T12932] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 801.477176][T12932] usb 4-1: USB disconnect, device number 71 [ 801.628691][T14869] fuse: Unknown parameter 'user_id00000000000000000000' [ 802.109524][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.349520][T14860] tty tty1: ldisc open failed (-12), clearing slot 0 [ 802.583952][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.170837][T14892] lo speed is unknown, defaulting to 1000 [ 803.176958][T14892] lo speed is unknown, defaulting to 1000 [ 803.186068][T14892] lo speed is unknown, defaulting to 1000 [ 803.243929][T14892] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 803.344763][T14893] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 803.352661][T14893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2137'. [ 803.364884][T14893] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 803.376011][T14893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 803.478262][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.499419][ T912] lo speed is unknown, defaulting to 1000 [ 803.506979][T14892] lo speed is unknown, defaulting to 1000 [ 803.513453][T14892] lo speed is unknown, defaulting to 1000 [ 803.520119][T14892] lo speed is unknown, defaulting to 1000 [ 803.526539][T14892] lo speed is unknown, defaulting to 1000 [ 803.532974][T14892] lo speed is unknown, defaulting to 1000 [ 803.837177][T14889] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2138'. [ 805.226584][ T30] audit: type=1400 audit(1757569903.525:686): avc: denied { accept } for pid=14898 comm="syz.2.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 805.247327][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.460122][T14890] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2139'. [ 805.475985][T14910] fuse: Bad value for 'fd' [ 805.587267][T12932] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 805.829115][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.092028][T12932] usb 7-1: Using ep0 maxpacket: 32 [ 806.158960][T12932] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 806.168650][T12932] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 806.209412][T12932] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 806.270646][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.275814][T12932] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 806.396615][T12932] usb 7-1: config 0 interface 0 has no altsetting 0 [ 806.411590][T12932] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 806.426958][ T5897] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 806.444702][T12932] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 806.745710][ T5897] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 806.774491][T12932] usb 7-1: Product: syz [ 806.774572][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.798823][T12932] usb 7-1: Manufacturer: syz [ 806.811409][T12932] usb 7-1: SerialNumber: syz [ 806.812598][ T5897] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 806.836035][ T5897] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 806.845435][ T5897] usb 1-1: Manufacturer: syz [ 806.847550][T12932] usb 7-1: config 0 descriptor?? [ 806.869153][ T5897] usb 1-1: config 0 descriptor?? [ 806.880168][T12932] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 806.911628][T12932] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 806.987345][ T5897] rc_core: IR keymap rc-hauppauge not found [ 806.994630][ T5897] Registered IR keymap rc-empty [ 807.011718][ T5897] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 807.051292][ T5897] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input50 [ 807.181020][T14936] fuse: Unknown parameter 'fd0x0000000000000007' [ 807.301039][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.992158][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 808.006029][T14939] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 808.013389][T14940] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 808.050879][T11888] usb 7-1: USB disconnect, device number 24 [ 808.281445][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.419058][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.719363][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.853182][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.897416][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.136556][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 809.721728][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.777353][T11888] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 810.145518][T14950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2153'. [ 810.639667][T11888] usb 1-1: USB disconnect, device number 52 [ 810.841631][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.854743][ T30] audit: type=1400 audit(1757569910.385:687): avc: denied { shutdown } for pid=14953 comm="syz.6.2154" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 fport=19999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 810.879868][ C1] vkms_vblank_simulate: vblank timer overrun [ 810.918169][ T43] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 811.080483][ T43] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 811.080619][T14962] fuse: Bad value for 'fd' [ 812.119364][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.136864][ T30] audit: type=1400 audit(1757569911.285:688): avc: denied { mount } for pid=14964 comm="syz.0.2157" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 812.220950][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.222928][ T30] audit: type=1400 audit(1757569911.295:689): avc: denied { read write } for pid=14964 comm="syz.0.2157" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 812.234488][T14963] fido_id[14963]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 812.420168][ T30] audit: type=1400 audit(1757569911.295:690): avc: denied { open } for pid=14964 comm="syz.0.2157" path="/440/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 812.442309][ C1] vkms_vblank_simulate: vblank timer overrun [ 812.450445][ T30] audit: type=1400 audit(1757569911.295:691): avc: denied { setopt } for pid=14964 comm="syz.0.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 812.574186][ T30] audit: type=1400 audit(1757569912.105:692): avc: denied { getopt } for pid=14978 comm="syz.4.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 812.607875][T14979] netlink: 'syz.4.2159': attribute type 10 has an invalid length. [ 812.615761][T14979] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2159'. [ 812.636741][T14979] dummy0: entered promiscuous mode [ 812.643260][T14979] batman_adv: batadv0: Interface deactivated: dummy0 [ 812.650721][T14979] batman_adv: batadv0: Removing interface: dummy0 [ 813.736084][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.741243][T14979] bridge0: port 3(dummy0) entered blocking state [ 813.771437][T14979] bridge0: port 3(dummy0) entered disabled state [ 813.785078][T14979] dummy0: entered allmulticast mode [ 813.831850][T14979] bridge0: port 3(dummy0) entered blocking state [ 813.832470][T14993] FAULT_INJECTION: forcing a failure. [ 813.832470][T14993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.838423][T14979] bridge0: port 3(dummy0) entered forwarding state [ 813.970504][T14993] CPU: 1 UID: 0 PID: 14993 Comm: syz.3.2163 Not tainted syzkaller #0 PREEMPT(full) [ 813.970524][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 813.970531][T14993] Call Trace: [ 813.970535][T14993] [ 813.970540][T14993] dump_stack_lvl+0x16c/0x1f0 [ 813.970559][T14993] should_fail_ex+0x512/0x640 [ 813.970580][T14993] _copy_from_user+0x2e/0xd0 [ 813.970601][T14993] copy_msghdr_from_user+0x98/0x160 [ 813.970624][T14993] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 813.970649][T14993] ___sys_sendmsg+0xfe/0x1d0 [ 813.970663][T14993] ? __pfx____sys_sendmsg+0x10/0x10 [ 813.970693][T14993] __sys_sendmsg+0x16d/0x220 [ 813.970706][T14993] ? __pfx___sys_sendmsg+0x10/0x10 [ 813.970728][T14993] do_syscall_64+0xcd/0x4c0 [ 813.970744][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.970756][T14993] RIP: 0033:0x7f8a2178eba9 [ 813.970765][T14993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.970776][T14993] RSP: 002b:00007f8a226c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.970787][T14993] RAX: ffffffffffffffda RBX: 00007f8a219d5fa0 RCX: 00007f8a2178eba9 [ 813.970794][T14993] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 813.970801][T14993] RBP: 00007f8a226c7090 R08: 0000000000000000 R09: 0000000000000000 [ 813.970808][T14993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.970814][T14993] R13: 00007f8a219d6038 R14: 00007f8a219d5fa0 R15: 00007fffbe3c44e8 [ 813.970830][T14993] [ 814.131542][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.407207][T15006] fuse: Bad value for 'fd' [ 814.954416][T15008] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 814.970314][T15008] overlayfs: overlapping lowerdir path [ 815.231156][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.248300][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.309908][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.424020][ T30] audit: type=1400 audit(1757569915.955:693): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 816.990295][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 817.070434][T15021] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 817.079430][T15021] macvlan2: entered allmulticast mode [ 817.086415][T15021] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 817.295308][T15023] netlink: 'syz.3.2171': attribute type 12 has an invalid length. [ 817.383043][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.435254][T15030] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2173'. [ 817.772297][T15037] netlink: 'syz.0.2173': attribute type 36 has an invalid length. [ 817.975946][ T912] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 818.021416][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.624422][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.997561][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.674226][ T912] usb 4-1: device descriptor read/64, error -71 [ 819.862451][T15044] FAULT_INJECTION: forcing a failure. [ 819.862451][T15044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.876178][T15044] CPU: 1 UID: 0 PID: 15044 Comm: syz.0.2177 Not tainted syzkaller #0 PREEMPT(full) [ 819.876202][T15044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 819.876212][T15044] Call Trace: [ 819.876217][T15044] [ 819.876224][T15044] dump_stack_lvl+0x16c/0x1f0 [ 819.876248][T15044] should_fail_ex+0x512/0x640 [ 819.876271][T15044] _copy_to_user+0x32/0xd0 [ 819.876295][T15044] simple_read_from_buffer+0xcb/0x170 [ 819.876314][T15044] proc_fail_nth_read+0x197/0x240 [ 819.876333][T15044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 819.876353][T15044] ? rw_verify_area+0xcf/0x6c0 [ 819.876378][T15044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 819.876396][T15044] vfs_read+0x1e1/0xcf0 [ 819.876416][T15044] ? __pfx___mutex_lock+0x10/0x10 [ 819.876436][T15044] ? __pfx_vfs_read+0x10/0x10 [ 819.876463][T15044] ? __fget_files+0x20e/0x3c0 [ 819.876488][T15044] ksys_read+0x12a/0x250 [ 819.876505][T15044] ? __pfx_ksys_read+0x10/0x10 [ 819.876522][T15044] ? fput+0x9b/0xd0 [ 819.876546][T15044] do_syscall_64+0xcd/0x4c0 [ 819.876569][T15044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.876587][T15044] RIP: 0033:0x7fd4cbb8d5bc [ 819.876602][T15044] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 819.876618][T15044] RSP: 002b:00007fd4cca42030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 819.876636][T15044] RAX: ffffffffffffffda RBX: 00007fd4cbdd5fa0 RCX: 00007fd4cbb8d5bc [ 819.876647][T15044] RDX: 000000000000000f RSI: 00007fd4cca420a0 RDI: 0000000000000004 [ 819.876657][T15044] RBP: 00007fd4cca42090 R08: 0000000000000000 R09: 0000000000000000 [ 819.876668][T15044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.876677][T15044] R13: 00007fd4cbdd6038 R14: 00007fd4cbdd5fa0 R15: 00007ffebc162ac8 [ 819.876702][T15044] [ 820.058513][ C1] vkms_vblank_simulate: vblank timer overrun [ 820.277185][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.562773][ T30] audit: type=1326 audit(1757569920.095:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15045 comm="syz.0.2178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4cbb8eba9 code=0x0 [ 820.638801][ T912] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 820.960702][T15056] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.2178'. [ 821.308443][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.586945][T12932] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 821.697584][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.735171][T15073] vlan2: entered promiscuous mode [ 821.743225][T15073] vlan2: entered allmulticast mode [ 821.748624][T12932] usb 3-1: unable to get BOS descriptor or descriptor too short [ 821.749066][T12932] usb 3-1: not running at top speed; connect to a high speed hub [ 821.771149][T12932] usb 3-1: config 191 has an invalid interface number: 223 but max is 0 [ 821.781064][T15073] hsr_slave_1: entered allmulticast mode [ 821.786492][T12932] usb 3-1: config 191 has no interface number 0 [ 821.795336][T12932] usb 3-1: config 191 interface 223 altsetting 6 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 821.796302][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2186'. [ 821.807761][T12932] usb 3-1: config 191 interface 223 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 821.828116][T12932] usb 3-1: config 191 interface 223 has no altsetting 0 [ 821.840291][T12932] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=6a.34 [ 821.849904][T12932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.891070][T12932] usb 3-1: Product: syz [ 821.920433][T12932] usb 3-1: Manufacturer: syz [ 821.932467][T12932] usb 3-1: SerialNumber: syz [ 822.121448][ T9] libceph: connect (1)[c::]:6789 error -101 [ 822.127527][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 822.198267][T15063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.291929][T15063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.327418][T15079] ceph: No mds server is up or the cluster is laggy [ 822.390141][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.398254][T12932] usb 3-1: USB disconnect, device number 57 [ 823.383147][T15101] fuse: Unknown parameter '0x0000000000000007' [ 823.505927][T15098] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 823.937346][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.116903][ T5960] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 824.157186][T15107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2194'. [ 824.476847][ T5960] usb 3-1: Using ep0 maxpacket: 32 [ 824.498713][ T5960] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 824.559170][ T5960] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 824.608035][ T5960] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 824.734013][ T5960] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 824.748177][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.888453][ T5960] usb 3-1: config 0 interface 0 has no altsetting 0 [ 825.080546][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.852768][ T5960] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 825.871979][ T5960] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 825.914672][ T5960] usb 3-1: Product: syz [ 825.930126][ T5960] usb 3-1: Manufacturer: syz [ 825.934904][ T5960] usb 3-1: SerialNumber: syz [ 825.956348][ T5960] usb 3-1: config 0 descriptor?? [ 825.971973][ T5960] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 826.000970][ T5960] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 826.117519][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.175912][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.466522][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.742397][T15138] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 827.749990][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 827.756153][T15140] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 828.177001][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.475998][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.578969][T15132] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2203'. [ 828.603429][ T9864] usb 3-1: USB disconnect, device number 58 [ 828.605397][ T9864] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 828.722708][T15143] fuse: Unknown parameter '0x0000000000000007' [ 829.026703][T15146] lo speed is unknown, defaulting to 1000 [ 829.313746][T15151] FAULT_INJECTION: forcing a failure. [ 829.313746][T15151] name failslab, interval 1, probability 0, space 0, times 0 [ 829.313810][T15151] CPU: 0 UID: 0 PID: 15151 Comm: syz.4.2207 Not tainted syzkaller #0 PREEMPT(full) [ 829.313830][T15151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 829.313841][T15151] Call Trace: [ 829.313846][T15151] [ 829.313854][T15151] dump_stack_lvl+0x16c/0x1f0 [ 829.313879][T15151] should_fail_ex+0x512/0x640 [ 829.313901][T15151] ? __kvmalloc_node_noprof+0x124/0x620 [ 829.313922][T15151] should_failslab+0xc2/0x120 [ 829.313941][T15151] __kvmalloc_node_noprof+0x137/0x620 [ 829.313958][T15151] ? trace_kmem_cache_alloc+0x28/0xc0 [ 829.313979][T15151] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 829.313995][T15151] ? ceph_msg_new2+0x2a1/0x4f0 [ 829.314010][T15151] ? lockdep_init_map_type+0x5c/0x280 [ 829.314032][T15151] ? ceph_msg_new2+0x2a1/0x4f0 [ 829.314046][T15151] ceph_msg_new2+0x2a1/0x4f0 [ 829.314065][T15151] ceph_monc_init+0x5db/0xc80 [ 829.314096][T15151] ceph_create_client+0x25b/0x370 [ 829.314123][T15151] ceph_get_tree+0x1ac/0x1ec0 [ 829.314147][T15151] ? security_capable+0x7e/0x260 [ 829.314170][T15151] vfs_get_tree+0x8b/0x340 [ 829.314193][T15151] vfs_cmd_create+0xd7/0x2a0 [ 829.314214][T15151] __do_sys_fsconfig+0x7b8/0xbe0 [ 829.314230][T15151] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 829.314252][T15151] do_syscall_64+0xcd/0x4c0 [ 829.314267][T15151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.314278][T15151] RIP: 0033:0x7f8a73d8eba9 [ 829.314287][T15151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.314298][T15151] RSP: 002b:00007f8a74ba5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 829.314308][T15151] RAX: ffffffffffffffda RBX: 00007f8a73fd5fa0 RCX: 00007f8a73d8eba9 [ 829.314315][T15151] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 829.314321][T15151] RBP: 00007f8a74ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 829.314327][T15151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 829.314332][T15151] R13: 00007f8a73fd6038 R14: 00007f8a73fd5fa0 R15: 00007ffeac579358 [ 829.314346][T15151] [ 829.558341][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.644153][T15158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.645317][T15158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.238059][T15153] net_ratelimit: 3 callbacks suppressed [ 830.238076][T15153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.561156][T15146] lo speed is unknown, defaulting to 1000 [ 830.576810][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.634386][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.649714][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.462420][T15164] tty tty1: ldisc open failed (-12), clearing slot 0 [ 832.509137][ T9864] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 832.759403][ T9864] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1632, setting to 64 [ 832.781806][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.799248][ T9864] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.889303][ T9864] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 832.889435][ T9864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.895218][ T9864] usb 7-1: config 0 descriptor?? [ 832.896760][T15177] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 833.324034][T15177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.485943][T15177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.625173][ T9864] acrux 0003:1A34:0802.000B: hidraw0: USB HID v0.fe Device [HID 1a34:0802] on usb-dummy_hcd.6-1/input0 [ 833.697183][ T9864] acrux 0003:1A34:0802.000B: no inputs found [ 833.704785][ T9864] acrux 0003:1A34:0802.000B: Failed to enable force feedback support, error: -19 [ 833.858828][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.110866][T15197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.119694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.657345][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.925467][T15210] lo speed is unknown, defaulting to 1000 [ 834.955433][T15207] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 835.004541][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.308437][T15219] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.425717][ T5960] usb 7-1: USB disconnect, device number 25 [ 836.586223][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.642706][T15222] befs: (nullb0): No write support. Marking filesystem read-only [ 836.650635][T15222] befs: (nullb0): invalid magic header [ 836.667285][T15222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2225'. [ 836.744243][T15210] lo speed is unknown, defaulting to 1000 [ 837.057503][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.631381][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.697255][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.975227][T15251] Bluetooth: hci5: Frame reassembly failed (-84) [ 837.981746][ T5960] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 838.109575][T15252] Bluetooth: hci6: Frame reassembly failed (-84) [ 838.148267][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 838.158946][ T6842] Bluetooth: hci5: Frame reassembly failed (-84) [ 838.250031][ T5960] usb 5-1: unable to get BOS descriptor set [ 838.272730][ T5960] usb 5-1: too many configurations: 144, using maximum allowed: 8 [ 838.293177][ T5960] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 838.301151][ T5960] usb 5-1: can't read configurations, error -61 [ 838.541437][ T5960] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 838.666308][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.742658][ T5960] usb 5-1: unable to get BOS descriptor set [ 838.749271][ T5960] usb 5-1: too many configurations: 144, using maximum allowed: 8 [ 838.787440][ T5960] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 838.805197][ T5960] usb 5-1: can't read configurations, error -61 [ 838.822618][ T5960] usb usb5-port1: attempt power cycle [ 839.316637][ T5960] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 839.348290][ T5960] usb 5-1: unable to get BOS descriptor set [ 839.354321][ T5960] usb 5-1: too many configurations: 144, using maximum allowed: 8 [ 839.389883][T15261] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2234'. [ 839.446411][ T5960] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 839.459125][ T5960] usb 5-1: can't read configurations, error -61 [ 839.697810][ T5960] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 840.021668][T12238] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 840.121347][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.164411][ T5960] usb 5-1: device descriptor read/8, error -71 [ 840.176666][ T5855] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 840.176741][T12238] Bluetooth: hci6: command 0x1003 tx timeout [ 840.347083][ T5960] usb usb5-port1: unable to enumerate USB device [ 840.402634][T15270] befs: (nullb0): No write support. Marking filesystem read-only [ 840.410644][T15270] befs: (nullb0): invalid magic header [ 840.439726][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2238'. [ 840.639042][T15277] dlm: non-version read from control device 208 [ 840.717689][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2240'. [ 840.732381][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2240'. [ 840.741631][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.758880][ T7054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.767972][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.777800][T11888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.156572][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2244'. [ 841.522931][T15290] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.543491][T15290] binder: 15289:15290 ioctl c0306201 0 returned -14 [ 841.556496][ T30] audit: type=1400 audit(1757569941.085:695): avc: denied { ioctl } for pid=15294 comm="syz.6.2247" path="socket:[48213]" dev="sockfs" ino=48213 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 841.975691][ T30] audit: type=1400 audit(1757569941.235:696): avc: denied { create } for pid=15291 comm="syz.3.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 841.995749][ T30] audit: type=1400 audit(1757569941.295:697): avc: denied { ioctl } for pid=15291 comm="syz.3.2246" path="socket:[47422]" dev="sockfs" ino=47422 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 842.236370][T15299] netlink: 'syz.6.2247': attribute type 10 has an invalid length. [ 842.355711][T15310] input: syz0 as /devices/virtual/input/input51 [ 842.397900][T15299] macvlan0: entered promiscuous mode [ 842.429036][T15299] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 842.446328][ T9864] net_ratelimit: 1 callbacks suppressed [ 842.446340][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.870309][T15316] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 843.363405][T15319] befs: (nullb0): No write support. Marking filesystem read-only [ 843.371618][T15319] befs: (nullb0): invalid magic header [ 843.379438][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2251'. [ 843.551873][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.078146][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.251618][T15333] Bluetooth: hci5: Frame reassembly failed (-84) [ 844.299931][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 844.582173][T15336] netlink: 'syz.6.2256': attribute type 10 has an invalid length. [ 844.590814][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.669010][T15338] binder: 15337:15338 ioctl c0306201 0 returned -14 [ 845.001038][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2257'. [ 845.009937][T15338] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2257'. [ 845.567215][T11888] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 845.594454][T15359] befs: (nullb0): No write support. Marking filesystem read-only [ 845.603144][T15359] befs: (nullb0): invalid magic header [ 845.612405][T15359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2264'. [ 845.626871][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.717127][T11888] usb 1-1: Using ep0 maxpacket: 32 [ 845.727160][T11888] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 845.735344][T11888] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 845.763121][T15357] 9pnet_fd: Insufficient options for proto=fd [ 845.770721][T11888] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 846.256551][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 846.263045][T12238] Bluetooth: hci5: command 0x1003 tx timeout [ 846.272537][ T7054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.631166][T11888] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 846.646115][T11888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 846.650019][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.657628][T11888] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 846.676528][T11888] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 846.685065][T11888] usb 1-1: Product: syz [ 846.689427][T11888] usb 1-1: Manufacturer: syz [ 846.694101][T11888] usb 1-1: SerialNumber: syz [ 846.740450][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.761111][T11888] usb 1-1: config 0 descriptor?? [ 846.768311][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.776801][T12932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.810689][T11888] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 846.825398][T11888] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 847.259164][T15370] fuse: Unknown parameter 'group_id00000000000000000000' [ 847.409274][T11888] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 847.910948][T15372] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 847.918796][T15373] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 848.825136][ T912] usb 1-1: USB disconnect, device number 53 [ 848.831164][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 848.930503][ T9864] net_ratelimit: 3 callbacks suppressed [ 848.930519][ T9864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.146828][T11888] usb 4-1: Using ep0 maxpacket: 16 [ 849.169932][ T912] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 849.182093][T11888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.441080][T11888] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 849.455846][T11888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.468352][T11888] usb 4-1: config 0 descriptor?? [ 849.700775][T15377] block nbd4: shutting down sockets [ 849.856938][ T5960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.920202][T11888] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 849.938755][ T912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.112593][ C0] ================================================================== [ 850.120673][ C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x1070/0x10a0 [ 850.126734][T15382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2270'. [ 850.128669][ C0] Read of size 1 at addr ffff888055477fff by task kworker/0:3H/9127 [ 850.128690][ C0] [ 850.128701][ C0] CPU: 0 UID: 0 PID: 9127 Comm: kworker/0:3H Not tainted syzkaller #0 PREEMPT(full) [ 850.128725][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 850.128737][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 850.128767][ C0] Call Trace: [ 850.128773][ C0] [ 850.128781][ C0] dump_stack_lvl+0x116/0x1f0 [ 850.128808][ C0] print_report+0xcd/0x630 [ 850.128829][ C0] ? __virt_addr_valid+0x81/0x610 [ 850.128853][ C0] ? __phys_addr+0xe8/0x180 [ 850.128875][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 850.128900][ C0] kasan_report+0xe0/0x110 [ 850.128919][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 850.128947][ C0] mcp2221_raw_event+0x1070/0x10a0 [ 850.128971][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 850.128994][ C0] __hid_input_report.constprop.0+0x311/0x450 [ 850.129015][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 850.129041][ C0] hid_irq_in+0x35e/0x870 [ 850.129068][ C0] __usb_hcd_giveback_urb+0x388/0x610 [ 850.129092][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 850.129111][ C0] dummy_timer+0x1814/0x3a30 [ 850.129143][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 850.129164][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 850.129186][ C0] ? mark_held_locks+0x49/0x80 [ 850.129213][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 850.129235][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 850.129253][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 850.129277][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 850.129296][ C0] ? read_tsc+0x9/0x20 [ 850.129322][ C0] hrtimer_run_softirq+0x17d/0x350 [ 850.129343][ C0] handle_softirqs+0x219/0x8e0 [ 850.129367][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 850.129390][ C0] __irq_exit_rcu+0x109/0x170 [ 850.129410][ C0] irq_exit_rcu+0x9/0x30 [ 850.129430][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 850.129451][ C0] [ 850.129457][ C0] [ 850.129464][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 850.129483][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 850.129504][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 ae 00 f6 48 89 df e8 0e 02 01 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 fe f0 f5 65 8b 05 be 9b 3f 08 85 c0 74 16 5b [ 850.129522][ C0] RSP: 0018:ffffc900048ffb50 EFLAGS: 00000246 [ 850.129535][ C0] RAX: 0000000000000006 RBX: ffff888030304238 RCX: 0000000000000006 [ 850.129547][ C0] RDX: 0000000000000000 RSI: ffffffff8de52620 RDI: ffffffff8c162d80 [ 850.129566][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 850.129577][ C0] R10: ffffffff90ab6d97 R11: 0000000000000000 R12: ffff888030304238 [ 850.129588][ C0] R13: 0000000000000293 R14: 0000000000000001 R15: ffff88803119c000 [ 850.129606][ C0] snd_rawmidi_transmit+0x117/0x160 [ 850.129625][ C0] snd_vmidi_output_work+0x111/0x390 [ 850.129652][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 850.129679][ C0] ? rcu_is_watching+0x12/0xc0 [ 850.129703][ C0] process_one_work+0x9cc/0x1b70 [ 850.129728][ C0] ? __pfx_process_one_work+0x10/0x10 [ 850.129749][ C0] ? assign_work+0x1a0/0x250 [ 850.129767][ C0] worker_thread+0x6c8/0xf10 [ 850.129790][ C0] ? __pfx_worker_thread+0x10/0x10 [ 850.129809][ C0] kthread+0x3c2/0x780 [ 850.129826][ C0] ? __pfx_kthread+0x10/0x10 [ 850.129843][ C0] ? rcu_is_watching+0x12/0xc0 [ 850.129863][ C0] ? __pfx_kthread+0x10/0x10 [ 850.129880][ C0] ret_from_fork+0x5d4/0x6f0 [ 850.129896][ C0] ? __pfx_kthread+0x10/0x10 [ 850.129912][ C0] ret_from_fork_asm+0x1a/0x30 [ 850.129938][ C0] [ 850.129945][ C0] [ 850.153061][T15382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2270'. [ 850.157402][ C0] The buggy address belongs to the physical page: [ 850.157414][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55474 [ 850.157433][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 850.157447][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 850.157466][ C0] page_type: f8(unknown) [ 850.157483][ C0] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 850.157497][ C0] raw: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 850.551715][ C0] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 850.560365][ C0] head: 0000000000000000 0000000000000000 00000000f8000000 0000000000000000 [ 850.569015][ C0] head: 00fff00000000002 ffffea0001551d01 00000000ffffffff 00000000ffffffff [ 850.577662][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 850.586306][ C0] page dumped because: kasan: bad access detected [ 850.592697][ C0] page_owner tracks the page as allocated [ 850.598384][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 5856, tgid 5856 (syz-executor), ts 66453673699, free_ts 15771979892 [ 850.619903][ C0] post_alloc_hook+0x1c0/0x230 [ 850.624669][ C0] get_page_from_freelist+0x132b/0x38e0 [ 850.630196][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 850.636067][ C0] alloc_pages_mpol+0x1fb/0x550 [ 850.640899][ C0] ___kmalloc_large_node+0xed/0x160 [ 850.646083][ C0] __kmalloc_large_node_noprof+0x1c/0x70 [ 850.651700][ C0] __kvmalloc_node_noprof.cold+0xb/0x65 [ 850.657230][ C0] alloc_netdev_mqs+0xd2/0x1530 [ 850.662063][ C0] ieee80211_if_add+0x18a/0x1a40 [ 850.666981][ C0] ieee80211_register_hw+0x3904/0x4120 [ 850.672424][ C0] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 850.678128][ C0] hwsim_new_radio_nl+0xb51/0x12c0 [ 850.683227][ C0] genl_family_rcv_msg_doit+0x206/0x2f0 [ 850.688757][ C0] genl_rcv_msg+0x55c/0x800 [ 850.693247][ C0] netlink_rcv_skb+0x155/0x420 [ 850.697999][ C0] genl_rcv+0x28/0x40 [ 850.701964][ C0] page last free pid 1 tgid 1 stack trace: [ 850.707740][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 850.712921][ C0] free_contig_range+0x183/0x4b0 [ 850.717842][ C0] destroy_args+0x794/0xc10 [ 850.722324][ C0] debug_vm_pgtable+0x1a32/0x3640 [ 850.727326][ C0] do_one_initcall+0x120/0x6e0 [ 850.732072][ C0] kernel_init_freeable+0x5c2/0x910 [ 850.737254][ C0] kernel_init+0x1c/0x2b0 [ 850.741572][ C0] ret_from_fork+0x5d4/0x6f0 [ 850.746140][ C0] ret_from_fork_asm+0x1a/0x30 [ 850.750885][ C0] [ 850.753186][ C0] Memory state around the buggy address: [ 850.758791][ C0] ffff888055477e80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 850.766832][ C0] ffff888055477f00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 850.774871][ C0] >ffff888055477f80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 850.782905][ C0] ^ [ 850.790854][ C0] ffff888055478000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 850.798892][ C0] ffff888055478080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 850.806927][ C0] ================================================================== [ 850.814960][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 850.822131][ C0] CPU: 0 UID: 0 PID: 9127 Comm: kworker/0:3H Not tainted syzkaller #0 PREEMPT(full) [ 850.831570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 850.841607][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 850.848014][ C0] Call Trace: [ 850.851272][ C0] [ 850.854096][ C0] dump_stack_lvl+0x3d/0x1f0 [ 850.858672][ C0] vpanic+0x6e8/0x7a0 [ 850.862644][ C0] ? __pfx_vpanic+0x10/0x10 [ 850.867136][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 850.872145][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 850.877425][ C0] panic+0xca/0xd0 [ 850.881133][ C0] ? __pfx_panic+0x10/0x10 [ 850.885537][ C0] ? end_report+0x4c/0x170 [ 850.889940][ C0] ? rcu_is_watching+0x12/0xc0 [ 850.894685][ C0] ? lock_release+0x201/0x2f0 [ 850.899349][ C0] check_panic_on_warn+0xab/0xb0 [ 850.904264][ C0] end_report+0x107/0x170 [ 850.908577][ C0] kasan_report+0xee/0x110 [ 850.912977][ C0] ? mcp2221_raw_event+0x1070/0x10a0 [ 850.918252][ C0] mcp2221_raw_event+0x1070/0x10a0 [ 850.923350][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 850.929138][ C0] __hid_input_report.constprop.0+0x311/0x450 [ 850.935189][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 850.940638][ C0] hid_irq_in+0x35e/0x870 [ 850.944955][ C0] __usb_hcd_giveback_urb+0x388/0x610 [ 850.950307][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 850.955488][ C0] dummy_timer+0x1814/0x3a30 [ 850.960070][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 850.964988][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 850.969906][ C0] ? mark_held_locks+0x49/0x80 [ 850.974672][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 850.980459][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 850.985377][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 850.990561][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 850.996267][ C0] ? read_tsc+0x9/0x20 [ 851.000325][ C0] hrtimer_run_softirq+0x17d/0x350 [ 851.005420][ C0] handle_softirqs+0x219/0x8e0 [ 851.010171][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 851.015443][ C0] __irq_exit_rcu+0x109/0x170 [ 851.020105][ C0] irq_exit_rcu+0x9/0x30 [ 851.024332][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 851.029945][ C0] [ 851.032853][ C0] [ 851.035761][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 851.041726][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 851.048121][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 ae 00 f6 48 89 df e8 0e 02 01 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 fe f0 f5 65 8b 05 be 9b 3f 08 85 c0 74 16 5b [ 851.067708][ C0] RSP: 0018:ffffc900048ffb50 EFLAGS: 00000246 [ 851.073754][ C0] RAX: 0000000000000006 RBX: ffff888030304238 RCX: 0000000000000006 [ 851.081705][ C0] RDX: 0000000000000000 RSI: ffffffff8de52620 RDI: ffffffff8c162d80 [ 851.089656][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 851.097603][ C0] R10: ffffffff90ab6d97 R11: 0000000000000000 R12: ffff888030304238 [ 851.105556][ C0] R13: 0000000000000293 R14: 0000000000000001 R15: ffff88803119c000 [ 851.113521][ C0] snd_rawmidi_transmit+0x117/0x160 [ 851.118702][ C0] snd_vmidi_output_work+0x111/0x390 [ 851.123976][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 851.129768][ C0] ? rcu_is_watching+0x12/0xc0 [ 851.134516][ C0] process_one_work+0x9cc/0x1b70 [ 851.139438][ C0] ? __pfx_process_one_work+0x10/0x10 [ 851.144794][ C0] ? assign_work+0x1a0/0x250 [ 851.149365][ C0] worker_thread+0x6c8/0xf10 [ 851.153940][ C0] ? __pfx_worker_thread+0x10/0x10 [ 851.159030][ C0] kthread+0x3c2/0x780 [ 851.163078][ C0] ? __pfx_kthread+0x10/0x10 [ 851.167647][ C0] ? rcu_is_watching+0x12/0xc0 [ 851.172397][ C0] ? __pfx_kthread+0x10/0x10 [ 851.176968][ C0] ret_from_fork+0x5d4/0x6f0 [ 851.181538][ C0] ? __pfx_kthread+0x10/0x10 [ 851.186114][ C0] ret_from_fork_asm+0x1a/0x30 [ 851.190865][ C0] [ 851.194073][ C0] Kernel Offset: disabled [ 851.198368][ C0] Rebooting in 86400 seconds..