last executing test programs: 18.463093646s ago: executing program 2 (id=7356): syz_emit_vhci(0x0, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) eventfd2(0x2, 0x80000) madvise(&(0x7f00000b7000/0x3000)=nil, 0x3000, 0x8) 15.36002726s ago: executing program 2 (id=7372): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390ce1e000000010902240001b30000040904610017ff5d810009050f1f0104000000090583"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a0300000000000000000001000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e80080002000100000008"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 12.236650218s ago: executing program 2 (id=7384): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x500, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x7, 0x6, 0xffff, 0x8251c, 0xcfab, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3506, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000b00000000000000000000010001079c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x9, 0x22, "576b07a651"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}]}, 0x3c}}, 0x24040000) getdents64(r7, &(0x7f0000001f00)=""/4093, 0xffd) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) 9.112714656s ago: executing program 2 (id=7397): socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf8ee}}, @ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x30}, 0x0) keyctl$revoke(0x3, r3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 8.460668268s ago: executing program 0 (id=7400): syz_usb_connect$uac1(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x8, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x3c}, [@selector_unit={0x5, 0x24, 0x5, 0x1, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x80, 0x1, 0x2, 0xc0, {0x7, 0x25, 0x1, 0x82, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x1, 0x2, {0x7, 0x25, 0x1, 0x2}}}}}}}]}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 7.347968077s ago: executing program 1 (id=7405): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000200)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20040810) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x20000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) 6.003207249s ago: executing program 2 (id=7408): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000280)={0x1, 0x79, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) 5.815741476s ago: executing program 3 (id=7410): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private2}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x6fbf, 0x0, {0x6000, 0x5}, {0x51, 0x2}, @period={0x5a, 0x7, 0x8001, 0xee5, 0xff, {0x8000, 0xff, 0x6, 0x8}, 0x2, &(0x7f0000000140)=[0xb, 0x2f7]}}) r3 = syz_open_dev$evdev(0x0, 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x6, 0x0, 0x0, 0xf, 0x400009, 0x8, 0xa}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') read$FUSE(r5, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)=0x1) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x5) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x66000080) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000540)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) userfaultfd(0x801) alarm(0x8000000000000001) syz_pidfd_open(0x0, 0x0) 5.727443717s ago: executing program 1 (id=7411): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f00000001c0), 0x4) 5.634882772s ago: executing program 1 (id=7412): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, r2, 0x1, 0x0, &(0x7f00000000c0)=[{0x80000001, 0xfffffffffffffffa}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r2}) syz_open_dev$media(0x0, 0x0, 0x101d01) socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000200)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='\x17@\\\x00', &(0x7f0000000800)='\x02\x93\"}qu\x87n\x9e\xf5/\xffp\x95\x00T\xc1]\xf5\xbe\xde0]|\xc9`t{Svh4\x1ee?\v\xf9<5\xf6{\xc4,\xe18\x01\xbf\xbd\xf19\xee\xc3\xee\x85\xf97\xaap\xe2\x99\xe3\xf5\xf4[\xca\xe9j\xfdO4', 0x0) r4 = fsopen(&(0x7f0000000280)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='acl\x00\t\x00\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xd3\x0f\x99R\xb3\x16n\rO\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:.\xf1!\x9d`YQ\xc3N\n\xbbWN:\xd3\x98', 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000780)='#@^\\-$^\x00', &(0x7f00000007c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r3) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000a40)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\x10\xa0Vh\x9c\xf2\xc4^\x93\xd3\xab\x7f69\xd7\xa3\x02\x8aY\xe5\xddX`\xd0\x12\x17\xe4\xe6E<\"s\xcf\x93\xe6<-+B\xe2\x14\xa8\xc5\xd3N\xb6\x0e\bW;\xd0\x98\x87\xc6x\x1e>\x8a\xa6=\x86~\x9a\xce\x9f\xf0b\xea\x85\xb0\x82\xe5I\xd9\xd0\xec3\xb16DO\xa9D\x9e\xd3\n\x19;\xb8\xb1\xa6#\xc7\xd8J\x80\xd3?|\x04=\xfc\xdf\xb5\xc2\x81\xd3', 0x0, 0xffffffffffffff9c) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='fuseblk\x00', &(0x7f00000004c0)='\x1c@\\\x00', 0x0) read(r3, 0x0, 0x0) close(r3) 5.247064945s ago: executing program 0 (id=7413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 4.870973982s ago: executing program 4 (id=7414): r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 4.782481237s ago: executing program 0 (id=7415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x908}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x0, 0x1ff, 0x10, 0x8, 0x0, 0x8}}]}}]}, 0x150}}, 0x0) 4.625594789s ago: executing program 4 (id=7416): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x500, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x7, 0x6, 0xffff, 0x8251c, 0xcfab, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3506, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000b00000000000000000000010001079c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x9, 0x22, "576b07a651"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}]}, 0x3c}}, 0x24040000) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) 4.291888111s ago: executing program 0 (id=7417): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1, 0x4, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x2, 0x200, 0x4, 0x2c, 0x80000005, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") r7 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0xb, 0xa, 0xfffffff6, {0x403, 0x1, 0x3, 0x8, 0x20, 0x7, 0x5, 0x6, 0x22, 0x5, 0x7f, 0x9c14, 0x20000a, 0x8d12074f, "0010b45adb3bdf6bbf43f7e7bdcf42a72e6ca213e20b354ba4e274f7720904f6"}}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r10, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r2, 0x7, r5, &(0x7f0000000000)={r1, r8, 0x8}) 3.986006137s ago: executing program 0 (id=7418): socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf8ee}}, @ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x30}, 0x0) keyctl$revoke(0x3, r3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 3.558506813s ago: executing program 1 (id=7419): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, &(0x7f00000001c0)) 3.265405487s ago: executing program 4 (id=7420): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010000104000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000001"], 0x20}}, 0x4000040) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006001e0089", 0xd, 0x28000000, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 2.914954294s ago: executing program 2 (id=7421): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000008d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000880)="496dd673d21eef6ea3892b8088eb89bb16a97cad0cbd9b07b966bbc5ec5ac17d25827f9a97de51ddb8274ae39e61fa2bdd6de10471afbcf78b06ff9b2e86c1c557d932d425c82dd05bcf24f55180051f8e888341264a5833b24857dd67a36c9c6a63414893300d97b78adfcbd07d1e5375ea488ae71f242e791205c5acb051f52ba4f43d70daa0dba4594a0f152d46e9817e16753e74bce9a043d399f1be6f02ea3bdc6d905f3b83e948def0232322fdf0e2ef9ce5503ab2a0ed51377a3885a658fc7a498867b46602e53833e9bad7ea838b", 0xd2}, {&(0x7f0000000500)="c9cbe4cd943c06b7c4000c5cc6045a04f27945abcf08695b06302b8505dec68f33006928bda74c6ed345d419b7717ccfb5038b448e1df9be1a62e261d46f96f89c90c0c956fe7bc617593ed3bf22179e135e78", 0x53}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000640)="f43f7a96a611fc950b2d4cf1e77b75d1e80c072c70653e0331f73ff6a60f7534c308e2d0e6d056c2e512370407a65056a2128481e4c5e7e99299b2a070316a3d", 0x40}], 0x1}}], 0x2, 0x4000) close(r0) 2.745610648s ago: executing program 4 (id=7422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) syz_open_dev$ttys(0xc, 0x2, 0x0) listen(r0, 0xfffffff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.411953314s ago: executing program 3 (id=7423): syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x2c6f, 0x6, 0x8, 0x4, 0x1, 0x6], [0x10000007, 0x10002, 0x12b, 0x8000, 0x0, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xd2, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0xfffffc00, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff805, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1fd, 0xfff, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.132597992s ago: executing program 3 (id=7424): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010000104000000001001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100697036677265000024000280060002000700000008000d0009000000080014000500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0) mmap(&(0x7f0000405000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xab24d000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000600)={{0x3, 0x1, 0x7, 0x3}, 0x1, 0x405}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000000000008400000006"], 0xd0}, 0x807) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r10}, 0x14) 1.923639984s ago: executing program 0 (id=7425): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="401506"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.725420714s ago: executing program 1 (id=7426): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010000104000000001001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100697036677265000024000280060002000700000008000d0009000000080014000500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0) mmap(&(0x7f0000405000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xab24d000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000600)={{0x3, 0x1, 0x7, 0x3}, 0x1, 0x405}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000000000008400000006"], 0xd0}, 0x807) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r10}, 0x14) 1.281559312s ago: executing program 4 (id=7427): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x500, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x7, 0x6, 0xffff, 0x8251c, 0xcfab, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3506, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000b00000000000000000000010001079c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x9, 0x22, "576b07a651"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}]}, 0x3c}}, 0x24040000) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) 1.062015536s ago: executing program 3 (id=7428): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x69d, 0x0, &(0x7f0000002d40)="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", 0x0, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2, 0x0, 0x7ffc}, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x10, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) 1.03472611s ago: executing program 4 (id=7429): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, r2, 0x1, 0x0, &(0x7f00000000c0)=[{0x80000001, 0xfffffffffffffffa}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r2}) syz_open_dev$media(0x0, 0x0, 0x101d01) socket$netlink(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000200)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='\x17@\\\x00', &(0x7f0000000800)='\x02\x93\"}qu\x87n\x9e\xf5/\xffp\x95\x00T\xc1]\xf5\xbe\xde0]|\xc9`t{Svh4\x1ee?\v\xf9<5\xf6{\xc4,\xe18\x01\xbf\xbd\xf19\xee\xc3\xee\x85\xf97\xaap\xe2\x99\xe3\xf5\xf4[\xca\xe9j\xfdO4', 0x0) r4 = fsopen(&(0x7f0000000280)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='acl\x00\t\x00\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xd3\x0f\x99R\xb3\x16n\rO\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:.\xf1!\x9d`YQ\xc3N\n\xbbWN:\xd3\x98', 0x0, r4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000780)='#@^\\-$^\x00', &(0x7f00000007c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r3) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000a40)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\x10\xa0Vh\x9c\xf2\xc4^\x93\xd3\xab\x7f69\xd7\xa3\x02\x8aY\xe5\xddX`\xd0\x12\x17\xe4\xe6E<\"s\xcf\x93\xe6<-+B\xe2\x14\xa8\xc5\xd3N\xb6\x0e\bW;\xd0\x98\x87\xc6x\x1e>\x8a\xa6=\x86~\x9a\xce\x9f\xf0b\xea\x85\xb0\x82\xe5I\xd9\xd0\xec3\xb16DO\xa9D\x9e\xd3\n\x19;\xb8\xb1\xa6#\xc7\xd8J\x80\xd3?|\x04=\xfc\xdf\xb5\xc2\x81\xd3', &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000500)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='fuseblk\x00', &(0x7f00000004c0)='\x1c@\\\x00', 0x0) read(r3, 0x0, 0x0) close(r3) 960.781388ms ago: executing program 3 (id=7430): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x500, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x7, 0x6, 0xffff, 0x8251c, 0xcfab, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3506, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000b00000000000000000000010001079c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x9, 0x22, "576b07a651"}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}]}, 0x3c}}, 0x24040000) getdents64(r7, &(0x7f0000001f00)=""/4093, 0xffd) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) 104.596513ms ago: executing program 1 (id=7431): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[], 0x10}}, 0x0) syz_fuse_handle_req(r5, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r6, &(0x7f0000000700)=""/90, 0x5a) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x5}) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup2(r3, r4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 0s ago: executing program 3 (id=7432): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x1, 'I'}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3164.400010][T31253] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 3164.434962][ T30] audit: type=1326 audit(1758930232.618:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2084 comm="syz.0.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3164.459506][ T30] audit: type=1326 audit(1758930232.618:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2084 comm="syz.0.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3164.486793][ T30] audit: type=1326 audit(1758930232.618:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2084 comm="syz.0.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3164.509612][T31253] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3164.519021][T31253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3164.527009][T31253] usb 5-1: Product: syz [ 3164.531293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3164.595778][T28632] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3164.611124][T31253] usb 5-1: Manufacturer: syz [ 3164.611142][T28632] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3164.615753][T31253] usb 5-1: SerialNumber: syz [ 3164.639507][ T30] audit: type=1326 audit(1758930232.618:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2084 comm="syz.0.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3164.652156][T28632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3164.702681][T28632] usb 4-1: config 0 descriptor?? [ 3164.744424][ T30] audit: type=1326 audit(1758930232.618:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2084 comm="syz.0.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3164.752473][T28632] pwc: Askey VC010 type 2 USB webcam detected. [ 3165.025329][ T30] audit: type=1326 audit(1758930232.618:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2084 comm="syz.0.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2e9152af79 code=0x7ffc0000 [ 3165.049344][ T30] audit: type=1326 audit(1758930232.618:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2084 comm="syz.0.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3165.073338][ T30] audit: type=1326 audit(1758930232.618:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2084 comm="syz.0.6805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3165.273882][T28632] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3165.484114][T28632] pwc: recv_control_msg error -71 req 02 val 2c00 [ 3165.514472][T28632] pwc: recv_control_msg error -71 req 04 val 1000 [ 3165.528577][T28632] pwc: recv_control_msg error -71 req 04 val 1300 [ 3165.556086][T28632] pwc: recv_control_msg error -71 req 04 val 1400 [ 3165.563582][T28632] pwc: recv_control_msg error -71 req 02 val 2000 [ 3165.576184][T28632] pwc: recv_control_msg error -71 req 02 val 2100 [ 3165.577534][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3165.603871][T28632] pwc: recv_control_msg error -71 req 04 val 1500 [ 3165.623198][T28632] pwc: recv_control_msg error -71 req 02 val 2500 [ 3165.648000][T28632] pwc: recv_control_msg error -71 req 02 val 2400 [ 3165.664667][T31253] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 3165.670989][T31253] cdc_ncm 5-1:1.1: bind() failure [ 3165.679349][T28632] pwc: recv_control_msg error -71 req 02 val 2600 [ 3165.699258][T28632] pwc: recv_control_msg error -71 req 02 val 2900 [ 3165.716764][T31253] usb 5-1: USB disconnect, device number 28 [ 3165.732418][T28632] pwc: recv_control_msg error -71 req 02 val 2800 [ 3165.746825][T28632] pwc: recv_control_msg error -71 req 04 val 1100 [ 3165.755378][T28632] pwc: recv_control_msg error -71 req 04 val 1200 [ 3165.817481][T28632] pwc: Registered as video103. [ 3165.847674][T28632] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input80 [ 3165.877845][T28632] usb 4-1: USB disconnect, device number 20 [ 3166.196894][ T30] audit: type=1326 audit(1758930234.488:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2099 comm="syz.1.6809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3166.608494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3167.427120][ T2108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6810'. [ 3167.647537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3168.687512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3169.438981][ T2139] trusted_key: encrypted_key: insufficient parameters specified [ 3169.727483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3170.767513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3170.903852][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 3170.903872][ T30] audit: type=1326 audit(1758930239.218:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2150 comm="syz.3.6822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3170.977504][ T30] audit: type=1326 audit(1758930239.218:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2150 comm="syz.3.6822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3171.000133][ T30] audit: type=1326 audit(1758930239.218:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2150 comm="syz.3.6822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3171.022926][ T30] audit: type=1326 audit(1758930239.218:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2150 comm="syz.3.6822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3171.045697][ T30] audit: type=1326 audit(1758930239.218:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2150 comm="syz.3.6822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3171.069849][ T30] audit: type=1326 audit(1758930239.218:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2150 comm="syz.3.6822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3171.094375][ T30] audit: type=1326 audit(1758930239.218:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2150 comm="syz.3.6822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3171.129017][ T30] audit: type=1326 audit(1758930239.228:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2150 comm="syz.3.6822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3171.251329][ T30] audit: type=1326 audit(1758930239.228:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2150 comm="syz.3.6822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3171.348887][ T30] audit: type=1326 audit(1758930239.228:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2150 comm="syz.3.6822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3171.817529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3172.441758][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 3172.461410][ T2167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3172.617453][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 3172.625723][ T43] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 3172.637134][ T43] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3172.649327][ T43] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3172.668289][ T43] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3172.685467][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3172.697180][ T43] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 3172.706927][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3172.715253][ T43] usb 4-1: Product: syz [ 3172.719749][ T43] usb 4-1: Manufacturer: syz [ 3172.725058][ T43] usb 4-1: SerialNumber: syz [ 3172.741765][ T43] usb 4-1: config 0 descriptor?? [ 3172.847460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3173.010390][ T43] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input81 [ 3173.136042][ T5220] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 3173.153793][ T5220] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 3173.221664][ T2162] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 3173.398014][ T5220] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 3173.430723][T31253] usb 4-1: USB disconnect, device number 21 [ 3173.887477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3174.161675][ T2178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6827'. [ 3174.219255][ T2177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6829'. [ 3174.927466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3175.967584][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3176.438744][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 3176.438764][ T30] audit: type=1326 audit(1758930244.728:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2201 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3176.467305][ C0] vkms_vblank_simulate: vblank timer overrun [ 3176.529230][ T30] audit: type=1326 audit(1758930244.728:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2201 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3176.551613][ C0] vkms_vblank_simulate: vblank timer overrun [ 3176.834758][ T30] audit: type=1326 audit(1758930244.728:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2201 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3176.970391][ T2214] fuse: Unknown parameter 'use00000000000000000000' [ 3177.007533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3177.060239][ T30] audit: type=1326 audit(1758930244.728:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2201 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3177.209024][ T30] audit: type=1326 audit(1758930244.728:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2201 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3177.300599][ T30] audit: type=1326 audit(1758930244.728:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2201 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3177.354164][ T30] audit: type=1326 audit(1758930244.728:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2201 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3177.388943][ T2218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6842'. [ 3177.406042][ T30] audit: type=1326 audit(1758930244.728:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2201 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3177.473530][ T30] audit: type=1326 audit(1758930244.738:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2201 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3177.568390][ T30] audit: type=1326 audit(1758930244.738:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2201 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3177.817692][ T2219] vivid-000: ================= START STATUS ================= [ 3177.825513][ T2219] vivid-000: Test Pattern: 75% Colorbar [ 3177.838372][ T2219] vivid-000: Fill Percentage of Frame: 100 [ 3177.845608][ T2219] vivid-000: Horizontal Movement: No Movement [ 3178.057500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3178.179404][ T2219] vivid-000: Vertical Movement: No Movement [ 3178.185387][ T2219] vivid-000: OSD Text Mode: All [ 3178.191040][ T2219] vivid-000: Show Border: false [ 3178.197734][ T2219] vivid-000: Show Square: false [ 3178.203175][ T2219] vivid-000: Sensor Flipped Horizontally: true [ 3178.221328][ T2219] vivid-000: Sensor Flipped Vertically: false [ 3178.231217][ T2219] vivid-000: Insert SAV Code in Image: false [ 3178.241659][ T2219] vivid-000: Insert EAV Code in Image: false [ 3178.251537][ T2219] vivid-000: Insert Video Guard Band: true [ 3178.261689][ T2219] vivid-000: Reduced Framerate: false [ 3178.267198][ T2219] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 3178.302268][ T2219] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 000-0 [ 3178.322541][ T2219] vivid-000: Enable Capture Cropping: true grabbed [ 3178.337517][ T2219] vivid-000: Enable Capture Composing: true grabbed [ 3178.352920][ T2219] vivid-000: Enable Capture Scaler: true grabbed [ 3178.373229][ T2219] vivid-000: Timestamp Source: End of Frame [ 3178.406439][ T2219] vivid-000: Colorspace: SMPTE 170M [ 3178.480927][ T2219] vivid-000: Transfer Function: sRGB [ 3178.493424][ T2219] vivid-000: Y'CbCr Encoding: Default [ 3178.513736][ T2219] vivid-000: HSV Encoding: Hue 0-179 [ 3178.537607][ T2219] vivid-000: Quantization: Default [ 3178.579876][ T2219] vivid-000: Apply Alpha To Red Only: false [ 3178.586566][ T2219] vivid-000: Standard Aspect Ratio: 14x9 [ 3178.614572][ T2219] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 3178.647707][ T2219] vivid-000: DV Timings: 640x480p59 inactive [ 3178.660864][ T2219] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 3178.707661][ T2219] vivid-000: Maximum EDID Blocks: 2 [ 3178.720758][ T2219] vivid-000: Limited RGB Range (16-235): true [ 3178.751780][ T2219] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 3178.772046][ T2219] vivid-000: Power Present: 0x00000001 [ 3178.787549][ T2219] tpg source WxH: 720x576 (R'G'B) [ 3178.797880][ T2219] tpg field: 6 [ 3178.801364][ T2219] tpg crop: (0,8)/16x540 [ 3178.811749][ T2219] tpg compose: (256,0)/16x2160 [ 3178.821861][ T2219] tpg colorspace: 1 [ 3178.831977][ T2219] tpg transfer function: 4/4 [ 3178.842094][ T2219] tpg quantization: 2/2 [ 3178.852423][ T2219] tpg RGB range: 0/1 [ 3178.858754][ T2219] vivid-000: ================== END STATUS ================== [ 3179.087520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3179.922027][ T2249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3180.137455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3180.737511][ T43] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 3180.915790][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 3180.923010][ T43] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 3180.931898][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3180.945966][ T43] usb 5-1: config 0 has no interfaces? [ 3180.984707][ T43] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3180.996666][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3181.025836][ T43] usb 5-1: Product: syz [ 3181.037183][ T43] usb 5-1: Manufacturer: syz [ 3181.056193][ T43] usb 5-1: SerialNumber: syz [ 3181.081210][ T43] usb 5-1: config 0 descriptor?? [ 3181.167463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3181.752079][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 3181.752098][ T30] audit: type=1326 audit(1758930250.078:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2262 comm="syz.3.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3181.886885][ T30] audit: type=1326 audit(1758930250.078:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2262 comm="syz.3.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3181.911861][ T30] audit: type=1326 audit(1758930250.078:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2262 comm="syz.3.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3181.934269][ C0] vkms_vblank_simulate: vblank timer overrun [ 3181.980278][ T30] audit: type=1326 audit(1758930250.078:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2262 comm="syz.3.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3182.002677][ C0] vkms_vblank_simulate: vblank timer overrun [ 3182.013131][ T30] audit: type=1326 audit(1758930250.078:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2262 comm="syz.3.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3182.035483][ C0] vkms_vblank_simulate: vblank timer overrun [ 3182.207507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3182.321648][ T9] usb 5-1: USB disconnect, device number 29 [ 3182.399899][ T30] audit: type=1326 audit(1758930250.078:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2262 comm="syz.3.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3182.473817][ T30] audit: type=1326 audit(1758930250.078:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2262 comm="syz.3.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3182.595996][ T30] audit: type=1326 audit(1758930250.078:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2262 comm="syz.3.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3182.647290][ T30] audit: type=1326 audit(1758930250.078:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2262 comm="syz.3.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3182.647496][ T2276] netlink: 'syz.0.6859': attribute type 11 has an invalid length. [ 3182.711241][ T30] audit: type=1326 audit(1758930250.078:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2262 comm="syz.3.6856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3183.031039][ T2284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3183.247498][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3184.188546][ T2299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3184.287480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3184.449536][ T2304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3184.458001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3185.327459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3185.477417][ T2312] 8021q: adding VLAN 0 to HW filter on device bond23 [ 3186.367481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3186.472624][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 3186.666568][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 3186.677559][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 3186.687432][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3186.701415][ T9] usb 4-1: config 0 descriptor?? [ 3186.707858][ T2318] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3186.837419][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 3186.837439][ T30] audit: type=1326 audit(1758930255.098:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2329 comm="syz.0.6873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3186.869625][ T2327] 8021q: adding VLAN 0 to HW filter on device bond14 [ 3187.010478][ T30] audit: type=1326 audit(1758930255.098:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2329 comm="syz.0.6873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3187.033664][ T30] audit: type=1326 audit(1758930255.098:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2329 comm="syz.0.6873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3187.062430][ T30] audit: type=1326 audit(1758930255.108:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2329 comm="syz.0.6873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3187.088629][ T30] audit: type=1326 audit(1758930255.108:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2329 comm="syz.0.6873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3187.348395][ T9] hid-picolcd 0003:04D8:C002.0034: unknown main item tag 0x0 [ 3187.357467][ T9] hid-picolcd 0003:04D8:C002.0034: unknown main item tag 0x0 [ 3187.417458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3187.487539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3188.227455][ T30] audit: type=1326 audit(1758930255.108:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2329 comm="syz.0.6873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3188.249877][ T9] hid-picolcd 0003:04D8:C002.0034: unknown main item tag 0x0 [ 3188.249917][ T9] hid-picolcd 0003:04D8:C002.0034: unknown main item tag 0x0 [ 3188.249946][ T9] hid-picolcd 0003:04D8:C002.0034: unknown main item tag 0x0 [ 3188.307649][ T9] hid-picolcd 0003:04D8:C002.0034: No report with id 0x11 found [ 3188.438343][ T30] audit: type=1326 audit(1758930255.108:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2329 comm="syz.0.6873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3188.447848][ T9] usb 4-1: USB disconnect, device number 22 [ 3188.467461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3188.577821][ T30] audit: type=1326 audit(1758930255.108:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2329 comm="syz.0.6873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3188.720694][ T30] audit: type=1326 audit(1758930255.108:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2329 comm="syz.0.6873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3188.813166][ T30] audit: type=1326 audit(1758930255.108:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2329 comm="syz.0.6873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3189.351957][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 3189.487515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3189.661864][ T2348] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6877'. [ 3189.734051][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 3189.745191][ T9] usb 4-1: config 0 has no interface number 0 [ 3189.778209][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3189.803141][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3189.828960][ T9] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3189.926945][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 3189.972676][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3190.190250][ T9] usb 4-1: config 0 descriptor?? [ 3190.537491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3190.943373][ T9] uclogic 0003:28BD:0042.0035: failed retrieving string descriptor #100: -71 [ 3190.976191][ T9] uclogic 0003:28BD:0042.0035: failed retrieving pen parameters: -71 [ 3191.016198][ T9] uclogic 0003:28BD:0042.0035: pen probing failed: -71 [ 3191.051683][ T9] uclogic 0003:28BD:0042.0035: failed probing parameters: -71 [ 3191.068761][ T9] uclogic 0003:28BD:0042.0035: probe with driver uclogic failed with error -71 [ 3191.095214][ T9] usb 4-1: USB disconnect, device number 23 [ 3191.567467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3191.639486][ T2371] fuse: Unknown parameter 'user_i00000000000000000000' [ 3192.607505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3192.686102][ T2383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3192.738451][ T2378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6887'. [ 3192.757964][ T2378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6887'. [ 3193.647475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3193.856560][ T2402] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6891'. [ 3194.574062][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 3194.574081][ T30] audit: type=1326 audit(1758930262.898:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2408 comm="syz.4.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3194.612441][ T30] audit: type=1326 audit(1758930262.898:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2408 comm="syz.4.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3194.635942][ T30] audit: type=1326 audit(1758930262.908:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2408 comm="syz.4.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3194.669619][ T30] audit: type=1326 audit(1758930262.908:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2408 comm="syz.4.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3194.698408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3194.733932][ T30] audit: type=1326 audit(1758930262.908:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2408 comm="syz.4.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3194.758412][ T30] audit: type=1326 audit(1758930262.908:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2408 comm="syz.4.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3194.794025][ T30] audit: type=1326 audit(1758930262.908:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2408 comm="syz.4.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f672ad2af79 code=0x7ffc0000 [ 3194.829501][ T30] audit: type=1326 audit(1758930262.908:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2408 comm="syz.4.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3194.861122][ T30] audit: type=1326 audit(1758930262.908:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2408 comm="syz.4.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3195.327560][T31253] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 3195.607451][T31253] usb 2-1: Using ep0 maxpacket: 8 [ 3195.641129][T31253] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 3195.650681][T31253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3195.659167][T31253] usb 2-1: Product: syz [ 3195.664896][T31253] usb 2-1: Manufacturer: syz [ 3195.672778][T31253] usb 2-1: SerialNumber: syz [ 3195.727520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3195.878165][T31253] usb 2-1: config 0 descriptor?? [ 3195.897816][ T2431] netlink: 'syz.4.6899': attribute type 23 has an invalid length. [ 3195.922032][T31253] option 2-1:0.0: GSM modem (1-port) converter detected [ 3196.170314][ T43] usb 2-1: USB disconnect, device number 126 [ 3196.177886][ T43] option 2-1:0.0: device disconnected [ 3196.203229][ T2430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6898'. [ 3196.229895][ T2430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6898'. [ 3196.607646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3196.767487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3197.203116][ T2440] 8021q: adding VLAN 0 to HW filter on device bond15 [ 3197.432030][ T2442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6903'. [ 3197.462454][ T2442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6903'. [ 3197.807501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3198.384823][ T43] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 3198.414259][ T2456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6905'. [ 3198.566275][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 3198.582342][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3198.604449][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 3198.687659][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3198.717823][ T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3198.737253][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3198.788995][ T43] usb 4-1: config 0 descriptor?? [ 3198.795499][ T2457] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3198.809206][ T43] hub 4-1:0.0: USB hub found [ 3198.847457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3199.009456][ T43] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 3199.111091][ T2473] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6909'. [ 3199.429990][ T43] hid-generic 0003:046D:C314.0036: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.3-1/input0 [ 3199.728783][ T43] usb 4-1: USB disconnect, device number 24 [ 3199.872159][ T2488] netlink: 'syz.4.6912': attribute type 23 has an invalid length. [ 3199.887474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3199.950273][ T2489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3199.994308][ T2489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3200.419241][ T2497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6914'. [ 3200.770353][ T2510] fuse: Bad value for 'rootmode' [ 3200.927450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3201.068961][ T2505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6916'. [ 3201.078075][ T2505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6916'. [ 3201.699771][ T2516] netlink: 'syz.3.6917': attribute type 23 has an invalid length. [ 3201.967499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3202.192836][ T2521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3202.650363][ T2521] 8021q: adding VLAN 0 to HW filter on device bond13 [ 3203.017657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3203.077527][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 3203.247648][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 3203.627853][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3203.654873][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3203.682912][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3203.717479][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3203.747631][ T43] usb 5-1: Product: syz [ 3203.751855][ T43] usb 5-1: Manufacturer: syz [ 3203.804099][ T43] usb 5-1: SerialNumber: syz [ 3203.823160][ T43] usb 5-1: config 0 descriptor?? [ 3203.849299][ T43] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3203.871370][ T43] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 3204.047503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3204.459878][ T43] em28xx 5-1:0.0: chip ID is em28178 [ 3204.677989][ T43] usb 5-1: USB disconnect, device number 30 [ 3204.685383][ T43] em28xx 5-1:0.0: Disconnecting em28xx [ 3204.714122][ T43] em28xx 5-1:0.0: Freeing device [ 3204.845558][ T2552] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6925'. [ 3205.047160][ T2554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6927'. [ 3205.056510][ T2554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6927'. [ 3205.087451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3205.589484][ T2567] netlink: 'syz.1.6930': attribute type 23 has an invalid length. [ 3205.994143][ T2578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3206.026506][ T2579] netlink: 'syz.3.6931': attribute type 23 has an invalid length. [ 3206.127453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3207.167469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3208.207819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3208.457762][ T43] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 3208.618890][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 3208.649727][ T43] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 3208.659321][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3208.683485][ T43] usb 5-1: Product: syz [ 3208.699030][ T43] usb 5-1: Manufacturer: syz [ 3208.717463][ T43] usb 5-1: SerialNumber: syz [ 3208.746035][ T43] usb 5-1: config 0 descriptor?? [ 3209.207833][T31253] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 3209.247447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3209.380006][T31253] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3209.403963][T31253] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 3209.411102][ T43] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 3209.419793][T31253] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 3209.425527][ T43] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 3209.440281][T31253] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3209.454051][ T43] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 3209.473991][T31253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3209.492364][T31253] usb 2-1: SerialNumber: syz [ 3209.519404][ T43] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 3209.524874][ T2618] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 3209.577651][T31253] hub 2-1:1.0: bad descriptor, ignoring hub [ 3209.595654][T31253] hub 2-1:1.0: probe with driver hub failed with error -5 [ 3209.671681][ T43] usb 5-1: USB disconnect, device number 31 [ 3209.769389][ T2618] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 3209.834963][ T2627] netlink: 'syz.3.6946': attribute type 23 has an invalid length. [ 3210.132450][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3210.139033][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3210.245762][T31253] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 3210.314714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3210.571288][ T9] usb 2-1: USB disconnect, device number 127 [ 3210.580178][ T9] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 3210.597420][T31253] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 3210.750385][T31253] usb 5-1: Using ep0 maxpacket: 8 [ 3210.757619][T31253] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 3210.771298][T31253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3210.832934][T31253] pvrusb2: Hardware description: Terratec Grabster AV400 [ 3210.847516][T31253] pvrusb2: ********** [ 3210.867697][T31253] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 3210.905322][T31253] pvrusb2: Important functionality might not be entirely working. [ 3210.924030][T31253] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 3210.941884][T31253] pvrusb2: ********** [ 3211.010791][ T2344] pvrusb2: Invalid write control endpoint [ 3211.162978][ T2344] pvrusb2: Invalid write control endpoint [ 3211.176570][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 3211.214923][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 3211.237634][T31253] usb 5-1: USB disconnect, device number 32 [ 3211.249783][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 3211.276462][ T2344] pvrusb2: Device being rendered inoperable [ 3211.291470][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 3211.300359][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 3211.319205][ T2344] pvrusb2: Attached sub-driver cx25840 [ 3211.324803][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 3211.337437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3211.348861][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 3211.510731][ T2661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3211.698310][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 3211.719628][ T2665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3211.728043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3211.928770][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 3211.940311][ T9] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3211.954213][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3211.973789][ T9] usb 2-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 3212.019948][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3212.190459][ T9] usb 2-1: config 0 descriptor?? [ 3212.197853][ T2674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3212.367508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3212.796124][ T2658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3212.819723][ T2658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3212.847203][ T9] betop 0003:11C0:5506.0037: item fetching failed at offset 7/8 [ 3212.855965][ T9] betop 0003:11C0:5506.0037: parse failed [ 3212.866318][ T9] betop 0003:11C0:5506.0037: probe with driver betop failed with error -22 [ 3213.075631][ T9] usb 2-1: USB disconnect, device number 2 [ 3213.407451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3213.462159][ T2706] netlink: 'syz.0.6959': attribute type 23 has an invalid length. [ 3214.207694][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 3214.369801][ T43] usb 2-1: config 0 has no interfaces? [ 3214.375561][ T43] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 3214.401814][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3214.447458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3214.456051][ T43] usb 2-1: config 0 descriptor?? [ 3214.697080][ T2710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3214.717860][ T2710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3214.746836][ T9] usb 2-1: USB disconnect, device number 3 [ 3214.767570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3214.893165][ T2722] fuse: Unknown parameter '0x0000000000000008' [ 3215.187682][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 3215.357418][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 3215.364540][ T9] usb 2-1: config index 0 descriptor too short (expected 72, got 36) [ 3215.382974][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 3215.415838][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 3215.431494][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3215.452131][ T9] usb 2-1: Product: syz [ 3215.461770][ T9] usb 2-1: Manufacturer: syz [ 3215.473812][ T9] usb 2-1: SerialNumber: syz [ 3215.487458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3215.783023][ T9] usb 2-1: USB disconnect, device number 4 [ 3216.228252][ T2734] trusted_key: encrypted_key: insufficient parameters specified [ 3216.527699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3216.948252][ T2745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3216.969099][ T2750] fuse: Unknown parameter 'user_id00000000000000000000' [ 3217.184037][ T2752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3217.192522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3217.577413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3218.557538][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 3218.607467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3218.695991][ T2778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3218.789188][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3218.876455][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3218.886717][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3218.895023][ T9] usb 4-1: Product: syz [ 3218.899440][ T9] usb 4-1: Manufacturer: syz [ 3218.905127][ T9] usb 4-1: SerialNumber: syz [ 3218.929709][ T9] usb 4-1: config 0 descriptor?? [ 3218.976183][ T2781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3219.378920][ T2789] fuse: Unknown parameter '0x0000000000000008' [ 3219.421711][ T9] usb 4-1: USB disconnect, device number 25 [ 3219.647442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3220.286853][ T30] audit: type=1326 audit(1758930288.608:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2800 comm="syz.3.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3220.309660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3220.457568][ T30] audit: type=1326 audit(1758930288.608:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2800 comm="syz.3.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3220.540015][ T30] audit: type=1326 audit(1758930288.608:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2800 comm="syz.3.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3220.635489][ T30] audit: type=1326 audit(1758930288.608:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2800 comm="syz.3.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3220.687450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3220.743595][ T30] audit: type=1326 audit(1758930288.608:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2800 comm="syz.3.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3220.957424][ T30] audit: type=1326 audit(1758930288.608:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2800 comm="syz.3.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3221.234618][ T30] audit: type=1326 audit(1758930288.608:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2800 comm="syz.3.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3221.328480][ T30] audit: type=1326 audit(1758930288.608:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2800 comm="syz.3.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3221.447504][ T30] audit: type=1326 audit(1758930288.608:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2800 comm="syz.3.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3221.616651][ T30] audit: type=1326 audit(1758930288.608:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2800 comm="syz.3.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3221.727472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3221.967536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3222.767683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3222.865229][ T2834] netlink: 'syz.3.6981': attribute type 23 has an invalid length. [ 3223.807458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3224.266410][ T2855] input: syz0 as /devices/virtual/input/input82 [ 3224.299879][ T2856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3224.847447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3225.051784][ T2872] fuse: Unknown parameter '0x0000000000000008' [ 3225.135277][ T2872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3225.186434][ T2873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3225.396090][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 3225.396112][ T30] audit: type=1326 audit(1758930293.688:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2874 comm="syz.1.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3225.610621][ T30] audit: type=1326 audit(1758930293.688:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2874 comm="syz.1.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3225.656506][ T30] audit: type=1326 audit(1758930293.688:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2874 comm="syz.1.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3225.696036][ T30] audit: type=1326 audit(1758930293.688:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2874 comm="syz.1.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3225.746960][ T30] audit: type=1326 audit(1758930293.688:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2874 comm="syz.1.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3225.777852][ T30] audit: type=1326 audit(1758930293.688:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2874 comm="syz.1.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3225.832138][ T30] audit: type=1326 audit(1758930293.688:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2874 comm="syz.1.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3225.876665][ T30] audit: type=1326 audit(1758930293.688:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2874 comm="syz.1.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3225.899455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3225.917232][ T30] audit: type=1326 audit(1758930293.688:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2874 comm="syz.1.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafcc98d710 code=0x7ffc0000 [ 3225.947682][ T30] audit: type=1326 audit(1758930293.688:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2874 comm="syz.1.6991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3226.108644][ T2880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6988'. [ 3226.825969][ T2886] netlink: 'syz.4.6993': attribute type 23 has an invalid length. [ 3226.927455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3227.967680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3228.567643][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 3228.961638][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 3229.007444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3229.080914][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3229.154855][ T43] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 3229.195717][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3229.206622][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3229.235626][ T43] usb 2-1: Product: syz [ 3229.247780][ T43] usb 2-1: Manufacturer: syz [ 3229.252439][ T43] usb 2-1: SerialNumber: syz [ 3229.523295][ T43] cdc_ncm 2-1:1.0: bind() failure [ 3229.559132][ T43] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3229.587598][ T43] cdc_ncm 2-1:1.1: bind() failure [ 3229.615921][ T43] usb 2-1: USB disconnect, device number 5 [ 3230.009377][ T2922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3230.041808][ T2922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3230.050408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3230.057525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3231.018570][ T2931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7007'. [ 3231.087434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3231.503991][ T2937] netlink: 'syz.0.7009': attribute type 23 has an invalid length. [ 3232.127484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3232.717446][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3232.867904][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 3232.875896][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 3232.884600][ T9] usb 5-1: config 0 has no interface number 0 [ 3232.891432][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 3232.901804][ T9] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 3232.912260][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 3232.922808][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 3232.932806][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3232.941041][ T9] usb 5-1: Product: syz [ 3232.945252][ T9] usb 5-1: Manufacturer: syz [ 3232.950866][ T9] usb 5-1: SerialNumber: syz [ 3232.965613][ T9] usb 5-1: config 0 descriptor?? [ 3232.971588][ T2939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3232.979173][ T2939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3233.057705][T31253] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 3233.077446][ T5874] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 3233.177467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3233.196385][ T2939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3233.204252][ T2939] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3233.220538][T31253] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 3233.229310][T31253] usb 2-1: config 0 has no interface number 0 [ 3233.235867][T31253] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 3233.247812][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 3233.253130][T31253] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 3233.268257][T31253] usb 2-1: config 0 interface 255 has no altsetting 0 [ 3233.275280][ T5874] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 3233.284906][T31253] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 3233.294082][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3233.302208][T31253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3233.313838][ T5874] usb 4-1: config 0 descriptor?? [ 3233.334238][T31253] usb 2-1: config 0 descriptor?? [ 3233.344456][ T5874] as10x_usb: device has been detected [ 3233.353166][T31253] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 3233.363389][ T5874] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 3233.407118][ T5874] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 3233.451719][ T5874] as10x_usb: error during firmware upload part1 [ 3233.466302][ T5874] Registered device nBox DVB-T Dongle [ 3233.538448][ T43] usb 4-1: USB disconnect, device number 26 [ 3233.580224][ T43] Unregistered device nBox DVB-T Dongle [ 3233.586286][ T43] as10x_usb: device has been disconnected [ 3233.590202][ T5874] usb 2-1: USB disconnect, device number 6 [ 3233.621728][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 3233.661672][ T9] usb 5-1: USB disconnect, device number 33 [ 3233.873164][ T2954] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7016'. [ 3234.207503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3234.390761][ T2964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3234.399182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3234.524357][ T2962] fuse: Unknown parameter 'user_i00000000000000000000' [ 3234.987527][T28632] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 3235.159278][T28632] usb 5-1: Using ep0 maxpacket: 16 [ 3235.173898][T28632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3235.185684][T28632] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 3235.217256][ T2976] unknown channel width for channel at 909000KHz? [ 3235.226198][T28632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3235.254843][T28632] usb 5-1: config 0 descriptor?? [ 3235.257512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3235.385883][ T2979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7023'. [ 3235.597525][ T2983] netlink: 'syz.1.7025': attribute type 23 has an invalid length. [ 3235.787970][T28632] aquacomputer_d5next 0003:0C70:F003.0038: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.4-1/input0 [ 3236.033147][ T5874] usb 5-1: USB disconnect, device number 34 [ 3236.103296][ T2984] fido_id[2984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 3236.287554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3236.917851][T28632] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 3237.067449][T28632] usb 5-1: Using ep0 maxpacket: 16 [ 3237.079830][T28632] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 3237.107686][T28632] usb 5-1: config 0 has no interface number 0 [ 3237.127746][T28632] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3237.173182][T28632] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3237.210731][T28632] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 3237.231424][T28632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3237.281845][T28632] usb 5-1: config 0 descriptor?? [ 3237.327442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3237.530777][ T2995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7028'. [ 3237.607580][ T5874] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 3237.759466][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 3237.766403][ T5874] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 3237.803654][ T5874] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3237.813433][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3237.821814][ T5874] usb 2-1: Product: syz [ 3237.826356][ T5874] usb 2-1: Manufacturer: syz [ 3237.831089][ T5874] usb 2-1: SerialNumber: syz [ 3237.838814][ T5874] usb 2-1: config 0 descriptor?? [ 3237.857191][ T5874] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3237.916976][T28632] uclogic 0003:28BD:0071.0039: pen parameters not found [ 3237.937779][ T5874] usb 2-1: setting power ON [ 3237.942408][T28632] uclogic 0003:28BD:0071.0039: interface is invalid, ignoring [ 3237.942973][ T5874] dvb-usb: bulk message failed: -22 (2/0) [ 3237.993671][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3238.022851][ T5874] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3238.032919][ T5874] usb 2-1: media controller created [ 3238.062687][ T2993] dvb-usb: bulk message failed: -22 (3/0) [ 3238.069420][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3238.077957][ T2993] cxusb: i2c wr: len=8192 is too big! [ 3238.077957][ T2993] [ 3238.124918][ T9] usb 5-1: USB disconnect, device number 35 [ 3238.153807][ T5874] usb 2-1: selecting invalid altsetting 6 [ 3238.165407][ T5874] usb 2-1: digital interface selection failed (-22) [ 3238.172650][ T5874] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3238.184949][ T5874] usb 2-1: setting power OFF [ 3238.192596][ T5874] dvb-usb: bulk message failed: -22 (2/0) [ 3238.201829][ T5874] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3238.215627][ T5874] (NULL device *): no alternate interface [ 3238.269349][ T5874] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3238.315818][ T5874] usb 2-1: USB disconnect, device number 7 [ 3238.367450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3238.745508][ T3003] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7032'. [ 3239.407461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3239.447643][ T3019] fuse: Unknown parameter 'user_i00000000000000000000' [ 3240.457721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3240.744538][ T3029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7039'. [ 3241.009455][ T3033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3241.032592][ T3034] netlink: 'syz.1.7042': attribute type 23 has an invalid length. [ 3241.487475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3242.527711][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3242.759203][ T3066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3242.767818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3242.825021][ T3067] fuse: Unknown parameter 'user_i00000000000000000000' [ 3242.866084][ T43] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 3243.138944][ T43] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3243.170648][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3243.211290][ T43] usb 5-1: config 0 descriptor?? [ 3243.435435][ T43] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 3243.567464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3243.636403][ T43] [drm:udl_init] *ERROR* Selecting channel failed [ 3243.719793][ T43] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 3243.757213][ T43] [drm] Initialized udl on minor 2 [ 3243.800472][ T43] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3243.840623][ T43] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 3243.864989][T28632] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3243.880132][ T43] usb 5-1: USB disconnect, device number 36 [ 3243.918462][T28632] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 3243.919582][ T3069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7058'. [ 3244.607489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3245.657421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3245.776488][ T3095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7065'. [ 3246.248041][ T3104] fuse: Unknown parameter 'user_id00000000000000000000' [ 3246.687452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3247.553249][ T3121] syzkaller1: entered promiscuous mode [ 3247.567571][ T3121] syzkaller1: entered allmulticast mode [ 3247.644942][ T3122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7071'. [ 3247.727446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3248.360016][ T43] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 3248.558327][ T43] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 3248.567538][ T43] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 3248.575603][ T43] usb 2-1: config 0 has no interface number 0 [ 3248.588658][ T43] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 3248.602035][ T43] usb 2-1: config 0 has no interface number 0 [ 3248.610745][ T43] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 3248.620544][ T43] usb 2-1: config 0 has no interface number 0 [ 3248.628601][ T43] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 3248.636760][ T43] usb 2-1: config 0 has no interface number 0 [ 3248.675059][ T3139] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7083'. [ 3248.690383][ T43] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 3248.700333][ T43] usb 2-1: config 0 has no interface number 0 [ 3248.708325][ T43] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 3248.716762][ T43] usb 2-1: config 0 has no interface number 0 [ 3248.739389][ T43] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 3248.767443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3248.790126][ T43] usb 2-1: config 0 has no interface number 0 [ 3248.866140][ T43] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 3248.880525][ T43] usb 2-1: config 0 has no interface number 0 [ 3248.895803][ T43] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 3248.915339][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=34 [ 3248.935230][ T43] usb 2-1: SerialNumber: syz [ 3249.068006][ T43] usb 2-1: config 0 descriptor?? [ 3249.157463][ T43] hub 2-1:0.3: Invalid hub with more than one config or interface [ 3249.165346][ T43] hub 2-1:0.3: probe with driver hub failed with error -22 [ 3249.177795][ T43] sierra 2-1:0.3: Sierra USB modem converter detected [ 3249.377201][ T43] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 3249.390640][ T43] usb 2-1: USB disconnect, device number 8 [ 3249.404647][ T43] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 3249.457950][ T43] sierra 2-1:0.3: device disconnected [ 3249.817521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3250.156841][ T3149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7085'. [ 3250.284387][ T3151] trusted_key: encrypted_key: insufficient parameters specified [ 3250.847464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3251.757614][ T43] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 3251.897811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3251.984815][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3252.036495][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3252.067857][ T43] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 3252.093920][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3252.138821][ T43] usb 5-1: config 0 descriptor?? [ 3252.927480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3253.159335][ T43] hid-led 0003:27B8:01ED.003A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 3253.202243][ T43] hid-led 0003:27B8:01ED.003A: ThingM blink(1) initialized [ 3253.338050][ T43] usb 5-1: USB disconnect, device number 37 [ 3253.474911][ T3184] fido_id[3184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 3253.967437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3254.264541][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 3254.264560][ T30] audit: type=1326 audit(1758930322.598:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3201 comm="syz.1.7102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x0 [ 3254.670506][ T3208] trusted_key: encrypted_key: insufficient parameters specified [ 3255.007423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3255.637580][ T5874] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 3255.809173][ T5874] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3255.820251][ T5874] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3255.835335][ T5874] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3255.851348][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3255.867143][ T5874] usb 5-1: SerialNumber: syz [ 3256.047482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3256.126282][ T5874] usb 5-1: 0:2 : does not exist [ 3256.305594][ T5874] usb 5-1: USB disconnect, device number 38 [ 3256.669016][ T3230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3256.712034][ T3231] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7111'. [ 3256.955157][ T3237] usb usb8: usbfs: process 3237 (syz.4.7114) did not claim interface 0 before use [ 3257.087469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3257.807503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3258.127481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3258.154672][ T3245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3258.163555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3258.177669][ T5874] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 3258.281426][ T3245] fuse: Unknown parameter 'user_id00000000000000000000' [ 3258.377453][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 3258.385258][ T5874] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 3258.394054][ T5874] usb 5-1: config 0 has no interface number 0 [ 3258.406853][ T5874] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 3258.424890][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3258.484600][ T5874] usb 5-1: Product: syz [ 3258.496007][ T5874] usb 5-1: Manufacturer: syz [ 3258.516545][ T5874] usb 5-1: SerialNumber: syz [ 3258.796514][ T5874] usb 5-1: config 0 descriptor?? [ 3259.167452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3259.194468][ T5874] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 3259.219855][ T5874] usb 5-1: USB disconnect, device number 39 [ 3259.501353][ T3261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3259.687013][ T3263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3259.906945][ T3268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7122'. [ 3260.077564][ T43] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 3260.207426][ C0] net_ratelimit: 1 callbacks suppressed [ 3260.207448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3260.237449][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 3260.246491][ T43] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 3260.255998][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3260.297018][ T43] usb 5-1: Product: syz [ 3260.307164][ T43] usb 5-1: Manufacturer: syz [ 3260.337489][ T43] usb 5-1: SerialNumber: syz [ 3260.365201][ T43] usb 5-1: config 0 descriptor?? [ 3260.388804][ T43] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 3260.498803][ T3274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7125'. [ 3260.565038][ T3274] macsec0: entered promiscuous mode [ 3260.597469][ T3274] geneve1: entered promiscuous mode [ 3260.617739][ T3274] macsec0: entered allmulticast mode [ 3260.637512][ T3274] geneve1: entered allmulticast mode [ 3261.072827][ T3283] netlink: 'syz.1.7128': attribute type 23 has an invalid length. [ 3261.247424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3261.667603][ T43] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 3261.688848][ T43] usb 5-1: USB disconnect, device number 40 [ 3262.287435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3262.501622][ T3301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3262.517692][ T3301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3262.767518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3262.924906][ T3310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3262.933649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3263.051345][ T3311] fuse: Bad value for 'fd' [ 3263.337416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3264.136784][ T3330] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 3264.143343][ T3330] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3264.191629][ T3330] vhci_hcd vhci_hcd.0: Device attached [ 3264.269791][ T3336] netlink: 'syz.1.7144': attribute type 23 has an invalid length. [ 3264.367466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3264.377895][ T3337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3264.437505][ T5874] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 3264.528354][ T43] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 3264.687613][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 3264.698188][ T43] usb 5-1: config 0 has no interfaces? [ 3264.704072][ T43] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 3264.717416][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3264.754925][ T43] usb 5-1: config 0 descriptor?? [ 3265.005569][ T43] usb 5-1: USB disconnect, device number 41 [ 3265.012926][ T3331] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 5 [ 3265.036891][ T9691] vhci_hcd: stop threads [ 3265.041259][ T9691] vhci_hcd: release socket [ 3265.046064][ T9691] vhci_hcd: disconnect device [ 3265.417480][ C0] net_ratelimit: 1 callbacks suppressed [ 3265.417500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3265.765199][ T3349] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7149'. [ 3265.999240][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3266.019878][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3266.033265][ T3355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3266.120334][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3266.143816][ T3354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3266.447682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3267.071918][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3267.080441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3267.130557][ T3374] fuse: Bad value for 'fd' [ 3267.487432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3267.693413][ T3376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7158'. [ 3268.531472][ T3384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3269.567853][ T5874] vhci_hcd: vhci_device speed not set [ 3269.707811][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 3269.867798][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 3269.879379][ T3402] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7167'. [ 3269.881491][ T43] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3269.911285][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3269.933350][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3269.963083][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3269.984735][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3270.010379][ T43] usb 2-1: Product: syz [ 3270.021780][ T43] usb 2-1: Manufacturer: syz [ 3270.036446][ T43] usb 2-1: SerialNumber: syz [ 3270.607475][ C0] net_ratelimit: 3 callbacks suppressed [ 3270.607499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3270.618249][ T43] usb 2-1: 0:2 : does not exist [ 3271.246028][ T43] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 3271.335057][ T43] usb 2-1: USB disconnect, device number 9 [ 3271.410450][ T3185] udevd[3185]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3271.571731][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3271.578242][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3271.647419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3272.037911][ T43] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 3272.170350][ T3437] trusted_key: encrypted_key: insufficient parameters specified [ 3272.188657][T28632] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 3272.218119][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 3272.228950][ T43] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 3272.240159][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3272.262150][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3272.367612][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3272.395872][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3272.425411][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3272.437396][T28632] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3272.450120][T28632] usb 4-1: config 1 has no interface number 0 [ 3272.463773][T28632] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3272.477859][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3272.498437][T28632] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 3272.636014][T28632] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3272.687413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3272.736211][ T3443] netlink: 4300 bytes leftover after parsing attributes in process `syz.0.7180'. [ 3272.750539][T28632] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3272.775960][T28632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3272.806845][ T43] usb 5-1: usb_control_msg returned -32 [ 3272.823955][ T43] usbtmc 5-1:16.0: can't read capabilities [ 3272.830225][T28632] usb 4-1: Product: syz [ 3272.847463][T28632] usb 4-1: Manufacturer: syz [ 3272.869456][T28632] usb 4-1: SerialNumber: syz [ 3273.168877][ T3446] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 3273.192304][ T5874] usb 5-1: USB disconnect, device number 42 [ 3273.591372][ T30] audit: type=1326 audit(1758930341.928:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3451 comm="syz.0.7184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3273.634486][ T30] audit: type=1326 audit(1758930341.948:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3451 comm="syz.0.7184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3273.727155][ T30] audit: type=1326 audit(1758930341.948:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3451 comm="syz.0.7184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3273.749812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3273.754887][T28632] cdc_ncm 4-1:1.1: bind() failure [ 3273.885492][ T30] audit: type=1326 audit(1758930341.948:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3451 comm="syz.0.7184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3274.019716][T28632] usb 4-1: USB disconnect, device number 27 [ 3274.117405][ T30] audit: type=1326 audit(1758930341.948:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3451 comm="syz.0.7184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3274.422601][ T30] audit: type=1326 audit(1758930341.948:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3451 comm="syz.0.7184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3274.637485][ T30] audit: type=1326 audit(1758930341.948:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3451 comm="syz.0.7184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3274.777433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3274.831737][ T30] audit: type=1326 audit(1758930341.948:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3451 comm="syz.0.7184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3274.997385][ T30] audit: type=1326 audit(1758930341.948:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3451 comm="syz.0.7184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3275.121344][ T30] audit: type=1326 audit(1758930341.958:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3451 comm="syz.0.7184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3275.742495][ T3471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3275.807417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3275.977155][ T3481] fuse: Unknown parameter 'fd0x0000000000000008' [ 3275.996378][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3276.069647][ T3484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3276.209792][ T3488] trusted_key: encrypted_key: insufficient parameters specified [ 3276.857430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3277.154370][ T3499] netlink: 'syz.1.7198': attribute type 23 has an invalid length. [ 3277.887480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3278.714921][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3278.724365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3278.937423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3279.137765][T28632] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 3279.222134][ T3533] fuse: Unknown parameter 'fd0x0000000000000008' [ 3279.289452][T28632] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3279.304776][T28632] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3279.317505][ T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 3279.325700][T28632] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3279.367215][T28632] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3279.379825][T28632] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3279.415913][T28632] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3279.434044][T28632] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3279.446719][T28632] usb 4-1: Product: syz [ 3279.456067][T28632] usb 4-1: Manufacturer: syz [ 3279.473359][T28632] cdc_wdm 4-1:1.0: skipping garbage [ 3279.481510][T28632] cdc_wdm 4-1:1.0: skipping garbage [ 3279.511489][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3279.528574][T28632] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 3279.534509][T28632] cdc_wdm 4-1:1.0: Unknown control protocol [ 3279.585460][ T43] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3279.606877][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3279.632289][ T43] usb 2-1: config 0 descriptor?? [ 3279.899280][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 3279.916817][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3279.940100][ T43] usb 2-1: USB disconnect, device number 10 [ 3279.967449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3280.345282][ T3541] trusted_key: encrypted_key: insufficient parameters specified [ 3280.362877][ T5874] usb 4-1: USB disconnect, device number 28 [ 3280.452924][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 3280.617493][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 3280.625377][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3280.636937][ T43] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 3280.646400][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3280.725590][ T43] usb 2-1: config 0 descriptor?? [ 3280.745388][ T43] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3280.771164][ T43] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3281.007447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3281.226918][T28632] usb 2-1: USB disconnect, device number 11 [ 3281.235873][T28632] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 3281.347732][ T43] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 3281.509085][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3281.527575][ T43] usb 4-1: config 0 has no interfaces? [ 3281.535290][ T43] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 3281.555162][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3281.588660][ T43] usb 4-1: config 0 descriptor?? [ 3281.781966][ T3558] netlink: 'syz.0.7218': attribute type 23 has an invalid length. [ 3282.047457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3282.072751][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 3282.072770][ T30] audit: type=1326 audit(1758930350.388:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3554 comm="syz.4.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3282.215077][T28632] usb 4-1: USB disconnect, device number 29 [ 3282.255705][ T30] audit: type=1326 audit(1758930350.388:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3554 comm="syz.4.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3282.309693][ T30] audit: type=1326 audit(1758930350.398:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3554 comm="syz.4.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3282.404247][ T30] audit: type=1326 audit(1758930350.398:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3554 comm="syz.4.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3282.452739][ T30] audit: type=1326 audit(1758930350.398:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3554 comm="syz.4.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3282.572669][ T30] audit: type=1326 audit(1758930350.398:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3554 comm="syz.4.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3282.676716][ T30] audit: type=1326 audit(1758930350.398:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3554 comm="syz.4.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3282.926141][ T30] audit: type=1326 audit(1758930350.398:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3554 comm="syz.4.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3283.006872][ T30] audit: type=1326 audit(1758930350.398:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3554 comm="syz.4.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3283.087669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3283.195189][ T30] audit: type=1326 audit(1758930350.398:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3554 comm="syz.4.7219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3283.750840][ T3578] netlink: 'syz.0.7224': attribute type 23 has an invalid length. [ 3284.127421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3284.187434][ T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 3284.344298][ T43] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 3284.353941][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3284.374141][ T43] usb 4-1: Product: syz [ 3284.387558][ T43] usb 4-1: Manufacturer: syz [ 3284.407584][ T43] usb 4-1: SerialNumber: syz [ 3284.415090][ T3581] vlan0: left promiscuous mode [ 3284.425403][ T43] usb 4-1: config 0 descriptor?? [ 3284.911442][ T43] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 3284.925971][ T43] f81604 4-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 3284.942514][ T43] f81604 4-1:0.0: probe with driver f81604 failed with error -121 [ 3285.084341][ T43] usb 4-1: USB disconnect, device number 30 [ 3285.167420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3285.972073][ T3602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3286.183545][ T3606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3286.192191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3286.207453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3286.682910][ T3618] netlink: 'syz.1.7234': attribute type 23 has an invalid length. [ 3287.247455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3287.650047][ T3629] netlink: 'syz.0.7237': attribute type 23 has an invalid length. [ 3288.297421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3289.010336][ T3642] netlink: 'syz.1.7243': attribute type 23 has an invalid length. [ 3289.240970][ T3645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3289.257520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3289.337427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3289.798220][ T3657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3289.986352][ T3662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3290.367427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3290.517676][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 3290.517697][ T30] audit: type=1326 audit(1758930358.808:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.3.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3290.837729][ T30] audit: type=1326 audit(1758930358.808:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.3.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3290.862076][ T30] audit: type=1326 audit(1758930358.808:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.3.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3290.935748][ T30] audit: type=1326 audit(1758930358.808:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.3.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3291.057790][ T30] audit: type=1326 audit(1758930358.808:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.3.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3291.159650][ T30] audit: type=1326 audit(1758930358.808:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.3.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3291.260467][ T30] audit: type=1326 audit(1758930358.808:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.3.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f41fed2af79 code=0x7ffc0000 [ 3291.417832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3291.454819][ T30] audit: type=1326 audit(1758930358.808:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.3.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3291.532595][ T30] audit: type=1326 audit(1758930358.808:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3659 comm="syz.3.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3292.447689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3292.514566][ T3702] netlink: 'syz.1.7262': attribute type 23 has an invalid length. [ 3293.007531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3293.397438][ T5874] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 3293.497427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3293.556549][ T30] audit: type=1326 audit(1758930361.888:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3703 comm="syz.3.7264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3293.589293][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3293.647360][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3293.686851][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3293.736869][ T5874] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3293.773288][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3293.810783][ T5874] usb 5-1: config 0 descriptor?? [ 3293.961405][ T3718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3294.280675][ T5874] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 3294.520403][ T5874] usb 5-1: USB disconnect, device number 43 [ 3294.527414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3295.268084][ T5874] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 3295.471061][ T5874] usb 2-1: config 0 has no interfaces? [ 3295.518617][ T5874] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3295.537451][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3295.548952][ T5874] usb 2-1: Product: syz [ 3295.553192][ T5874] usb 2-1: Manufacturer: syz [ 3295.567440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3295.585669][ T5874] usb 2-1: SerialNumber: syz [ 3295.603455][ T5874] usb 2-1: config 0 descriptor?? [ 3296.607406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3297.647417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3298.026665][T28632] usb 2-1: USB disconnect, device number 12 [ 3298.367459][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 3298.367479][ T30] audit: type=1326 audit(1758930366.688:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3755 comm="syz.4.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3298.476136][ T30] audit: type=1326 audit(1758930366.738:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3755 comm="syz.4.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3298.504751][ T30] audit: type=1326 audit(1758930366.738:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3755 comm="syz.4.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3298.611500][ T30] audit: type=1326 audit(1758930366.738:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3755 comm="syz.4.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3298.677435][ T30] audit: type=1326 audit(1758930366.738:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3755 comm="syz.4.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f672ad2af79 code=0x7ffc0000 [ 3298.687458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3298.749651][ T30] audit: type=1326 audit(1758930366.738:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3755 comm="syz.4.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3298.990043][ T30] audit: type=1326 audit(1758930366.738:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3755 comm="syz.4.7281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672ad8eec9 code=0x7ffc0000 [ 3299.727463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3299.907742][ T5874] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 3300.110163][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 3300.139018][ T5874] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 3300.205916][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3300.223825][ T5874] usb 5-1: Product: syz [ 3300.238683][ T5874] usb 5-1: Manufacturer: syz [ 3300.246835][ T5874] usb 5-1: SerialNumber: syz [ 3300.767475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3300.895852][ T5874] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3301.117519][ T5874] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 3301.255050][ T3185] udevd[3185]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3301.318008][ T5874] usb 5-1: USB disconnect, device number 44 [ 3301.807418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3302.848477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3303.878968][ T3853] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7312'. [ 3303.887538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3304.807841][ T3866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7310'. [ 3304.927449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3305.316069][ T30] audit: type=1326 audit(1758930373.628:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3867 comm="syz.3.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3305.368776][ T30] audit: type=1326 audit(1758930373.628:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3867 comm="syz.3.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3305.475435][ T30] audit: type=1326 audit(1758930373.628:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3867 comm="syz.3.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3305.544901][ T30] audit: type=1326 audit(1758930373.628:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3867 comm="syz.3.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3305.595611][ T30] audit: type=1326 audit(1758930373.628:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3867 comm="syz.3.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3305.667035][ T30] audit: type=1326 audit(1758930373.628:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3867 comm="syz.3.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3305.849352][ T30] audit: type=1326 audit(1758930373.628:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3867 comm="syz.3.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3305.933087][ T30] audit: type=1326 audit(1758930373.628:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3867 comm="syz.3.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41fed8d710 code=0x7ffc0000 [ 3305.967444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3305.993852][ T30] audit: type=1326 audit(1758930373.628:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3867 comm="syz.3.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3306.358069][ T30] audit: type=1326 audit(1758930373.628:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3867 comm="syz.3.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3307.007447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3308.047453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3308.077414][ T5874] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 3308.375045][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 3308.478571][ T5874] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 3308.486761][ T5874] usb 4-1: config 0 has no interface number 0 [ 3308.507438][ T5874] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3308.557520][ T5874] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3308.587576][ T5874] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3308.609851][ T5874] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3308.660695][ T5874] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3308.697421][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3308.736739][ T5874] usb 4-1: config 0 descriptor?? [ 3308.768349][ T5874] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3308.993296][ T5874] usb 4-1: USB disconnect, device number 31 [ 3309.018731][ T5874] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 3309.097462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3309.204083][ T3904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3309.677761][ T5874] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 3309.809777][ T3922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3309.868025][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 3309.992686][ T5874] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 3310.001378][ T5874] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3310.069086][ T5874] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3310.112683][ T5874] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3310.127457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3310.188557][ T5874] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3310.245248][ T5874] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3310.303418][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3310.767675][ T5874] usb 2-1: usb_control_msg returned -32 [ 3310.773311][ T5874] usbtmc 2-1:16.0: can't read capabilities [ 3311.177404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3311.587169][ T3931] usbtmc 2-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 3311.804745][ T5874] usb 2-1: USB disconnect, device number 13 [ 3311.887110][ T3933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3311.895800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3312.207429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3312.847508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3313.247414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3313.607557][ T3963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3314.287411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3315.327414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3315.638210][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 3315.638229][ T30] audit: type=1326 audit(1758930383.958:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3975 comm="syz.1.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3315.716098][ T30] audit: type=1326 audit(1758930383.958:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3975 comm="syz.1.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3316.020796][ T30] audit: type=1326 audit(1758930383.958:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3975 comm="syz.1.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3316.071716][ T30] audit: type=1326 audit(1758930383.958:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3975 comm="syz.1.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3316.119275][ T30] audit: type=1326 audit(1758930383.958:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3975 comm="syz.1.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3316.177148][ T30] audit: type=1326 audit(1758930383.958:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3975 comm="syz.1.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3316.249451][ T30] audit: type=1326 audit(1758930383.958:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3975 comm="syz.1.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3316.367404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3316.500266][ T30] audit: type=1326 audit(1758930383.958:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3975 comm="syz.1.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3316.575597][ T30] audit: type=1326 audit(1758930383.958:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3975 comm="syz.1.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fafcc98d710 code=0x7ffc0000 [ 3316.766366][ T30] audit: type=1326 audit(1758930383.958:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3975 comm="syz.1.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcc98eec9 code=0x7ffc0000 [ 3316.807749][ T5874] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 3316.973912][ T5874] usb 4-1: config 0 has no interfaces? [ 3317.006412][ T5874] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3317.077862][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3317.120458][ T5874] usb 4-1: Product: syz [ 3317.188135][ T5874] usb 4-1: Manufacturer: syz [ 3317.195322][ T5874] usb 4-1: SerialNumber: syz [ 3317.228617][ T5874] usb 4-1: config 0 descriptor?? [ 3317.407402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3317.812307][ T4011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3318.447469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3318.847552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3318.855909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3318.864379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3318.872772][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3318.881130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3318.889468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3318.897813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3318.906137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3319.375648][ T4021] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 3319.415764][ T4021] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3320.007811][ T5874] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 3320.166736][T31253] usb 4-1: USB disconnect, device number 32 [ 3320.172946][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 3320.251789][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3320.283085][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3320.412619][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 3320.558569][ T5874] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 3320.568164][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3320.595758][ T5874] usb 5-1: config 0 descriptor?? [ 3321.051495][ T5874] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.003C/input/input83 [ 3321.166887][ T5874] appleir 0003:05AC:8241.003C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 3321.299402][ T5874] usb 5-1: USB disconnect, device number 45 [ 3321.394947][ T4052] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7369'. [ 3321.515383][ T4051] fido_id[4051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 3322.497694][T31253] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3322.607427][ C0] net_ratelimit: 83 callbacks suppressed [ 3322.607443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3322.669643][ T4069] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7375'. [ 3322.678877][T31253] usb 5-1: Using ep0 maxpacket: 32 [ 3322.688957][T31253] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3322.698711][T31253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3322.764652][T31253] usb 5-1: config 0 descriptor?? [ 3323.126471][T31253] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3323.182673][T31253] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3323.256038][ T4079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3323.264509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3323.284773][T31253] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3323.337366][T31253] usb 5-1: media controller created [ 3323.392699][ T4080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3323.403477][ T4080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3323.483194][T31253] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3323.647477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3324.687388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3325.183457][ T4092] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7383'. [ 3325.727484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3325.766635][T31253] az6027: usb out operation failed. (-71) [ 3325.818039][T31253] az6027: usb out operation failed. (-71) [ 3325.823783][T31253] stb0899_attach: Driver disabled by Kconfig [ 3325.908326][T31253] az6027: no front-end attached [ 3325.908326][T31253] [ 3325.939606][T31253] az6027: usb out operation failed. (-71) [ 3325.946122][T31253] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3325.993839][T31253] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input84 [ 3326.051954][T31253] dvb-usb: schedule remote query interval to 400 msecs. [ 3326.096889][T31253] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3326.158049][T31253] usb 5-1: USB disconnect, device number 46 [ 3326.229154][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 3326.229172][ T30] audit: type=1326 audit(1758930394.568:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3326.293305][ T30] audit: type=1326 audit(1758930394.598:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3326.337030][ T30] audit: type=1326 audit(1758930394.598:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3326.417998][ T30] audit: type=1326 audit(1758930394.598:5315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3326.459009][T31253] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3326.516767][ T30] audit: type=1326 audit(1758930394.598:5316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3326.639663][ T30] audit: type=1326 audit(1758930394.598:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3326.767384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3326.787029][ T4117] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7390'. [ 3326.892553][ T30] audit: type=1326 audit(1758930394.598:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f41fed2af79 code=0x7ffc0000 [ 3326.951964][ T30] audit: type=1326 audit(1758930394.598:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3326.976814][ T30] audit: type=1326 audit(1758930394.598:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4108 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fed8eec9 code=0x7ffc0000 [ 3327.085951][ T4122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3327.094664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3327.187796][T28632] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3327.357543][T28632] usb 5-1: Using ep0 maxpacket: 8 [ 3327.364955][T28632] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3327.374768][T28632] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 3327.383319][T28632] usb 5-1: config 4 has no interface number 0 [ 3327.395168][T28632] usb 5-1: config 4 interface 30 has no altsetting 0 [ 3327.438278][T28632] usb 5-1: string descriptor 0 read error: -22 [ 3327.444853][T28632] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 3327.470120][T28632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3327.487154][T28632] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 3327.509169][T28632] dw2102: su3000_power_ctrl: 1, initialized 0 [ 3327.526083][T28632] dvb-usb: bulk message failed: -22 (2/0) [ 3327.542258][T28632] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3327.570745][T28632] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 3327.589109][T28632] usb 5-1: media controller created [ 3327.594521][T28632] dvb-usb: bulk message failed: -22 (6/0) [ 3327.624802][T28632] dw2102: i2c transfer failed. [ 3327.630276][T28632] dvb-usb: bulk message failed: -22 (6/0) [ 3327.636564][T28632] dw2102: i2c transfer failed. [ 3327.643078][T28632] dvb-usb: bulk message failed: -22 (6/0) [ 3327.650378][T28632] dw2102: i2c transfer failed. [ 3327.655430][T28632] dvb-usb: bulk message failed: -22 (6/0) [ 3327.662056][T28632] dw2102: i2c transfer failed. [ 3327.667071][T28632] dvb-usb: bulk message failed: -22 (6/0) [ 3327.676318][T28632] dw2102: i2c transfer failed. [ 3327.681623][T28632] dvb-usb: bulk message failed: -22 (6/0) [ 3327.692870][T28632] dw2102: i2c transfer failed. [ 3327.698572][ T4121] dvb-usb: bulk message failed: -22 (5/0) [ 3327.704458][ T4121] dw2102: i2c transfer failed. [ 3327.712703][T28632] dvb-usb: MAC address: 02:02:02:02:02:02 [ 3327.745454][T28632] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3327.807402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3327.827457][T28632] dvb-usb: bulk message failed: -22 (3/0) [ 3327.844574][T28632] dw2102: command 0x0e transfer failed. [ 3327.856695][T28632] dvb-usb: bulk message failed: -22 (3/0) [ 3327.864476][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 3327.875090][T28632] dw2102: command 0x0e transfer failed. [ 3328.019680][ T43] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3328.029591][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3328.067696][ T43] usb 2-1: config 0 descriptor?? [ 3328.201700][ T43] cp210x 2-1:0.0: cp210x converter detected [ 3328.215045][T28632] dvb-usb: bulk message failed: -22 (3/0) [ 3328.305883][T28632] dw2102: command 0x0e transfer failed. [ 3328.314683][T28632] dvb-usb: bulk message failed: -22 (3/0) [ 3328.327316][T28632] dw2102: command 0x0e transfer failed. [ 3328.336077][T28632] dvb-usb: bulk message failed: -22 (1/0) [ 3328.504670][T28632] dw2102: command 0x51 transfer failed. [ 3328.549825][ T43] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 3328.567832][T28632] dvb-usb: bulk message failed: -22 (5/0) [ 3328.573623][T28632] dw2102: i2c probe for address 0x68 failed. [ 3328.596693][ T43] usb 2-1: cp210x converter now attached to ttyUSB0 [ 3328.604785][T28632] dvb-usb: bulk message failed: -22 (5/0) [ 3328.612127][T28632] dw2102: i2c probe for address 0x69 failed. [ 3328.633621][T28632] dvb-usb: bulk message failed: -22 (5/0) [ 3328.641855][T28632] dw2102: i2c probe for address 0x6a failed. [ 3328.648013][T28632] dw2102: probing for demodulator failed. Is the external power switched on? [ 3328.656888][T28632] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 3328.836737][T31253] usb 2-1: USB disconnect, device number 14 [ 3328.848312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3328.900645][T31253] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3328.917384][T28632] rc_core: IR keymap rc-tt-1500 not found [ 3328.923192][T28632] Registered IR keymap rc-empty [ 3328.972208][T31253] cp210x 2-1:0.0: device disconnected [ 3328.983106][T28632] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 3329.067031][T28632] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input85 [ 3329.102834][ T4145] trusted_key: encrypted_key: insufficient parameters specified [ 3329.195485][T28632] dvb-usb: schedule remote query interval to 250 msecs. [ 3329.237754][T28632] dw2102: su3000_power_ctrl: 0, initialized 1 [ 3329.263500][T28632] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 3329.300531][T28632] usb 5-1: USB disconnect, device number 47 [ 3329.400683][T28632] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 3329.864447][ T4149] netlink: 212924 bytes leftover after parsing attributes in process `syz.3.7402'. [ 3329.887409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3330.210108][ T4159] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7404'. [ 3330.744302][ T4161] 8021q: adding VLAN 0 to HW filter on device bond16 [ 3330.927400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3331.967402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3332.137800][T31253] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 3332.483662][T31253] usb 4-1: config 0 has no interfaces? [ 3332.572092][T31253] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3332.650423][T31253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3332.757338][T31253] usb 4-1: Product: syz [ 3332.761558][T31253] usb 4-1: Manufacturer: syz [ 3332.766180][T31253] usb 4-1: SerialNumber: syz [ 3332.885174][T31253] usb 4-1: config 0 descriptor?? [ 3333.020220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3333.039600][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3333.057707][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3333.099387][ T4196] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7416'. [ 3333.259907][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7417'. [ 3333.271701][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7417'. [ 3333.836159][ T30] audit: type=1326 audit(1758930402.138:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4202 comm="syz.0.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3333.945074][ T30] audit: type=1326 audit(1758930402.138:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4202 comm="syz.0.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3334.047429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3334.291304][ T30] audit: type=1326 audit(1758930402.138:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4202 comm="syz.0.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3334.356105][ T30] audit: type=1326 audit(1758930402.138:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4202 comm="syz.0.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3334.508910][ T30] audit: type=1326 audit(1758930402.138:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4202 comm="syz.0.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3334.687682][ T30] audit: type=1326 audit(1758930402.138:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4202 comm="syz.0.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3334.792308][T31253] usb 4-1: USB disconnect, device number 33 [ 3334.954563][ T30] audit: type=1326 audit(1758930402.138:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4202 comm="syz.0.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3335.093574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3335.114929][ T30] audit: type=1326 audit(1758930402.138:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4202 comm="syz.0.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3335.234915][ T30] audit: type=1326 audit(1758930402.138:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4202 comm="syz.0.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e9158eec9 code=0x7ffc0000 [ 3335.298060][ T30] audit: type=1326 audit(1758930402.138:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4202 comm="syz.0.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e9158d710 code=0x7ffc0000 [ 3336.126619][ T4235] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7427'. [ 3336.135889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3336.670980][ T4245] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7430'. [ 3337.167424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3337.349291][ T4251] [ 3337.351671][ T4251] ===================================================== [ 3337.358619][ T4251] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 3337.366078][ T4251] syzkaller #0 Not tainted [ 3337.370489][ T4251] ----------------------------------------------------- [ 3337.377428][ T4251] syz.3.7432/4251 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 3337.385080][ T4251] ffff88802e5896a8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 3337.393801][ T4251] [ 3337.393801][ T4251] and this task is already holding: [ 3337.401180][ T4251] ffff888058899028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 3337.410933][ T4251] which would create a new lock dependency: [ 3337.416933][ T4251] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 3337.425049][ T4251] [ 3337.425049][ T4251] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 3337.434502][ T4251] (&dev->event_lock#2){..-.}-{3:3} [ 3337.434537][ T4251] [ 3337.434537][ T4251] ... which became SOFTIRQ-irq-safe at: [ 3337.447433][ T4251] lock_acquire+0x120/0x360 [ 3337.452041][ T4251] _raw_spin_lock_irqsave+0xa7/0xf0 [ 3337.457339][ T4251] input_event+0x76/0xe0 [ 3337.461688][ T4251] hidinput_report_event+0xa1/0x100 [ 3337.466981][ T4251] hid_report_raw_event+0x148b/0x16d0 [ 3337.472446][ T4251] hid_input_report+0x43e/0x520 [ 3337.477402][ T4251] hid_irq_in+0x47e/0x6d0 [ 3337.481830][ T4251] __usb_hcd_giveback_urb+0x376/0x540 [ 3337.487332][ T4251] dummy_timer+0x862/0x4550 [ 3337.491936][ T4251] __hrtimer_run_queues+0x529/0xc60 [ 3337.497222][ T4251] hrtimer_run_softirq+0x187/0x2b0 [ 3337.502428][ T4251] handle_softirqs+0x283/0x870 [ 3337.507279][ T4251] __irq_exit_rcu+0xca/0x1f0 [ 3337.511968][ T4251] irq_exit_rcu+0x9/0x30 [ 3337.516300][ T4251] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3337.522020][ T4251] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3337.528087][ T4251] rwsem_down_write_slowpath+0x0/0xfe0 [ 3337.533635][ T4251] down_write+0x1ab/0x1f0 [ 3337.538056][ T4251] kernfs_remove_by_name_ns+0x3d/0x130 [ 3337.543610][ T4251] device_links_driver_bound+0x23d/0xf50 [ 3337.549327][ T4251] driver_bound+0xd8/0x2c0 [ 3337.553830][ T4251] really_probe+0x745/0x9e0 [ 3337.558423][ T4251] __driver_probe_device+0x18c/0x2f0 [ 3337.563799][ T4251] driver_probe_device+0x4f/0x430 [ 3337.568911][ T4251] __device_attach_driver+0x2ce/0x530 [ 3337.574380][ T4251] bus_for_each_drv+0x24e/0x2e0 [ 3337.579322][ T4251] __device_attach+0x2b8/0x400 [ 3337.584175][ T4251] bus_probe_device+0x185/0x260 [ 3337.589112][ T4251] device_add+0x7b6/0xb50 [ 3337.593533][ T4251] hid_add_device+0x398/0x540 [ 3337.598295][ T4251] usbhid_probe+0xe13/0x12a0 [ 3337.602976][ T4251] usb_probe_interface+0x668/0xc30 [ 3337.608174][ T4251] really_probe+0x26d/0x9e0 [ 3337.612772][ T4251] __driver_probe_device+0x18c/0x2f0 [ 3337.618147][ T4251] driver_probe_device+0x4f/0x430 [ 3337.623265][ T4251] __device_attach_driver+0x2ce/0x530 [ 3337.628726][ T4251] bus_for_each_drv+0x24e/0x2e0 [ 3337.633661][ T4251] __device_attach+0x2b8/0x400 [ 3337.638539][ T4251] bus_probe_device+0x185/0x260 [ 3337.643471][ T4251] device_add+0x7b6/0xb50 [ 3337.647884][ T4251] usb_set_configuration+0x1a87/0x20e0 [ 3337.653437][ T4251] usb_generic_driver_probe+0x8d/0x150 [ 3337.658988][ T4251] usb_probe_device+0x1c4/0x390 [ 3337.663929][ T4251] really_probe+0x26d/0x9e0 [ 3337.668525][ T4251] __driver_probe_device+0x18c/0x2f0 [ 3337.673899][ T4251] driver_probe_device+0x4f/0x430 [ 3337.679020][ T4251] __device_attach_driver+0x2ce/0x530 [ 3337.684477][ T4251] bus_for_each_drv+0x24e/0x2e0 [ 3337.689413][ T4251] __device_attach+0x2b8/0x400 [ 3337.694266][ T4251] bus_probe_device+0x185/0x260 [ 3337.699203][ T4251] device_add+0x7b6/0xb50 [ 3337.703621][ T4251] usb_new_device+0xa39/0x16f0 [ 3337.708483][ T4251] hub_event+0x2958/0x4a20 [ 3337.712995][ T4251] process_scheduled_works+0xae1/0x17b0 [ 3337.718628][ T4251] worker_thread+0x8a0/0xda0 [ 3337.723302][ T4251] kthread+0x70e/0x8a0 [ 3337.727463][ T4251] ret_from_fork+0x439/0x7d0 [ 3337.732149][ T4251] ret_from_fork_asm+0x1a/0x30 [ 3337.737009][ T4251] [ 3337.737009][ T4251] to a SOFTIRQ-irq-unsafe lock: [ 3337.744021][ T4251] (tasklist_lock){.+.+}-{3:3} [ 3337.744048][ T4251] [ 3337.744048][ T4251] ... which became SOFTIRQ-irq-unsafe at: [ 3337.756671][ T4251] ... [ 3337.756679][ T4251] lock_acquire+0x120/0x360 [ 3337.763856][ T4251] _raw_read_lock+0x36/0x50 [ 3337.768446][ T4251] __do_wait+0xde/0x740 [ 3337.772701][ T4251] do_wait+0x1f8/0x520 [ 3337.776861][ T4251] kernel_wait+0xab/0x170 [ 3337.781281][ T4251] call_usermodehelper_exec_work+0xbe/0x230 [ 3337.787274][ T4251] process_scheduled_works+0xae1/0x17b0 [ 3337.792911][ T4251] worker_thread+0x8a0/0xda0 [ 3337.797595][ T4251] kthread+0x70e/0x8a0 [ 3337.801759][ T4251] ret_from_fork+0x439/0x7d0 [ 3337.806432][ T4251] ret_from_fork_asm+0x1a/0x30 [ 3337.811290][ T4251] [ 3337.811290][ T4251] other info that might help us debug this: [ 3337.811290][ T4251] [ 3337.821604][ T4251] Chain exists of: [ 3337.821604][ T4251] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 3337.821604][ T4251] [ 3337.835194][ T4251] Possible interrupt unsafe locking scenario: [ 3337.835194][ T4251] [ 3337.843509][ T4251] CPU0 CPU1 [ 3337.848869][ T4251] ---- ---- [ 3337.854228][ T4251] lock(tasklist_lock); [ 3337.858466][ T4251] local_irq_disable(); [ 3337.865388][ T4251] lock(&dev->event_lock#2); [ 3337.872596][ T4251] lock(&client->buffer_lock); [ 3337.879987][ T4251] [ 3337.883440][ T4251] lock(&dev->event_lock#2); [ 3337.888309][ T4251] [ 3337.888309][ T4251] *** DEADLOCK *** [ 3337.888309][ T4251] [ 3337.896463][ T4251] 7 locks held by syz.3.7432/4251: [ 3337.901570][ T4251] #0: ffff88814988d118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 3337.910729][ T4251] #1: ffff88801f7db230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 3337.920859][ T4251] #2: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 3337.930536][ T4251] #3: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 3337.940114][ T4251] #4: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 3337.949256][ T4251] #5: ffff888058899028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 3337.959437][ T4251] #6: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 3337.968495][ T4251] [ 3337.968495][ T4251] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 3337.978895][ T4251] -> (&dev->event_lock#2){..-.}-{3:3} { [ 3337.984562][ T4251] IN-SOFTIRQ-W at: [ 3337.988626][ T4251] lock_acquire+0x120/0x360 [ 3337.994965][ T4251] _raw_spin_lock_irqsave+0xa7/0xf0 [ 3338.001994][ T4251] input_event+0x76/0xe0 [ 3338.008072][ T4251] hidinput_report_event+0xa1/0x100 [ 3338.015102][ T4251] hid_report_raw_event+0x148b/0x16d0 [ 3338.022301][ T4251] hid_input_report+0x43e/0x520 [ 3338.028982][ T4251] hid_irq_in+0x47e/0x6d0 [ 3338.035142][ T4251] __usb_hcd_giveback_urb+0x376/0x540 [ 3338.042341][ T4251] dummy_timer+0x862/0x4550 [ 3338.048672][ T4251] __hrtimer_run_queues+0x529/0xc60 [ 3338.055694][ T4251] hrtimer_run_softirq+0x187/0x2b0 [ 3338.062651][ T4251] handle_softirqs+0x283/0x870 [ 3338.069270][ T4251] __irq_exit_rcu+0xca/0x1f0 [ 3338.075684][ T4251] irq_exit_rcu+0x9/0x30 [ 3338.081756][ T4251] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3338.089212][ T4251] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3338.097018][ T4251] rwsem_down_write_slowpath+0x0/0xfe0 [ 3338.104306][ T4251] down_write+0x1ab/0x1f0 [ 3338.110467][ T4251] kernfs_remove_by_name_ns+0x3d/0x130 [ 3338.117759][ T4251] device_links_driver_bound+0x23d/0xf50 [ 3338.125220][ T4251] driver_bound+0xd8/0x2c0 [ 3338.131465][ T4251] really_probe+0x745/0x9e0 [ 3338.137799][ T4251] __driver_probe_device+0x18c/0x2f0 [ 3338.144915][ T4251] driver_probe_device+0x4f/0x430 [ 3338.151779][ T4251] __device_attach_driver+0x2ce/0x530 [ 3338.158981][ T4251] bus_for_each_drv+0x24e/0x2e0 [ 3338.165672][ T4251] __device_attach+0x2b8/0x400 [ 3338.172262][ T4251] bus_probe_device+0x185/0x260 [ 3338.178935][ T4251] device_add+0x7b6/0xb50 [ 3338.185089][ T4251] hid_add_device+0x398/0x540 [ 3338.191595][ T4251] usbhid_probe+0xe13/0x12a0 [ 3338.198040][ T4251] usb_probe_interface+0x668/0xc30 [ 3338.204982][ T4251] really_probe+0x26d/0x9e0 [ 3338.211323][ T4251] __driver_probe_device+0x18c/0x2f0 [ 3338.218440][ T4251] driver_probe_device+0x4f/0x430 [ 3338.225294][ T4251] __device_attach_driver+0x2ce/0x530 [ 3338.232587][ T4251] bus_for_each_drv+0x24e/0x2e0 [ 3338.239350][ T4251] __device_attach+0x2b8/0x400 [ 3338.245958][ T4251] bus_probe_device+0x185/0x260 [ 3338.252648][ T4251] device_add+0x7b6/0xb50 [ 3338.258818][ T4251] usb_set_configuration+0x1a87/0x20e0 [ 3338.266125][ T4251] usb_generic_driver_probe+0x8d/0x150 [ 3338.273418][ T4251] usb_probe_device+0x1c4/0x390 [ 3338.280107][ T4251] really_probe+0x26d/0x9e0 [ 3338.286467][ T4251] __driver_probe_device+0x18c/0x2f0 [ 3338.293587][ T4251] driver_probe_device+0x4f/0x430 [ 3338.300459][ T4251] __device_attach_driver+0x2ce/0x530 [ 3338.307670][ T4251] bus_for_each_drv+0x24e/0x2e0 [ 3338.314354][ T4251] __device_attach+0x2b8/0x400 [ 3338.320962][ T4251] bus_probe_device+0x185/0x260 [ 3338.327653][ T4251] device_add+0x7b6/0xb50 [ 3338.333812][ T4251] usb_new_device+0xa39/0x16f0 [ 3338.340406][ T4251] hub_event+0x2958/0x4a20 [ 3338.346652][ T4251] process_scheduled_works+0xae1/0x17b0 [ 3338.354021][ T4251] worker_thread+0x8a0/0xda0 [ 3338.360440][ T4251] kthread+0x70e/0x8a0 [ 3338.366340][ T4251] ret_from_fork+0x439/0x7d0 [ 3338.372758][ T4251] ret_from_fork_asm+0x1a/0x30 [ 3338.379364][ T4251] INITIAL USE at: [ 3338.383396][ T4251] lock_acquire+0x120/0x360 [ 3338.389652][ T4251] _raw_spin_lock_irqsave+0xa7/0xf0 [ 3338.396603][ T4251] input_inject_event+0xa5/0x340 [ 3338.403313][ T4251] kbd_led_trigger_activate+0xbc/0x100 [ 3338.410523][ T4251] led_trigger_set+0x52a/0x950 [ 3338.417040][ T4251] led_trigger_set_default+0x260/0x2a0 [ 3338.424681][ T4251] led_classdev_register_ext+0x73d/0x930 [ 3338.432054][ T4251] input_leds_connect+0x517/0x790 [ 3338.438857][ T4251] input_register_device+0xcfd/0x1140 [ 3338.446097][ T4251] atkbd_connect+0x72e/0xa00 [ 3338.452434][ T4251] serio_driver_probe+0x82/0xd0 [ 3338.459045][ T4251] really_probe+0x26d/0x9e0 [ 3338.465296][ T4251] __driver_probe_device+0x18c/0x2f0 [ 3338.472330][ T4251] driver_probe_device+0x4f/0x430 [ 3338.479106][ T4251] __driver_attach+0x452/0x700 [ 3338.485620][ T4251] bus_for_each_dev+0x233/0x2b0 [ 3338.492217][ T4251] serio_handle_event+0x1f9/0x8d0 [ 3338.498982][ T4251] process_scheduled_works+0xae1/0x17b0 [ 3338.506271][ T4251] worker_thread+0x8a0/0xda0 [ 3338.512604][ T4251] kthread+0x70e/0x8a0 [ 3338.518422][ T4251] ret_from_fork+0x439/0x7d0 [ 3338.524752][ T4251] ret_from_fork_asm+0x1a/0x30 [ 3338.531278][ T4251] } [ 3338.533877][ T4251] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 3338.542986][ T4251] -> (&client->buffer_lock){....}-{3:3} { [ 3338.548726][ T4251] INITIAL USE at: [ 3338.552619][ T4251] lock_acquire+0x120/0x360 [ 3338.558719][ T4251] _raw_spin_lock_irqsave+0xa7/0xf0 [ 3338.565487][ T4251] evdev_ioctl_handler+0x1969/0x1f10 [ 3338.572340][ T4251] __se_sys_ioctl+0xf9/0x170 [ 3338.578497][ T4251] do_syscall_64+0xfa/0x3b0 [ 3338.584566][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3338.592026][ T4251] } [ 3338.594525][ T4251] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 3338.602683][ T4251] ... acquired at: [ 3338.606486][ T4251] lock_acquire+0x120/0x360 [ 3338.611178][ T4251] _raw_spin_lock+0x2e/0x40 [ 3338.615863][ T4251] evdev_pass_values+0xb9/0xbd0 [ 3338.620892][ T4251] evdev_events+0x1e6/0x340 [ 3338.625569][ T4251] input_pass_values+0x288/0x890 [ 3338.630682][ T4251] input_event_dispose+0x330/0x6b0 [ 3338.635977][ T4251] input_inject_event+0x1dd/0x340 [ 3338.641186][ T4251] evdev_write+0x2fc/0x480 [ 3338.645777][ T4251] vfs_write+0x27e/0xb30 [ 3338.650196][ T4251] ksys_write+0x145/0x250 [ 3338.654707][ T4251] do_syscall_64+0xfa/0x3b0 [ 3338.659390][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3338.665457][ T4251] [ 3338.667779][ T4251] [ 3338.667779][ T4251] the dependencies between the lock to be acquired [ 3338.667789][ T4251] and SOFTIRQ-irq-unsafe lock: [ 3338.681304][ T4251] -> (tasklist_lock){.+.+}-{3:3} { [ 3338.686609][ T4251] HARDIRQ-ON-R at: [ 3338.690765][ T4251] lock_acquire+0x120/0x360 [ 3338.697283][ T4251] _raw_read_lock+0x36/0x50 [ 3338.703784][ T4251] __do_wait+0xde/0x740 [ 3338.709946][ T4251] do_wait+0x1f8/0x520 [ 3338.716025][ T4251] kernel_wait+0xab/0x170 [ 3338.722360][ T4251] call_usermodehelper_exec_work+0xbe/0x230 [ 3338.730267][ T4251] process_scheduled_works+0xae1/0x17b0 [ 3338.737815][ T4251] worker_thread+0x8a0/0xda0 [ 3338.744418][ T4251] kthread+0x70e/0x8a0 [ 3338.750489][ T4251] ret_from_fork+0x439/0x7d0 [ 3338.757075][ T4251] ret_from_fork_asm+0x1a/0x30 [ 3338.763843][ T4251] SOFTIRQ-ON-R at: [ 3338.767998][ T4251] lock_acquire+0x120/0x360 [ 3338.774506][ T4251] _raw_read_lock+0x36/0x50 [ 3338.781006][ T4251] __do_wait+0xde/0x740 [ 3338.787170][ T4251] do_wait+0x1f8/0x520 [ 3338.793260][ T4251] kernel_wait+0xab/0x170 [ 3338.799594][ T4251] call_usermodehelper_exec_work+0xbe/0x230 [ 3338.807496][ T4251] process_scheduled_works+0xae1/0x17b0 [ 3338.815044][ T4251] worker_thread+0x8a0/0xda0 [ 3338.821634][ T4251] kthread+0x70e/0x8a0 [ 3338.827796][ T4251] ret_from_fork+0x439/0x7d0 [ 3338.834418][ T4251] ret_from_fork_asm+0x1a/0x30 [ 3338.841183][ T4251] INITIAL USE at: [ 3338.845268][ T4251] lock_acquire+0x120/0x360 [ 3338.851694][ T4251] _raw_write_lock_irq+0xa2/0xf0 [ 3338.858545][ T4251] copy_process+0x224f/0x3c00 [ 3338.865143][ T4251] kernel_clone+0x21e/0x840 [ 3338.871557][ T4251] user_mode_thread+0xdd/0x140 [ 3338.878237][ T4251] rest_init+0x23/0x300 [ 3338.884310][ T4251] start_kernel+0x3a9/0x410 [ 3338.890735][ T4251] x86_64_start_reservations+0x24/0x30 [ 3338.898115][ T4251] x86_64_start_kernel+0x143/0x1c0 [ 3338.905145][ T4251] common_startup_64+0x13e/0x147 [ 3338.912003][ T4251] INITIAL READ USE at: [ 3338.916509][ T4251] lock_acquire+0x120/0x360 [ 3338.923367][ T4251] _raw_read_lock+0x36/0x50 [ 3338.930212][ T4251] __do_wait+0xde/0x740 [ 3338.936732][ T4251] do_wait+0x1f8/0x520 [ 3338.943152][ T4251] kernel_wait+0xab/0x170 [ 3338.949837][ T4251] call_usermodehelper_exec_work+0xbe/0x230 [ 3338.958094][ T4251] process_scheduled_works+0xae1/0x17b0 [ 3338.966163][ T4251] worker_thread+0x8a0/0xda0 [ 3338.973099][ T4251] kthread+0x70e/0x8a0 [ 3338.979530][ T4251] ret_from_fork+0x439/0x7d0 [ 3338.986480][ T4251] ret_from_fork_asm+0x1a/0x30 [ 3338.993596][ T4251] } [ 3338.996268][ T4251] ... key at: [] tasklist_lock+0x18/0x40 [ 3339.004166][ T4251] ... acquired at: [ 3339.008144][ T4251] lock_acquire+0x120/0x360 [ 3339.012832][ T4251] _raw_read_lock+0x36/0x50 [ 3339.017510][ T4251] send_sigurg+0x12b/0x420 [ 3339.022104][ T4251] sk_send_sigurg+0x6c/0x2e0 [ 3339.026873][ T4251] queue_oob+0x420/0x4f0 [ 3339.031308][ T4251] unix_stream_sendmsg+0xc3f/0xdf0 [ 3339.036596][ T4251] __sock_sendmsg+0x219/0x270 [ 3339.041457][ T4251] ____sys_sendmsg+0x505/0x830 [ 3339.046394][ T4251] ___sys_sendmsg+0x21f/0x2a0 [ 3339.051246][ T4251] __x64_sys_sendmsg+0x19b/0x260 [ 3339.056359][ T4251] do_syscall_64+0xfa/0x3b0 [ 3339.061037][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3339.067104][ T4251] [ 3339.069427][ T4251] -> (&f_owner->lock){....}-{3:3} { [ 3339.074749][ T4251] INITIAL USE at: [ 3339.078728][ T4251] lock_acquire+0x120/0x360 [ 3339.084973][ T4251] _raw_write_lock_irq+0xa2/0xf0 [ 3339.091643][ T4251] __f_setown+0x67/0x370 [ 3339.097625][ T4251] fcntl_dirnotify+0x3fa/0x6a0 [ 3339.104126][ T4251] do_fcntl+0x6d0/0x1910 [ 3339.110115][ T4251] __se_sys_fcntl+0xc8/0x150 [ 3339.116441][ T4251] do_syscall_64+0xfa/0x3b0 [ 3339.122683][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3339.130315][ T4251] INITIAL READ USE at: [ 3339.134733][ T4251] lock_acquire+0x120/0x360 [ 3339.141416][ T4251] _raw_read_lock_irqsave+0xaf/0x100 [ 3339.148959][ T4251] send_sigio+0x38/0x370 [ 3339.155376][ T4251] dnotify_handle_event+0x169/0x440 [ 3339.162748][ T4251] fsnotify+0x1671/0x1a80 [ 3339.169267][ T4251] __fsnotify_parent+0x3fe/0x540 [ 3339.176387][ T4251] vfs_writev+0x77d/0x960 [ 3339.182907][ T4251] do_writev+0x14d/0x2d0 [ 3339.189320][ T4251] do_syscall_64+0xfa/0x3b0 [ 3339.196001][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3339.204069][ T4251] } [ 3339.206663][ T4251] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 3339.215629][ T4251] ... acquired at: [ 3339.219527][ T4251] lock_acquire+0x120/0x360 [ 3339.224225][ T4251] _raw_read_lock_irqsave+0xaf/0x100 [ 3339.229692][ T4251] send_sigio+0x38/0x370 [ 3339.234118][ T4251] kill_fasync+0x24d/0x4d0 [ 3339.238713][ T4251] sock_wake_async+0x137/0x160 [ 3339.243659][ T4251] sk_wake_async+0x184/0x280 [ 3339.248457][ T4251] unix_release_sock+0x78c/0xd50 [ 3339.253579][ T4251] unix_release+0x92/0xd0 [ 3339.258098][ T4251] sock_close+0xc0/0x240 [ 3339.262525][ T4251] __fput+0x449/0xa70 [ 3339.266772][ T4251] task_work_run+0x1d1/0x260 [ 3339.271547][ T4251] get_signal+0x11ed/0x1340 [ 3339.276225][ T4251] arch_do_signal_or_restart+0x9a/0x750 [ 3339.281955][ T4251] exit_to_user_mode_loop+0x75/0x110 [ 3339.287453][ T4251] do_syscall_64+0x2bd/0x3b0 [ 3339.292225][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3339.298293][ T4251] [ 3339.300620][ T4251] -> (&new->fa_lock){....}-{3:3} { [ 3339.305758][ T4251] INITIAL USE at: [ 3339.309655][ T4251] lock_acquire+0x120/0x360 [ 3339.315740][ T4251] _raw_write_lock_irq+0xa2/0xf0 [ 3339.322246][ T4251] fasync_remove_entry+0xf1/0x1c0 [ 3339.328843][ T4251] sock_fasync+0x85/0xf0 [ 3339.334688][ T4251] __fput+0x89f/0xa70 [ 3339.340260][ T4251] task_work_run+0x1d1/0x260 [ 3339.346436][ T4251] exit_to_user_mode_loop+0xec/0x110 [ 3339.353353][ T4251] do_syscall_64+0x2bd/0x3b0 [ 3339.359519][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3339.367068][ T4251] INITIAL READ USE at: [ 3339.371402][ T4251] lock_acquire+0x120/0x360 [ 3339.377919][ T4251] _raw_read_lock_irqsave+0xaf/0x100 [ 3339.385206][ T4251] kill_fasync+0x199/0x4d0 [ 3339.391640][ T4251] sock_wake_async+0x137/0x160 [ 3339.398413][ T4251] sk_wake_async+0x184/0x280 [ 3339.405122][ T4251] unix_release_sock+0x78c/0xd50 [ 3339.412073][ T4251] unix_release+0x92/0xd0 [ 3339.418412][ T4251] sock_close+0xc0/0x240 [ 3339.424667][ T4251] __fput+0x449/0xa70 [ 3339.430656][ T4251] task_work_run+0x1d1/0x260 [ 3339.437262][ T4251] get_signal+0x11ed/0x1340 [ 3339.443777][ T4251] arch_do_signal_or_restart+0x9a/0x750 [ 3339.451334][ T4251] exit_to_user_mode_loop+0x75/0x110 [ 3339.458630][ T4251] do_syscall_64+0x2bd/0x3b0 [ 3339.465223][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3339.473118][ T4251] } [ 3339.475631][ T4251] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 3339.484320][ T4251] ... acquired at: [ 3339.488124][ T4251] lock_acquire+0x120/0x360 [ 3339.492812][ T4251] _raw_read_lock_irqsave+0xaf/0x100 [ 3339.498270][ T4251] kill_fasync+0x199/0x4d0 [ 3339.502878][ T4251] evdev_pass_values+0x627/0xbd0 [ 3339.507997][ T4251] evdev_events+0x1e6/0x340 [ 3339.512686][ T4251] input_pass_values+0x288/0x890 [ 3339.517800][ T4251] input_event_dispose+0x330/0x6b0 [ 3339.523097][ T4251] input_inject_event+0x1dd/0x340 [ 3339.528318][ T4251] evdev_write+0x2fc/0x480 [ 3339.532920][ T4251] vfs_write+0x27e/0xb30 [ 3339.537342][ T4251] ksys_write+0x145/0x250 [ 3339.541938][ T4251] do_syscall_64+0xfa/0x3b0 [ 3339.546616][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3339.552681][ T4251] [ 3339.555006][ T4251] [ 3339.555006][ T4251] stack backtrace: [ 3339.560908][ T4251] CPU: 0 UID: 0 PID: 4251 Comm: syz.3.7432 Not tainted syzkaller #0 PREEMPT(full) [ 3339.560929][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3339.560947][ T4251] Call Trace: [ 3339.560955][ T4251] [ 3339.560963][ T4251] dump_stack_lvl+0x189/0x250 [ 3339.560987][ T4251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3339.561006][ T4251] ? __pfx__printk+0x10/0x10 [ 3339.561033][ T4251] validate_chain+0x1f05/0x2140 [ 3339.561060][ T4251] __lock_acquire+0xab9/0xd20 [ 3339.561086][ T4251] ? kill_fasync+0x199/0x4d0 [ 3339.561104][ T4251] lock_acquire+0x120/0x360 [ 3339.561127][ T4251] ? kill_fasync+0x199/0x4d0 [ 3339.561150][ T4251] _raw_read_lock_irqsave+0xaf/0x100 [ 3339.561167][ T4251] ? kill_fasync+0x199/0x4d0 [ 3339.561185][ T4251] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 3339.561200][ T4251] ? do_raw_spin_lock+0x121/0x290 [ 3339.561223][ T4251] kill_fasync+0x199/0x4d0 [ 3339.561241][ T4251] ? kill_fasync+0x53/0x4d0 [ 3339.561259][ T4251] evdev_pass_values+0x627/0xbd0 [ 3339.561279][ T4251] ? evdev_pass_values+0x5c1/0xbd0 [ 3339.561298][ T4251] evdev_events+0x1e6/0x340 [ 3339.561314][ T4251] ? evdev_events+0x79/0x340 [ 3339.561330][ T4251] ? input_pass_values+0x8d/0x890 [ 3339.561345][ T4251] input_pass_values+0x288/0x890 [ 3339.561363][ T4251] ? input_handle_event+0x70c/0xf30 [ 3339.561386][ T4251] input_event_dispose+0x330/0x6b0 [ 3339.561410][ T4251] input_inject_event+0x1dd/0x340 [ 3339.561433][ T4251] ? input_inject_event+0xb6/0x340 [ 3339.561457][ T4251] evdev_write+0x2fc/0x480 [ 3339.561476][ T4251] ? __pfx_evdev_write+0x10/0x10 [ 3339.561493][ T4251] ? bpf_lsm_file_permission+0x9/0x20 [ 3339.561516][ T4251] ? security_file_permission+0x75/0x290 [ 3339.561540][ T4251] ? rw_verify_area+0x255/0x4d0 [ 3339.561560][ T4251] ? __lock_acquire+0xab9/0xd20 [ 3339.561582][ T4251] ? __pfx_evdev_write+0x10/0x10 [ 3339.561599][ T4251] vfs_write+0x27e/0xb30 [ 3339.561623][ T4251] ? __pfx_vfs_write+0x10/0x10 [ 3339.561645][ T4251] ? __fget_files+0x2a/0x420 [ 3339.561660][ T4251] ? __fget_files+0x2a/0x420 [ 3339.561673][ T4251] ? __fget_files+0x3a0/0x420 [ 3339.561686][ T4251] ? __fget_files+0x2a/0x420 [ 3339.561703][ T4251] ksys_write+0x145/0x250 [ 3339.561726][ T4251] ? __pfx_ksys_write+0x10/0x10 [ 3339.561746][ T4251] ? rcu_is_watching+0x15/0xb0 [ 3339.561769][ T4251] ? do_syscall_64+0xbe/0x3b0 [ 3339.561789][ T4251] do_syscall_64+0xfa/0x3b0 [ 3339.561808][ T4251] ? lockdep_hardirqs_on+0x9c/0x150 [ 3339.561824][ T4251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3339.561840][ T4251] ? clear_bhb_loop+0x60/0xb0 [ 3339.561858][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3339.561878][ T4251] RIP: 0033:0x7f41fed8eec9 [ 3339.561898][ T4251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3339.561913][ T4251] RSP: 002b:00007f41ffbcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3339.561931][ T4251] RAX: ffffffffffffffda RBX: 00007f41fefe5fa0 RCX: 00007f41fed8eec9 [ 3339.561943][ T4251] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 3339.561954][ T4251] RBP: 00007f41fee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 3339.561964][ T4251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3339.561974][ T4251] R13: 00007f41fefe6038 R14: 00007f41fefe5fa0 R15: 00007f41ff10fa28 [ 3339.561992][ T4251] [ 3339.886746][ C0] vkms_vblank_simulate: vblank timer overrun [ 3339.893409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3340.927504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3341.967504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3343.007500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3344.047541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3345.097499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3346.127410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3347.167515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog