last executing test programs: 24m22.211173222s ago: executing program 4 (id=5998): fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) unshare(0x400) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010100, @in=@loopback, 0x4e20, 0x2, 0x4e22, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1ff, 0x0, 0x100000000, 0x3, 0x0, 0x10000000, 0x80000000}, {0x5, 0xc0000000, 0x6, 0x1}, 0x4, 0x6e6bbf, 0x1, 0x1}, {{@in=@local, 0x4d5, 0x33}, 0xa, @in6=@mcast1, 0x3504, 0x3, 0x3, 0xa, 0x1, 0xb, 0x2}}, 0xe8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 24m21.943512385s ago: executing program 4 (id=6000): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 24m21.696926296s ago: executing program 4 (id=6001): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x3c}}, 0x0) 24m21.491415212s ago: executing program 4 (id=6003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 24m21.111951779s ago: executing program 4 (id=6005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="756e6c6f636b20696f2b6d65839f31372f"], 0xe) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x3000, 0x100000000000000d) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r6, 0x8800000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendfile(r7, r6, 0x0, 0x20000578410e9) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f0000000040)) 24m20.16437076s ago: executing program 4 (id=6006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 24m5.003796066s ago: executing program 32 (id=6006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 9.739014252s ago: executing program 0 (id=11833): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000005c0)={0x1, {0x6, 0x5, 0x1, 0x6, 0x6}}) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x10000, {0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="9481e2379100b321767c6519f53a95c4019911354b36cf944b595367f6b0d040018d47bfc1c8f35cecc3b6e585eb07ee8e3c7cc2ab3f9bc1387ff2a925dfc320723c929d0f8e4f470f", 0x49}, {&(0x7f0000000140)="0605e01cfb334645cb9ebbbcc0d3dff52e3fa41bd2f1006b1ab6c97ff13d1eef3956f98aafbc20e4427e9adac8a6ae850a856a00ab2bf1b9970418433428b76f5d56f44441fb9734b0284a62aee49e3206475b9462aefeb0fc2c0cb175d36f892f0828917be4651260a50fb476ec42fa8c30d10da4307c1f36b3f8cd2533e441dc3a1a49c76a5d4641d2", 0x8a}, {&(0x7f00000000c0)="b840397d732ab485bf059fc10e3036bfe925648464da28dd44c8249ffe0ceb48", 0x20}, {&(0x7f0000000200)="91725ee6628caa9a6b0540a9b4596b6989035868afb064fb8c0973da99c10bfe545adab8ed8df9548c56d6f8fe0306e9579f9e1090cb988dc8118ffa106ac25f4fd96500fdcb4b8db8b91139c509922c8daad2f6cd", 0x55}, {&(0x7f00000004c0)="3cc751cdc441ea38d53261a300484dfc6e96bd9dda9fcf7e6e81f5e8f6c00042e665b1feff9c1142e5e253f2419dd8fd2757d77c75d3b98527037e5105a694a5eefa199cda4e422a7c0d7d346c0a12a0fb90fc8c1a560037c43511ae77c0aa3fd50c754402bc4b560ba35deff7c7a733afc096b7a0068e2a9e8b2a187ff79710f54ef3dabf4ba607cdc8c1cacb84d28ab1c3a08c224e236bf77c3d00758d2282ea379482e42a38eb1657ae1f675b64abb3050c7de607d9869e33b91acd13a6054b80e160ba942d6a8c8a4a88cd51bdab0746dd", 0xd3}, {&(0x7f0000000780)="f8daee08b8eb9f6aad7346a26451f794ad295fac45cb6b29a7465dabd592878a9ed75c153242ba925c90518033b35f76d03255fcf36678b0768fd3efe9c74a2a5ae0726af6633d117d98333e2b08f72e06c62e3fc1f7763e7fc20bd9c19ec1b681962decd1e12ebd60833dc3190ffc677cde65eb24f18e9743a4343d42284900d9482f5c297868b350dd3fb64dbd60fa4c2f776850e4a0782cc5f69f8b678120ac84ac042e0cac18abeab2499a5e5d4f8c99af088bd54370b02f140d92280277bb035dc1", 0xc4}], 0x6) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) syz_fuse_handle_req(r2, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d64000d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af78b49b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc21d2648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e09001af8bff5c81a581d35d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c177554be8c4925dacb5764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda2d42527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aeeb3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0f00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd03e5b04bfdb61f5e169b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf2828a6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x0, 0x80000001, 0x4, 0x3, 0x554, {0x4, 0x2, 0xfffffffffffffffd, 0x0, 0x3, 0x80000000004, 0x0, 0x101, 0xffffffff, 0x2000, 0xfffffffc, 0x0, 0x0, 0x20000004, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.709043134s ago: executing program 3 (id=11835): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00400014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0xec) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x18}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r2, 0x50) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/\x00et/\x00\x00v4\x00\x00s/\x92y\x04\x00\x00\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0xc0000) ioctl$VIDIOC_QBUF(r4, 0xc04c560f, &(0x7f0000000240)=@multiplanar_mmap={0x6, 0xa, 0x4, 0x1000, 0xff, {}, {0x3, 0x8, 0xa, 0x1, 0x3, 0x0, "6d4feaf7"}, 0x4, 0x1, {0x0}, 0x3}) 8.444460195s ago: executing program 0 (id=11838): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x814400, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r2, 0x1, r3, 0x4, 0x80000}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffb, 0x8}}, 0x28) 8.424258488s ago: executing program 3 (id=11840): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000380)={0x0, 0x0, r1}) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x13) r6 = gettid() sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x6c, 0x9, 0x90f4110330c848ff, @mcast2, @local, 0x710, 0x7800, 0x7fff, 0x2}}) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000006a0000012abd7000fedbdf250a0000dd3c2ae6a898322400010000000800050001e3ef1428cde21d7390800ea05995b2fe5c3da4297596b0cd3cacd4985232cb823230c9ce36484578feff6530f6c1919385a1d34111715c0455c8cd9b7e8a7ca0373339f52458f6010fe01776089fab7f4a7ab05a27643117ead1c48b2b5b34f330a68de1fe73275b816faad6c8da5d90321b15dadd7d0bcf7230db5495d637b911b0bbf5aebc8659461ce5a6053a8bb24369f9a97fe87f4d7478ec5bf3552adb823c750432bf965deb20d7249a78235fd630013dffd771857e683b5589d21d92469f3de2e348c9e90b19f6f31cb609ed", @ANYRES32=r7, @ANYRES64=r3], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x41085) r8 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r8, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f00000000c0)=0x4, 0x4) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x10) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) r6 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYBLOB="6d30826100000000084e13002febca69661ed574a444c0289d8cecf84bd81c77a51e5a4017e636e1dd11420611c8dcb79457cb602febb5cab7568c4e240301a2c98981fd504e681aa3ed2a6a8814fbd6f4ed40f1569c4a88ed8d74626e1677e9ad69b78789bf21e95cf48028fbd161e9ca474d125031a618042494cec2e7da", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 7.441173606s ago: executing program 0 (id=11846): socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x2) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xb4e, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe5, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8, 0x0, 0x0}}, 0x10) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, &(0x7f00000000c0)={0x0, 0x24, 0xf0, {0xf0, 0xf, "a79adbf9a2a42fcab3c18ac2bbf7622fb6d398b49823f9f56ab73cd246ecf02fff54283b46bf5f6b69fedd1d622d0f428b4de6afc8c2a8f4f5a7ca780e48d907fa9508efac4d6dab19d983dff74411163a362004d85c4179452ecbbc214a8183eba812fe2871fbdb382633a8453ae75b19f451bd3be7f45d8ec3608314551b8b35216cc770e7e43456d2ddd809e1dd06af54ecb2860463b661ae44c8ef86ed75d0d471c4c1309d6151b96fcba07b1f16c670a5535a10ab28533b98d3c1e2c51992fbd9103476d56c9c631c4094fe39a3c8592ad0f6de5218b3618188f02fe73916fbaadbed4585177230848e6662"}}, &(0x7f0000001180)=ANY=[@ANYBLOB="00031b0000001b031de2e6e34cc6577387e480465dce4bce453c9ac65ff70c995be9b6e287da0d0e59689ff37001e29f91d7eaf7b20477ebff6d212e34965492a1ff56b746fcaa23c8f6b45161867e5ce2bc20ed162f86bcfb15a585c52733f2e608c5385ebb5b1dfec3d280ffff52a7f47258d7fd4da1363744f34cf85b2d6aa95114efce18988c02c225291ed3c2ca2ae19aace2ca665d27af203c3949ff10b0ac926acd"], &(0x7f00000001c0)={0x0, 0xf, 0x28, {0x5, 0xf, 0x28, 0x2, [@generic={0x1c, 0x10, 0xa, "cabb6ecf8687be43372535d7fcf534b4210e55b512bd8d6e47"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x9, 0x400}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0xfa, 0x10, "9369b810", "562ad958"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x4e, 0x6, 0x9d, 0x0, 0x6}}}, &(0x7f0000000800)={0x44, &(0x7f0000000300)={0x0, 0x15}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0xa0, 0x10}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0xcc}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xeb}, &(0x7f0000000500)={0x40, 0xb, 0x2, "3a04"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000580)={0x40, 0x13, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "982f"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xfe00}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000cc0)={0x18, &(0x7f0000000b00)={0x0, 0x24, 0x2a, {0x2a, 0x22, "8fc65a686beb215bbef11ab60f4dab45a1104b129adfff003446b0198e4a477ecc2c508bd36c7d6b"}}, &(0x7f0000000b40)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "9aa2da53df134e99f065d6b1295bcb9365c2ea7cfb85b4d44a5c6014f8e5c6c5001b3c9d197d172810e3591422a62c5588ff84c93ff8bb3a53a39d1ff520eca6244e75af177cfa8a9107afcd478561e8a2c18caed283c175c9ffcb35f8ccb3600077a89017cec6698eba57"}}, &(0x7f0000001240)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x10, 0x3, 0x21d, 0xf000, 0x7, [0xc00f, 0xffc0f0, 0xff00c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c989f7776d6b6f7aa97c962c72b3237a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x2, 0xa7, 0x6, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x0, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x5, 0x4}]}}, &(0x7f0000000c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x92, 0x18, 0x7, 0x6, "dd93e6d3", "c822a5d3"}}, &(0x7f0000000c80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0xe9, 0x4, 0xa3, 0xff, 0x7f}}}, &(0x7f0000001100)={0x44, &(0x7f0000000d00)={0x20, 0x17, 0x6b, "26512f6b805dfc276e9c165098d2e61e0c09335c993583d9c4c4abaf0ad57d37ea572953c0882c77526ec926badc098f8ee676d70053f0a167a80ac2fef4e9cef982caefb496985176d0ba44b97edf33ac379a23d4a89a925810c94e8054506c77a8cc040d8aa60a70109c"}, &(0x7f0000000d80)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x10, 0x8}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000f00)={0x40, 0xb, 0x2, '$J'}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001000)={0x40, 0x19, 0x2, "f654"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x4c1e}, 0xfffffffffffffffe, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0xf9}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x8}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x17, 0x0, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0xb5) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x11a, &(0x7f0000001440)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x2, 0x1, 0x22, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "148a"}, {0x5, 0x24, 0x0, 0x4000}, {0xd, 0x24, 0xf, 0x1, 0xea, 0x5b4e, 0xb0d1, 0x7}, {0x6, 0x24, 0x1a, 0x400}, [@country_functional={0xa, 0x24, 0x7, 0x1, 0xffff, [0x4, 0x0]}, @dmm={0x7, 0x24, 0x14, 0xfaf1}, @obex={0x5, 0x24, 0x15, 0x8}, @mdlm_detail={0x94, 0x24, 0x13, 0x0, "b00255ffee48986d656067e43390aed2b115c2ad0efa2f4416df993bb44b03649603abd7086494bc9f4f604b1aa085055032c91863286285964c378cd21be62fbdb5c5c666c3dbbf5e22ab0e32304114c2700f0038bcace2402c9a34eca592860653e1477bfc6c37941abee679c2c19e25a38ada4607ba75647dcbc5408a81a09af0d70c70ecd8c8ccbf6d8f58b5d8e9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x3, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0x10, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x2, 0x94}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x300, 0x6, 0x6, 0x4, 0x20, 0x7}, 0x13c, &(0x7f0000001580)={0x5, 0xf, 0x13c, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x7, 0xff00, 0x8, [0xc0cf, 0xc00f, 0x8080c0, 0x3f0f]}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00f, 0xa000, [0xf0, 0x30, 0x0]}, @generic={0x103, 0x10, 0xa, "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"}]}, 0x1, [{0xf9, &(0x7f00000012c0)=@string={0xf9, 0x3, "f8cb252a4015e458743919f8954a4f61dde661d9d86b61df5af239ed360e0846df903be58b0c00311cd644850ee1df14b4cbd810b63d72550e251e7b8979cfdce25930a9c0414b2588a076af0a798d62ed7f67cefb77103429721e07f6fdca106a8d7226649971b261c22d2d8cb19c2b6495145262c7fac79f8bba6f1f50e6bc18491c9d098fc43474db06d417782ea4e7eca6a607d89ba6f6577a7f005d3cc22b848c6c283d786fad8fa4f3c1d78a6aef8753ac83fb9a81727ad41b764f05b2444ba3465225d3a647616d539b576c477c7a02006cbafe80d16389275d95698092f66c76516e194fe39f59202d68763432ee50568aff35"}}]}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x8, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'veth1_to_bond\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000a00)=0xe4) sendmsg$nl_route(r5, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@ipmr_delroute={0x30, 0x19, 0x8, 0x70bd2d, 0x25dfdbfc, {0x80, 0x20, 0x20, 0x1, 0xfd, 0x0, 0xfd}, [@RTA_MULTIPATH={0xc, 0x9, {0xffa8, 0x0, 0x42, r10}}, @RTA_UID={0x8, 0x19, r11}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008810}, 0x200400c0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.871208569s ago: executing program 5 (id=11850): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 5.853693075s ago: executing program 5 (id=11851): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00400014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0xec) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x18}, &(0x7f0000000140)={0x0, 0x989680}, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r2, 0x50) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/\x00et/\x00\x00v4\x00\x00s/\x92y\x04\x00\x00\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,\x00\x00\x00\x00'}, 0x30) r4 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0xc0000) ioctl$VIDIOC_QBUF(r4, 0xc04c560f, &(0x7f0000000240)=@multiplanar_mmap={0x6, 0xa, 0x4, 0x1000, 0xff, {}, {0x3, 0x8, 0xa, 0x1, 0x3, 0x0, "6d4feaf7"}, 0x4, 0x1, {0x0}, 0x3}) 5.711646227s ago: executing program 5 (id=11852): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000200)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x7172, 0xa8b, 0x1, 0x0, 0xfffffffe, 0x0, [{0x10000, 0x1, 0x5}]}) 5.624829949s ago: executing program 5 (id=11853): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d000000000009677916a11cf8fd38c1d5cc7b49a615271ebaf5c75b0a9f1c8c7d74cc939f052f6badb0e456adc0c0e0d4a9bc2532184f3544f0412d1bb39316eb3c1700adae43433d2a36472df50282396ef006381e57325aacacd90e5ec800c2f7dafbf2430b95a7925e81b1343bc3acffedd446b91659d105a89b886c0116f365e7d58490b1ca365b7095e0ccff7be6a7d94e1bdf4776c15179d685fa94b2716796b808e1c3"], 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 5.38718062s ago: executing program 5 (id=11855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd0009058202"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0xfffffffffffffe35, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x1070bd28, 0xfffff003, {0x0, 0x0, 0x0, r4, {0xf000, 0x7}, {0x9}, {0x7, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x200c8000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r7, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) close(0x3) 5.053777897s ago: executing program 3 (id=11856): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000400100000000000000040000000000000010000000000000002000000000000000"], 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000140)) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'wlan1\x00', 0x1}, 0x18) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x8000, 0x3, 0xff, 0x5, 0x0, 0x6, 0x800001}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x854, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xf, 0xf}, {0x10}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x57}}, @filter_kind_options=@f_cgroup={{0xb}, {0x81c, 0x2, [@TCA_CGROUP_POLICE={0x818, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x10000, 0x6, 0x7, 0xb, 0xfffffffe, 0x0, 0x80, 0x10000, 0x4, 0x2, 0xd2, 0xffffffff, 0x6, 0x0, 0x0, 0x4, 0x7, 0x38fd, 0x10001, 0x7fff, 0x7fffffff, 0x9, 0xbbc6, 0x7, 0xfffffffa, 0x1c, 0x1e, 0x3, 0x9, 0x10000, 0x988, 0x4, 0x6, 0x10000, 0x756e, 0x73b, 0x10000, 0x3, 0x3ada, 0x401, 0x0, 0x1bc, 0x4, 0x9, 0x80000001, 0x3, 0x100, 0x2f2, 0x475f, 0xf970, 0xf7b, 0xf, 0x2707, 0x8, 0x6, 0x1000, 0x4, 0x10001, 0x5, 0x0, 0x5, 0x8, 0x101, 0x8001, 0x1, 0xffffff81, 0x2, 0xef, 0x80, 0x7, 0x8, 0x9, 0x9, 0x3ff000, 0xde49, 0x0, 0x5, 0x4, 0x6f, 0x2, 0x200, 0x8, 0x2, 0x36d000, 0x5, 0x2, 0x0, 0x101, 0xa5b2, 0x0, 0xde5, 0xfff, 0x0, 0x1aa8, 0x9, 0x2, 0xf, 0x400, 0x200, 0x1, 0x4, 0x2, 0x0, 0x401, 0x1ff, 0x5, 0x1, 0x5, 0xfffffffa, 0x5, 0x3, 0x5, 0x3, 0x2, 0x1ac, 0xdd64, 0x8001, 0x5, 0x3, 0xffff, 0xfffffff8, 0x7, 0x8, 0x1000, 0x1, 0x8, 0x5, 0xb08, 0xa, 0xfe7f, 0xfffffff5, 0x6, 0x7, 0xff, 0x2, 0x101, 0x2, 0x1, 0x7ff, 0x1, 0x4, 0x6, 0x4, 0x7, 0x2, 0x4, 0x0, 0x4, 0x5, 0x6, 0x4, 0xab1, 0x74f1, 0x9, 0x4a, 0x2, 0x7d2, 0x8c8a, 0xc, 0x5, 0xf6, 0x5, 0x8, 0x7f, 0x0, 0x0, 0x9c, 0x1, 0x1, 0xfffffbff, 0x5, 0x80000001, 0x10, 0x8000, 0x0, 0x0, 0xd, 0x3, 0x4, 0x6, 0x2, 0x3, 0x7, 0xfffff843, 0x3, 0x6, 0x9, 0x9, 0xffffff93, 0xd, 0xfff, 0x5, 0x80000001, 0xf93, 0x6, 0xd, 0xd, 0x7, 0x9, 0x4, 0x7fffffff, 0x3, 0xe92e, 0x2, 0x8, 0x0, 0x2, 0x2, 0xd, 0x2, 0x80, 0x4, 0x90, 0xfffffbff, 0xb0bb, 0x4, 0xc0, 0x19fa, 0x2b, 0xfffffeff, 0x6, 0x7, 0xa900, 0x8, 0x0, 0x9, 0x4, 0x4, 0x4, 0xfffff000, 0x10007, 0x3dbc4d99, 0x4e, 0xcef, 0x80000000, 0x400, 0x7, 0x6106, 0xf, 0x5, 0x5, 0x40, 0x5, 0x6, 0x7, 0x6, 0xe9c8, 0x1a0, 0x3fe, 0x10001, 0x8000, 0x5, 0x1000, 0x4, 0xb13]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x9, 0x80, 0x7, 0x10, 0x8000, 0x0, 0x9, 0x2000000, 0x800004, 0x5, 0x9, 0x6, 0x8, 0xb48, 0x5, 0x9, 0x101, 0xa, 0x3, 0x5, 0xfff, 0x7, 0x10000000, 0xffffffff, 0x1d3e, 0x4, 0x22, 0xfffffffd, 0x80000000, 0x8, 0xffffffff, 0x200, 0x7fff, 0x20009, 0x3, 0x1, 0xfff, 0x402, 0x0, 0x0, 0x3d0, 0x3, 0xd3fb, 0x8, 0x5, 0x9d, 0x5, 0x40, 0xf9e, 0x8, 0x1, 0xb, 0x6, 0x7, 0x8, 0x8, 0x800, 0x0, 0x3, 0xaa, 0x9, 0x4, 0x9, 0xfffffff9, 0x8, 0x7, 0x6, 0xffe, 0x800, 0x1, 0x6, 0x2, 0x81, 0x81, 0x5, 0x200, 0x401, 0x9464, 0x1, 0x7fff, 0x2, 0x9, 0x5a, 0x1a, 0x5fd, 0x81, 0x1, 0x7fffffff, 0x2, 0xf8c, 0x4, 0x4, 0x2, 0x0, 0x1, 0x6, 0xab99, 0xe, 0x1, 0x2, 0x3ff, 0x6, 0xb, 0x7f1, 0x7fffffff, 0x3, 0x40, 0x7, 0x1, 0x15, 0x1, 0x7fffffff, 0x1, 0x6, 0x3, 0x91, 0x0, 0x9, 0x4, 0x3, 0xffffff0d, 0xe, 0x7, 0xdc, 0x8, 0x80100001, 0xb, 0x6, 0x8, 0x0, 0x2f, 0xe1, 0x10000, 0x0, 0x1407, 0x9, 0x5, 0x8, 0x80000081, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x8, 0x5, 0x3, 0x0, 0x8000, 0x4, 0x7, 0x3, 0x0, 0x2, 0x6, 0x5, 0x4e38211e, 0x0, 0xa959, 0x67, 0x400, 0x1000, 0xaf, 0xfffffff9, 0x30cfd753, 0xe0, 0x4, 0x1, 0x800, 0x9, 0x4, 0x400, 0x39a, 0x2, 0x1ff, 0x1, 0x7fff, 0xffffffff, 0x40, 0x9742393, 0x0, 0x4ef5, 0x6, 0x80000001, 0xffff0fb7, 0x1, 0x0, 0x1, 0x0, 0xe, 0x3, 0x0, 0x5000, 0x4, 0xb14, 0x6, 0xf864eed, 0xc5, 0x8, 0x7, 0x125, 0x40, 0x2, 0x3ff, 0x9, 0x10000, 0x101, 0xc, 0x0, 0x9, 0x800, 0x7, 0x4, 0x3, 0x0, 0xf34a, 0x9, 0x18, 0x3ff, 0x1, 0xde, 0x0, 0x2, 0x77f, 0x0, 0x5, 0xcd0c, 0x0, 0x3, 0x0, 0x8, 0x4, 0x3ff, 0x1000, 0x1, 0x1, 0x100, 0x5553, 0x4, 0xfffffffe, 0x25f76613, 0xffffffff, 0xc7, 0x4, 0x1000, 0xf0, 0x3, 0x1, 0x7f, 0x3, 0x7fff, 0x5, 0x3, 0x101, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}]}}]}, 0x854}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r6, 0xc06c4124, &(0x7f00000002c0)) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4.300448574s ago: executing program 0 (id=11857): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='udt trusted:'], 0x20, 0xfffffffffffffffd) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r5 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0xd, r6, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x17}], 0x1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r7, 0x0, 0x0}, 0x10) (async, rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) (async) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.796090165s ago: executing program 3 (id=11859): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a300000000009"], 0x88}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x62, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x80002, 0x2) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r7, 0x0, 0x0, 0x2, 0x1000, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x0, 0xfffffffc}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x80047456, 0x0) socket$inet6(0xa, 0x3, 0x7) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000140)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x7f, 0x8, 0x6, 0x6}}, 0x400000) r9 = fsopen(0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="636861b267c4237ef5315e8ec73161ec6e67656861749cacc393306b3030ffffffff000000003030325e2f64657603000000000000009944212f747479716d45319f0c012ade46b7ff602bba998b27b52588f7bdf1844f1eeb810ea95d105aed35cb2fed14c69341cc4005e106"], 0x36) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000200)=0xd) 3.426771825s ago: executing program 0 (id=11861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 2) 2.862570365s ago: executing program 0 (id=11866): syz_open_dev$vim2m(&(0x7f0000000500), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x36de, 0x0, 0x4d, &(0x7f0000000180)="d1596137019028b4e6973edf1911fbfc4c57a11c8b9430e181a0399636ff048efb6d1ff9da18c7b520508922e15ef5a43a2403935d48ed4c365d55448dc474f02bfc8c827504ccfccbaca50d60"}, {0x36de, 0x4801, 0x0, 0x0}], 0x2}) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f00000000c0)=0x4, 0x4) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x10) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) r6 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYBLOB="6d30826100000000084e13002febca69661ed574a444c0289d8cecf84bd81c77a51e5a4017e636e1dd11420611c8dcb79457cb602febb5cab7568c4e240301a2c98981fd504e681aa3ed2a6a8814fbd6f4ed40f1569c4a88ed8d74626e1677e9ad69b78789bf21e95cf48028fbd161e9ca474d125031a618042494cec2e7da", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2.630652214s ago: executing program 3 (id=11867): socket$alg(0x26, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x2) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xc3, 0x7f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000000, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0xb4e, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd8e, 0x8000200, 0x6, 0x5, 0x0, 0x0, 0x0, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe5, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8, 0x0, 0x0}}, 0x10) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, &(0x7f00000000c0)={0x0, 0x24, 0xf0, {0xf0, 0xf, "a79adbf9a2a42fcab3c18ac2bbf7622fb6d398b49823f9f56ab73cd246ecf02fff54283b46bf5f6b69fedd1d622d0f428b4de6afc8c2a8f4f5a7ca780e48d907fa9508efac4d6dab19d983dff74411163a362004d85c4179452ecbbc214a8183eba812fe2871fbdb382633a8453ae75b19f451bd3be7f45d8ec3608314551b8b35216cc770e7e43456d2ddd809e1dd06af54ecb2860463b661ae44c8ef86ed75d0d471c4c1309d6151b96fcba07b1f16c670a5535a10ab28533b98d3c1e2c51992fbd9103476d56c9c631c4094fe39a3c8592ad0f6de5218b3618188f02fe73916fbaadbed4585177230848e6662"}}, &(0x7f0000001180)=ANY=[@ANYBLOB="00031b0000001b031de2e6e34cc6577387e480465dce4bce453c9ac65ff70c995be9b6e287da0d0e59689ff37001e29f91d7eaf7b20477ebff6d212e34965492a1ff56b746fcaa23c8f6b45161867e5ce2bc20ed162f86bcfb15a585c52733f2e608c5385ebb5b1dfec3d280ffff52a7f47258d7fd4da1363744f34cf85b2d6aa95114efce18988c02c225291ed3c2ca2ae19aace2ca665d27af203c3949ff10b0ac926acd"], &(0x7f00000001c0)={0x0, 0xf, 0x28, {0x5, 0xf, 0x28, 0x2, [@generic={0x1c, 0x10, 0xa, "cabb6ecf8687be43372535d7fcf534b4210e55b512bd8d6e47"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x2, 0x9, 0x400}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0xfa, 0x10, "9369b810", "562ad958"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x4e, 0x6, 0x9d, 0x0, 0x6}}}, &(0x7f0000000800)={0x44, &(0x7f0000000300)={0x0, 0x15}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0xa0, 0x10}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0xcc}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xeb}, &(0x7f0000000500)={0x40, 0xb, 0x2, "3a04"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000580)={0x40, 0x13, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "982f"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xfe00}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000cc0)={0x18, &(0x7f0000000b00)={0x0, 0x24, 0x2a, {0x2a, 0x22, "8fc65a686beb215bbef11ab60f4dab45a1104b129adfff003446b0198e4a477ecc2c508bd36c7d6b"}}, &(0x7f0000000b40)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "9aa2da53df134e99f065d6b1295bcb9365c2ea7cfb85b4d44a5c6014f8e5c6c5001b3c9d197d172810e3591422a62c5588ff84c93ff8bb3a53a39d1ff520eca6244e75af177cfa8a9107afcd478561e8a2c18caed283c175c9ffcb35f8ccb3600077a89017cec6698eba57"}}, &(0x7f0000001240)={0x0, 0xf, 0x4a, {0x5, 0xf, 0x4a, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x10, 0x3, 0x21d, 0xf000, 0x7, [0xc00f, 0xffc0f0, 0xff00c0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c989f7776d6b6f7aa97c962c72b3237a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x2, 0xa7, 0x6, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x0, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x5, 0x4}]}}, &(0x7f0000000c40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x92, 0x18, 0x7, 0x6, "dd93e6d3", "c822a5d3"}}, &(0x7f0000000c80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0xe9, 0x4, 0xa3, 0xff, 0x7f}}}, &(0x7f0000001100)={0x44, &(0x7f0000000d00)={0x20, 0x17, 0x6b, "26512f6b805dfc276e9c165098d2e61e0c09335c993583d9c4c4abaf0ad57d37ea572953c0882c77526ec926badc098f8ee676d70053f0a167a80ac2fef4e9cef982caefb496985176d0ba44b97edf33ac379a23d4a89a925810c94e8054506c77a8cc040d8aa60a70109c"}, &(0x7f0000000d80)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000e00)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x10, 0x8}}, &(0x7f0000000e80)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000ec0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000f00)={0x40, 0xb, 0x2, '$J'}, &(0x7f0000000f40)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000000f80)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000fc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001000)={0x40, 0x19, 0x2, "f654"}, &(0x7f0000001040)={0x40, 0x1a, 0x2, 0x4c1e}, 0xfffffffffffffffe, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0xf9}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x8}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x17, 0x0, &(0x7f0000000080)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0xb5) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x11a, &(0x7f0000001440)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x108, 0x2, 0x1, 0x22, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "148a"}, {0x5, 0x24, 0x0, 0x4000}, {0xd, 0x24, 0xf, 0x1, 0xea, 0x5b4e, 0xb0d1, 0x7}, {0x6, 0x24, 0x1a, 0x400}, [@country_functional={0xa, 0x24, 0x7, 0x1, 0xffff, [0x4, 0x0]}, @dmm={0x7, 0x24, 0x14, 0xfaf1}, @obex={0x5, 0x24, 0x15, 0x8}, @mdlm_detail={0x94, 0x24, 0x13, 0x0, "b00255ffee48986d656067e43390aed2b115c2ad0efa2f4416df993bb44b03649603abd7086494bc9f4f604b1aa085055032c91863286285964c378cd21be62fbdb5c5c666c3dbbf5e22ab0e32304114c2700f0038bcace2402c9a34eca592860653e1477bfc6c37941abee679c2c19e25a38ada4607ba75647dcbc5408a81a09af0d70c70ecd8c8ccbf6d8f58b5d8e9"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x3, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7f, 0x10, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x2, 0x94}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x300, 0x6, 0x6, 0x4, 0x20, 0x7}, 0x13c, &(0x7f0000001580)={0x5, 0xf, 0x13c, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x7, 0xff00, 0x8, [0xc0cf, 0xc00f, 0x8080c0, 0x3f0f]}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x4, 0xf00f, 0xa000, [0xf0, 0x30, 0x0]}, @generic={0x103, 0x10, 0xa, "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"}]}, 0x1, [{0xf9, &(0x7f00000012c0)=@string={0xf9, 0x3, "f8cb252a4015e458743919f8954a4f61dde661d9d86b61df5af239ed360e0846df903be58b0c00311cd644850ee1df14b4cbd810b63d72550e251e7b8979cfdce25930a9c0414b2588a076af0a798d62ed7f67cefb77103429721e07f6fdca106a8d7226649971b261c22d2d8cb19c2b6495145262c7fac79f8bba6f1f50e6bc18491c9d098fc43474db06d417782ea4e7eca6a607d89ba6f6577a7f005d3cc22b848c6c283d786fad8fa4f3c1d78a6aef8753ac83fb9a81727ad41b764f05b2444ba3465225d3a647616d539b576c477c7a02006cbafe80d16389275d95698092f66c76516e194fe39f59202d68763432ee50568aff35"}}]}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x8, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'veth1_to_bond\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000a00)=0xe4) sendmsg$nl_route(r5, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@ipmr_delroute={0x30, 0x19, 0x8, 0x70bd2d, 0x25dfdbfc, {0x80, 0x20, 0x20, 0x1, 0xfd, 0x0, 0xfd}, [@RTA_MULTIPATH={0xc, 0x9, {0xffa8, 0x0, 0x42, r10}}, @RTA_UID={0x8, 0x19, r11}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008810}, 0x200400c0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.630282428s ago: executing program 5 (id=11868): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffff9c, &(0x7f00000003c0), 0x42, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r1, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) readv(r3, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200092430514020029bd7000"/32], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r7 = socket$inet6(0xa, 0x3, 0x5) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000b9ba4a8e2e85128a416d5b049bbd2a92119333abf9db1aaf25da1267de599b086d082b23fbd817abad87f17c86262f53a2a8af7bcea958c1f1a28805995b6e7d031e07fbe5bc38d114027e70e4eeeda2aebba36ae8750e34b6008a6f87f7b990352a9e1c832ea54c13235ba49213feaaeb292fac4ad6f32c8b39fe3914f53183e499d78aa633a0ebb718bd20a0ddf01ad7e3b95b2718bbd9a20a0f8dc87df45f522d5f1429f3fcba9229440a7f870644a4a32bb86deab1b5aa6487627a7a0a19c9f914c7d28eb5fef0f4d7ff7f0c4fa051677984b8c2c6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r8}, 0x38) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.515276047s ago: executing program 2 (id=11869): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.463668237s ago: executing program 2 (id=11870): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) 2.393128328s ago: executing program 2 (id=11871): io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddfa, 0x400, 0xfffffffe, 0x255}) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) (async) read$FUSE(r0, &(0x7f0000004340)={0x2020}, 0xfe00) (async) io_setup(0x1, &(0x7f00000004c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x30, 0x0, &(0x7f0000000240)=0xba) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0xe8640) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000ac0)={0x5ba, 0x7, 0x8000, {0x8000, 0x8}, 0x4, 0x10}) (async, rerun: 64) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) r4 = dup(r3) (async, rerun: 64) r5 = syz_io_uring_setup(0x51f4, &(0x7f0000000480)={0x0, 0x7734, 0x40, 0x400001, 0x353}, &(0x7f0000000000), &(0x7f0000000080)) (rerun: 64) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) close_range(r4, r3, 0x2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r7, 0x30b, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x800) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r8, 0x0, 0x0, 0x4000004, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.17183043s ago: executing program 2 (id=11872): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) (fail_nth: 2) 1.738474002s ago: executing program 1 (id=11873): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'sit0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 1.722514327s ago: executing program 2 (id=11874): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6(0xa, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r2 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) syz_usb_control_io(r2, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000880)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "6be1b7c3ed3ff5358e866c9a8a2df4f1d84f3c3c938c2f7b"}}, 0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) write$tun(r3, &(0x7f0000000600)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@gre={{0x8, 0x4, 0x2, 0x9, 0xf2, 0x67, 0x0, 0x1, 0x2f, 0x0, @loopback, @remote, {[@rr={0x7, 0x3, 0xc4}, @timestamp_prespec={0x44, 0x4, 0xa, 0x3, 0x4}, @rr={0x7, 0x3, 0x6f}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa, 0x0, [0x68], "1d944bfa30ece52bfd92"}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0x4, 0x3, 0x0, 0x3, 0x0, 0xf}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x2, {0x7fffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x4, "fa2c972047831c04ecd8a44dc771b301bd4b1948fedfd5b64152ba93c4ff191929eb45f3c0a13848ccff1e609bafaab86dabb3001a466b470c89d97db0ac00fa99f5993bd81534f23cca881eef50bd96d862e500ef56034e11996124fcbde38e5d77888ed526a23f2e11363599ecfc3ec102c070dd3549c3761f6649b6094c2b3826"}}}}}, 0x100) r4 = socket(0x10, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@gettaction={0x84, 0x32, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9af}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x48891}, 0x24040049) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) 1.563301895s ago: executing program 1 (id=11875): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000200)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x7172, 0xa8b, 0x1, 0x0, 0xfffffffe, 0x0, [{0x10000, 0x1, 0x5}]}) 1.505174123s ago: executing program 1 (id=11876): r0 = socket$key(0xf, 0x3, 0x2) r1 = memfd_secret(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="2e0000002800000066e02a38abe022c53ca4ad7abf50285e8d8b28b8786ce2b745c64c655d7e771cea7f912bd6fbb1d61675ce7834b55ce66e634ee44c55b9eeb3942faf413dbdcd69cbf4d5304327a795b944", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2, 0x0, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x2, 0x4}}, 0x26) r6 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r6, 0x7000}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000300)={[0x5, 0x4]}, 0x8) ioctl$PPPIOCGL2TPSTATS(r5, 0x40047452, 0x0) r7 = socket(0x5, 0x2, 0xfffffffc) socket$netlink(0x10, 0x3, 0x6) setsockopt(r7, 0x107, 0x17, &(0x7f0000000080)="0000d85c", 0x4) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x7}, 0x0) 1.423373637s ago: executing program 1 (id=11877): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000080)=0x6, 0x4) r1 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000380), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="746172676574205043493a30fb6e3a643a302e313800"], 0x14) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xe) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0xa65, 0x4) syz_clone(0x88211c00, 0x0, 0x0, 0x0, 0x0, 0x0) 474.314096ms ago: executing program 1 (id=11878): r0 = socket(0x40000000002, 0x3, 0x6) setsockopt(r0, 0xff, 0x1, 0x0, 0x32) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xfffffff9, 0x2, 0x7fff, 0xea, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0xc}, 0x50) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00'/13, @ANYRES32=0x0, @ANYBLOB="2599ad8840000200140012800b00010067656e6576650000040002800a0001007246807bfae30000"], 0x40}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x7, @mcast1, 0xfff}}}, 0x84) socket(0x40000000002, 0x3, 0x6) (async) setsockopt(r0, 0xff, 0x1, 0x0, 0x32) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xfffffff9, 0x2, 0x7fff, 0xea, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0xc}, 0x50) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) (async) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00'/13, @ANYRES32=0x0, @ANYBLOB="2599ad8840000200140012800b00010067656e6576650000040002800a0001007246807bfae30000"], 0x40}}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000080)=0x8) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x7, @mcast1, 0xfff}}}, 0x84) (async) 387.178094ms ago: executing program 1 (id=11879): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073"], 0x88}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x62, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x80002, 0x2) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r7, 0x0, 0x0, 0x2, 0x1000, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x0, 0xfffffffc}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x80047456, 0x0) socket$inet6(0xa, 0x3, 0x7) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000140)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x7f, 0x8, 0x6, 0x6}}, 0x400000) r9 = fsopen(0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="636861b267c4237ef5315e8ec73161ec6e67656861749cacc393306b3030ffffffff000000003030325e2f64657603000000000000009944212f747479716d45319f0c012ade46b7ff602bba998b27b52588f7bdf1844f1eeb810ea95d105aed35cb2fed14c69341cc4005e106"], 0x36) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000200)=0xd) 0s ago: executing program 2 (id=11880): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r1, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) kernel console output (not intermixed with test programs): 862.854495][T14192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2862.912066][T14192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2862.974001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2863.013795][T14192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2863.038448][T14192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2863.106818][T14192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2863.217953][ T8252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2863.376499][ T3139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2863.684729][ T4381] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2863.844828][ T4381] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2863.873327][ T4381] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2863.891244][ T4381] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2863.918392][ T4381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2864.009312][ T4381] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2864.016763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2864.045353][ T4381] usb 4-1: invalid MIDI out EP 0 [ 2864.402718][T13895] udevd[13895]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2864.452632][ T44] usb 3-1: USB disconnect, device number 42 [ 2864.458766][ C1] keytouch 0003:0926:3333.0039: usb_submit_urb(ctrl) failed: -19 [ 2864.484924][ T4381] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2864.522710][ T30] audit: type=1326 audit(1760006000.361:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14231 comm="syz.2.11666" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x0 [ 2864.835869][T14237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2865.063931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2865.135183][T26886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2865.202593][T14243] FAULT_INJECTION: forcing a failure. [ 2865.202593][T14243] name failslab, interval 1, probability 0, space 0, times 0 [ 2865.227451][T14243] CPU: 1 UID: 0 PID: 14243 Comm: syz.2.11668 Not tainted syzkaller #0 PREEMPT(full) [ 2865.227476][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2865.227489][T14243] Call Trace: [ 2865.227498][T14243] [ 2865.227507][T14243] dump_stack_lvl+0x189/0x250 [ 2865.227535][T14243] ? __pfx____ratelimit+0x10/0x10 [ 2865.227559][T14243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2865.227579][T14243] ? __pfx__printk+0x10/0x10 [ 2865.227605][T14243] ? __pfx___might_resched+0x10/0x10 [ 2865.227632][T14243] should_fail_ex+0x414/0x560 [ 2865.227661][T14243] should_failslab+0xa8/0x100 [ 2865.227684][T14243] __kmalloc_noprof+0xcb/0x7f0 [ 2865.227710][T14243] ? vb2_core_reqbufs+0x904/0x1420 [ 2865.227742][T14243] vb2_core_reqbufs+0x904/0x1420 [ 2865.227783][T14243] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 2865.227812][T14243] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 2865.227837][T14243] ? rcu_is_watching+0x15/0xb0 [ 2865.227860][T14243] ? __vb2_init_fileio+0x1e8/0xff0 [ 2865.227887][T14243] ? trace_contention_end+0x39/0x120 [ 2865.227916][T14243] __vb2_init_fileio+0x318/0xff0 [ 2865.227945][T14243] ? __lock_acquire+0xab9/0xd20 [ 2865.227975][T14243] __vb2_perform_fileio+0x284/0x1600 [ 2865.228017][T14243] vb2_fop_write+0x22f/0x340 [ 2865.228047][T14243] v4l2_write+0x199/0x2c0 [ 2865.228079][T14243] ? __pfx_v4l2_write+0x10/0x10 [ 2865.228104][T14243] vfs_write+0x27e/0xb30 [ 2865.228139][T14243] ? __pfx_vfs_write+0x10/0x10 [ 2865.228168][T14243] ? __fget_files+0x2a/0x420 [ 2865.228188][T14243] ? __fget_files+0x2a/0x420 [ 2865.228204][T14243] ? __fget_files+0x3a0/0x420 [ 2865.228220][T14243] ? __fget_files+0x2a/0x420 [ 2865.228246][T14243] ksys_write+0x145/0x250 [ 2865.228271][T14243] ? exc_page_fault+0x82/0x100 [ 2865.228295][T14243] ? __pfx_ksys_write+0x10/0x10 [ 2865.228330][T14243] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2865.228357][T14243] ? lockdep_hardirqs_on+0x9c/0x150 [ 2865.228384][T14243] __do_fast_syscall_32+0xb6/0x2b0 [ 2865.228410][T14243] ? lockdep_hardirqs_on+0x9c/0x150 [ 2865.228437][T14243] do_fast_syscall_32+0x34/0x80 [ 2865.228463][T14243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2865.228488][T14243] RIP: 0023:0xf708d539 [ 2865.228506][T14243] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2865.228524][T14243] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2865.228544][T14243] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 2865.228558][T14243] RDX: 00000000fffffd9d RSI: 0000000000000000 RDI: 0000000000000000 [ 2865.228571][T14243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2865.228582][T14243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2865.228594][T14243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2865.228623][T14243] [ 2865.800205][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11670'. [ 2865.864094][T26886] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2866.023904][T26886] usb 2-1: Using ep0 maxpacket: 8 [ 2866.103256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2866.400732][T26886] usb 2-1: config 10 has an invalid interface number: 149 but max is 1 [ 2866.409936][T26886] usb 2-1: config 10 has an invalid interface number: 112 but max is 1 [ 2866.419513][T26886] usb 2-1: config 10 contains an unexpected descriptor of type 0x2, skipping [ 2866.429899][T26886] usb 2-1: config 10 has no interface number 0 [ 2866.438235][T26886] usb 2-1: config 10 has no interface number 1 [ 2866.445369][T26886] usb 2-1: config 10 interface 149 altsetting 252 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2866.533227][ T4381] usb 4-1: USB disconnect, device number 98 [ 2866.857954][T26886] usb 2-1: config 10 interface 149 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 2867.055429][T26886] usb 2-1: config 10 interface 149 altsetting 252 has a duplicate endpoint with address 0x8, skipping [ 2867.123780][T26886] usb 2-1: config 10 interface 149 altsetting 252 has an endpoint descriptor with address 0x4E, changing to 0xE [ 2867.143424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2867.189506][T26886] usb 2-1: config 10 interface 149 altsetting 252 endpoint 0xE has an invalid bInterval 126, changing to 7 [ 2867.241535][T26886] usb 2-1: config 10 interface 149 altsetting 252 endpoint 0xE has invalid maxpacket 25428, setting to 1024 [ 2867.273691][T26886] usb 2-1: config 10 interface 149 altsetting 252 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 2867.323130][ T4381] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2867.331095][T26886] usb 2-1: config 10 interface 112 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 2867.348042][T26886] usb 2-1: config 10 interface 112 altsetting 3 bulk endpoint 0xC has invalid maxpacket 32 [ 2867.403721][T26886] usb 2-1: config 10 interface 112 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 2867.435632][T26886] usb 2-1: config 10 interface 112 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 2867.463813][T26886] usb 2-1: config 10 interface 112 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 2867.498818][T26886] usb 2-1: config 10 interface 112 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 2867.538708][ T4381] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2867.547474][ T4381] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2867.557716][T26886] usb 2-1: config 10 interface 112 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 2867.568873][ T4381] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2867.568921][ T4381] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2867.568951][ T4381] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2867.571033][ T4381] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2867.621577][ T4381] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2867.633877][ T4381] usb 4-1: Product: syz [ 2867.638062][ T4381] usb 4-1: Manufacturer: syz [ 2867.656379][T26886] usb 2-1: config 10 interface 112 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 2867.663750][ T4381] cdc_wdm 4-1:1.0: skipping garbage [ 2867.673901][ T4381] cdc_wdm 4-1:1.0: skipping garbage [ 2867.686128][ T4381] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2867.692073][ T4381] cdc_wdm 4-1:1.0: Unknown control protocol [ 2867.726981][T26886] usb 2-1: config 10 interface 112 altsetting 3 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2867.731551][T14274] FAULT_INJECTION: forcing a failure. [ 2867.731551][T14274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2867.763222][T20144] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2867.768158][T26886] usb 2-1: config 10 interface 112 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 2867.771234][T14274] CPU: 1 UID: 0 PID: 14274 Comm: syz.5.11677 Not tainted syzkaller #0 PREEMPT(full) [ 2867.771263][T14274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2867.771275][T14274] Call Trace: [ 2867.771286][T14274] [ 2867.771300][T14274] dump_stack_lvl+0x189/0x250 [ 2867.771330][T14274] ? __pfx____ratelimit+0x10/0x10 [ 2867.771358][T14274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2867.771380][T14274] ? __pfx__printk+0x10/0x10 [ 2867.771415][T14274] should_fail_ex+0x414/0x560 [ 2867.771446][T14274] _copy_to_user+0x31/0xb0 [ 2867.771469][T14274] simple_read_from_buffer+0xe1/0x170 [ 2867.771507][T14274] proc_fail_nth_read+0x1b3/0x220 [ 2867.771536][T14274] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2867.771565][T14274] ? rw_verify_area+0x2a6/0x4d0 [ 2867.771593][T14274] ? __lock_acquire+0xab9/0xd20 [ 2867.771611][T14274] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2867.771638][T14274] vfs_read+0x1fd/0xa30 [ 2867.771665][T14274] ? fdget_pos+0x247/0x320 [ 2867.771689][T14274] ? __pfx___mutex_lock+0x10/0x10 [ 2867.771717][T14274] ? __pfx_vfs_read+0x10/0x10 [ 2867.771746][T14274] ? __fget_files+0x2a/0x420 [ 2867.771770][T14274] ? __fget_files+0x3a0/0x420 [ 2867.771787][T14274] ? __fget_files+0x2a/0x420 [ 2867.771815][T14274] ksys_read+0x145/0x250 [ 2867.771846][T14274] ? __pfx_ksys_read+0x10/0x10 [ 2867.771877][T14274] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2867.771906][T14274] ? lockdep_hardirqs_on+0x9c/0x150 [ 2867.771934][T14274] __do_fast_syscall_32+0xb6/0x2b0 [ 2867.771963][T14274] ? lockdep_hardirqs_on+0x9c/0x150 [ 2867.771993][T14274] do_fast_syscall_32+0x34/0x80 [ 2867.772019][T14274] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2867.772046][T14274] RIP: 0023:0xf700d539 [ 2867.772064][T14274] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2867.772082][T14274] RSP: 002b:00000000f53fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2867.772105][T14274] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53fd620 [ 2867.772120][T14274] RDX: 000000000000000f RSI: 00000000f73a5ff4 RDI: 0000000000000000 [ 2867.772139][T14274] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2867.772151][T14274] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2867.772163][T14274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2867.772194][T14274] [ 2867.923255][T20144] usb 3-1: Using ep0 maxpacket: 8 [ 2867.929000][T26886] usb 2-1: config 10 interface 112 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 2867.970376][T20144] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 2867.978258][T26884] usb 4-1: USB disconnect, device number 99 [ 2867.984585][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2867.984610][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2867.984628][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2868.021950][T20144] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2868.060159][T26886] usb 2-1: config 10 interface 149 has no altsetting 0 [ 2868.081681][T20144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2868.103790][T26886] usb 2-1: config 10 interface 112 has no altsetting 0 [ 2868.110608][T20144] usb 3-1: Product: syz [ 2868.118505][T20144] usb 3-1: Manufacturer: syz [ 2868.131639][T20144] usb 3-1: SerialNumber: syz [ 2868.151181][T20144] usb 3-1: config 0 descriptor?? [ 2868.154062][T26886] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10ae, bcdDevice=61.07 [ 2868.166783][T20144] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2868.174968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2868.174981][T26886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2868.175003][T26886] usb 2-1: Product: Ј [ 2868.175019][T26886] usb 2-1: Manufacturer: ˊ衿╛⳴蹧爪꣤暻播珶댗鸺賖넰憣ཪ륳嚣錣忍▙뱚凡᥀煖⩹繏尃處᱀颞ղ峢☊붟볃㵍⦍鲬㚿ỷ敄鹆ړ뚠㺨ﱫ셋๚ꈛ知똶前䒘粜ᴠ룬㝼୎恭헯㻝蛍촍槸﷒㑹鈗륈푱℩冪䭗컴இ끷嵩1曰㫼᝻쟒尼椀Ύ辞눳῝﮽땸똡媀嗥唁Ƃ㉔ꛬᣜ㌝뷱嗯쫩 [ 2868.175055][T26886] usb 2-1: SerialNumber: ㋄롷䑑킌꟯촵㠦鶮ꋻ톉䀤里唖兓쌦莏䫝썋猢邉남ᴃ費藁ꪊ켇⵷씀ଜ킻姶爤฿滚⠏叻뙹毽ᖓ攘ꐆ [ 2868.230467][ C1] vkms_vblank_simulate: vblank timer overrun [ 2868.254763][T14245] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2868.256266][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2868.294936][T20144] usb 3-1: setting power ON [ 2868.299490][T20144] dvb-usb: bulk message failed: -22 (2/0) [ 2868.308659][T20144] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2868.323454][T20144] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2868.331970][T20144] usb 3-1: media controller created [ 2868.372791][T14272] dvb-usb: bulk message failed: -22 (3/0) [ 2868.379551][T14272] cxusb: i2c wr: len=80 is too big! [ 2868.379551][T14272] [ 2868.424469][T20144] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2868.473663][T20144] usb 3-1: selecting invalid altsetting 6 [ 2868.479810][T20144] usb 3-1: digital interface selection failed (-22) [ 2868.491855][T14245] netlink: 'syz.1.11669': attribute type 8 has an invalid length. [ 2868.503361][T20144] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2868.526528][ T5910] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2868.532362][T20144] usb 3-1: setting power OFF [ 2868.542072][T20144] dvb-usb: bulk message failed: -22 (2/0) [ 2868.568306][T20144] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2868.588701][T20144] (NULL device *): no alternate interface [ 2868.684106][T26886] usb 2-1: USB disconnect, device number 95 [ 2868.724587][ T5910] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2868.746215][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2868.756718][ T5910] usb 6-1: Product: syz [ 2868.760907][ T5910] usb 6-1: Manufacturer: syz [ 2868.766347][ T5910] usb 6-1: SerialNumber: syz [ 2868.799949][ T5910] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2868.836945][T26884] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2868.981079][ T3138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2868.993955][ T1807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2869.132755][T14281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2869.164361][T14281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2869.213155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2869.283163][ T5829] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2869.398285][T14272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2869.408726][T14272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2869.443160][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 2869.449938][ T5829] usb 2-1: config 150 has an invalid interface number: 204 but max is 0 [ 2869.459645][ T5829] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 2869.470351][ T5829] usb 2-1: config 150 has no interface number 0 [ 2869.477636][ T5829] usb 2-1: config 150 interface 204 has no altsetting 0 [ 2869.495246][ T5829] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2869.504426][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2869.512545][ T5829] usb 2-1: Product: syz [ 2869.517303][ T5829] usb 2-1: Manufacturer: syz [ 2869.521916][ T5829] usb 2-1: SerialNumber: syz [ 2869.621362][T14272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2869.630891][ T4381] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2869.643538][T14272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2869.679349][ T5910] usb 6-1: USB disconnect, device number 90 [ 2869.681342][T20144] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2869.730665][T20144] usb 3-1: USB disconnect, device number 43 [ 2869.756167][T14295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2869.784817][T14295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2869.811691][T14295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2869.823233][ T4381] usb 4-1: Using ep0 maxpacket: 32 [ 2869.824200][T14295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2869.832618][ T4381] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 2869.853134][ T4381] usb 4-1: config 0 has no interface number 0 [ 2869.868490][ T4381] usb 4-1: config 0 interface 230 has no altsetting 0 [ 2869.897674][ T4381] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 2869.907617][ T4381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2869.918486][ T4381] usb 4-1: Product: syz [ 2869.922660][ T4381] usb 4-1: Manufacturer: syz [ 2869.928519][ T4381] usb 4-1: SerialNumber: syz [ 2869.938471][T26884] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2869.944144][ T4381] usb 4-1: config 0 descriptor?? [ 2869.955983][ T4381] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 2869.957563][T26884] ath9k_htc: Failed to initialize the device [ 2869.971484][ T5910] usb 6-1: ath9k_htc: USB layer deinitialized [ 2869.977887][ T4381] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 2870.059859][T14295] netlink: 'syz.1.11683': attribute type 21 has an invalid length. [ 2870.069023][T14295] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11683'. [ 2870.079418][T14295] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11683'. [ 2870.114602][T26886] usb 2-1: USB disconnect, device number 96 [ 2870.185217][T14309] FAULT_INJECTION: forcing a failure. [ 2870.185217][T14309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2870.198401][T14309] CPU: 1 UID: 0 PID: 14309 Comm: syz.1.11687 Not tainted syzkaller #0 PREEMPT(full) [ 2870.198426][T14309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2870.198438][T14309] Call Trace: [ 2870.198448][T14309] [ 2870.198456][T14309] dump_stack_lvl+0x189/0x250 [ 2870.198482][T14309] ? __pfx____ratelimit+0x10/0x10 [ 2870.198506][T14309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2870.198526][T14309] ? __pfx__printk+0x10/0x10 [ 2870.198558][T14309] should_fail_ex+0x414/0x560 [ 2870.198586][T14309] _copy_to_user+0x31/0xb0 [ 2870.198607][T14309] simple_read_from_buffer+0xe1/0x170 [ 2870.198639][T14309] proc_fail_nth_read+0x1b3/0x220 [ 2870.198665][T14309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2870.198709][T14309] ? rw_verify_area+0x2a6/0x4d0 [ 2870.198734][T14309] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2870.198758][T14309] vfs_read+0x1fd/0xa30 [ 2870.198789][T14309] ? __pfx_vfs_read+0x10/0x10 [ 2870.198814][T14309] ? tcp_getsockopt+0x83/0x130 [ 2870.198837][T14309] ? sock_recv_errqueue+0x480/0x510 [ 2870.198868][T14309] ? sock_recv_errqueue+0x480/0x510 [ 2870.198896][T14309] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2870.198927][T14309] ? do_sock_getsockopt+0x372/0x450 [ 2870.198957][T14309] ksys_read+0x145/0x250 [ 2870.198984][T14309] ? __pfx_ksys_read+0x10/0x10 [ 2870.199013][T14309] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2870.199039][T14309] ? lockdep_hardirqs_on+0x9c/0x150 [ 2870.199066][T14309] __do_fast_syscall_32+0xb6/0x2b0 [ 2870.199091][T14309] ? lockdep_hardirqs_on+0x9c/0x150 [ 2870.199118][T14309] do_fast_syscall_32+0x34/0x80 [ 2870.199143][T14309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2870.199166][T14309] RIP: 0023:0xf7f46539 [ 2870.199183][T14309] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2870.199200][T14309] RSP: 002b:00000000f5436590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2870.199220][T14309] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5436620 [ 2870.199234][T14309] RDX: 000000000000000f RSI: 00000000f73d5ff4 RDI: 0000000000000000 [ 2870.199246][T14309] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2870.199258][T14309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2870.199269][T14309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2870.199298][T14309] [ 2870.435641][ C1] vkms_vblank_simulate: vblank timer overrun [ 2870.803952][T14321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2871.228141][T14317] xt_socket: unknown flags 0x50 [ 2871.294771][T26886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2871.853173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2872.190224][T14351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11699'. [ 2872.250718][ T4381] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 2872.271318][ T4381] usb 4-1: USB disconnect, device number 100 [ 2872.383731][T26884] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2872.552271][T26884] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2872.574311][T26884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2872.582421][T26884] usb 2-1: Product: syz [ 2872.599459][T26884] usb 2-1: Manufacturer: syz [ 2872.605232][T26884] usb 2-1: SerialNumber: syz [ 2872.635171][T26884] usb 2-1: config 0 descriptor?? [ 2872.648946][T26884] ch341 2-1:0.0: ch341-uart converter detected [ 2872.803797][T20144] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2872.893180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2872.952242][T14365] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11702'. [ 2872.967675][T14365] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11702'. [ 2872.980651][T20144] usb 4-1: Using ep0 maxpacket: 8 [ 2872.990945][T20144] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 2873.001988][T20144] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2873.011557][T20144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2873.020009][T20144] usb 4-1: Product: syz [ 2873.024656][T20144] usb 4-1: Manufacturer: syz [ 2873.101074][T26884] usb 2-1: failed to send control message: -71 [ 2873.125079][T26884] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2873.135698][T20144] usb 4-1: SerialNumber: syz [ 2873.171209][T26884] usb 2-1: USB disconnect, device number 97 [ 2873.182433][T20144] usb 4-1: config 0 descriptor?? [ 2873.205207][T26884] ch341 2-1:0.0: device disconnected [ 2873.212129][T20144] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2873.247469][T20144] usb 4-1: setting power ON [ 2873.265642][T20144] dvb-usb: bulk message failed: -22 (2/0) [ 2873.298222][T20144] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2873.364050][T20144] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2873.451386][T14359] dvb-usb: bulk message failed: -22 (3/0) [ 2873.461297][T14359] cxusb: i2c wr: len=80 is too big! [ 2873.461297][T14359] [ 2873.469013][T20144] usb 4-1: media controller created [ 2873.546747][T20144] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2873.620979][T20144] usb 4-1: selecting invalid altsetting 6 [ 2873.645828][T14375] FAULT_INJECTION: forcing a failure. [ 2873.645828][T14375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2873.673167][T20144] usb 4-1: digital interface selection failed (-22) [ 2873.733717][T14375] CPU: 1 UID: 0 PID: 14375 Comm: syz.1.11705 Not tainted syzkaller #0 PREEMPT(full) [ 2873.733743][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2873.733756][T14375] Call Trace: [ 2873.733765][T14375] [ 2873.733774][T14375] dump_stack_lvl+0x189/0x250 [ 2873.733801][T14375] ? __pfx____ratelimit+0x10/0x10 [ 2873.733824][T14375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2873.733845][T14375] ? __pfx__printk+0x10/0x10 [ 2873.733866][T14375] ? __might_fault+0xb0/0x130 [ 2873.733904][T14375] should_fail_ex+0x414/0x560 [ 2873.733934][T14375] _copy_from_user+0x2d/0xb0 [ 2873.733955][T14375] kstrtouint_from_user+0xc4/0x170 [ 2873.733985][T14375] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2873.734029][T14375] proc_fail_nth_write+0x88/0x200 [ 2873.734055][T14375] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2873.734085][T14375] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2873.734111][T14375] vfs_write+0x27e/0xb30 [ 2873.734147][T14375] ? __pfx_vfs_write+0x10/0x10 [ 2873.734175][T14375] ? __fget_files+0x2a/0x420 [ 2873.734198][T14375] ? __fget_files+0x3a0/0x420 [ 2873.734215][T14375] ? __fget_files+0x2a/0x420 [ 2873.734241][T14375] ksys_write+0x145/0x250 [ 2873.734271][T14375] ? __pfx_ksys_write+0x10/0x10 [ 2873.734300][T14375] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2873.734328][T14375] ? lockdep_hardirqs_on+0x9c/0x150 [ 2873.734355][T14375] __do_fast_syscall_32+0xb6/0x2b0 [ 2873.734383][T14375] ? lockdep_hardirqs_on+0x9c/0x150 [ 2873.734410][T14375] do_fast_syscall_32+0x34/0x80 [ 2873.734437][T14375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2873.734460][T14375] RIP: 0023:0xf7f46539 [ 2873.734477][T14375] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2873.734495][T14375] RSP: 002b:00000000f5436590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2873.734515][T14375] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5436620 [ 2873.734529][T14375] RDX: 0000000000000001 RSI: 00000000f73d5ff4 RDI: 0000000000000000 [ 2873.734542][T14375] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2873.734553][T14375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2873.734566][T14375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2873.734596][T14375] [ 2873.933491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2873.934254][ C1] vkms_vblank_simulate: vblank timer overrun [ 2873.983065][ C1] vkms_vblank_simulate: vblank timer overrun [ 2874.250904][ T3138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2874.259566][T20144] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2874.334059][T26884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2874.346022][T20144] usb 4-1: setting power OFF [ 2874.353551][T20144] dvb-usb: bulk message failed: -22 (2/0) [ 2874.378864][T20144] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2874.409759][T20144] (NULL device *): no alternate interface [ 2874.734326][ T1807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2874.973133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2875.341068][T14391] tipc: Enabled bearer , priority 0 [ 2875.533894][T14391] syzkaller0: entered promiscuous mode [ 2875.539402][T14391] syzkaller0: entered allmulticast mode [ 2875.695506][T14391] FAULT_INJECTION: forcing a failure. [ 2875.695506][T14391] name failslab, interval 1, probability 0, space 0, times 0 [ 2875.718400][T14391] CPU: 0 UID: 0 PID: 14391 Comm: syz.0.11710 Not tainted syzkaller #0 PREEMPT(full) [ 2875.718425][T14391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2875.718438][T14391] Call Trace: [ 2875.718446][T14391] [ 2875.718456][T14391] dump_stack_lvl+0x189/0x250 [ 2875.718481][T14391] ? __pfx____ratelimit+0x10/0x10 [ 2875.718504][T14391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2875.718524][T14391] ? __pfx__printk+0x10/0x10 [ 2875.718549][T14391] ? __pfx___might_resched+0x10/0x10 [ 2875.718569][T14391] ? fs_reclaim_acquire+0x7d/0x100 [ 2875.718604][T14391] should_fail_ex+0x414/0x560 [ 2875.718632][T14391] should_failslab+0xa8/0x100 [ 2875.718653][T14391] __kmalloc_noprof+0xcb/0x7f0 [ 2875.718679][T14391] ? tomoyo_encode+0x28b/0x550 [ 2875.718712][T14391] tomoyo_encode+0x28b/0x550 [ 2875.718744][T14391] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2875.718773][T14391] ? tomoyo_domain+0xd9/0x130 [ 2875.718806][T14391] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2875.718828][T14391] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2875.718854][T14391] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2875.718892][T14391] ? __lock_acquire+0xab9/0xd20 [ 2875.718931][T14391] ? __fget_files+0x2a/0x420 [ 2875.718952][T14391] ? __fget_files+0x3a0/0x420 [ 2875.718969][T14391] ? __fget_files+0x2a/0x420 [ 2875.718989][T14391] security_file_ioctl_compat+0xcb/0x2d0 [ 2875.719013][T14391] __ia32_compat_sys_ioctl+0x128/0x840 [ 2875.719041][T14391] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2875.719066][T14391] ? __fget_files+0x3a0/0x420 [ 2875.719090][T14391] ? fput+0xa0/0xd0 [ 2875.719112][T14391] ? ksys_write+0x22a/0x250 [ 2875.719141][T14391] ? __pfx_ksys_write+0x10/0x10 [ 2875.719170][T14391] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2875.719198][T14391] ? lockdep_hardirqs_on+0x9c/0x150 [ 2875.719224][T14391] __do_fast_syscall_32+0xb6/0x2b0 [ 2875.719250][T14391] ? lockdep_hardirqs_on+0x9c/0x150 [ 2875.719278][T14391] do_fast_syscall_32+0x34/0x80 [ 2875.719310][T14391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2875.719338][T14391] RIP: 0023:0xf7fa7539 [ 2875.719355][T14391] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2875.719373][T14391] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2875.719393][T14391] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008922 [ 2875.719407][T14391] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 2875.719425][T14391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2875.719437][T14391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2875.719449][T14391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2875.719477][T14391] [ 2875.719563][T14391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2876.013189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2876.135817][T14391] tipc: Resetting bearer [ 2876.165449][T14359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2876.182563][T14390] tipc: Resetting bearer [ 2876.213485][T14390] tipc: Disabling bearer [ 2876.235084][T14359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2876.484583][T14359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2876.500168][T14359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2876.520633][T20144] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2876.538400][T20144] usb 4-1: USB disconnect, device number 101 [ 2876.895976][T14415] FAULT_INJECTION: forcing a failure. [ 2876.895976][T14415] name failslab, interval 1, probability 0, space 0, times 0 [ 2876.965963][T14415] CPU: 0 UID: 0 PID: 14415 Comm: syz.5.11716 Not tainted syzkaller #0 PREEMPT(full) [ 2876.966005][T14415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2876.966025][T14415] Call Trace: [ 2876.966040][T14415] [ 2876.966055][T14415] dump_stack_lvl+0x189/0x250 [ 2876.966095][T14415] ? __pfx____ratelimit+0x10/0x10 [ 2876.966136][T14415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2876.966168][T14415] ? __pfx__printk+0x10/0x10 [ 2876.966193][T14415] ? __pfx___might_resched+0x10/0x10 [ 2876.966220][T14415] ? fs_reclaim_acquire+0x7d/0x100 [ 2876.966254][T14415] should_fail_ex+0x414/0x560 [ 2876.966282][T14415] should_failslab+0xa8/0x100 [ 2876.966301][T14415] __kmalloc_noprof+0xcb/0x7f0 [ 2876.966327][T14415] ? tomoyo_encode+0x28b/0x550 [ 2876.966358][T14415] tomoyo_encode+0x28b/0x550 [ 2876.966389][T14415] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2876.966426][T14415] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2876.966449][T14415] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2876.966473][T14415] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2876.966511][T14415] ? __lock_acquire+0xab9/0xd20 [ 2876.966548][T14415] ? __fget_files+0x2a/0x420 [ 2876.966570][T14415] ? __fget_files+0x3a0/0x420 [ 2876.966587][T14415] ? __fget_files+0x2a/0x420 [ 2876.966607][T14415] security_file_ioctl_compat+0xcb/0x2d0 [ 2876.966631][T14415] __ia32_compat_sys_ioctl+0x128/0x840 [ 2876.966659][T14415] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2876.966683][T14415] ? __fget_files+0x3a0/0x420 [ 2876.966707][T14415] ? fput+0xa0/0xd0 [ 2876.966727][T14415] ? ksys_write+0x22a/0x250 [ 2876.966751][T14415] ? exc_page_fault+0x82/0x100 [ 2876.966774][T14415] ? __pfx_ksys_write+0x10/0x10 [ 2876.966802][T14415] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2876.966827][T14415] ? lockdep_hardirqs_on+0x9c/0x150 [ 2876.966854][T14415] __do_fast_syscall_32+0xb6/0x2b0 [ 2876.966879][T14415] ? lockdep_hardirqs_on+0x9c/0x150 [ 2876.966905][T14415] do_fast_syscall_32+0x34/0x80 [ 2876.966930][T14415] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2876.966953][T14415] RIP: 0023:0xf700d539 [ 2876.966969][T14415] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2876.966985][T14415] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2876.967006][T14415] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008038550a [ 2876.967019][T14415] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 2876.967031][T14415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2876.967042][T14415] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2876.967053][T14415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2876.967081][T14415] [ 2876.967101][T14415] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2877.295911][ T3139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2877.374778][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2878.277790][T14427] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11720'. [ 2878.298010][T14427] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11720'. [ 2878.343495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2878.450186][T14422] FAULT_INJECTION: forcing a failure. [ 2878.450186][T14422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2878.466849][T14432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11721'. [ 2878.481250][T14422] CPU: 1 UID: 0 PID: 14422 Comm: syz.2.11719 Not tainted syzkaller #0 PREEMPT(full) [ 2878.481274][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2878.481287][T14422] Call Trace: [ 2878.481295][T14422] [ 2878.481303][T14422] dump_stack_lvl+0x189/0x250 [ 2878.481328][T14422] ? __pfx____ratelimit+0x10/0x10 [ 2878.481350][T14422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2878.481371][T14422] ? __pfx__printk+0x10/0x10 [ 2878.481392][T14422] ? __might_fault+0xb0/0x130 [ 2878.481425][T14422] should_fail_ex+0x414/0x560 [ 2878.481453][T14422] _copy_from_user+0x2d/0xb0 [ 2878.481472][T14422] move_addr_to_kernel+0x7e/0x160 [ 2878.481500][T14422] get_compat_msghdr+0x3bd/0x4a0 [ 2878.481527][T14422] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2878.481560][T14422] ___sys_sendmsg+0x193/0x2a0 [ 2878.481585][T14422] ? __pfx____sys_sendmsg+0x10/0x10 [ 2878.481609][T14422] ? __lock_acquire+0xab9/0xd20 [ 2878.481656][T14422] ? __fget_files+0x2a/0x420 [ 2878.481673][T14422] ? __fget_files+0x3a0/0x420 [ 2878.481699][T14422] __sys_sendmmsg+0x28e/0x430 [ 2878.481727][T14422] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2878.481747][T14422] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2878.481794][T14422] ? ksys_write+0x22a/0x250 [ 2878.481819][T14422] ? exc_page_fault+0x82/0x100 [ 2878.481842][T14422] ? __pfx_ksys_write+0x10/0x10 [ 2878.481874][T14422] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2878.481899][T14422] __do_fast_syscall_32+0xb6/0x2b0 [ 2878.481925][T14422] ? lockdep_hardirqs_on+0x9c/0x150 [ 2878.481951][T14422] do_fast_syscall_32+0x34/0x80 [ 2878.481976][T14422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2878.481999][T14422] RIP: 0023:0xf708d539 [ 2878.482016][T14422] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2878.482031][T14422] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2878.482052][T14422] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000440 [ 2878.482065][T14422] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2878.482076][T14422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2878.482087][T14422] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2878.482098][T14422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2878.482126][T14422] [ 2878.721174][T14432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11721'. [ 2879.002130][T14439] FAULT_INJECTION: forcing a failure. [ 2879.002130][T14439] name failslab, interval 1, probability 0, space 0, times 0 [ 2879.024281][T14439] CPU: 1 UID: 0 PID: 14439 Comm: syz.2.11723 Not tainted syzkaller #0 PREEMPT(full) [ 2879.024305][T14439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2879.024317][T14439] Call Trace: [ 2879.024323][T14439] [ 2879.024329][T14439] dump_stack_lvl+0x189/0x250 [ 2879.024347][T14439] ? __pfx____ratelimit+0x10/0x10 [ 2879.024364][T14439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2879.024380][T14439] ? __pfx__printk+0x10/0x10 [ 2879.024397][T14439] ? __pfx___might_resched+0x10/0x10 [ 2879.024411][T14439] ? fs_reclaim_acquire+0x7d/0x100 [ 2879.024435][T14439] should_fail_ex+0x414/0x560 [ 2879.024455][T14439] should_failslab+0xa8/0x100 [ 2879.024468][T14439] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2879.024487][T14439] ? __alloc_skb+0x112/0x2d0 [ 2879.024500][T14439] ? netlink_autobind+0xdb/0x300 [ 2879.024519][T14439] __alloc_skb+0x112/0x2d0 [ 2879.024534][T14439] netlink_sendmsg+0x5c6/0xb30 [ 2879.024553][T14439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2879.024569][T14439] ? __import_iovec+0x5d4/0x7f0 [ 2879.024580][T14439] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2879.024601][T14439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2879.024614][T14439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2879.024628][T14439] __sock_sendmsg+0x219/0x270 [ 2879.024650][T14439] ____sys_sendmsg+0x505/0x830 [ 2879.024669][T14439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2879.024695][T14439] ___sys_sendmsg+0x21f/0x2a0 [ 2879.024712][T14439] ? __pfx____sys_sendmsg+0x10/0x10 [ 2879.024749][T14439] ? __fget_files+0x2a/0x420 [ 2879.024761][T14439] ? __fget_files+0x3a0/0x420 [ 2879.024779][T14439] __sys_sendmsg+0x164/0x220 [ 2879.024796][T14439] ? __pfx___sys_sendmsg+0x10/0x10 [ 2879.024817][T14439] ? __pfx_ksys_write+0x10/0x10 [ 2879.024837][T14439] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2879.024856][T14439] ? lockdep_hardirqs_on+0x9c/0x150 [ 2879.024874][T14439] __do_fast_syscall_32+0xb6/0x2b0 [ 2879.024892][T14439] ? lockdep_hardirqs_on+0x9c/0x150 [ 2879.024910][T14439] do_fast_syscall_32+0x34/0x80 [ 2879.024927][T14439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2879.024944][T14439] RIP: 0023:0xf708d539 [ 2879.024955][T14439] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2879.024967][T14439] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2879.024981][T14439] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000700 [ 2879.024991][T14439] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2879.024999][T14439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2879.025007][T14439] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2879.025016][T14439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2879.025035][T14439] [ 2879.373179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2879.405512][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11724'. [ 2879.432262][T14441] FAULT_INJECTION: forcing a failure. [ 2879.432262][T14441] name failslab, interval 1, probability 0, space 0, times 0 [ 2879.444976][T14441] CPU: 1 UID: 0 PID: 14441 Comm: syz.5.11724 Not tainted syzkaller #0 PREEMPT(full) [ 2879.445000][T14441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2879.445012][T14441] Call Trace: [ 2879.445020][T14441] [ 2879.445041][T14441] dump_stack_lvl+0x189/0x250 [ 2879.445066][T14441] ? __pfx____ratelimit+0x10/0x10 [ 2879.445086][T14441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2879.445102][T14441] ? __pfx__printk+0x10/0x10 [ 2879.445122][T14441] ? __pfx___might_resched+0x10/0x10 [ 2879.445137][T14441] ? fs_reclaim_acquire+0x7d/0x100 [ 2879.445164][T14441] should_fail_ex+0x414/0x560 [ 2879.445186][T14441] should_failslab+0xa8/0x100 [ 2879.445202][T14441] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2879.445222][T14441] ? __alloc_skb+0x112/0x2d0 [ 2879.445237][T14441] ? __page_table_check_zero+0xba/0x530 [ 2879.445262][T14441] __alloc_skb+0x112/0x2d0 [ 2879.445280][T14441] alloc_skb_with_frags+0xca/0x890 [ 2879.445298][T14441] ? get_page_from_freelist+0x2365/0x2440 [ 2879.445320][T14441] sock_alloc_send_pskb+0x84d/0x980 [ 2879.445357][T14441] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2879.445380][T14441] ? dev_get_by_index+0x22/0x2e0 [ 2879.445400][T14441] ? dev_get_by_index+0x22/0x2e0 [ 2879.445425][T14441] packet_sendmsg+0x33a0/0x5080 [ 2879.445455][T14441] ? aa_pivotroot+0xd0/0x13c0 [ 2879.445486][T14441] ? __pfx___might_resched+0x10/0x10 [ 2879.445501][T14441] ? __lock_acquire+0xab9/0xd20 [ 2879.445526][T14441] ? __pfx_packet_sendmsg+0x10/0x10 [ 2879.445546][T14441] ? aa_sk_perm+0x81e/0x950 [ 2879.445568][T14441] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2879.445594][T14441] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2879.445616][T14441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2879.445630][T14441] ? __pfx_packet_sendmsg+0x10/0x10 [ 2879.445652][T14441] __sock_sendmsg+0x219/0x270 [ 2879.445676][T14441] __sys_sendto+0x3bd/0x520 [ 2879.445693][T14441] ? __pfx___sys_sendto+0x10/0x10 [ 2879.445706][T14441] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2879.445735][T14441] ? __fget_files+0x3a0/0x420 [ 2879.445756][T14441] ? ksys_write+0x22a/0x250 [ 2879.445775][T14441] ? exc_page_fault+0x82/0x100 [ 2879.445793][T14441] ? __pfx_ksys_write+0x10/0x10 [ 2879.445817][T14441] __ia32_sys_sendto+0xdd/0x100 [ 2879.445836][T14441] __do_fast_syscall_32+0xb6/0x2b0 [ 2879.445856][T14441] ? lockdep_hardirqs_on+0x9c/0x150 [ 2879.445876][T14441] do_fast_syscall_32+0x34/0x80 [ 2879.445896][T14441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2879.445914][T14441] RIP: 0023:0xf700d539 [ 2879.445927][T14441] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2879.445940][T14441] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2879.445956][T14441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 2879.445970][T14441] RDX: 000000000000000e RSI: 0000000000000040 RDI: 0000000080000440 [ 2879.445982][T14441] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 2879.445993][T14441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2879.446004][T14441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2879.446030][T14441] [ 2879.861681][ T3138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2879.932628][T14452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11726'. [ 2879.960726][T14452] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11726'. [ 2880.093690][T26886] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2880.320506][T26886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2880.348268][T26886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2880.369424][T26886] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2880.401987][T26886] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2880.413602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2880.422397][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2880.524024][ T3139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2880.534516][T26886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2880.564706][T26886] usb 2-1: config 0 descriptor?? [ 2880.605707][T14460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2880.615092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2881.154143][T26886] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2882.493401][ C1] net_ratelimit: 1 callbacks suppressed [ 2882.493419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2882.698004][ C0] plantronics 0003:047F:FFFF.003A: hid_field_extract() called with n (132) > 32! (syz-executor) [ 2882.783195][ T5829] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2882.933692][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 2882.948480][ T5829] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 2882.958510][ T5829] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2882.970126][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2882.981477][ T5829] usb 3-1: Product: syz [ 2882.986197][ T5829] usb 3-1: Manufacturer: syz [ 2882.990829][ T5829] usb 3-1: SerialNumber: syz [ 2882.997868][ T5829] usb 3-1: config 0 descriptor?? [ 2883.005487][ T5829] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2883.016299][ T5829] usb 3-1: setting power ON [ 2883.020823][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 2883.028689][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2883.038384][ T5829] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2883.047424][ T5829] usb 3-1: media controller created [ 2883.079480][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2883.100290][ T5829] usb 3-1: selecting invalid altsetting 6 [ 2883.106126][ T5829] usb 3-1: digital interface selection failed (-22) [ 2883.112737][ T5829] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2883.127224][ T5829] usb 3-1: setting power OFF [ 2883.131964][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 2883.138546][ T5829] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2883.147910][ T5829] (NULL device *): no alternate interface [ 2883.170396][ T5829] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2883.173186][ T5910] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2883.335530][T14478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2883.352920][T14478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2883.361341][ T5910] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2883.372728][ T5910] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2883.386646][ T5910] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2883.407594][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2883.441334][ T5910] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2883.454003][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2883.472211][ T5910] usb 6-1: invalid MIDI out EP 0 [ 2883.533340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2883.596024][ T5910] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2883.610034][T14478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2883.621368][T14478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2883.637949][ T5910] usb 3-1: USB disconnect, device number 44 [ 2883.923239][T26886] usb 2-1: reset high-speed USB device number 98 using dummy_hcd [ 2883.931613][T26886] usb 2-1: device reset changed ep0 maxpacket size! [ 2883.942368][T26884] usb 2-1: USB disconnect, device number 98 [ 2884.083623][T26884] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2884.233861][T26884] usb 2-1: Using ep0 maxpacket: 8 [ 2884.266562][T26884] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2884.289622][T26884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2884.298303][T26884] usb 2-1: Product: syz [ 2884.302525][T26884] usb 2-1: Manufacturer: syz [ 2884.308014][T26884] usb 2-1: SerialNumber: syz [ 2884.315569][T26884] usb 2-1: config 0 descriptor?? [ 2884.329257][T26884] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2884.573390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2884.734890][T26884] gspca_sonixj: reg_r err -32 [ 2884.754366][T26884] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 2885.279947][T14528] netlink: 'syz.3.11748': attribute type 64 has an invalid length. [ 2885.288356][T14528] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11748'. [ 2885.613505][ T1807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2885.623130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2885.767701][T20144] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2885.810797][ T4381] usb 6-1: USB disconnect, device number 91 [ 2886.012668][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11751'. [ 2886.031832][T20144] usb 4-1: Using ep0 maxpacket: 8 [ 2886.038282][T20144] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 2886.048446][T20144] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2886.059120][T20144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2886.071104][T20144] usb 4-1: Product: syz [ 2886.076895][T20144] usb 4-1: Manufacturer: syz [ 2886.082113][T20144] usb 4-1: SerialNumber: syz [ 2886.114033][T20144] usb 4-1: config 0 descriptor?? [ 2886.140041][T20144] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2886.150111][T20144] usb 4-1: setting power ON [ 2886.155932][T20144] dvb-usb: bulk message failed: -22 (2/0) [ 2886.171130][T20144] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2886.182133][T20144] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2886.207476][T20144] usb 4-1: media controller created [ 2886.240728][T20144] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2886.253449][ T1807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2886.275380][T20144] usb 4-1: selecting invalid altsetting 6 [ 2886.281180][T20144] usb 4-1: digital interface selection failed (-22) [ 2886.289103][T20144] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2886.307389][T20144] usb 4-1: setting power OFF [ 2886.321572][T14533] dvb-usb: bulk message failed: -22 (3/0) [ 2886.327496][T14533] cxusb: i2c wr: len=80 is too big! [ 2886.327496][T14533] [ 2886.335685][T20144] dvb-usb: bulk message failed: -22 (2/0) [ 2886.349734][T20144] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2886.388523][T20144] (NULL device *): no alternate interface [ 2886.441696][T14540] netlink: 'syz.2.11752': attribute type 10 has an invalid length. [ 2886.479372][T14540] bond0: (slave wlan1): Opening slave failed [ 2886.494538][T26884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2886.515699][T14540] mac80211_hwsim hwsim224 wlan1: entered allmulticast mode [ 2886.610125][T14545] tipc: Started in network mode [ 2886.618925][T14545] tipc: Node identity , cluster identity 4711 [ 2886.625910][T14545] tipc: Failed to obtain node identity [ 2886.631496][T14545] tipc: Enabling of bearer rejected, failed to enable media [ 2886.682884][T14545] syzkaller0: entered promiscuous mode [ 2886.688992][T14545] syzkaller0: entered allmulticast mode [ 2886.713877][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11753'. [ 2886.723024][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11753'. [ 2886.739885][T14533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2886.772244][T14533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2886.918338][ T5910] usb 2-1: USB disconnect, device number 99 [ 2886.986281][T14533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2887.001272][T14533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2887.024422][T20144] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2887.062351][T20144] usb 4-1: USB disconnect, device number 102 [ 2887.187756][T14556] FAULT_INJECTION: forcing a failure. [ 2887.187756][T14556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2887.204138][T14556] CPU: 0 UID: 0 PID: 14556 Comm: syz.1.11757 Not tainted syzkaller #0 PREEMPT(full) [ 2887.204160][T14556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2887.204172][T14556] Call Trace: [ 2887.204179][T14556] [ 2887.204187][T14556] dump_stack_lvl+0x189/0x250 [ 2887.204209][T14556] ? __pfx____ratelimit+0x10/0x10 [ 2887.204230][T14556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2887.204247][T14556] ? __pfx__printk+0x10/0x10 [ 2887.204273][T14556] should_fail_ex+0x414/0x560 [ 2887.204297][T14556] _copy_to_user+0x31/0xb0 [ 2887.204315][T14556] simple_read_from_buffer+0xe1/0x170 [ 2887.204344][T14556] proc_fail_nth_read+0x1b3/0x220 [ 2887.204367][T14556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2887.204390][T14556] ? rw_verify_area+0x2a6/0x4d0 [ 2887.204410][T14556] ? __lock_acquire+0xab9/0xd20 [ 2887.204425][T14556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2887.204446][T14556] vfs_read+0x1fd/0xa30 [ 2887.204490][T14556] ? fdget_pos+0x247/0x320 [ 2887.204509][T14556] ? __pfx___mutex_lock+0x10/0x10 [ 2887.204531][T14556] ? __pfx_vfs_read+0x10/0x10 [ 2887.204554][T14556] ? __fget_files+0x2a/0x420 [ 2887.204572][T14556] ? __fget_files+0x3a0/0x420 [ 2887.204586][T14556] ? __fget_files+0x2a/0x420 [ 2887.204607][T14556] ksys_read+0x145/0x250 [ 2887.204631][T14556] ? __pfx_ksys_read+0x10/0x10 [ 2887.204655][T14556] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2887.204678][T14556] ? lockdep_hardirqs_on+0x9c/0x150 [ 2887.204700][T14556] __do_fast_syscall_32+0xb6/0x2b0 [ 2887.204723][T14556] ? lockdep_hardirqs_on+0x9c/0x150 [ 2887.204747][T14556] do_fast_syscall_32+0x34/0x80 [ 2887.204768][T14556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2887.204788][T14556] RIP: 0023:0xf7f46539 [ 2887.204803][T14556] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2887.204818][T14556] RSP: 002b:00000000f5436590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2887.204836][T14556] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5436620 [ 2887.204848][T14556] RDX: 000000000000000f RSI: 00000000f73d5ff4 RDI: 0000000000000000 [ 2887.204858][T14556] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2887.204868][T14556] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2887.204878][T14556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2887.204902][T14556] [ 2887.552536][T14559] netlink: 'syz.1.11758': attribute type 10 has an invalid length. [ 2887.605347][T14560] FAULT_INJECTION: forcing a failure. [ 2887.605347][T14560] name failslab, interval 1, probability 0, space 0, times 0 [ 2887.621009][T14560] CPU: 1 UID: 0 PID: 14560 Comm: syz.1.11758 Not tainted syzkaller #0 PREEMPT(full) [ 2887.621031][T14560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2887.621042][T14560] Call Trace: [ 2887.621054][T14560] [ 2887.621062][T14560] dump_stack_lvl+0x189/0x250 [ 2887.621084][T14560] ? __pfx____ratelimit+0x10/0x10 [ 2887.621104][T14560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2887.621121][T14560] ? __pfx__printk+0x10/0x10 [ 2887.621143][T14560] ? __pfx___might_resched+0x10/0x10 [ 2887.621160][T14560] ? fs_reclaim_acquire+0x7d/0x100 [ 2887.621190][T14560] should_fail_ex+0x414/0x560 [ 2887.621213][T14560] should_failslab+0xa8/0x100 [ 2887.621230][T14560] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2887.621253][T14560] ? __alloc_skb+0x112/0x2d0 [ 2887.621269][T14560] ? netlink_autobind+0xdb/0x300 [ 2887.621292][T14560] __alloc_skb+0x112/0x2d0 [ 2887.621311][T14560] netlink_sendmsg+0x5c6/0xb30 [ 2887.621336][T14560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2887.621355][T14560] ? __import_iovec+0x5d4/0x7f0 [ 2887.621369][T14560] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2887.621393][T14560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2887.621410][T14560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2887.621428][T14560] __sock_sendmsg+0x219/0x270 [ 2887.621464][T14560] ____sys_sendmsg+0x505/0x830 [ 2887.621488][T14560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2887.621520][T14560] ___sys_sendmsg+0x21f/0x2a0 [ 2887.621541][T14560] ? __pfx____sys_sendmsg+0x10/0x10 [ 2887.621609][T14560] ? __fget_files+0x2a/0x420 [ 2887.621624][T14560] ? __fget_files+0x3a0/0x420 [ 2887.621648][T14560] __sys_sendmsg+0x164/0x220 [ 2887.621670][T14560] ? __pfx___sys_sendmsg+0x10/0x10 [ 2887.621699][T14560] ? __pfx_ksys_write+0x10/0x10 [ 2887.621730][T14560] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2887.621758][T14560] ? lockdep_hardirqs_on+0x9c/0x150 [ 2887.621787][T14560] __do_fast_syscall_32+0xb6/0x2b0 [ 2887.621814][T14560] ? lockdep_hardirqs_on+0x9c/0x150 [ 2887.621842][T14560] do_fast_syscall_32+0x34/0x80 [ 2887.621869][T14560] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2887.621895][T14560] RIP: 0023:0xf7f46539 [ 2887.621913][T14560] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2887.621932][T14560] RSP: 002b:00000000f53f455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2887.621954][T14560] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000040 [ 2887.621969][T14560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2887.621981][T14560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2887.621993][T14560] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2887.622006][T14560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2887.622036][T14560] [ 2887.893922][ C1] vkms_vblank_simulate: vblank timer overrun [ 2888.169089][T14571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11761'. [ 2888.178833][ T3139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2889.214586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2889.533936][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2890.253195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2890.278654][T14585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2890.465482][T14590] netlink: 'syz.0.11766': attribute type 10 has an invalid length. [ 2890.474251][T14590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11766'. [ 2890.484489][T14590] bridge_slave_1: left allmulticast mode [ 2890.490153][T14590] bridge_slave_1: left promiscuous mode [ 2890.513880][T14590] bridge0: port 2(bridge_slave_1) entered disabled state [ 2890.623178][T14590] bridge_slave_0: left allmulticast mode [ 2890.655151][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2890.664016][T14590] bridge_slave_0: left promiscuous mode [ 2890.670152][T14590] bridge0: port 1(bridge_slave_0) entered disabled state [ 2890.706313][T14603] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11766'. [ 2891.133873][T20144] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2891.293356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2891.293463][T20144] usb 6-1: Using ep0 maxpacket: 8 [ 2891.309019][T14614] program syz.2.11773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2891.327420][T20144] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 2891.351907][T20144] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2891.389015][ T30] audit: type=1326 audit(1760006027.201:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.2.11773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2891.414052][ T30] audit: type=1326 audit(1760006027.201:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.2.11773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2891.442022][ T30] audit: type=1326 audit(1760006027.201:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.2.11773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=82 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2891.448099][T20144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2891.465605][ T30] audit: type=1326 audit(1760006027.201:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.2.11773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2891.495902][T20144] usb 6-1: Product: syz [ 2891.513520][T20144] usb 6-1: Manufacturer: syz [ 2891.514075][ T30] audit: type=1326 audit(1760006027.201:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.2.11773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2891.521704][T20144] usb 6-1: SerialNumber: syz [ 2891.595359][T20144] usb 6-1: config 0 descriptor?? [ 2891.601796][ T30] audit: type=1326 audit(1760006027.201:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.2.11773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2891.609711][T20144] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2891.626071][ T30] audit: type=1326 audit(1760006027.201:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.2.11773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2891.659146][T14622] FAULT_INJECTION: forcing a failure. [ 2891.659146][T14622] name failslab, interval 1, probability 0, space 0, times 0 [ 2891.663289][T20144] usb 6-1: setting power ON [ 2891.676845][T14622] CPU: 0 UID: 0 PID: 14622 Comm: syz.3.11776 Not tainted syzkaller #0 PREEMPT(full) [ 2891.676867][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2891.676879][T14622] Call Trace: [ 2891.676887][T14622] [ 2891.676894][T14622] dump_stack_lvl+0x189/0x250 [ 2891.676918][T14622] ? __pfx____ratelimit+0x10/0x10 [ 2891.676940][T14622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2891.676960][T14622] ? __pfx__printk+0x10/0x10 [ 2891.677002][T14622] ? __pfx___might_resched+0x10/0x10 [ 2891.677023][T14622] ? fs_reclaim_acquire+0x7d/0x100 [ 2891.677059][T14622] should_fail_ex+0x414/0x560 [ 2891.677089][T14622] should_failslab+0xa8/0x100 [ 2891.677110][T14622] __kmalloc_noprof+0xcb/0x7f0 [ 2891.677137][T14622] ? tomoyo_encode+0x28b/0x550 [ 2891.677170][T14622] tomoyo_encode+0x28b/0x550 [ 2891.677202][T14622] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2891.677233][T14622] ? tomoyo_domain+0xd9/0x130 [ 2891.677267][T14622] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2891.677291][T14622] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2891.677316][T14622] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2891.677358][T14622] ? __lock_acquire+0xab9/0xd20 [ 2891.677398][T14622] ? __fget_files+0x2a/0x420 [ 2891.677421][T14622] ? __fget_files+0x3a0/0x420 [ 2891.677438][T14622] ? __fget_files+0x2a/0x420 [ 2891.677465][T14622] security_file_ioctl_compat+0xcb/0x2d0 [ 2891.677501][T14622] __ia32_compat_sys_ioctl+0x128/0x840 [ 2891.677528][T14622] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2891.677553][T14622] ? __fget_files+0x3a0/0x420 [ 2891.677575][T14622] ? fput+0xa0/0xd0 [ 2891.677595][T14622] ? ksys_write+0x22a/0x250 [ 2891.677620][T14622] ? exc_page_fault+0x82/0x100 [ 2891.677643][T14622] ? __pfx_ksys_write+0x10/0x10 [ 2891.677671][T14622] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2891.677697][T14622] ? lockdep_hardirqs_on+0x9c/0x150 [ 2891.677723][T14622] __do_fast_syscall_32+0xb6/0x2b0 [ 2891.677750][T14622] ? lockdep_hardirqs_on+0x9c/0x150 [ 2891.677777][T14622] do_fast_syscall_32+0x34/0x80 [ 2891.677802][T14622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2891.677825][T14622] RIP: 0023:0xf70ad539 [ 2891.677841][T14622] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2891.677859][T14622] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2891.677879][T14622] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c028aa05 [ 2891.677893][T14622] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2891.677905][T14622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2891.677916][T14622] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2891.677928][T14622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2891.677956][T14622] [ 2891.677977][T14622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2891.693676][T20144] dvb-usb: bulk message failed: -22 (2/0) [ 2891.719945][ T30] audit: type=1326 audit(1760006027.201:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.2.11773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2891.725873][T20144] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2891.738443][ T30] audit: type=1326 audit(1760006027.201:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.2.11773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2891.751582][T20144] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2891.757724][ T30] audit: type=1326 audit(1760006027.201:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14613 comm="syz.2.11773" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 2891.761032][T20144] usb 6-1: media controller created [ 2891.809855][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11777'. [ 2891.825361][T14607] dvb-usb: bulk message failed: -22 (3/0) [ 2891.825380][T14607] cxusb: i2c wr: len=80 is too big! [ 2891.825380][T14607] [ 2892.023852][ T1807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2892.033692][ T4381] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 2892.112417][T20144] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2892.133252][T20144] usb 6-1: selecting invalid altsetting 6 [ 2892.139018][T20144] usb 6-1: digital interface selection failed (-22) [ 2892.145925][T20144] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2892.156042][T20144] usb 6-1: setting power OFF [ 2892.164073][T20144] dvb-usb: bulk message failed: -22 (2/0) [ 2892.176205][T20144] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2892.195146][T20144] (NULL device *): no alternate interface [ 2892.319263][ T4381] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2892.333180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2892.347117][ T4381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2892.358401][ T4381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2892.368206][ T4381] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2892.383128][ T4381] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2892.392524][ T4381] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2892.420427][ T4381] usb 2-1: Manufacturer: syz [ 2892.445023][ T4381] usb 2-1: config 0 descriptor?? [ 2892.493926][T14634] usb usb8: usbfs: process 14634 (syz.3.11779) did not claim interface 0 before use [ 2892.507173][T14634] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11779'. [ 2892.528677][T14607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2892.540048][T14607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2892.576528][T26884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2892.662905][T14640] FAULT_INJECTION: forcing a failure. [ 2892.662905][T14640] name failslab, interval 1, probability 0, space 0, times 0 [ 2892.671085][T14620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2892.687411][T14640] CPU: 1 UID: 0 PID: 14640 Comm: syz.3.11782 Not tainted syzkaller #0 PREEMPT(full) [ 2892.687437][T14640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2892.687450][T14640] Call Trace: [ 2892.687458][T14640] [ 2892.687467][T14640] dump_stack_lvl+0x189/0x250 [ 2892.687492][T14640] ? __pfx____ratelimit+0x10/0x10 [ 2892.687515][T14640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2892.687539][T14640] ? __pfx__printk+0x10/0x10 [ 2892.687563][T14640] ? __pfx___might_resched+0x10/0x10 [ 2892.687585][T14640] ? fs_reclaim_acquire+0x7d/0x100 [ 2892.687619][T14640] should_fail_ex+0x414/0x560 [ 2892.687647][T14640] should_failslab+0xa8/0x100 [ 2892.687667][T14640] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2892.687694][T14640] ? __alloc_skb+0x112/0x2d0 [ 2892.687712][T14640] ? netlink_autobind+0xdb/0x300 [ 2892.687739][T14640] __alloc_skb+0x112/0x2d0 [ 2892.687762][T14640] netlink_sendmsg+0x5c6/0xb30 [ 2892.687790][T14640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2892.687831][T14640] ? __import_iovec+0x5d4/0x7f0 [ 2892.687847][T14640] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2892.687878][T14640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2892.687898][T14640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2892.687921][T14640] __sock_sendmsg+0x219/0x270 [ 2892.687954][T14640] ____sys_sendmsg+0x505/0x830 [ 2892.687984][T14640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2892.688024][T14640] ___sys_sendmsg+0x21f/0x2a0 [ 2892.688050][T14640] ? __pfx____sys_sendmsg+0x10/0x10 [ 2892.688109][T14640] ? __fget_files+0x2a/0x420 [ 2892.688134][T14640] ? __fget_files+0x3a0/0x420 [ 2892.688163][T14640] __sys_sendmsg+0x164/0x220 [ 2892.688189][T14640] ? __pfx___sys_sendmsg+0x10/0x10 [ 2892.688223][T14640] ? __pfx_ksys_write+0x10/0x10 [ 2892.688254][T14640] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2892.688282][T14640] ? lockdep_hardirqs_on+0x9c/0x150 [ 2892.688310][T14640] __do_fast_syscall_32+0xb6/0x2b0 [ 2892.688338][T14640] ? lockdep_hardirqs_on+0x9c/0x150 [ 2892.688365][T14640] do_fast_syscall_32+0x34/0x80 [ 2892.688392][T14640] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2892.688417][T14640] RIP: 0023:0xf70ad539 [ 2892.688434][T14640] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2892.688452][T14640] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2892.688474][T14640] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006b40 [ 2892.688489][T14640] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2892.688501][T14640] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2892.688513][T14640] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2892.688526][T14640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2892.688556][T14640] [ 2892.764242][T14620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2892.997700][T14627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2893.023747][T14627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2893.035806][T20144] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2893.111520][T20144] usb 6-1: USB disconnect, device number 92 [ 2893.117535][ T4381] rc_core: IR keymap rc-hauppauge not found [ 2893.127719][ T4381] Registered IR keymap rc-empty [ 2893.132705][ T4381] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2893.334638][ T4381] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2893.354408][ T4381] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2893.370931][ T4381] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input273 [ 2893.373157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2893.394719][ T4381] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2893.434085][ T4381] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2893.453240][ T4381] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2893.473215][ T4381] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2893.493780][ T4381] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2893.524069][ T4381] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2893.554084][ T4381] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2893.573375][ T4381] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2893.576304][T14654] tipc: Started in network mode [ 2893.585959][T14654] tipc: Node identity e64d910d36a3, cluster identity 4711 [ 2893.595199][T14654] tipc: Enabled bearer , priority 0 [ 2893.603407][ T4381] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2893.605153][T14654] syzkaller0: entered promiscuous mode [ 2893.616218][T14654] syzkaller0: entered allmulticast mode [ 2893.623944][ T4381] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2893.646155][ T4381] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2893.656448][ T4381] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2893.665879][T14654] tipc: Resetting bearer [ 2893.689114][T14653] tipc: Resetting bearer [ 2893.704761][T14653] tipc: Disabling bearer [ 2893.860156][T14658] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11785'. [ 2893.975742][T14661] netlink: 'syz.5.11786': attribute type 64 has an invalid length. [ 2893.986349][T14661] netlink: 9 bytes leftover after parsing attributes in process `syz.5.11786'. [ 2894.413350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2894.448861][T14676] FAULT_INJECTION: forcing a failure. [ 2894.448861][T14676] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2894.526106][T14676] CPU: 0 UID: 0 PID: 14676 Comm: syz.2.11791 Not tainted syzkaller #0 PREEMPT(full) [ 2894.526133][T14676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2894.526146][T14676] Call Trace: [ 2894.526154][T14676] [ 2894.526164][T14676] dump_stack_lvl+0x189/0x250 [ 2894.526190][T14676] ? __pfx____ratelimit+0x10/0x10 [ 2894.526214][T14676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2894.526236][T14676] ? __pfx__printk+0x10/0x10 [ 2894.526258][T14676] ? fs_reclaim_acquire+0x7d/0x100 [ 2894.526297][T14676] should_fail_ex+0x414/0x560 [ 2894.526326][T14676] prepare_alloc_pages+0x213/0x610 [ 2894.526364][T14676] __alloc_frozen_pages_noprof+0x123/0x370 [ 2894.526389][T14676] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2894.526414][T14676] ? aa_file_perm+0x44d/0x1550 [ 2894.526452][T14676] alloc_pages_mpol+0x232/0x4a0 [ 2894.526488][T14676] alloc_pages_noprof+0xa9/0x190 [ 2894.526509][T14676] get_free_pages_noprof+0xf/0x80 [ 2894.526528][T14676] vcs_write+0xf3/0x1260 [ 2894.526547][T14676] ? __lock_acquire+0xab9/0xd20 [ 2894.526565][T14676] ? iovec_from_user+0x87/0x250 [ 2894.526584][T14676] ? copy_compat_iovec_from_user+0xf8/0x140 [ 2894.526620][T14676] ? __pfx_vcs_write+0x10/0x10 [ 2894.526638][T14676] ? bpf_lsm_file_permission+0x9/0x20 [ 2894.526658][T14676] ? security_file_permission+0x75/0x290 [ 2894.526679][T14676] ? rw_verify_area+0x255/0x4d0 [ 2894.526708][T14676] vfs_writev+0x4b3/0x960 [ 2894.526731][T14676] ? __pfx_vcs_write+0x10/0x10 [ 2894.526752][T14676] ? __pfx_vfs_writev+0x10/0x10 [ 2894.526785][T14676] ? __fget_files+0x2a/0x420 [ 2894.526807][T14676] ? __fget_files+0x3a0/0x420 [ 2894.526823][T14676] ? __fget_files+0x2a/0x420 [ 2894.526847][T14676] do_writev+0x14d/0x2d0 [ 2894.526869][T14676] ? __pfx_do_writev+0x10/0x10 [ 2894.526892][T14676] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2894.526919][T14676] ? lockdep_hardirqs_on+0x9c/0x150 [ 2894.526952][T14676] __do_fast_syscall_32+0xb6/0x2b0 [ 2894.526978][T14676] ? lockdep_hardirqs_on+0x9c/0x150 [ 2894.527005][T14676] do_fast_syscall_32+0x34/0x80 [ 2894.527031][T14676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2894.527054][T14676] RIP: 0023:0xf708d539 [ 2894.527071][T14676] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2894.527089][T14676] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 2894.527110][T14676] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c40 [ 2894.527124][T14676] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 2894.527138][T14676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2894.527149][T14676] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2894.527162][T14676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2894.527190][T14676] [ 2895.187367][T14682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11792'. [ 2895.197112][ T5910] usb 2-1: USB disconnect, device number 100 [ 2895.453132][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2895.613839][T26886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2895.703740][T14694] loop0: detected capacity change from 0 to 2560 [ 2895.773322][T14694] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 2895.795470][T14694] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 2895.805158][T14694] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 2895.816050][T14694] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 2895.829503][T14694] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 2895.984748][ T8252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2895.993465][T13895] Buffer I/O error on dev loop0, logical block 256, lost async page write [ 2896.017094][T13895] Buffer I/O error on dev loop0, logical block 257, lost async page write [ 2896.028006][T14694] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 2896.037448][T14694] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 2896.046553][T14694] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 2896.493213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2897.011351][T14704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11796'. [ 2897.027653][T14704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11796'. [ 2897.054419][T26884] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2897.805974][T14707] netlink: 'syz.0.11798': attribute type 64 has an invalid length. [ 2897.814753][T14707] netlink: 9 bytes leftover after parsing attributes in process `syz.0.11798'. [ 2897.874684][ T8252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2898.062516][T26884] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2898.062549][T26884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2898.066745][T26884] usb 6-1: config 0 descriptor?? [ 2898.069094][T26884] cp210x 6-1:0.0: cp210x converter detected [ 2898.528067][T26884] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 2898.546921][T26884] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 2898.548341][T14716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11802'. [ 2898.575449][T26884] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 2898.617865][T26884] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2898.656351][T26884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2898.701031][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2898.710016][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2898.719367][T26884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2899.058085][ T3142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2899.194067][T14726] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11797'. [ 2899.301838][T14724] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2899.312160][T14724] bond0: (slave bond5): Enslaving as an active interface with a down link [ 2899.328795][T14731] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.11805'. [ 2900.049050][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11807'. [ 2900.093200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2900.713729][ T5903] usb 6-1: USB disconnect, device number 93 [ 2900.722086][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2900.730922][ T5903] cp210x 6-1:0.0: device disconnected [ 2900.810969][T14748] netlink: 'syz.5.11809': attribute type 64 has an invalid length. [ 2900.821779][T14748] netlink: 9 bytes leftover after parsing attributes in process `syz.5.11809'. [ 2901.133230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2901.291758][T14761] netlink: 'syz.5.11814': attribute type 10 has an invalid length. [ 2901.323671][T14761] bridge0: port 3(batadv0) entered disabled state [ 2901.333019][T14761] bridge0: port 2(bridge_slave_1) entered disabled state [ 2901.340402][T14761] bridge0: port 1(bridge_slave_0) entered disabled state [ 2901.416780][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11814'. [ 2901.435999][T14765] FAULT_INJECTION: forcing a failure. [ 2901.435999][T14765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2901.478350][T14764] bridge0: port 3(batadv0) entered disabled state [ 2901.494046][T14765] CPU: 0 UID: 0 PID: 14765 Comm: syz.0.11815 Not tainted syzkaller #0 PREEMPT(full) [ 2901.494070][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2901.494083][T14765] Call Trace: [ 2901.494091][T14765] [ 2901.494100][T14765] dump_stack_lvl+0x189/0x250 [ 2901.494126][T14765] ? __pfx____ratelimit+0x10/0x10 [ 2901.494149][T14765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2901.494169][T14765] ? __pfx__printk+0x10/0x10 [ 2901.494199][T14765] should_fail_ex+0x414/0x560 [ 2901.494228][T14765] _copy_to_user+0x31/0xb0 [ 2901.494248][T14765] simple_read_from_buffer+0xe1/0x170 [ 2901.494281][T14765] proc_fail_nth_read+0x1b3/0x220 [ 2901.494308][T14765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2901.494334][T14765] ? rw_verify_area+0x2a6/0x4d0 [ 2901.494358][T14765] ? __lock_acquire+0xab9/0xd20 [ 2901.494375][T14765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2901.494400][T14765] vfs_read+0x1fd/0xa30 [ 2901.494424][T14765] ? fdget_pos+0x247/0x320 [ 2901.494446][T14765] ? __pfx___mutex_lock+0x10/0x10 [ 2901.494471][T14765] ? __pfx_vfs_read+0x10/0x10 [ 2901.494498][T14765] ? __fget_files+0x2a/0x420 [ 2901.494519][T14765] ? __fget_files+0x3a0/0x420 [ 2901.494535][T14765] ? __fget_files+0x2a/0x420 [ 2901.494560][T14765] ksys_read+0x145/0x250 [ 2901.494588][T14765] ? __pfx_ksys_read+0x10/0x10 [ 2901.494616][T14765] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2901.494642][T14765] ? lockdep_hardirqs_on+0x9c/0x150 [ 2901.494668][T14765] __do_fast_syscall_32+0xb6/0x2b0 [ 2901.494693][T14765] ? lockdep_hardirqs_on+0x9c/0x150 [ 2901.494720][T14765] do_fast_syscall_32+0x34/0x80 [ 2901.494745][T14765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2901.494774][T14765] RIP: 0023:0xf7fa7539 [ 2901.494791][T14765] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2901.494807][T14765] RSP: 002b:00000000f5496590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2901.494827][T14765] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5496620 [ 2901.494841][T14765] RDX: 000000000000000f RSI: 00000000f7435ff4 RDI: 0000000000000000 [ 2901.494853][T14765] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2901.494864][T14765] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2901.494875][T14765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2901.494903][T14765] [ 2901.753488][ T3142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2901.815740][T14764] bridge_slave_1: left allmulticast mode [ 2901.821411][T14764] bridge_slave_1: left promiscuous mode [ 2901.827996][T14764] bridge0: port 2(bridge_slave_1) entered disabled state [ 2901.878684][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2902.173343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2902.185279][T14773] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11814'. [ 2902.215580][T14764] bridge_slave_0: left allmulticast mode [ 2902.221245][T14764] bridge_slave_0: left promiscuous mode [ 2902.227772][T14764] bridge0: port 1(bridge_slave_0) entered disabled state [ 2902.438508][T14778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11816'. [ 2902.494688][T14778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11816'. [ 2902.897771][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2902.908743][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2903.025151][T14790] netlink: 'syz.3.11822': attribute type 64 has an invalid length. [ 2903.088614][T14790] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11822'. [ 2903.227962][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11823'. [ 2903.263060][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 2903.269520][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.277428][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.285286][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.293220][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.301045][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.308950][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.316785][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.324677][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.332528][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.340452][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.348286][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.356147][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.363961][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.371813][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.379621][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.387479][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.395290][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.403193][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.411000][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.418859][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.426670][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.434527][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.442320][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.450173][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.457980][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.465847][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.473672][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.481535][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.489359][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.497217][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.505029][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.512871][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.520707][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.528562][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.536381][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.544233][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.552037][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.559890][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.567703][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.575552][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.583390][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.591242][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.599064][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.606916][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.614730][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.622657][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.630466][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.638326][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.646145][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.654042][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.661846][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.669702][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.677514][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.685400][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.693215][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.701076][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.708885][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.716757][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.724567][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.732415][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.740221][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.748098][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.755956][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.763845][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.771661][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.779517][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.787338][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.795208][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.803014][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.810888][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.818704][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.826561][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.834375][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.842209][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.850022][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.857880][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.865697][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.873590][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.881420][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.889277][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.897086][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.904944][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.912734][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.920681][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.928490][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.936353][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.944159][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.952003][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.959809][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.967689][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.975508][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.983395][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2903.991199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2903.999051][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.006856][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.014715][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.022679][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.030525][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.038343][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.046193][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.054025][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.061871][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.069690][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.077580][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.085402][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.093287][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.101110][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.108966][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.116800][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.124660][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.132481][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.140420][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.148257][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.156109][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.163917][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.171780][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.179606][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.179968][ T1807] net_ratelimit: 2 callbacks suppressed [ 2904.179985][ T1807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2904.187513][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.208918][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.216782][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.224616][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.232462][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.240281][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.248161][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 2904.255991][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 2904.265566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2904.276793][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2904.292592][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2904.560539][T14800] netlink: 'syz.5.11826': attribute type 10 has an invalid length. [ 2904.569076][T14800] syz_tun: entered promiscuous mode [ 2904.582354][T14800] netlink: 'syz.5.11826': attribute type 11 has an invalid length. [ 2904.611802][T14800] netlink: 168 bytes leftover after parsing attributes in process `syz.5.11826'. [ 2904.634160][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11826'. [ 2904.684134][T14803] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11827'. [ 2904.755295][ T8036] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2904.925112][ T8036] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2904.939076][ T8036] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2904.964767][ T8036] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2904.983558][ T8036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2905.011231][ T8036] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2905.024617][ T8036] usb 4-1: invalid MIDI out EP 0 [ 2905.211386][T12932] udevd[12932]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2905.275623][ T8036] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2905.293643][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2905.367929][T14823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11841'. [ 2905.394268][T14823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11841'. [ 2906.023118][T14828] loop0: detected capacity change from 0 to 2560 [ 2906.047121][T14828] buffer_io_error: 315 callbacks suppressed [ 2906.047172][T14828] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 2906.234175][T13895] Buffer I/O error on dev loop0, logical block 256, lost async page write [ 2906.267116][T14828] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 2906.275880][T14828] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 2906.284515][T14828] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 2906.293108][T14828] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 2906.301614][T14828] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 2906.310820][T14828] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 2906.319900][T14828] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 2906.329057][T14828] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 2906.344234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2907.294376][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2907.373754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2907.374064][ T5910] usb 4-1: USB disconnect, device number 103 [ 2907.392256][ T3139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2907.497847][T14840] netlink: 'syz.3.11835': attribute type 64 has an invalid length. [ 2907.536336][T14840] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11835'. [ 2907.752635][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11837'. [ 2908.543685][ T5910] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2908.628554][T14866] netlink: 56 bytes leftover after parsing attributes in process `syz.5.11845'. [ 2909.073644][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 2909.087670][ T5910] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 2909.098505][ T5910] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2909.133415][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2909.141433][ T5910] usb 4-1: Product: syz [ 2909.148360][ T5910] usb 4-1: Manufacturer: syz [ 2909.224018][ T5910] usb 4-1: SerialNumber: syz [ 2909.235110][ T5910] usb 4-1: config 0 descriptor?? [ 2909.258404][ T5910] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2909.270546][ T5910] usb 4-1: setting power ON [ 2909.283647][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 2909.299959][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2909.305386][ T8234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2909.330757][ T5910] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2909.356222][ T5910] usb 4-1: media controller created [ 2909.440615][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2909.454919][ T1807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2909.464265][T14863] dvb-usb: bulk message failed: -22 (3/0) [ 2909.470035][T14863] cxusb: i2c wr: len=80 is too big! [ 2909.470035][T14863] [ 2909.480257][T26884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2909.490811][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2909.564423][ T5910] usb 4-1: selecting invalid altsetting 6 [ 2909.570187][ T5910] usb 4-1: digital interface selection failed (-22) [ 2909.613478][ T8036] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2909.623903][ T5910] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2909.644583][ T5910] usb 4-1: setting power OFF [ 2909.649211][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 2909.665284][ T5910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2909.683631][ T5910] (NULL device *): no alternate interface [ 2909.787180][ T8036] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2909.807307][ T8036] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2909.864053][ T8036] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2909.881013][ T8036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2909.935156][ T8036] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2909.957063][ T8036] usb 2-1: invalid MIDI out EP 0 [ 2910.008113][T14863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2910.060537][T14863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2910.094431][ T8036] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2910.301290][T14888] netlink: 'syz.5.11851': attribute type 64 has an invalid length. [ 2910.305920][T14863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2910.314418][T14888] netlink: 9 bytes leftover after parsing attributes in process `syz.5.11851'. [ 2910.319206][T14863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2910.340488][ T5910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2910.365189][ T5910] usb 4-1: USB disconnect, device number 104 [ 2910.566679][T14892] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2910.585972][T14892] bond6 (unregistering): Released all slaves [ 2910.793141][ T8036] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2910.923881][ T8036] usb 3-1: device descriptor read/64, error -71 [ 2910.983482][ T5829] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2911.144114][ T5829] usb 6-1: Using ep0 maxpacket: 32 [ 2911.155495][ T5829] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2911.164088][ T5829] usb 6-1: config 0 has no interface number 0 [ 2911.171249][ T5829] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2911.191574][ T8036] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2911.199342][ T5829] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2911.220009][ T5829] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2911.239710][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2911.258272][ T5829] usb 6-1: Product: syz [ 2911.268685][ T5829] usb 6-1: Manufacturer: syz [ 2911.283105][ T5829] usb 6-1: SerialNumber: syz [ 2911.292959][ T5829] usb 6-1: config 0 descriptor?? [ 2911.315408][T14905] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 1, id = 0 [ 2911.318625][ T5829] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2911.333786][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 2911.333801][ T30] audit: type=1326 audit(1760006047.141:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.3.11856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2911.361998][ C1] vkms_vblank_simulate: vblank timer overrun [ 2911.369255][ T8036] usb 3-1: device descriptor read/64, error -71 [ 2911.377133][ T30] audit: type=1326 audit(1760006047.141:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.3.11856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2911.429784][ T30] audit: type=1326 audit(1760006047.141:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.3.11856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2911.492694][ T30] audit: type=1326 audit(1760006047.141:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.3.11856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2911.493618][ T8036] usb usb3-port1: attempt power cycle [ 2911.521746][ T30] audit: type=1326 audit(1760006047.141:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.3.11856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2911.544751][ C1] vkms_vblank_simulate: vblank timer overrun [ 2911.562245][ T30] audit: type=1326 audit(1760006047.141:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.3.11856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2911.585152][ T30] audit: type=1326 audit(1760006047.151:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.3.11856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2911.608519][ T30] audit: type=1326 audit(1760006047.151:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.3.11856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2911.637583][ T5829] usb 6-1: qt2_setup_urbs - submit read urb failed -90 [ 2911.645066][ T5829] quatech2 6-1:0.51: probe with driver quatech2 failed with error -90 [ 2911.671532][ T30] audit: type=1326 audit(1760006047.151:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.3.11856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2911.693729][ C1] vkms_vblank_simulate: vblank timer overrun [ 2911.702284][ T30] audit: type=1326 audit(1760006047.151:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14900 comm="syz.3.11856" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 2911.724451][ C1] vkms_vblank_simulate: vblank timer overrun [ 2911.895280][T14908] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 2911.913784][ T8036] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2911.943941][ T8036] usb 3-1: device descriptor read/8, error -71 [ 2912.193450][ T8036] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2912.233897][ T8036] usb 3-1: device descriptor read/8, error -71 [ 2912.256153][ T5910] usb 6-1: USB disconnect, device number 94 [ 2912.303611][ T5829] usb 2-1: USB disconnect, device number 101 [ 2912.344152][ T8036] usb usb3-port1: unable to enumerate USB device [ 2912.350738][T14914] FAULT_INJECTION: forcing a failure. [ 2912.350738][T14914] name failslab, interval 1, probability 0, space 0, times 0 [ 2912.379590][T14914] CPU: 0 UID: 0 PID: 14914 Comm: syz.1.11858 Not tainted syzkaller #0 PREEMPT(full) [ 2912.379614][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2912.379627][T14914] Call Trace: [ 2912.379635][T14914] [ 2912.379644][T14914] dump_stack_lvl+0x189/0x250 [ 2912.379669][T14914] ? __pfx____ratelimit+0x10/0x10 [ 2912.379692][T14914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2912.379713][T14914] ? __pfx__printk+0x10/0x10 [ 2912.379738][T14914] ? __pfx___might_resched+0x10/0x10 [ 2912.379764][T14914] should_fail_ex+0x414/0x560 [ 2912.379792][T14914] should_failslab+0xa8/0x100 [ 2912.379813][T14914] __kmalloc_noprof+0xcb/0x7f0 [ 2912.379840][T14914] ? do_sys_poll+0x2ac/0x1070 [ 2912.379874][T14914] do_sys_poll+0x2ac/0x1070 [ 2912.379923][T14914] ? __pfx_do_sys_poll+0x10/0x10 [ 2912.380018][T14914] ? rcu_read_lock_any_held+0xb3/0x120 [ 2912.380043][T14914] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2912.380070][T14914] ? vfs_write+0x956/0xb30 [ 2912.380116][T14914] ? set_compat_user_sigmask+0xc1/0x1b0 [ 2912.380140][T14914] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 2912.380172][T14914] __ia32_compat_sys_ppoll_time32+0x299/0x300 [ 2912.380203][T14914] ? fput+0xa0/0xd0 [ 2912.380226][T14914] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 2912.380257][T14914] ? __pfx_ksys_write+0x10/0x10 [ 2912.380286][T14914] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2912.380313][T14914] ? lockdep_hardirqs_on+0x9c/0x150 [ 2912.380340][T14914] __do_fast_syscall_32+0xb6/0x2b0 [ 2912.380365][T14914] ? lockdep_hardirqs_on+0x9c/0x150 [ 2912.380392][T14914] do_fast_syscall_32+0x34/0x80 [ 2912.380417][T14914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2912.380440][T14914] RIP: 0023:0xf7f46539 [ 2912.380456][T14914] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2912.380491][T14914] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 2912.380513][T14914] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 2912.380527][T14914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2912.380540][T14914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2912.380552][T14914] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2912.380565][T14914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2912.380595][T14914] [ 2912.620153][T26884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2912.681642][T14918] FAULT_INJECTION: forcing a failure. [ 2912.681642][T14918] name failslab, interval 1, probability 0, space 0, times 0 [ 2912.724028][T14918] CPU: 0 UID: 0 PID: 14918 Comm: syz.1.11860 Not tainted syzkaller #0 PREEMPT(full) [ 2912.724054][T14918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2912.724066][T14918] Call Trace: [ 2912.724074][T14918] [ 2912.724083][T14918] dump_stack_lvl+0x189/0x250 [ 2912.724109][T14918] ? __pfx____ratelimit+0x10/0x10 [ 2912.724133][T14918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2912.724158][T14918] ? __pfx__printk+0x10/0x10 [ 2912.724182][T14918] ? __pfx___might_resched+0x10/0x10 [ 2912.724204][T14918] ? fs_reclaim_acquire+0x7d/0x100 [ 2912.724237][T14918] should_fail_ex+0x414/0x560 [ 2912.724264][T14918] should_failslab+0xa8/0x100 [ 2912.724284][T14918] __kmalloc_noprof+0xcb/0x7f0 [ 2912.724310][T14918] ? tomoyo_encode+0x28b/0x550 [ 2912.724342][T14918] tomoyo_encode+0x28b/0x550 [ 2912.724374][T14918] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2912.724412][T14918] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2912.724435][T14918] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2912.724460][T14918] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2912.724499][T14918] ? __lock_acquire+0xab9/0xd20 [ 2912.724538][T14918] ? __fget_files+0x2a/0x420 [ 2912.724560][T14918] ? __fget_files+0x3a0/0x420 [ 2912.724576][T14918] ? __fget_files+0x2a/0x420 [ 2912.724597][T14918] security_file_ioctl_compat+0xcb/0x2d0 [ 2912.724621][T14918] __ia32_compat_sys_ioctl+0x128/0x840 [ 2912.724649][T14918] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2912.724674][T14918] ? __fget_files+0x3a0/0x420 [ 2912.724697][T14918] ? fput+0xa0/0xd0 [ 2912.724719][T14918] ? ksys_write+0x22a/0x250 [ 2912.724743][T14918] ? exc_page_fault+0x82/0x100 [ 2912.724767][T14918] ? __pfx_ksys_write+0x10/0x10 [ 2912.724795][T14918] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2912.724820][T14918] ? lockdep_hardirqs_on+0x9c/0x150 [ 2912.724845][T14918] __do_fast_syscall_32+0xb6/0x2b0 [ 2912.724870][T14918] ? lockdep_hardirqs_on+0x9c/0x150 [ 2912.724897][T14918] do_fast_syscall_32+0x34/0x80 [ 2912.724929][T14918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2912.724952][T14918] RIP: 0023:0xf7f46539 [ 2912.724969][T14918] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2912.724985][T14918] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2912.725005][T14918] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0306201 [ 2912.725019][T14918] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2912.725031][T14918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2912.725042][T14918] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2912.725054][T14918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2912.725083][T14918] [ 2912.725107][T14918] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2912.725412][T14920] tipc: Enabled bearer , priority 0 [ 2913.011847][T14923] syzkaller0: entered promiscuous mode [ 2913.021033][T14923] syzkaller0: entered allmulticast mode [ 2913.027203][T14927] netlink: 'syz.1.11863': attribute type 64 has an invalid length. [ 2913.036191][T14927] netlink: 9 bytes leftover after parsing attributes in process `syz.1.11863'. [ 2913.066020][T14923] tipc: Resetting bearer [ 2913.133477][ T3138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2913.158155][T14923] tipc: Disabling bearer [ 2913.763911][T26884] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2913.823265][T20144] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2913.925172][T26884] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2913.928280][T14951] netlink: 'syz.2.11872': attribute type 1 has an invalid length. [ 2913.934730][T26884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2913.964503][T26884] usb 4-1: config 0 descriptor?? [ 2913.976814][T26884] cp210x 4-1:0.0: cp210x converter detected [ 2913.979447][T20144] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2913.990867][T14953] FAULT_INJECTION: forcing a failure. [ 2913.990867][T14953] name failslab, interval 1, probability 0, space 0, times 0 [ 2913.994949][T20144] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2914.011835][T14951] bond1: entered promiscuous mode [ 2914.019152][T20144] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2914.033632][T20144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2914.041963][T14953] CPU: 0 UID: 0 PID: 14953 Comm: syz.2.11872 Not tainted syzkaller #0 PREEMPT(full) [ 2914.041988][T14953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2914.042001][T14953] Call Trace: [ 2914.042010][T14953] [ 2914.042018][T14953] dump_stack_lvl+0x189/0x250 [ 2914.042047][T14953] ? __pfx____ratelimit+0x10/0x10 [ 2914.042070][T14953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2914.042091][T14953] ? __pfx__printk+0x10/0x10 [ 2914.042116][T14953] ? __pfx___might_resched+0x10/0x10 [ 2914.042136][T14953] ? fs_reclaim_acquire+0x7d/0x100 [ 2914.042170][T14953] should_fail_ex+0x414/0x560 [ 2914.042198][T14953] should_failslab+0xa8/0x100 [ 2914.042218][T14953] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2914.042244][T14953] ? __alloc_skb+0x112/0x2d0 [ 2914.042269][T14953] __alloc_skb+0x112/0x2d0 [ 2914.042292][T14953] netlink_sendmsg+0x5c6/0xb30 [ 2914.042321][T14953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2914.042344][T14953] ? __import_iovec+0x5d4/0x7f0 [ 2914.042360][T14953] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2914.042388][T14953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2914.042406][T14953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2914.042427][T14953] __sock_sendmsg+0x219/0x270 [ 2914.042458][T14953] ____sys_sendmsg+0x505/0x830 [ 2914.042485][T14953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2914.042522][T14953] ___sys_sendmsg+0x21f/0x2a0 [ 2914.042564][T14953] ? __pfx____sys_sendmsg+0x10/0x10 [ 2914.042619][T14953] ? __fget_files+0x2a/0x420 [ 2914.042635][T14953] ? __fget_files+0x3a0/0x420 [ 2914.042662][T14953] __sys_sendmsg+0x164/0x220 [ 2914.042686][T14953] ? __pfx___sys_sendmsg+0x10/0x10 [ 2914.042717][T14953] ? __pfx_ksys_write+0x10/0x10 [ 2914.042746][T14953] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2914.042771][T14953] ? lockdep_hardirqs_on+0x9c/0x150 [ 2914.042798][T14953] __do_fast_syscall_32+0xb6/0x2b0 [ 2914.042824][T14953] ? lockdep_hardirqs_on+0x9c/0x150 [ 2914.042850][T14953] do_fast_syscall_32+0x34/0x80 [ 2914.042875][T14953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2914.042898][T14953] RIP: 0023:0xf708d539 [ 2914.042914][T14953] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2914.042930][T14953] RSP: 002b:00000000f545c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2914.042950][T14953] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 2914.042964][T14953] RDX: 0000000002000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2914.042976][T14953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2914.042988][T14953] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2914.043000][T14953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2914.043026][T14953] [ 2914.057545][T14951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2914.322192][T20144] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2914.342097][T20144] usb 6-1: invalid MIDI out EP 0 [ 2914.414845][ T3138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2914.426267][ T1807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2914.440183][T12477] udevd[12477]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2914.460214][T20144] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2914.546811][T26884] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 2914.561313][T26884] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 2914.570404][T26884] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 2914.590118][T26884] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2914.743732][ T5910] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 2914.895568][ T5910] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2914.905854][ T5910] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2914.916787][ T5910] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2914.926401][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2914.935032][ T5910] usb 3-1: Product: syz [ 2914.939234][ T5910] usb 3-1: Manufacturer: syz [ 2914.944400][ T5910] usb 3-1: SerialNumber: syz [ 2915.159292][T14966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2915.168031][T14966] bond0: (slave bond2): Enslaving as a backup interface with a down link [ 2915.189461][T14966] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11867'. [ 2915.356099][ T5910] usb 3-1: cannot find UAC_HEADER [ 2915.372456][ T5910] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2915.399367][T13895] udevd[13895]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2915.453151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2915.566741][T14957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2915.578935][T14957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2915.592853][ T5910] usb 3-1: USB disconnect, device number 49 [ 2915.696286][T26886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2916.153923][T14977] netlink: 'syz.2.11880': attribute type 1 has an invalid length. [ 2916.179014][T14977] bond2: entered promiscuous mode [ 2916.185170][T14977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2916.206449][T14977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2916.215018][T14977] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 2916.225697][T14977] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 2916.237568][T14977] bond2: (slave gre1): making interface the new active one [ 2916.244886][T14977] gre1: entered promiscuous mode [ 2916.251048][T14977] bond2: (slave gre1): Enslaving as an active interface with an up link [ 2916.264194][ T1807] skbuff: skb_under_panic: text:ffffffff89de8bf7 len:-1824555016 put:-1824555092 head:ffff888064c0d000 data:ffff887fd1815114 tail:0x10c end:0x6c0 dev:bond2 [ 2916.281879][ T1807] ------------[ cut here ]------------ [ 2916.287460][ T1807] kernel BUG at net/core/skbuff.c:212! [ 2916.293343][ T1807] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 2916.299602][ T1807] CPU: 1 UID: 0 PID: 1807 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 2916.309067][ T1807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2916.319119][ T1807] Workqueue: bond2 bond_resend_igmp_join_requests_delayed [ 2916.326301][ T1807] RIP: 0010:skb_panic+0x157/0x160 [ 2916.331319][ T1807] Code: c7 60 0c 6e 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 6e 54 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2916.350909][ T1807] RSP: 0018:ffffc90011b6f2d8 EFLAGS: 00010286 [ 2916.356968][ T1807] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: 5c5d75f7c9725400 [ 2916.364933][ T1807] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2916.372897][ T1807] RBP: 00000000000006c0 R08: ffffc90011b6efe7 R09: 1ffff9200236ddfc [ 2916.380877][ T1807] R10: dffffc0000000000 R11: fffff5200236ddfd R12: ffff888031149790 [ 2916.388847][ T1807] R13: ffff888064c0d000 R14: ffff887fd1815114 R15: 000000000000010c [ 2916.396813][ T1807] FS: 0000000000000000(0000) GS:ffff888125e12000(0000) knlGS:0000000000000000 [ 2916.405731][ T1807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2916.412306][ T1807] CR2: 000000000c41022c CR3: 000000007c94a000 CR4: 00000000003526f0 [ 2916.420270][ T1807] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2916.428234][ T1807] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2916.436203][ T1807] Call Trace: [ 2916.439477][ T1807] [ 2916.442399][ T1807] ? ipgre_header+0x67/0x290 [ 2916.447075][ T1807] ? ipgre_header+0x67/0x290 [ 2916.451661][ T1807] skb_push+0xc3/0xe0 [ 2916.455639][ T1807] ipgre_header+0x67/0x290 [ 2916.460054][ T1807] ? __pfx_ipgre_header+0x10/0x10 [ 2916.465074][ T1807] neigh_connected_output+0x286/0x460 [ 2916.470492][ T1807] ip6_finish_output2+0xfb0/0x1480 [ 2916.475610][ T1807] ? __pfx_ip6_finish_output2+0x10/0x10 [ 2916.481151][ T1807] ? ip6_mtu+0x7d/0x490 [ 2916.485298][ T1807] ? ip6_mtu+0x38c/0x490 [ 2916.489548][ T1807] ? ip6_finish_output+0x2ef/0x4e0 [ 2916.493133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2916.494652][ T1807] ? ip6_output+0x126/0x550 [ 2916.494679][ T1807] ip6_output+0x340/0x550 [ 2916.511523][ T1807] NF_HOOK+0x9e/0x380 [ 2916.515502][ T1807] ? NF_HOOK+0x101/0x380 [ 2916.519739][ T1807] ? __pfx_NF_HOOK+0x10/0x10 [ 2916.524347][ T1807] ? __pfx_dst_output+0x10/0x10 [ 2916.529202][ T1807] ? icmp6_dst_alloc+0x3a5/0x420 [ 2916.534131][ T1807] ? icmp6_dst_alloc+0x3a5/0x420 [ 2916.539060][ T1807] mld_sendpack+0x8d4/0xe60 [ 2916.543562][ T1807] ? __asan_memcpy+0x40/0x70 [ 2916.548171][ T1807] ? mld_sendpack+0x1e7/0xe60 [ 2916.552858][ T1807] ? __pfx_mld_sendpack+0x10/0x10 [ 2916.557875][ T1807] ? tls_dev_event+0x717/0xec0 [ 2916.562642][ T1807] ? mld_send_report+0xe0/0x380 [ 2916.567490][ T1807] ipv6_mc_netdev_event+0x1b7/0x5a0 [ 2916.572694][ T1807] notifier_call_chain+0x1b6/0x3e0 [ 2916.577803][ T1807] call_netdevice_notifiers+0x88/0xc0 [ 2916.583180][ T1807] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 2916.589268][ T1807] ? process_scheduled_works+0x9ef/0x17b0 [ 2916.594999][ T1807] bond_resend_igmp_join_requests_delayed+0x61/0x170 [ 2916.601666][ T1807] ? process_scheduled_works+0x9ef/0x17b0 [ 2916.607379][ T1807] process_scheduled_works+0xae1/0x17b0 [ 2916.612924][ T1807] ? __pfx_process_scheduled_works+0x10/0x10 [ 2916.618896][ T1807] worker_thread+0x8a0/0xda0 [ 2916.623484][ T1807] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2916.629809][ T1807] ? __kthread_parkme+0x7b/0x200 [ 2916.634742][ T1807] kthread+0x711/0x8a0 [ 2916.638799][ T1807] ? __pfx_worker_thread+0x10/0x10 [ 2916.643898][ T1807] ? __pfx_kthread+0x10/0x10 [ 2916.648486][ T1807] ? _raw_spin_unlock_irq+0x23/0x50 [ 2916.653681][ T1807] ? lockdep_hardirqs_on+0x9c/0x150 [ 2916.658885][ T1807] ? __pfx_kthread+0x10/0x10 [ 2916.663471][ T1807] ret_from_fork+0x4bc/0x870 [ 2916.668062][ T1807] ? __pfx_ret_from_fork+0x10/0x10 [ 2916.673174][ T1807] ? __switch_to_asm+0x39/0x70 [ 2916.677952][ T1807] ? __switch_to_asm+0x33/0x70 [ 2916.682713][ T1807] ? __pfx_kthread+0x10/0x10 [ 2916.687298][ T1807] ret_from_fork_asm+0x1a/0x30 [ 2916.692062][ T1807] [ 2916.695083][ T1807] Modules linked in: [ 2916.698989][ C1] vkms_vblank_simulate: vblank timer overrun [ 2916.705334][ T1807] ---[ end trace 0000000000000000 ]--- [ 2916.714866][ T1807] RIP: 0010:skb_panic+0x157/0x160 [ 2916.719973][ T1807] Code: c7 60 0c 6e 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 6e 54 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2916.744885][ T1807] RSP: 0018:ffffc90011b6f2d8 EFLAGS: 00010286 [ 2916.751000][ T1807] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: 5c5d75f7c9725400 [ 2916.759545][ T1807] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 2916.768844][ T1807] RBP: 00000000000006c0 R08: ffffc90011b6efe7 R09: 1ffff9200236ddfc [ 2916.777337][ T1807] R10: dffffc0000000000 R11: fffff5200236ddfd R12: ffff888031149790 [ 2916.785837][ T1807] R13: ffff888064c0d000 R14: ffff887fd1815114 R15: 000000000000010c [ 2916.794307][ T1807] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 2916.803946][ T1807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2916.810758][ T1807] CR2: 000000000c266145 CR3: 0000000074578000 CR4: 00000000003526f0 [ 2916.819551][ T1807] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2916.828463][ T1807] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2916.836527][ T1807] Kernel panic - not syncing: Fatal exception [ 2916.842902][ T1807] Kernel Offset: disabled [ 2916.847223][ T1807] Rebooting in 86400 seconds..